last executing test programs: 10m16.933809493s ago: executing program 4 (id=745): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000040) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6c}}, 0x4048010) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x8}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x8004) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) 10m15.901555765s ago: executing program 4 (id=748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, 0x0, 0x0) 10m12.801762981s ago: executing program 4 (id=753): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 10m11.837974203s ago: executing program 4 (id=755): write$eventfd(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) capset(0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000700)) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x1000080, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r3, r2, 0x0, 0x20000023893) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0xe040, 0x0) read$eventfd(r4, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x10011) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000080)='0', 0x1) 10m10.171328485s ago: executing program 4 (id=759): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) 10m8.058958s ago: executing program 4 (id=761): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f0000000400)) socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x220800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) syz_open_dev$dri(0x0, 0x1f, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="414c5450434d20274c696e652043617074757265272030303030303030303030303030303030303030300a4c494e45320a4449474954414c330a535045414b4552202753796e7468272030303030303030303030433030303030617374657220506c61796261636b272030303030303030301a30303030303030303030300a4c494e45330a4c494e453120274d617374657220506061796261636b20d178d153424e47c2ab736a6974636827"], 0xf7) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) 9m52.84080338s ago: executing program 32 (id=761): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) getsockopt$inet_int(r0, 0x0, 0x16, 0x0, &(0x7f0000000400)) socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x220800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) syz_open_dev$dri(0x0, 0x1f, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="414c5450434d20274c696e652043617074757265272030303030303030303030303030303030303030300a4c494e45320a4449474954414c330a535045414b4552202753796e7468272030303030303030303030433030303030617374657220506c61796261636b272030303030303030301a30303030303030303030300a4c494e45330a4c494e453120274d617374657220506061796261636b20d178d153424e47c2ab736a6974636827"], 0xf7) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) 6m57.705618191s ago: executing program 5 (id=1246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) times(0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f00000008c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) preadv(r5, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) r6 = socket$kcm(0x29, 0x3, 0x0) recvmsg$kcm(r6, &(0x7f00000006c0)={&(0x7f0000000300)=@sco={0x1f, @none}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000380)=""/4, 0x4}, {&(0x7f0000000940)=""/4096, 0x1000}, {0x0}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f0000001940)=""/214, 0xd6}, {0x0}], 0x6}, 0x0) 6m55.931911936s ago: executing program 5 (id=1250): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, 0x0, 0x4008011) accept(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0x82c0, 0x0) fanotify_init(0xf00, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="45000000060000000000000000000000000000000000000000000000000000001c00000006000000000000002f6b65726e656c2f64656275672f73796e632f696e666f00005b18538d73cc886f4a52c16ba6d8a7fa16f0918e48733bb81dcf20693b17f34918387f"], 0x45) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000), 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/113, 0x71}, 0x40) 6m55.376008222s ago: executing program 5 (id=1252): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa00x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000018400300", @ANYRES32=r6, @ANYBLOB="08000500"], 0x24}}, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000040)={r1, 0x0, 0x0, 0x1000000}) 6m54.576152569s ago: executing program 5 (id=1256): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xf66f, 0xfffffe0000000001, 0x800, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000100)) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a30000000000800"], 0x250}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x34}}, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5) 6m53.224029154s ago: executing program 5 (id=1258): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x139b41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101403, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xa, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_emit_ethernet(0xda, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @link_local, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "ae1130", 0xa4, 0x6, 0x1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x29, 0x3, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0xa7, 0xeadd, [0x400, 0x5]}}]}, @fragment={0x33, 0x0, 0xf7, 0x0, 0x0, 0x16, 0x65}, @dstopts={0x29, 0x7, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xf3, 0x4, [0x8, 0xc, 0x3, 0x6, 0x7fff, 0x7d0]}}]}], @payload_named={{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x2, 0x258e, 0x0, 0x3, 0x9, 0x1, 0x2, 0x3, 0x3, 0x4, 0x4e21, 0x4e24}, 0x3, 0x2}, 0x1, 0x1}}, [0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 6m51.46617262s ago: executing program 5 (id=1264): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r3, r2, 0x0, 0x40008) r4 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x80002, 0x0) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f00000002c0), 0x4) signalfd4(r0, &(0x7f0000000080)={[0xc658]}, 0x8, 0x800) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000380)={0x2, 0x0, 0x2, 0xa7, 0x3, 0xdc, 0x7}) io_submit(r5, 0x0, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) 6m35.898201019s ago: executing program 33 (id=1264): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r3, r2, 0x0, 0x40008) r4 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x80002, 0x0) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f00000002c0), 0x4) signalfd4(r0, &(0x7f0000000080)={[0xc658]}, 0x8, 0x800) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000380)={0x2, 0x0, 0x2, 0xa7, 0x3, 0xdc, 0x7}) io_submit(r5, 0x0, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) 1m48.233548732s ago: executing program 6 (id=1294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0xffffffffffffffff, 0x40099d}}, 0x48) 1m30.371756161s ago: executing program 6 (id=1294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0xffffffffffffffff, 0x40099d}}, 0x48) 1m10.110330542s ago: executing program 6 (id=1294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0xffffffffffffffff, 0x40099d}}, 0x48) 53.425276577s ago: executing program 6 (id=1294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0xffffffffffffffff, 0x40099d}}, 0x48) 37.300146758s ago: executing program 6 (id=1294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0xffffffffffffffff, 0x40099d}}, 0x48) 21.28440681s ago: executing program 6 (id=1294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$RTC_UIE_ON(r4, 0x7003) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0xffffffffffffffff, 0x40099d}}, 0x48) 12.037906517s ago: executing program 0 (id=2110): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040014}, 0x8000) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x4}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000)="f6", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001840)={0x0, 0x3}, 0x8) 11.802299267s ago: executing program 1 (id=2111): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000380)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) chdir(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) unshare(0x66000080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/18, @ANYRES32=0x0, @ANYBLOB='\x00\t\x00\x00'], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="9b00000000000000070000faffffff000000", @ANYRES32, @ANYRES16=r0], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000380), 0x0}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x20100, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000040)={[{0x2, 0x1, 0x81, 0x7f, 0x6, 0x7, 0x1, 0x7f, 0x7, 0x5, 0x7f, 0x92, 0x80000}, {0x8ab, 0x0, 0x1, 0x40, 0x7, 0x9, 0x8, 0xfa, 0x0, 0x6d, 0x6, 0x9, 0xa32}, {0x5, 0x6, 0x78, 0xa1, 0xd, 0x8, 0x6, 0x1, 0x1, 0x5, 0x1, 0xff, 0x7}], 0x7}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.576157793s ago: executing program 0 (id=2112): close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="4606090000001400835447a1b32987c58d0ec5a44ca7ae28cff0346dad38"], 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000080)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) poll(&(0x7f0000000440)=[{r2, 0x202}], 0x1, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/vlan0\x00') getsockname(r0, &(0x7f0000000380)=@nfc_llcp, &(0x7f0000000240)=0x80) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000f80)) 9.143178345s ago: executing program 3 (id=2115): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='1', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="159c4ca6d5f2db29c58d190c7d"], 0x2) syz_usb_disconnect(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="20000000000c001a8008000a80050071c3"], 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100002192ea0845050c800a0301020301090212000100000000090400000079e6010073cf9bfe47530e8d9418287bff612cae923a6753dda562ad7b263f17cca575bc351d2027cccddca5f93d3422d36d0c056580f411b4b79a72351a005aba0a2ba42f0577e1fb6d2ba127776add70c7be8e72156e6cc0c0807f"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="ee641681c41fd678", 0x8}], 0x2) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 9.107742402s ago: executing program 0 (id=2116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) read$snddsp(r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x10001, 0x28d, {{0x18, 0x4, 0x3, 0x8, 0x60, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x4c, 0xf, 0x1, 0xd, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfffffffe}, {@remote, 0x7ff}, {@empty, 0x45d}, {@loopback, 0x1}, {@loopback, 0x8}, {@broadcast, 0x9}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}]}}}}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) clock_gettime(0x0, &(0x7f0000000040)) 9.077098869s ago: executing program 1 (id=2117): mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) r0 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(0xffffffffffffffff, 0x409, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, 0x0, 0x3) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[], 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) chdir(&(0x7f0000000240)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) 8.052457614s ago: executing program 0 (id=2118): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f0000000080)) syz_clone(0x180, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 7.941854092s ago: executing program 1 (id=2119): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e27, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(r2, &(0x7f0000019300)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r6 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r10 = add_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000019200)={'syz', 0x3}, &(0x7f0000019240)="3150bce562735501c682aaa7de7adf4ce09f766ed6f1fc2640602c508507360cede1d3bd971202686dc0784f76fa6066a0921b176d5b3b9fc3704ae2a6b1d14c5cbf730d77a805e7f8023d7fed9c83e52ce2a351e62f6ea4fded62", 0x5b, r6) keyctl$link(0x8, r6, r10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9}) close_range(r7, 0xffffffffffffffff, 0x0) 6.679800899s ago: executing program 0 (id=2120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) pipe2(0x0, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x8, 0x9, 0x4}) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000240)={r1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, 0x0, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000300), 0x100) add_key$user(0x0, 0x0, &(0x7f0000000540), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) ioctl$KDSETMODE(r6, 0x4b45, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000180)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x0, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}]}) 6.673891103s ago: executing program 1 (id=2121): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = geteuid() quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, r3, &(0x7f0000000300)={0xa, 0xca6, 0x3, 0x2, 0x1, 0x6, 0x6, 0xa7, 0x8}) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x141240, 0x1) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', &(0x7f00000051c0)=""/47, 0x2f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = io_uring_setup(0x2f00, &(0x7f000000c480)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0xa0002f5}) 5.688564638s ago: executing program 1 (id=2122): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee00}}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x30e1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x7f}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24044810) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="eaa9a5c43208", @remote, @link_local, @broadcast}}}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048005) writev(r2, &(0x7f0000000240)=[{&(0x7f00000036c0)="7d29dbe640bf9136", 0x8}, {&(0x7f00000002c0)="7794aa6fde076f17baebfa46123089f865ef3bb07dfb50afbd9267b1954a9ca90be5b079e13fe10a25256b8e5ada738172399dcfd5157ada26a10314f3dc7fbb570fc1471d8a6d885f70b055abd40ade42d87be1abcae749139f1834b139d1f565a4c412f5b68471ede406d4dcc46e7059c7a88c491cc851ef509b81699d73d64ef0178d20bee18f8334f7218b458a11fe195c8a77be928e3295f874761fd42bec042564e485d332e5e458415d92c9d84dd552f3a23be3f0d11d471a", 0xbc}, {&(0x7f0000002680)="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", 0x4fd}], 0x3) 5.378937429s ago: executing program 2 (id=2123): mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x20010, 0xffffffffffffffff, 0xf8b2f000) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000004c0)=ANY=[], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) msgget$private(0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xffff}, 0x8) 4.251408758s ago: executing program 2 (id=2124): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = fanotify_init(0x16, 0x0) r3 = memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x96k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xeb\xaf\xaa\xee\'t\xbe\x9b\rln\x7f\xab\x8d\xac\x06\x00\x00\x00\x00\x00\x00\x00\x9bY\xd9\xd4\xc6A\x84\x9d\\\xc4\x0e\xf4\bO\x80\xaa\r\b\xc0\xb9\x84\xd0,\'\xc5p\xb6 \x03\x12\xca\xef\x02f\xa2\x9d\x96\xa7{\x9d\xf0\xe2,T\x13\xc4W*\xd5\xeaX\x8c\xb3\x81\r=\"\xe1\xf2\xc9^\x90\xc1\xaa\xb6\xb8\xad\x04\x13\xe7\x04\x1b5qMnI-\xeaA\x1a\xd9-%!\x0f\ab\x1e\xab\a\xe4\xd4E\xf9\x8f\xd2\x05\xfd\xa7I\xf9#8\xf6bc\x1bl\xb2\xcb\xf9rc)&\x1d\xce\x970\x01\xbb\xcb@\xd8Y\xb9\x93=7\f9\xe5`\xb3\xf3=;\xe3E[\x12?\xe2n\xd0\x05\x98\x1c6F;fp\xce\xcfH\xaf\x93\x1e\x8e\x88\xfdx\xd9\x03,B\xd1L:\xaf!\x81\x03\x18\xa1\xf3\x87\x18\x83\xc0\x7fJ+\xe0N\xa8>7}a\x91y\x19\x13\xf6\xee.j\xdbh\x00&$\xf8e\x01\xa6\x0e\a\xcf\xaeq\xae\xbc\x94\x88eidE\xf9\xb9\xaa\x14U\t\xf4\xe27\xf9\xf5\xb2/\xa3\xafX\xd1\xf3v\x85z\x1b?)\f\xf8>\xa7C\xdfW\x80\xc5\xed\xbbPM\x9b\x1b*\'O\x7f@%Q\x8c\x98\x7f\xffd\xc2VY\xf4\x9b\xf3\x80\xed\x13m\x15\x86\x9d\xa1\xa8\xae\xa9fsLp\x1f.\x11\x83K\x18k\xf4\x8e\xc6>B!\xca\xe4\xd4\x1f\xe0F\x01\b\xb2\x0fK\x8e\xfbv\x00Yh<\xd0\x85\xcbn\x17\x9a\x8b\xa4\x04p\xe1\xfd\xf1\xb9\xf2\x94\x81\xe5v\xf6\x8dY\xd9\r_\xe4\x00\xfcb\xff=\x9fQC\xcf\x8c\x97\xd1@\xeem\x992U\x01\xb5\x15\x00\xfa\x11\xa1\xfc\xe4\xc8\v\x90\xbf\x1f\x11\xc4t\x91Z\xbb[\xe0?\xa6pV\xa3\xba\xbe\xde\xda\xb3~&~]', 0x1) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x40000010, r4, 0x0) execveat(r4, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 3.723976339s ago: executing program 3 (id=2125): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163e0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pivot_root(0x0, 0x0) connect$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) request_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x800389b, 0xc000, 0x1, 0x323}, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a310000000005000400000000000c000780080012400000000005000500020000000500010006000000110003006861"], 0x58}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) 3.562976062s ago: executing program 2 (id=2126): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) r0 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(0xffffffffffffffff, 0x409, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, 0x0, 0x3) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[], 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) chdir(&(0x7f0000000240)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) 3.222696383s ago: executing program 2 (id=2127): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESOCT=0x0]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() fcntl$setstatus(r3, 0x4, 0x40000) syz_pidfd_open(r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) umount2(&(0x7f0000000040)='.\x00', 0x2) fspick(r2, &(0x7f0000000080)='./file0\x00', 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 3.096039024s ago: executing program 3 (id=2128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) r4 = eventfd2(0x0, 0x0) writev(r4, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x31) fsopen(0x0, 0x1) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x80000) write(r6, &(0x7f0000000000)="ea", 0x1) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r6) fcntl$setlease(r3, 0x400, 0x2) 2.280965751s ago: executing program 2 (id=2129): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) r0 = socket$netlink(0x10, 0x3, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(0xffffffffffffffff, 0x409, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r0, 0x0, 0x3) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000300)) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[], 0x50) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) chdir(&(0x7f0000000240)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) 2.180293692s ago: executing program 3 (id=2130): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) sendmmsg$inet(r1, 0x0, 0x0, 0x20008000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x189042, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e030002000000000000000003000058", 0x42}], 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x4000800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="9ad756eb8df399a05f4e1f06eda9b31eb4053ee5d7cb9ed26a42b11e41936ed6c230e44b5ce335286b00421ebf4e7facdb5aae717ed6e833a6e6eaafcdefe2e3371332b1e4ad3f96455c51263459e920b0fccb58ce1bfad833680012fc285a6d743a402d03049c34b2626bb4539466415d74cd715de7", @ANYRESHEX=r3, @ANYRESDEC=r0], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb2505000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000000) 1.879464357s ago: executing program 2 (id=2131): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r0 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@random="d93f47151094", @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x32, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) 1.858941633s ago: executing program 3 (id=2132): getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f00000004c0)=""/224, 0xe0, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000440)={@multicast2, @loopback}, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000), 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000780)="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", 0x15d}], 0x1) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, 0x0, 0x0) 1.764756892s ago: executing program 1 (id=2133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b75700000040002"], 0x74}}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000200)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x2, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000640)={0x1, 0x0, &(0x7f0000000500), &(0x7f0000000540)=[0x335, 0xffffff98, 0xd9d0, 0xfff, 0x8], &(0x7f0000000580), &(0x7f00000005c0)=[0xa, 0x9, 0x9, 0xffffffffffff0001, 0x5, 0x1, 0x8000, 0x8, 0x5], 0x0, 0x4a07}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000040)={r11}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.606708697s ago: executing program 0 (id=2134): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x0) r6 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) 0s ago: executing program 3 (id=2135): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) open(&(0x7f0000000300)='./file0\x00', 0xa042, 0x8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x200800, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0xfe2, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000001540)={&(0x7f0000001480)="38d7032ab0c216141a687a4e99908858cd5ee982b85485f2895e158e05ad33a2ae7233baae6d776da17cc855d403d2fff3c4e1c9bdd559205816afd17e462c0b14d7f11abe31fcdf54f01dd87bf2f36c4d0db1e9160bb7456311b3a8cf1689c07c2d067d5bd26bb15c718f011033e857cb75f486e15cd2a0dfda80539e1229f44987a52205", 0x85}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000040)='}i', 0x2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(0x0, 0x0, 0x0) mkdirat(r8, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18) renameat2(r8, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) kernel console output (not intermixed with test programs): timeout [ 754.226494][T13434] ceph: No mds server is up or the cluster is laggy [ 754.267281][ T910] libceph: mon0 (1)[c::]:6789 connect error [ 755.821174][T13418] Failed to initialize the IGMP autojoin socket (err -2) [ 756.514888][ T5826] Bluetooth: hci0: command 0x040f tx timeout [ 756.558815][T13463] Failed to initialize the IGMP autojoin socket (err -2) [ 757.247753][ T30] audit: type=1400 audit(1759625217.313:1345): avc: denied { append } for pid=13473 comm="syz.1.1566" name="loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 757.271477][ C0] vkms_vblank_simulate: vblank timer overrun [ 757.737586][T13366] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 757.833951][T13366] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 758.067398][T13366] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 758.701245][ T5826] Bluetooth: hci0: command 0x040f tx timeout [ 758.711676][T13490] Failed to initialize the IGMP autojoin socket (err -2) [ 758.717934][T13493] : entered promiscuous mode [ 759.289945][T13366] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 759.688697][ T30] audit: type=1400 audit(1759625219.923:1346): avc: denied { read write } for pid=13497 comm="syz.3.1570" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 760.363328][ T30] audit: type=1400 audit(1759625219.923:1347): avc: denied { open } for pid=13497 comm="syz.3.1570" path="/dev/loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 760.404966][ T30] audit: type=1400 audit(1759625219.933:1348): avc: denied { ioctl } for pid=13497 comm="syz.3.1570" path="/dev/loop-control" dev="devtmpfs" ino=645 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 761.439123][ T30] audit: type=1400 audit(1759625221.503:1349): avc: denied { write } for pid=13505 comm="syz.1.1582" path="socket:[35408]" dev="sockfs" ino=35408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 761.836158][T13520] Failed to initialize the IGMP autojoin socket (err -2) [ 761.985386][T13528] Failed to initialize the IGMP autojoin socket (err -2) [ 763.377446][ T30] audit: type=1400 audit(1759625223.623:1350): avc: denied { getopt } for pid=13512 comm="syz.0.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 763.628660][T13366] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 764.133330][T13366] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 764.163816][T13366] wireguard: wg0: Could not create IPv4 socket [ 764.174395][T13366] wireguard: wg1: Could not create IPv4 socket [ 764.183264][T13366] wireguard: wg2: Could not create IPv4 socket [ 764.202203][ T30] audit: type=1400 audit(1759625224.443:1351): avc: denied { open } for pid=13556 comm="syz.1.1578" path="/dev/ptyq7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 764.280181][ T30] audit: type=1400 audit(1759625224.483:1352): avc: denied { ioctl } for pid=13556 comm="syz.1.1578" path="/dev/ptyq7" dev="devtmpfs" ino=125 ioctlcmd=0x4b61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 764.380277][ T30] audit: type=1400 audit(1759625224.493:1353): avc: denied { write } for pid=13558 comm="syz.3.1579" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 766.236688][T13586] Failed to initialize the IGMP autojoin socket (err -2) [ 767.502526][ T30] audit: type=1400 audit(1759625226.973:1354): avc: denied { mount } for pid=13594 comm="syz.0.1585" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 768.329700][T13608] 9pnet_virtio: no channels available for device syz [ 768.958358][T13611] Failed to initialize the IGMP autojoin socket (err -2) [ 769.388979][T13616] batadv_slave_1: entered promiscuous mode [ 769.396544][T13616] batman_adv: batadv0: Adding interface: macsec1 [ 769.402914][T13616] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.428178][ C1] vkms_vblank_simulate: vblank timer overrun [ 769.434390][T13616] batman_adv: batadv0: Interface activated: macsec1 [ 773.277736][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 773.286025][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 773.293711][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 773.301766][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 773.309230][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 773.367292][T13672] Failed to initialize the IGMP autojoin socket (err -2) [ 773.539820][ T30] audit: type=1326 audit(1759625233.783:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13663 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205b58eec9 code=0x7fc00000 [ 774.384833][ T30] audit: type=1326 audit(1759625233.893:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13663 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f205b58eec9 code=0x7fc00000 [ 774.756091][T13703] Failed to initialize the IGMP autojoin socket (err -2) [ 775.414904][ T5823] Bluetooth: hci0: command tx timeout [ 775.427613][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 775.488619][T13672] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 775.789926][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 776.348611][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 776.437760][T13672] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 776.442362][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.522863][T13672] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 776.556735][T13672] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 776.706896][ T9] usb 2-1: config 0 descriptor?? [ 776.802636][T13740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1608'. [ 777.053633][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 777.165621][T13746] input: syz0 as /devices/virtual/input/input20 [ 777.530392][ T5823] Bluetooth: hci0: command tx timeout [ 778.745145][ T30] audit: type=1400 audit(1759625238.993:1357): avc: denied { read write } for pid=13769 comm="syz.3.1613" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 779.091085][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 779.107227][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 779.125687][ T30] audit: type=1400 audit(1759625238.993:1358): avc: denied { open } for pid=13769 comm="syz.3.1613" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 779.196465][ T9] usb 2-1: USB disconnect, device number 20 [ 779.308315][ T30] audit: type=1400 audit(1759625239.443:1359): avc: denied { setattr } for pid=13769 comm="syz.3.1613" name="/" dev="configfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 779.594292][T13786] Failed to initialize the IGMP autojoin socket (err -2) [ 779.630804][ T5823] Bluetooth: hci0: command tx timeout [ 780.518488][T13672] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 780.759352][T13800] Failed to initialize the IGMP autojoin socket (err -2) [ 780.775464][T13672] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 780.906342][T13672] wireguard: wg0: Could not create IPv4 socket [ 780.925491][T13672] wireguard: wg1: Could not create IPv4 socket [ 780.947351][T13672] wireguard: wg2: Could not create IPv4 socket [ 781.690089][ T5823] Bluetooth: hci0: command tx timeout [ 782.999188][T13825] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 785.063970][T13850] Failed to initialize the IGMP autojoin socket (err -2) [ 785.792648][ T30] audit: type=1400 audit(1759625245.673:1360): avc: denied { create } for pid=13851 comm="syz.2.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 786.449459][T13865] Failed to initialize the IGMP autojoin socket (err -2) [ 786.992712][T13878] Failed to initialize the IGMP autojoin socket (err -2) [ 788.090530][ T30] audit: type=1400 audit(1759625248.293:1361): avc: denied { read append } for pid=13891 comm="syz.1.1636" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 788.441885][ T30] audit: type=1400 audit(1759625248.293:1362): avc: denied { open } for pid=13891 comm="syz.1.1636" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 789.867313][T13916] overlayfs: failed to clone upperpath [ 790.405239][T13889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.973401][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1642'. [ 791.452422][T13947] Failed to initialize the IGMP autojoin socket (err -2) [ 792.051346][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 792.062131][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 792.071439][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 792.079097][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 792.220122][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 792.747638][T13950] Failed to initialize the IGMP autojoin socket (err -2) [ 793.538819][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 793.630923][T13971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1648'. [ 794.047862][T13966] ceph: No mds server is up or the cluster is laggy [ 794.670816][ T30] audit: type=1400 audit(1759625254.913:1363): avc: denied { bind } for pid=13980 comm="syz.1.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 794.708806][ T30] audit: type=1400 audit(1759625254.913:1364): avc: denied { write } for pid=13980 comm="syz.1.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 794.825502][ T5826] Bluetooth: hci0: command tx timeout [ 796.135425][ T30] audit: type=1400 audit(1759625256.383:1365): avc: denied { read } for pid=5489 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 796.167373][ T30] audit: type=1400 audit(1759625256.383:1366): avc: denied { search } for pid=5489 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.211581][ T30] audit: type=1400 audit(1759625256.383:1367): avc: denied { search } for pid=5489 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.506683][ T30] audit: type=1400 audit(1759625256.383:1368): avc: denied { search } for pid=5489 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.529522][ T30] audit: type=1400 audit(1759625256.383:1369): avc: denied { read } for pid=5489 comm="dhcpcd" name="n95" dev="tmpfs" ino=1863 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 796.562216][ T30] audit: type=1400 audit(1759625256.383:1370): avc: denied { open } for pid=5489 comm="dhcpcd" path="/run/udev/data/n95" dev="tmpfs" ino=1863 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 796.749955][ T30] audit: type=1400 audit(1759625256.383:1371): avc: denied { getattr } for pid=5489 comm="dhcpcd" path="/run/udev/data/n95" dev="tmpfs" ino=1863 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 796.837042][ T30] audit: type=1400 audit(1759625256.493:1372): avc: denied { read } for pid=13998 comm="syz.3.1654" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 796.842078][T13950] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 796.905584][ T5826] Bluetooth: hci0: command tx timeout [ 797.001155][T13950] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 797.067908][T13950] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 797.099228][T13950] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 797.822302][T14019] snd_dummy snd_dummy.0: control 0:0:128:syz1:8 is already present [ 798.294768][T14021] kernel read not supported for file /file2 (pid: 14021 comm: syz.0.1658) [ 798.792270][T14032] veth0: entered promiscuous mode [ 799.164602][ T5826] Bluetooth: hci0: command tx timeout [ 799.386215][T14023] veth0: left promiscuous mode [ 799.635022][T14047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'. [ 799.765983][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 799.765999][ T30] audit: type=1400 audit(1759625260.013:1424): avc: denied { map_read map_write } for pid=14051 comm="syz.0.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 799.879132][ T5937] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 799.974912][T13950] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 800.065687][ T5937] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 800.447314][T13950] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 800.463123][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.474007][ T5937] usb 2-1: config 0 descriptor?? [ 800.484332][T13950] wireguard: wg0: Could not create IPv4 socket [ 800.499674][T13950] wireguard: wg1: Could not create IPv4 socket [ 800.507397][T13950] wireguard: wg2: Could not create IPv4 socket [ 801.250890][ T5826] Bluetooth: hci0: command tx timeout [ 801.274132][ T30] audit: type=1400 audit(1759625260.183:1425): avc: denied { remove_name } for pid=14053 comm="rm" name="resolv.conf.lapb6.link" dev="tmpfs" ino=6371 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.302190][T14068] tipc: Started in network mode [ 801.313594][T14068] tipc: Node identity 82a80b4e14, cluster identity 4711 [ 801.333432][T14068] tipc: Enabled bearer , priority 0 [ 801.343143][ T30] audit: type=1400 audit(1759625260.183:1426): avc: denied { unlink } for pid=14053 comm="rm" name="resolv.conf.lapb6.link" dev="tmpfs" ino=6371 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 801.366333][ C1] vkms_vblank_simulate: vblank timer overrun [ 801.388525][T14066] Failed to initialize the IGMP autojoin socket (err -2) [ 801.406005][T14041] syzkaller0: entered promiscuous mode [ 801.412882][T14041] syzkaller0: entered allmulticast mode [ 801.435405][ T30] audit: type=1400 audit(1759625260.263:1427): avc: denied { prog_run } for pid=14051 comm="syz.0.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 801.457099][ T30] audit: type=1400 audit(1759625260.273:1428): avc: denied { create } for pid=14051 comm="syz.0.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 801.484115][ T30] audit: type=1400 audit(1759625260.293:1429): avc: denied { read } for pid=14051 comm="syz.0.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 801.506288][ T30] audit: type=1400 audit(1759625260.373:1430): avc: denied { write } for pid=14051 comm="syz.0.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 801.526201][ T30] audit: type=1400 audit(1759625260.773:1431): avc: denied { mounton } for pid=14058 comm="syz.2.1664" path="/373/file0" dev="tmpfs" ino=1995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 801.548883][ C1] vkms_vblank_simulate: vblank timer overrun [ 801.557837][ T30] audit: type=1400 audit(1759625261.553:1432): avc: denied { ioctl } for pid=14040 comm="syz.1.1662" path="socket:[36734]" dev="sockfs" ino=36734 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 801.583559][ C1] vkms_vblank_simulate: vblank timer overrun [ 801.685179][T14041] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 801.785448][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1662'. [ 801.824391][T14041] tipc: Resetting bearer [ 801.856172][ T5937] usb 2-1: Cannot set autoneg [ 801.862316][ T5937] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 801.874300][ T30] audit: type=1400 audit(1759625262.053:1433): avc: denied { read } for pid=14076 comm="syz.3.1669" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 801.898265][T14040] tipc: Resetting bearer [ 801.910271][ T5937] usb 2-1: USB disconnect, device number 21 [ 801.922457][T14040] tipc: Disabling bearer [ 802.791324][ T5937] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 802.917080][T14099] siw: device registration error -23 [ 803.370119][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 803.389263][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 803.402851][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 803.421162][ T5937] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 803.450232][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.547877][ T5937] usb 4-1: config 0 descriptor?? [ 803.606642][ T5937] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 803.900563][T14071] Driver unsupported XDP return value 0 on prog (id 415) dev N/A, expect packet loss! [ 806.639417][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 806.639432][ T30] audit: type=1400 audit(1759625266.883:1475): avc: denied { read write } for pid=14166 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 806.669481][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.695471][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 806.720133][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 806.728895][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 806.740363][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 806.751742][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 806.755315][ T43] usb 4-1: USB disconnect, device number 12 [ 806.950590][T14166] Failed to initialize the IGMP autojoin socket (err -2) [ 806.960162][ T30] audit: type=1400 audit(1759625266.883:1476): avc: denied { open } for pid=14166 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 806.983858][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.063011][ T30] audit: type=1400 audit(1759625266.903:1477): avc: denied { ioctl } for pid=14166 comm="syz-executor" path="socket:[39176]" dev="sockfs" ino=39176 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 807.088401][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.986619][ T30] audit: type=1400 audit(1759625267.023:1478): avc: denied { mounton } for pid=14166 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 808.180505][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.186807][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.811616][ T5823] Bluetooth: hci0: command tx timeout [ 809.103073][T14195] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 809.842910][ T30] audit: type=1400 audit(1759625270.093:1479): avc: denied { write } for pid=14202 comm="syz.1.1684" name="video6" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 809.866063][ C1] vkms_vblank_simulate: vblank timer overrun [ 810.230700][ T30] audit: type=1400 audit(1759625270.093:1480): avc: denied { open } for pid=14202 comm="syz.1.1684" path="/dev/video6" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 811.004459][ T5823] Bluetooth: hci0: command tx timeout [ 811.574107][ T30] audit: type=1400 audit(1759625271.443:1481): avc: denied { create } for pid=14209 comm="syz.0.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 812.099134][ T30] audit: type=1400 audit(1759625272.343:1482): avc: denied { ioctl } for pid=14221 comm="syz.1.1687" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 813.008698][T14223] Set syz1 is full, maxelem 65536 reached [ 813.116229][ T5823] Bluetooth: hci0: command tx timeout [ 813.156360][T14228] Failed to initialize the IGMP autojoin socket (err -2) [ 813.229778][ T30] audit: type=1400 audit(1759625273.473:1483): avc: denied { create } for pid=14227 comm="syz.2.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 813.800349][T14221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.600255][ T30] audit: type=1400 audit(1759625274.313:1484): avc: denied { kexec_image_load } for pid=14236 comm="syz.2.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 815.130292][ T5823] Bluetooth: hci0: command tx timeout [ 815.629158][ T30] audit: type=1400 audit(1759625275.873:1485): avc: denied { create } for pid=14248 comm="syz.3.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 815.853768][T14257] Failed to initialize the IGMP autojoin socket (err -2) [ 815.989173][ T30] audit: type=1400 audit(1759625276.093:1486): avc: denied { nlmsg_write } for pid=14248 comm="syz.3.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 816.055795][ T30] audit: type=1400 audit(1759625276.193:1487): avc: denied { ioctl } for pid=14248 comm="syz.3.1691" path="socket:[38516]" dev="sockfs" ino=38516 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 817.025733][T14166] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 817.092162][T14166] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 817.119257][T14166] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 817.156502][T14166] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 817.441341][ T30] audit: type=1400 audit(1759625277.683:1488): avc: denied { bind } for pid=14274 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 817.597682][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1697'. [ 818.284152][ T30] audit: type=1400 audit(1759625278.533:1489): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 821.740607][T14166] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 821.817887][T14166] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 822.122913][T14351] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1707'. [ 822.192166][ T30] audit: type=1400 audit(1759625282.353:1490): avc: denied { read } for pid=14344 comm="syz.1.1707" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 822.216515][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.470895][T14166] wireguard: wg0: Could not create IPv4 socket [ 822.491247][T14166] wireguard: wg1: Could not create IPv4 socket [ 822.504055][T14166] wireguard: wg2: Could not create IPv4 socket [ 822.513349][ T30] audit: type=1400 audit(1759625282.353:1491): avc: denied { open } for pid=14344 comm="syz.1.1707" path="/dev/loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 822.538185][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.576251][ T30] audit: type=1400 audit(1759625282.363:1492): avc: denied { ioctl } for pid=14344 comm="syz.1.1707" path="/dev/loop-control" dev="devtmpfs" ino=645 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 822.602543][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.726166][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'. [ 823.151015][ T30] audit: type=1400 audit(1759625283.383:1493): avc: denied { create } for pid=14361 comm="syz.3.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 824.104019][ T30] audit: type=1400 audit(1759625283.393:1494): avc: denied { ioctl } for pid=14361 comm="syz.3.1709" path="socket:[38803]" dev="sockfs" ino=38803 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 824.340472][ T30] audit: type=1400 audit(1759625283.393:1495): avc: denied { bind } for pid=14361 comm="syz.3.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 824.360202][ T30] audit: type=1400 audit(1759625283.473:1496): avc: denied { setopt } for pid=14361 comm="syz.3.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 824.386294][ T30] audit: type=1400 audit(1759625283.593:1497): avc: denied { create } for pid=14364 comm="syz.1.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 824.552724][ T30] audit: type=1400 audit(1759625284.303:1498): avc: denied { wake_alarm } for pid=14364 comm="syz.1.1710" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 824.574234][ T30] audit: type=1400 audit(1759625284.473:1499): avc: denied { mount } for pid=14375 comm="syz.2.1711" name="/" dev="autofs" ino=38824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 824.685930][ T30] audit: type=1400 audit(1759625284.903:1500): avc: denied { execute } for pid=14381 comm="syz.1.1713" name="file1" dev="tmpfs" ino=1864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 824.794691][T14385] Failed to initialize the IGMP autojoin socket (err -2) [ 826.788404][ T5823] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 827.388924][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 827.399800][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 827.408724][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 827.416487][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 827.424152][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 827.552534][T14441] Failed to initialize the IGMP autojoin socket (err -2) [ 827.653041][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 827.653054][ T30] audit: type=1400 audit(1759625287.903:1506): avc: denied { read } for pid=14446 comm="syz.1.1721" name="radio0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 827.682056][ C1] vkms_vblank_simulate: vblank timer overrun [ 828.762031][ T30] audit: type=1400 audit(1759625288.453:1507): avc: denied { connect } for pid=14446 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 829.167706][ T30] audit: type=1400 audit(1759625288.453:1508): avc: denied { create } for pid=14446 comm="syz.1.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 829.450875][ T5823] Bluetooth: hci0: command tx timeout [ 829.555961][T14455] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1716'. [ 830.104034][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 830.279926][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 830.321117][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 830.466200][T14473] CIFS mount error: No usable UNC path provided in device string! [ 830.466200][T14473] [ 830.476272][T14473] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 830.620115][ T30] audit: type=1400 audit(1759625290.713:1509): avc: denied { mounton } for pid=14468 comm="syz.2.1724" path="/393/file0" dev="tmpfs" ino=2104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 830.771708][ T9] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 830.780819][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.788802][ T9] usb 2-1: Product: syz [ 830.793069][ T9] usb 2-1: Manufacturer: syz [ 830.797671][ T9] usb 2-1: SerialNumber: syz [ 830.811938][ T9] usb 2-1: config 0 descriptor?? [ 830.817953][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 830.875771][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 830.971101][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 831.168061][ T30] audit: type=1400 audit(1759625291.413:1510): avc: denied { read } for pid=14457 comm="syz.1.1723" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 831.287887][ T30] audit: type=1400 audit(1759625291.413:1511): avc: denied { open } for pid=14457 comm="syz.1.1723" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 831.449947][ T30] audit: type=1400 audit(1759625291.683:1512): avc: denied { read } for pid=5179 comm="acpid" name="mouse1" dev="devtmpfs" ino=2967 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 831.533065][ T5823] Bluetooth: hci0: command tx timeout [ 831.550127][ T30] audit: type=1400 audit(1759625291.683:1513): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2967 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 831.633091][ T5937] usb 2-1: USB disconnect, device number 22 [ 831.924944][T14490] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1727'. [ 833.182925][T14441] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 833.358814][T14441] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 833.411203][T14441] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 833.819933][ T5823] Bluetooth: hci0: command tx timeout [ 833.970774][T14501] macsec1: entered promiscuous mode [ 833.975977][T14501] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 834.128178][ T30] audit: type=1400 audit(1759625294.263:1514): avc: denied { getopt } for pid=14492 comm="syz.1.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 834.129744][T14501] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 834.185390][T14441] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 834.898434][ T5937] libceph: mon0 (1)[c::]:6789 connect error [ 834.957835][T14514] ceph: No mds server is up or the cluster is laggy [ 835.402631][T14528] Failed to initialize the IGMP autojoin socket (err -2) [ 835.589372][T14536] binder: 14529:14536 ioctl c0306201 0 returned -14 [ 835.612964][ T30] audit: type=1326 audit(1759625295.833:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14529 comm="syz.3.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 835.680882][ T30] audit: type=1326 audit(1759625295.833:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14529 comm="syz.3.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fde3ad8d710 code=0x7ffc0000 [ 835.777231][ T30] audit: type=1326 audit(1759625295.833:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14529 comm="syz.3.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fde3ad906f7 code=0x7ffc0000 [ 835.809926][ T30] audit: type=1326 audit(1759625295.833:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14529 comm="syz.3.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 835.849995][ T5823] Bluetooth: hci0: command tx timeout [ 835.865601][ T30] audit: type=1326 audit(1759625295.833:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14529 comm="syz.3.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fde3ad906f7 code=0x7ffc0000 [ 835.945581][ T30] audit: type=1326 audit(1759625295.833:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14529 comm="syz.3.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fde3ad8db2a code=0x7ffc0000 [ 836.196742][T14549] syz_tun: entered promiscuous mode [ 836.202989][T14549] syz_tun: left promiscuous mode [ 836.364291][ T30] audit: type=1326 audit(1759625295.833:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14529 comm="syz.3.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 836.391241][ T30] audit: type=1326 audit(1759625295.833:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14529 comm="syz.3.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 836.681458][ T30] audit: type=1400 audit(1759625295.833:1523): avc: denied { bind } for pid=14529 comm="syz.3.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 839.186345][T14441] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 839.222756][T14441] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 839.373454][T14441] wireguard: wg0: Could not create IPv4 socket [ 839.435314][T14441] wireguard: wg1: Could not create IPv4 socket [ 839.503020][T14441] wireguard: wg2: Could not create IPv4 socket [ 840.227988][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 840.228002][ T30] audit: type=1400 audit(1759625300.473:1557): avc: denied { ioctl } for pid=14589 comm="syz.3.1743" path="socket:[40435]" dev="sockfs" ino=40435 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 840.667765][ T30] audit: type=1400 audit(1759625300.913:1558): avc: denied { connect } for pid=14601 comm="syz.2.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 840.713063][ T30] audit: type=1400 audit(1759625300.913:1559): avc: denied { write } for pid=14601 comm="syz.2.1745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 841.845267][ T30] audit: type=1400 audit(1759625302.093:1560): avc: denied { setopt } for pid=14611 comm="syz.2.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 841.866527][T14613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'. [ 844.509633][T14648] ptrace attach of "./syz-executor exec"[5818] was attempted by "./syz-executor exec"[14648] [ 845.156311][ T30] audit: type=1400 audit(1759625305.403:1561): avc: denied { open } for pid=14660 comm="syz.3.1755" path="/dev/ttyqa" dev="devtmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 845.472317][ T30] audit: type=1400 audit(1759625305.703:1562): avc: denied { connect } for pid=14660 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 845.860916][ T30] audit: type=1400 audit(1759625305.713:1563): avc: denied { write } for pid=14660 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 845.896204][ T30] audit: type=1400 audit(1759625305.713:1564): avc: denied { read } for pid=14660 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 846.103703][T14682] ptrace attach of "./syz-executor exec"[6429] was attempted by "./syz-executor exec"[14682] [ 846.121733][ T30] audit: type=1400 audit(1759625306.353:1565): avc: denied { sqpoll } for pid=14676 comm="syz.3.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 846.213269][ T30] audit: type=1400 audit(1759625306.463:1566): avc: denied { create } for pid=14670 comm="syz.2.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 846.243437][ T30] audit: type=1400 audit(1759625306.483:1567): avc: denied { write } for pid=14670 comm="syz.2.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 846.405231][ T30] audit: type=1400 audit(1759625306.642:1568): avc: denied { mounton } for pid=14670 comm="syz.2.1756" path="/406/file0" dev="tmpfs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 848.011131][T14733] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 848.033408][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'. [ 848.046977][ T30] audit: type=1400 audit(1759625308.242:1569): avc: denied { create } for pid=14721 comm="syz.1.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 848.350298][ T30] audit: type=1400 audit(1759625308.242:1570): avc: denied { getopt } for pid=14721 comm="syz.1.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 848.370291][ T30] audit: type=1400 audit(1759625308.252:1571): avc: denied { mounton } for pid=14721 comm="syz.1.1759" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 849.560485][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 849.569711][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 849.577974][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 849.590681][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 849.598114][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 849.624987][T14741] Failed to initialize the IGMP autojoin socket (err -2) [ 849.781775][T14740] virtio-fs: tag not found [ 850.437771][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 851.498841][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 851.519991][ T30] audit: type=1400 audit(1759625311.732:1581): avc: denied { write } for pid=14750 comm="syz.3.1766" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 851.651856][T14761] usb usb8: usbfs: process 14761 (syz.3.1766) did not claim interface 0 before use [ 851.707490][ T5826] Bluetooth: hci0: command tx timeout [ 851.940391][T14772] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14772 comm=syz.2.1767 [ 852.611510][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 853.769903][ T5826] Bluetooth: hci0: command tx timeout [ 854.572493][T14741] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 854.965917][T14741] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 855.010475][T14741] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 855.027011][T14741] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 855.064473][T14817] Failed to initialize the IGMP autojoin socket (err -2) [ 855.146991][ T30] audit: type=1400 audit(1759625315.382:1582): avc: denied { setopt } for pid=14818 comm="syz.1.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 855.358404][T14828] overlayfs: missing 'lowerdir' [ 855.862489][ T5826] Bluetooth: hci0: command tx timeout [ 856.066759][T14839] overlay: Unknown parameter 'mask' [ 856.141751][T14840] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1779'. [ 856.190021][T14840] netlink: zone id is out of range [ 856.198743][T14840] netlink: zone id is out of range [ 856.210487][T14840] netlink: get zone limit has 8 unknown bytes [ 857.330230][T14864] netlink: 5136 bytes leftover after parsing attributes in process `syz.0.1781'. [ 857.374114][T14864] fuse: Bad value for 'fd' [ 857.933531][ T5826] Bluetooth: hci0: command tx timeout [ 857.965626][T14869] netlink: 'syz.2.1783': attribute type 8 has an invalid length. [ 857.981756][T14869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1783'. [ 857.991043][T14869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1783'. [ 858.084135][ T30] audit: type=1400 audit(1759625318.332:1583): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 859.061206][T14741] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 859.079104][T14741] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 859.124247][T14741] wireguard: wg0: Could not create IPv4 socket [ 859.150268][T14741] wireguard: wg1: Could not create IPv4 socket [ 859.256645][T14741] wireguard: wg2: Could not create IPv4 socket [ 860.316518][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 860.325537][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 860.643773][T14921] netlink: 'syz.2.1793': attribute type 21 has an invalid length. [ 860.653505][T14921] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1793'. [ 860.680374][T14921] netlink: 'syz.2.1793': attribute type 21 has an invalid length. [ 860.688307][T14921] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1793'. [ 860.832274][T14937] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.1794'. [ 863.387266][ T30] audit: type=1400 audit(1759625323.632:1584): avc: denied { setopt } for pid=15065 comm="syz.2.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 865.488639][ T30] audit: type=1400 audit(1759625325.712:1585): avc: denied { search } for pid=15098 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.700578][ T30] audit: type=1400 audit(1759625325.712:1586): avc: denied { search } for pid=15098 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.222845][ T30] audit: type=1400 audit(1759625325.712:1587): avc: denied { search } for pid=15098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.246141][ T30] audit: type=1400 audit(1759625325.712:1588): avc: denied { search } for pid=15098 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.299994][ T30] audit: type=1400 audit(1759625325.712:1589): avc: denied { read open } for pid=15098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.335907][ T30] audit: type=1400 audit(1759625325.712:1590): avc: denied { getattr } for pid=15098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.362607][ T30] audit: type=1400 audit(1759625325.732:1591): avc: denied { getattr } for pid=15098 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1880 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 866.438332][ T30] audit: type=1400 audit(1759625325.822:1592): avc: denied { prog_load } for pid=15101 comm="syz.2.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 866.635587][ T30] audit: type=1400 audit(1759625325.822:1593): avc: denied { bpf } for pid=15101 comm="syz.2.1801" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 866.882444][T15119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1803'. [ 867.042904][T15114] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 869.138783][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 869.138798][ T30] audit: type=1400 audit(1759625329.382:1625): avc: denied { create } for pid=15171 comm="syz.3.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 869.168888][ T30] audit: type=1400 audit(1759625329.412:1626): avc: denied { ioctl } for pid=15171 comm="syz.3.1807" path="socket:[42106]" dev="sockfs" ino=42106 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 869.614187][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.730576][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.748577][ T30] audit: type=1400 audit(1759625329.612:1627): avc: denied { create } for pid=15166 comm="syz.0.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 869.804756][ T30] audit: type=1400 audit(1759625329.672:1628): avc: denied { create } for pid=15171 comm="syz.3.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 869.825358][ T30] audit: type=1400 audit(1759625330.042:1629): avc: denied { read } for pid=15168 comm="syz.1.1806" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 869.893783][T15176] netlink: 'syz.0.1805': attribute type 10 has an invalid length. [ 869.907295][ T30] audit: type=1400 audit(1759625330.042:1630): avc: denied { open } for pid=15168 comm="syz.1.1806" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 870.510465][ T30] audit: type=1400 audit(1759625330.042:1631): avc: denied { ioctl } for pid=15168 comm="syz.1.1806" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 870.642675][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'. [ 870.664227][ T30] audit: type=1400 audit(1759625330.092:1632): avc: denied { map_create } for pid=15168 comm="syz.1.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 870.765855][ T30] audit: type=1400 audit(1759625330.102:1633): avc: denied { map } for pid=15166 comm="syz.0.1805" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 870.819896][ T30] audit: type=1400 audit(1759625330.102:1634): avc: denied { read write } for pid=15166 comm="syz.0.1805" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=43156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 871.416385][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 871.477650][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 871.507835][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 872.059947][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 872.085316][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 872.354113][T15194] Failed to initialize the IGMP autojoin socket (err -2) [ 873.099231][T15212] Process accounting resumed [ 873.868121][T15232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1816'. [ 874.436056][ T5823] Bluetooth: hci0: command tx timeout [ 874.502280][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 874.502295][ T30] audit: type=1400 audit(1759625334.752:1668): avc: denied { map_read map_write } for pid=15220 comm="syz.2.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 874.534257][T15230] MTD: Couldn't look up '/dev/nullb0': -15 [ 874.546845][ T30] audit: type=1400 audit(1759625334.792:1669): avc: denied { mounton } for pid=15220 comm="syz.2.1814" path="/424" dev="tmpfs" ino=2263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 874.572918][T15230] /dev/nullb0: Can't lookup blockdev [ 874.829917][ T30] audit: type=1400 audit(1759625335.062:1670): avc: denied { mount } for pid=15245 comm="syz.3.1818" name="/" dev="autofs" ino=43273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 875.287176][ T30] audit: type=1400 audit(1759625335.542:1671): avc: denied { mount } for pid=15220 comm="syz.2.1814" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 875.497416][ T30] audit: type=1400 audit(1759625335.732:1672): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 875.679930][ T30] audit: type=1400 audit(1759625335.902:1673): avc: denied { read } for pid=5489 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 875.819060][ T30] audit: type=1400 audit(1759625335.952:1674): avc: denied { mount } for pid=15258 comm="syz.1.1820" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 876.792900][ T5823] Bluetooth: hci0: command tx timeout [ 877.400348][ T30] audit: type=1400 audit(1759625337.402:1675): avc: denied { read write } for pid=15267 comm="syz.3.1822" name="video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 877.450565][ T30] audit: type=1400 audit(1759625337.402:1676): avc: denied { open } for pid=15267 comm="syz.3.1822" path="/dev/video0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 877.572177][ T30] audit: type=1400 audit(1759625337.422:1677): avc: denied { ioctl } for pid=15267 comm="syz.3.1822" path="/dev/video0" dev="devtmpfs" ino=929 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 877.685631][T15270] tipc: Failed to remove unknown binding: 66,1,1/0:2282924403/2282924405 [ 877.773630][T15194] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 877.812124][T15194] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 877.875662][T15194] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 878.425162][T15194] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 878.809990][ T5823] Bluetooth: hci0: command tx timeout [ 879.166380][T15301] overlayfs: failed to clone upperpath [ 880.280556][T15331] kAFS: No cell specified [ 880.889953][ T5823] Bluetooth: hci0: command tx timeout [ 881.007813][T15194] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 881.076370][T15194] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 881.095053][T15194] wireguard: wg0: Could not create IPv4 socket [ 881.112518][T15194] wireguard: wg1: Could not create IPv4 socket [ 881.149306][T15194] wireguard: wg2: Could not create IPv4 socket [ 881.415031][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 881.415046][ T30] audit: type=1400 audit(1759625341.662:1688): avc: denied { create } for pid=15317 comm="syz.0.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 881.576890][ T30] audit: type=1400 audit(1759625341.812:1689): avc: denied { write } for pid=15348 comm="syz.1.1835" name="fib_triestat" dev="proc" ino=4026532810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 881.886509][ T30] audit: type=1400 audit(1759625342.132:1690): avc: denied { append } for pid=15344 comm="syz.3.1834" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 881.919614][ T30] audit: type=1400 audit(1759625342.132:1691): avc: denied { open } for pid=15344 comm="syz.3.1834" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 882.221943][T15357] overlay: Unknown parameter 'mask' [ 882.428966][T15356] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1837'. [ 882.439856][T15356] netlink: zone id is out of range [ 882.445494][T15356] netlink: zone id is out of range [ 882.452733][T15356] netlink: get zone limit has 8 unknown bytes [ 882.606583][ T30] audit: type=1400 audit(1759625342.852:1692): avc: denied { read } for pid=15362 comm="syz.1.1838" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 882.803205][ T30] audit: type=1400 audit(1759625342.852:1693): avc: denied { open } for pid=15362 comm="syz.1.1838" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 882.987381][ T30] audit: type=1400 audit(1759625342.932:1694): avc: denied { create } for pid=15359 comm="syz.0.1836" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 883.036088][ T30] audit: type=1400 audit(1759625343.272:1695): avc: denied { ioctl } for pid=15362 comm="syz.1.1838" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 883.125271][ T30] audit: type=1400 audit(1759625343.372:1696): avc: denied { accept } for pid=15362 comm="syz.1.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 883.350210][ T30] audit: type=1400 audit(1759625343.592:1697): avc: denied { unlink } for pid=5829 comm="syz-executor" name="file0" dev="tmpfs" ino=2161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 884.143607][T15391] trusted_key: encrypted_key: keyword 'new¼°±‹U£_5' not recognized [ 884.160806][T15391] overlayfs: failed to resolve './file1': -2 [ 886.037390][T15406] netlink: 'syz.0.1845': attribute type 20 has an invalid length. [ 886.045493][T15406] IPv6: NLM_F_CREATE should be specified when creating new route [ 886.056030][T15406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 886.063598][T15406] IPv6: NLM_F_CREATE should be set when creating new route [ 887.420726][T15468] fuse: Bad value for 'fd' [ 887.622800][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 887.637304][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 887.963462][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 888.001314][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 888.002603][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 888.003379][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 888.003858][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 888.010639][T15474] Failed to initialize the IGMP autojoin socket (err -2) [ 888.579982][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 888.580043][ T30] audit: type=1400 audit(1759625348.812:1702): avc: denied { connect } for pid=15485 comm="syz.1.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 889.095867][ T30] audit: type=1400 audit(1759625349.342:1703): avc: denied { ioctl } for pid=15498 comm="syz.2.1856" path="socket:[43841]" dev="sockfs" ino=43841 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 889.976793][ T30] audit: type=1400 audit(1759625349.382:1704): avc: denied { bind } for pid=15498 comm="syz.2.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 890.608053][ T5826] Bluetooth: hci0: command tx timeout [ 890.687381][ T30] audit: type=1400 audit(1759625349.382:1705): avc: denied { connect } for pid=15498 comm="syz.2.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 890.707998][ T30] audit: type=1400 audit(1759625349.382:1706): avc: denied { write } for pid=15498 comm="syz.2.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 890.749032][T15504] 9pnet_fd: Insufficient options for proto=fd [ 891.990008][ T30] audit: type=1326 audit(1759625352.232:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 892.013482][ C0] vkms_vblank_simulate: vblank timer overrun [ 892.835703][T15537] CIFS mount error: No usable UNC path provided in device string! [ 892.835703][T15537] [ 892.845765][T15537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 893.015089][ T5823] Bluetooth: hci0: command tx timeout [ 893.020773][ T30] audit: type=1326 audit(1759625352.242:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 893.172709][ T30] audit: type=1400 audit(1759625353.082:1709): avc: denied { execute } for pid=15533 comm="syz.2.1862" name="file0" dev="tmpfs" ino=2339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 893.319406][ T30] audit: type=1400 audit(1759625353.082:1710): avc: denied { execute_no_trans } for pid=15533 comm="syz.2.1862" path="/437/file0" dev="tmpfs" ino=2339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 893.371871][ T30] audit: type=1326 audit(1759625353.532:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 893.602230][T15557] input: syz1 as /devices/virtual/input/input24 [ 893.654959][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 893.654973][ T30] audit: type=1400 audit(1759625353.902:1750): avc: denied { read } for pid=5179 comm="acpid" name="event4" dev="devtmpfs" ino=2977 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 893.749884][ T30] audit: type=1400 audit(1759625353.902:1751): avc: denied { open } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2977 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 893.799953][T15474] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 893.857302][ T30] audit: type=1400 audit(1759625353.902:1752): avc: denied { ioctl } for pid=5179 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2977 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 893.908045][ T30] audit: type=1400 audit(1759625354.152:1753): avc: denied { create } for pid=15555 comm="syz.1.1866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 893.990326][ T30] audit: type=1400 audit(1759625354.222:1754): avc: denied { ioctl } for pid=15555 comm="syz.1.1866" path="socket:[43997]" dev="sockfs" ino=43997 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 894.067826][T15474] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 894.142083][ T30] audit: type=1400 audit(1759625354.272:1755): avc: denied { create } for pid=15550 comm="syz.2.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 894.225515][ T30] audit: type=1400 audit(1759625354.272:1756): avc: denied { connect } for pid=15550 comm="syz.2.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 894.289242][ T30] audit: type=1400 audit(1759625354.282:1757): avc: denied { write } for pid=15550 comm="syz.2.1865" path="socket:[42949]" dev="sockfs" ino=42949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 894.354740][T15474] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 894.466289][T15474] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 894.827081][ T30] audit: type=1400 audit(1759625355.062:1758): avc: denied { setopt } for pid=15577 comm="syz.2.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 894.924278][ T30] audit: type=1400 audit(1759625355.172:1759): avc: denied { create } for pid=15569 comm="syz.3.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 895.144737][ T5823] Bluetooth: hci0: command tx timeout [ 895.279933][T15591] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 895.287700][T15591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.944389][T15474] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 897.220195][ T5823] Bluetooth: hci0: command tx timeout [ 897.250447][T15474] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 897.361943][T15474] wireguard: wg0: Could not create IPv4 socket [ 897.369603][T15474] wireguard: wg1: Could not create IPv4 socket [ 897.382602][T15474] wireguard: wg2: Could not create IPv4 socket [ 899.691398][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 899.691413][ T30] audit: type=1400 audit(1759625359.942:1764): avc: denied { ioctl } for pid=15656 comm="syz.3.1878" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 899.929885][ T5970] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 900.179967][ T30] audit: type=1400 audit(1759625360.392:1765): avc: denied { write } for pid=15664 comm="syz.1.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 900.221204][ T5970] usb 4-1: config 210 has too many interfaces: 183, using maximum allowed: 32 [ 900.230371][ T5970] usb 4-1: config 210 has 1 interface, different from the descriptor's value: 183 [ 900.239675][ T5970] usb 4-1: config 210 has no interface number 0 [ 900.270016][ T5970] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 900.296895][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.423525][ T5970] usb 4-1: Product: syz [ 900.427871][ T5970] usb 4-1: Manufacturer: syz [ 900.439886][ T5970] usb 4-1: SerialNumber: syz [ 900.535662][T15676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 900.546514][T15676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 900.561699][T15676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 900.581336][T15676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 900.591849][T15676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 900.601499][T15676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 900.611481][T15676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 900.621382][T15676] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 900.630877][T15676] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 901.073054][ T5823] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 901.301949][ T30] audit: type=1400 audit(1759625361.552:1766): avc: denied { read write } for pid=15656 comm="syz.3.1878" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 901.472411][ T30] audit: type=1400 audit(1759625361.552:1767): avc: denied { open } for pid=15656 comm="syz.3.1878" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 901.723806][ T5970] dvb_usb_ec168 4-1:210.1: probe with driver dvb_usb_ec168 failed with error -71 [ 902.117457][T15697] netlink: 755 bytes leftover after parsing attributes in process `syz.0.1882'. [ 902.338249][ T5970] usb 4-1: USB disconnect, device number 13 [ 902.896578][ T30] audit: type=1400 audit(1759625363.142:1768): avc: denied { bind } for pid=15704 comm="syz.1.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 902.996475][ T30] audit: type=1400 audit(1759625363.172:1769): avc: denied { setopt } for pid=15704 comm="syz.1.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 903.128298][ T30] audit: type=1400 audit(1759625363.222:1770): avc: denied { bind } for pid=15704 comm="syz.1.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 904.369977][ T30] audit: type=1400 audit(1759625363.222:1771): avc: denied { write } for pid=15704 comm="syz.1.1885" path="socket:[44285]" dev="sockfs" ino=44285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 906.254835][ T30] audit: type=1400 audit(1759625366.502:1772): avc: denied { mount } for pid=15802 comm="syz.0.1887" name="/" dev="configfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 906.821569][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 906.831448][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 906.841468][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 906.862262][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 907.264090][ T30] audit: type=1400 audit(1759625367.172:1773): avc: denied { getopt } for pid=15802 comm="syz.0.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 907.441050][T15814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 907.490762][ T30] audit: type=1400 audit(1759625367.172:1774): avc: denied { search } for pid=15802 comm="syz.0.1887" name="/" dev="configfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 907.631675][ T30] audit: type=1400 audit(1759625367.172:1775): avc: denied { setattr } for pid=15802 comm="syz.0.1887" name="/" dev="configfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 907.696786][T15809] Failed to initialize the IGMP autojoin socket (err -2) [ 907.710167][ T30] audit: type=1400 audit(1759625367.952:1776): avc: denied { create } for pid=15816 comm="syz.3.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 908.492079][ T30] audit: type=1400 audit(1759625368.742:1777): avc: denied { getopt } for pid=15816 comm="syz.3.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 908.656007][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 908.686342][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 908.713608][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 908.806704][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 908.846573][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1894'. [ 909.689978][T15814] Bluetooth: hci0: command tx timeout [ 909.889919][ T30] audit: type=1400 audit(1759625370.082:1778): avc: denied { mount } for pid=15816 comm="syz.3.1893" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 911.066754][T15809] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 911.281968][T15809] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 911.363653][ T30] audit: type=1400 audit(1759625371.612:1779): avc: denied { write } for pid=15871 comm="syz.0.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 911.400602][T15809] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 911.522975][T15809] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 912.519587][T15814] Bluetooth: hci0: command tx timeout [ 914.569876][T15814] Bluetooth: hci0: command tx timeout [ 915.183605][T15920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15920 comm=syz.1.1905 [ 915.639992][T15809] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 915.809747][T15809] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 916.163885][T15809] wireguard: wg0: Could not create IPv4 socket [ 916.235484][T15930] netlink: 'syz.1.1909': attribute type 1 has an invalid length. [ 916.257737][T15933] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 916.330321][T15938] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1907'. [ 916.357270][T15809] wireguard: wg1: Could not create IPv4 socket [ 916.407586][T15809] wireguard: wg2: Could not create IPv4 socket [ 916.521946][T15938] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 916.550912][T15938] 0ªX¹¦D: entered allmulticast mode [ 916.576927][T15938] veth0_macvtap: entered allmulticast mode [ 916.669899][T15814] Bluetooth: hci0: command tx timeout [ 916.840626][T15938] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 916.937531][T15950] overlayfs: overlapping lowerdir path [ 917.638910][T15954] overlayfs: failed to clone upperpath [ 917.713518][T15954] Failed to initialize the IGMP autojoin socket (err -2) [ 918.131944][ T30] audit: type=1400 audit(1759625378.382:1780): avc: denied { write } for pid=15963 comm="syz.2.1913" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 920.260540][ T30] audit: type=1400 audit(1759625380.512:1781): avc: denied { write } for pid=16048 comm="syz.1.1916" path="socket:[44981]" dev="sockfs" ino=44981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 920.484418][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1917'. [ 920.664116][T16061] trusted_key: syz.0.1915 sent an empty control message without MSG_MORE. [ 921.535757][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 921.545107][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 921.552898][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 921.562009][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 921.569470][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 921.604494][T16065] Failed to initialize the IGMP autojoin socket (err -2) [ 922.449672][ T30] audit: type=1400 audit(1759625382.692:1782): avc: denied { create } for pid=16048 comm="syz.1.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 922.564346][ T30] audit: type=1400 audit(1759625382.762:1783): avc: denied { mount } for pid=16048 comm="syz.1.1916" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 923.217606][ T30] audit: type=1400 audit(1759625382.782:1784): avc: denied { write } for pid=16048 comm="syz.1.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 923.293842][T16090] Failed to initialize the IGMP autojoin socket (err -2) [ 923.610007][T15814] Bluetooth: hci0: command tx timeout [ 923.785776][T16103] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1924'. [ 924.965744][ T30] audit: type=1400 audit(1759625385.212:1785): avc: denied { getopt } for pid=16096 comm="syz.3.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 925.249375][T16118] Failed to initialize the IGMP autojoin socket (err -2) [ 925.817548][T15814] Bluetooth: hci0: command tx timeout [ 925.817567][ T30] audit: type=1400 audit(1759625385.622:1786): avc: denied { unlink } for pid=16117 comm="syz.1.1927" name="#16" dev="tmpfs" ino=2147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 925.958652][ T30] audit: type=1400 audit(1759625385.622:1787): avc: denied { mount } for pid=16117 comm="syz.1.1927" name="/" dev="overlay" ino=2142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 926.202323][T16065] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 926.253476][T16065] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 926.296397][T16065] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 926.311552][T16065] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 927.152624][ T30] audit: type=1400 audit(1759625387.392:1788): avc: denied { shutdown } for pid=16146 comm="syz.3.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 927.859993][T15814] Bluetooth: hci0: command tx timeout [ 928.169542][ T30] audit: type=1400 audit(1759625387.392:1789): avc: denied { read } for pid=16146 comm="syz.3.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 928.287310][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 928.301372][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 928.311330][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 928.751548][T16156] infiniband syz2: set down [ 928.756166][T16156] infiniband syz2: added vxcan1 [ 928.762743][T16156] syz2: rxe_create_qp: returned err = -2 [ 928.768496][T16156] infiniband syz2: Couldn't create ib_mad QP1 [ 928.774958][T16156] infiniband syz2: Couldn't open port 1 [ 928.794715][T16156] RDS/IB: syz2: added [ 928.800424][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 928.815592][ T5937] vxcan1 speed is unknown, defaulting to 1000 [ 928.939573][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 928.952105][ T30] audit: type=1400 audit(1759625389.202:1790): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 929.033375][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 929.116899][T16156] vxcan1 speed is unknown, defaulting to 1000 [ 929.945630][T15814] Bluetooth: hci0: command tx timeout [ 931.280444][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.294177][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.744486][T16191] ntfs3(nullb0): Primary boot signature is not NTFS. [ 931.865840][T16191] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 931.875363][ T30] audit: type=1400 audit(1759625392.132:1791): avc: denied { bind } for pid=16203 comm="syz.1.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 932.363270][ T30] audit: type=1400 audit(1759625392.132:1792): avc: denied { write } for pid=16203 comm="syz.1.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 933.106670][T16065] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 933.223004][T16065] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 933.241367][T16065] wireguard: wg0: Could not create IPv4 socket [ 933.252794][T16065] wireguard: wg1: Could not create IPv4 socket [ 933.389181][T16065] wireguard: wg2: Could not create IPv4 socket [ 935.833613][ T30] audit: type=1400 audit(1759625396.082:1793): avc: denied { write } for pid=16247 comm="syz.1.1948" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 936.356267][ T30] audit: type=1400 audit(1759625396.122:1794): avc: denied { block_suspend } for pid=16247 comm="syz.1.1948" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 936.377787][ C1] vkms_vblank_simulate: vblank timer overrun [ 936.805152][ T30] audit: type=1400 audit(1759625396.182:1795): avc: denied { firmware_load } for pid=16243 comm="syz.2.1949" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 936.910090][ T30] audit: type=1400 audit(1759625396.592:1796): avc: denied { append } for pid=16247 comm="syz.1.1948" name="001" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 938.800451][ T30] audit: type=1400 audit(1759625398.952:1797): avc: denied { setopt } for pid=16313 comm="syz.3.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 938.916229][ T30] audit: type=1400 audit(1759625399.102:1798): avc: denied { remount } for pid=16318 comm="syz.0.1950" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 939.059239][T16325] Set syz1 is full, maxelem 65536 reached [ 940.855984][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 940.895123][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 940.960449][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 940.968226][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 940.976114][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 941.074184][T16323] geneve2: entered promiscuous mode [ 941.089693][T16323] geneve2: entered allmulticast mode [ 941.420216][T16333] Failed to initialize the IGMP autojoin socket (err -2) [ 941.437415][ T30] audit: type=1400 audit(1759625401.672:1799): avc: denied { getopt } for pid=16348 comm="syz.2.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 941.493307][T16356] netlink: 'syz.1.1961': attribute type 1 has an invalid length. [ 941.502667][ T30] audit: type=1400 audit(1759625401.752:1800): avc: denied { ioctl } for pid=16355 comm="syz.1.1961" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47369 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 941.528738][ C0] vkms_vblank_simulate: vblank timer overrun [ 941.781226][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 942.016011][T16364] overlayfs: failed to clone upperpath [ 942.064941][T16366] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 942.279910][ T30] audit: type=1400 audit(1759625402.522:1801): avc: denied { read write } for pid=16375 comm="syz.3.1966" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 943.215887][T15814] Bluetooth: hci0: command tx timeout [ 943.276668][ T30] audit: type=1400 audit(1759625402.522:1802): avc: denied { open } for pid=16375 comm="syz.3.1966" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 944.352926][ T30] audit: type=1400 audit(1759625404.592:1803): avc: denied { create } for pid=16375 comm="syz.3.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 944.654960][ T30] audit: type=1326 audit(1759625404.902:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 945.660826][ T30] audit: type=1326 audit(1759625404.902:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 945.684377][ T30] audit: type=1326 audit(1759625404.922:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 945.684401][T15814] Bluetooth: hci0: command tx timeout [ 945.707799][ C0] vkms_vblank_simulate: vblank timer overrun [ 945.874288][ T30] audit: type=1326 audit(1759625404.922:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 945.898135][ T30] audit: type=1326 audit(1759625404.922:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 945.921574][ C0] vkms_vblank_simulate: vblank timer overrun [ 946.135868][T16403] overlayfs: failed to resolve './file1': -2 [ 946.942515][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 946.942526][ T30] audit: type=1326 audit(1759625407.022:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 946.971945][ C0] vkms_vblank_simulate: vblank timer overrun [ 947.523107][T16333] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 947.550068][ T30] audit: type=1326 audit(1759625407.022:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16383 comm="syz.2.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 947.573541][ C0] vkms_vblank_simulate: vblank timer overrun [ 947.771892][ T5823] Bluetooth: hci0: command tx timeout [ 947.820178][T16333] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 947.923113][T16333] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 947.963921][T16333] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 949.849884][ T5823] Bluetooth: hci0: command tx timeout [ 952.979423][ T30] audit: type=1400 audit(1759625413.222:1815): avc: denied { mount } for pid=16453 comm="syz.2.1985" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 953.116798][ T30] audit: type=1400 audit(1759625413.362:1816): avc: denied { connect } for pid=16463 comm="syz.3.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 953.136342][ C0] vkms_vblank_simulate: vblank timer overrun [ 953.927467][T16333] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 954.053225][T16333] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 954.098724][T16333] wireguard: wg0: Could not create IPv4 socket [ 954.126299][T16333] wireguard: wg1: Could not create IPv4 socket [ 954.158501][T16333] wireguard: wg2: Could not create IPv4 socket [ 956.496069][T16497] netlink: 'syz.2.1993': attribute type 21 has an invalid length. [ 956.504095][T16497] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1993'. [ 956.513257][T16497] netlink: 'syz.2.1993': attribute type 4 has an invalid length. [ 956.521086][T16497] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1993'. [ 956.538647][T16497] batadv2: entered promiscuous mode [ 956.544948][T16497] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 958.759269][ T30] audit: type=1400 audit(1759625419.002:1817): avc: denied { read } for pid=16618 comm="syz.1.1996" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 958.870356][T16625] wlan0 speed is unknown, defaulting to 1000 [ 958.876639][T16625] wlan0 speed is unknown, defaulting to 1000 [ 958.886079][T16625] wlan0 speed is unknown, defaulting to 1000 [ 958.925314][T16625] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 959.009359][T16625] wlan0 speed is unknown, defaulting to 1000 [ 959.023984][T16625] wlan0 speed is unknown, defaulting to 1000 [ 959.039652][T16625] wlan0 speed is unknown, defaulting to 1000 [ 959.053514][T16625] wlan0 speed is unknown, defaulting to 1000 [ 959.258250][ T30] audit: type=1400 audit(1759625419.002:1818): avc: denied { open } for pid=16618 comm="syz.1.1996" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 959.352653][T16631] netlink: 'syz.0.1995': attribute type 12 has an invalid length. [ 959.413281][ T30] audit: type=1400 audit(1759625419.662:1819): avc: denied { read } for pid=16618 comm="syz.1.1996" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 959.535837][ T30] audit: type=1400 audit(1759625419.662:1820): avc: denied { open } for pid=16618 comm="syz.1.1996" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 959.584475][T16640] netlink: 'syz.2.2001': attribute type 1 has an invalid length. [ 959.624685][ T30] audit: type=1400 audit(1759625419.692:1821): avc: denied { append } for pid=16618 comm="syz.1.1996" name="iommu" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 959.675557][ T30] audit: type=1400 audit(1759625419.832:1822): avc: denied { create } for pid=16636 comm="syz.2.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 959.698077][T15814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 959.707948][ T30] audit: type=1400 audit(1759625419.922:1823): avc: denied { mount } for pid=16636 comm="syz.2.2001" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 959.740538][T15814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 959.752147][T15814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 959.760409][T15814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 959.769523][T15814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 959.777519][ T30] audit: type=1400 audit(1759625420.022:1824): avc: denied { search } for pid=16636 comm="syz.2.2001" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 960.787683][T16641] Failed to initialize the IGMP autojoin socket (err -2) [ 961.918099][T16658] bond0: (slave bond_slave_0): Releasing backup interface [ 961.943514][T16658] bond0: (slave bond_slave_1): Releasing backup interface [ 961.959148][T16658] team0: Port device team_slave_0 removed [ 962.377536][T16658] team0: Port device team_slave_1 removed [ 962.400327][T16658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.417328][T16658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.633354][ T910] libceph: mon0 (1)[c::]:6789 connect error [ 962.650049][T16680] ceph: No mds server is up or the cluster is laggy [ 962.791480][T16658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.823676][ T5823] Bluetooth: hci0: command tx timeout [ 962.857073][T16658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.177778][T16658] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 963.380734][T16705] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 963.393391][ T30] audit: type=1400 audit(1759625423.642:1825): avc: denied { ioctl } for pid=16657 comm="syz.1.2013" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 963.633299][T16705] netlink: 'syz.3.2008': attribute type 10 has an invalid length. [ 963.751880][T16708] bridge_slave_0: left allmulticast mode [ 963.758173][T16708] bridge_slave_0: left promiscuous mode [ 963.917452][T16708] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.271190][T16708] bridge_slave_1: left allmulticast mode [ 964.281767][T16708] bridge_slave_1: left promiscuous mode [ 964.288159][T16708] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.348861][T16708] bond0: (slave bond_slave_0): Releasing backup interface [ 964.372989][T16708] team0: Port device team_slave_0 removed [ 964.385275][T16708] team0: Port device team_slave_1 removed [ 964.400777][T16708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.410417][T16708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.428985][T16708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.441172][T16708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.452458][T16708] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 964.476388][T16705] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 964.528376][T16705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.580869][T16724] Failed to initialize the IGMP autojoin socket (err -2) [ 964.837428][T16641] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 964.883346][T16641] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 964.890328][ T5823] Bluetooth: hci0: command tx timeout [ 965.096014][T16641] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 965.923847][T16641] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 966.989908][ T5823] Bluetooth: hci0: command tx timeout [ 967.147129][T16759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2014'. [ 967.828984][T16772] program syz.3.2015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 967.829016][ T30] audit: type=1400 audit(1759625428.072:1826): avc: denied { write } for pid=16761 comm="syz.3.2015" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 968.122345][T16777] Failed to initialize the IGMP autojoin socket (err -2) [ 968.786500][ T30] audit: type=1326 audit(1759625429.022:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 968.811619][T16796] overlayfs: failed to clone upperpath [ 968.866581][ T30] audit: type=1326 audit(1759625429.022:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 968.890019][ C1] vkms_vblank_simulate: vblank timer overrun [ 968.897067][ T30] audit: type=1326 audit(1759625429.022:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 968.920511][ C1] vkms_vblank_simulate: vblank timer overrun [ 968.942513][ T30] audit: type=1326 audit(1759625429.032:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 969.044769][T16796] fuse: Unknown parameter 'rootm00000000000000000000' [ 969.052685][ T5823] Bluetooth: hci0: command tx timeout [ 969.059891][ T30] audit: type=1326 audit(1759625429.032:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 969.331497][ T30] audit: type=1326 audit(1759625429.032:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 969.371653][T16641] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 969.413644][ T30] audit: type=1326 audit(1759625429.032:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 969.454801][T16641] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 969.492776][ T30] audit: type=1326 audit(1759625429.032:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 969.522876][T16641] wireguard: wg0: Could not create IPv4 socket [ 969.561661][T16641] wireguard: wg1: Could not create IPv4 socket [ 969.586129][T16641] wireguard: wg2: Could not create IPv4 socket [ 969.599834][ T30] audit: type=1326 audit(1759625429.062:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16789 comm="syz.2.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 970.600778][T16822] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 970.646941][T16822] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 972.176409][T16864] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2022'. [ 972.225263][T16864] gretap0: entered promiscuous mode [ 972.245365][T16870] netlink: 'syz.2.2027': attribute type 4 has an invalid length. [ 972.290604][T16876] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2022'. [ 972.343046][T16876] 0ªî{X¹¦: renamed from gretap0 [ 972.353824][T16876] 0ªî{X¹¦: left promiscuous mode [ 972.367857][T16876] 0ªî{X¹¦: entered allmulticast mode [ 972.385080][T16876] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 973.439891][T16885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2028'. [ 973.500334][T16885] libceph: resolve '0..' (ret=-3): failed [ 975.197599][T16962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2030'. [ 975.374046][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 975.374619][ T30] audit: type=1400 audit(1759625435.622:1864): avc: denied { ioctl } for pid=16957 comm="syz.0.2029" path="socket:[49455]" dev="sockfs" ino=49455 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 975.941540][ T30] audit: type=1400 audit(1759625435.992:1865): avc: denied { ioctl } for pid=16969 comm="syz.3.2034" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 976.018607][T15814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 976.031515][T15814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 976.039185][T15814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 976.047397][T15814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 976.055422][T15814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 976.106533][T16975] Failed to initialize the IGMP autojoin socket (err -2) [ 976.224366][ T30] audit: type=1326 audit(1759625436.472:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.2.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 976.264751][ T30] audit: type=1326 audit(1759625436.502:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.2.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 976.328525][ T30] audit: type=1326 audit(1759625436.502:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.2.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 976.330283][T16986] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 976.363822][T16986] CPU: 1 UID: 0 PID: 16986 Comm: syz.2.2035 Not tainted syzkaller #0 PREEMPT(full) [ 976.363845][T16986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 976.363856][T16986] Call Trace: [ 976.363863][T16986] [ 976.363870][T16986] dump_stack_lvl+0x16c/0x1f0 [ 976.363900][T16986] sysfs_warn_dup+0x7f/0xa0 [ 976.363926][T16986] sysfs_do_create_link_sd+0x124/0x140 [ 976.363952][T16986] sysfs_create_link+0x61/0xc0 [ 976.363977][T16986] device_add+0x62c/0x1aa0 [ 976.363999][T16986] ? __pfx_device_add+0x10/0x10 [ 976.364014][T16986] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 976.364042][T16986] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 976.364071][T16986] wiphy_register+0x1eb0/0x2b20 [ 976.364097][T16986] ? netdev_run_todo+0x864/0x1320 [ 976.364121][T16986] ? __dev_printk+0x1c0/0x270 [ 976.364150][T16986] ? __pfx_wiphy_register+0x10/0x10 [ 976.364185][T16986] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 976.364214][T16986] ieee80211_register_hw+0x253d/0x4120 [ 976.364251][T16986] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 976.364291][T16986] ? mac80211_hwsim_new_radio+0x32bf/0x5650 [ 976.364316][T16986] mac80211_hwsim_new_radio+0x32c7/0x5650 [ 976.364359][T16986] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 976.364382][T16986] ? __asan_memcpy+0x3c/0x60 [ 976.364404][T16986] hwsim_new_radio_nl+0xba2/0x1330 [ 976.364427][T16986] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 976.364457][T16986] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 976.364487][T16986] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 976.364522][T16986] genl_family_rcv_msg_doit+0x206/0x2f0 [ 976.364551][T16986] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 976.364588][T16986] ? bpf_lsm_capable+0x9/0x10 [ 976.364610][T16986] ? security_capable+0x7e/0x260 [ 976.364640][T16986] ? ns_capable+0xd7/0x110 [ 976.364666][T16986] genl_rcv_msg+0x55c/0x800 [ 976.364696][T16986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 976.364723][T16986] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 976.364748][T16986] netlink_rcv_skb+0x155/0x420 [ 976.364768][T16986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 976.364791][T16986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 976.364821][T16986] ? netlink_deliver_tap+0x1ae/0xd30 [ 976.364843][T16986] genl_rcv+0x28/0x40 [ 976.364862][T16986] netlink_unicast+0x5aa/0x870 [ 976.364885][T16986] ? __pfx_netlink_unicast+0x10/0x10 [ 976.364905][T16986] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 976.364932][T16986] netlink_sendmsg+0x8c8/0xdd0 [ 976.364956][T16986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 976.364985][T16986] ____sys_sendmsg+0xa95/0xc70 [ 976.365008][T16986] ? copy_msghdr_from_user+0x10a/0x160 [ 976.365026][T16986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 976.365059][T16986] ___sys_sendmsg+0x134/0x1d0 [ 976.365078][T16986] ? __pfx____sys_sendmsg+0x10/0x10 [ 976.365125][T16986] __sys_sendmsg+0x16d/0x220 [ 976.365144][T16986] ? __pfx___sys_sendmsg+0x10/0x10 [ 976.365171][T16986] ? __secure_computing+0x28e/0x3b0 [ 976.365191][T16986] do_syscall_64+0xcd/0x4e0 [ 976.365212][T16986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.365227][T16986] RIP: 0033:0x7ff71318eec9 [ 976.365241][T16986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.365255][T16986] RSP: 002b:00007ff713f96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.365270][T16986] RAX: ffffffffffffffda RBX: 00007ff7133e6180 RCX: 00007ff71318eec9 [ 976.365279][T16986] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000007 [ 976.365288][T16986] RBP: 00007ff713211f91 R08: 0000000000000000 R09: 0000000000000000 [ 976.365296][T16986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.365304][T16986] R13: 00007ff7133e6218 R14: 00007ff7133e6180 R15: 00007ffc96f8eba8 [ 976.365325][T16986] [ 976.735181][ C1] vkms_vblank_simulate: vblank timer overrun [ 976.759844][ T30] audit: type=1326 audit(1759625436.502:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.2.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 976.783501][ T30] audit: type=1326 audit(1759625436.502:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.2.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 976.807628][ T30] audit: type=1326 audit(1759625436.502:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.2.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 976.831192][ T30] audit: type=1326 audit(1759625436.502:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.2.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 976.855657][ T30] audit: type=1326 audit(1759625436.502:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16979 comm="syz.2.2035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71318eec9 code=0x7ffc0000 [ 977.705431][T16987] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.2033'. [ 978.170046][T15814] Bluetooth: hci0: command tx timeout [ 980.021535][T16994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 980.250723][T15814] Bluetooth: hci0: command tx timeout [ 980.547687][T16975] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 980.613346][T16975] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 980.647009][T16975] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 980.713246][T16975] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 982.339899][T15814] Bluetooth: hci0: command tx timeout [ 983.848054][T17072] netlink: 'syz.3.2048': attribute type 1 has an invalid length. [ 984.410159][T15814] Bluetooth: hci0: command tx timeout [ 984.618776][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 984.618790][ T30] audit: type=1326 audit(1759625444.862:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17082 comm="syz.1.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac358eec9 code=0x7ffc0000 [ 984.685994][ T30] audit: type=1326 audit(1759625444.872:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17082 comm="syz.1.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac358eec9 code=0x7ffc0000 [ 984.709445][ C0] vkms_vblank_simulate: vblank timer overrun [ 985.049856][ T30] audit: type=1326 audit(1759625444.872:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17082 comm="syz.1.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fdac358eec9 code=0x7ffc0000 [ 985.073304][ C0] vkms_vblank_simulate: vblank timer overrun [ 985.168514][ T30] audit: type=1326 audit(1759625444.872:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17082 comm="syz.1.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac358eec9 code=0x7ffc0000 [ 985.192001][ C0] vkms_vblank_simulate: vblank timer overrun [ 985.244417][ T30] audit: type=1326 audit(1759625444.872:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17082 comm="syz.1.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac358eec9 code=0x7ffc0000 [ 986.031996][T16975] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 986.213055][ T30] audit: type=1326 audit(1759625444.872:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17082 comm="syz.1.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdac358eec9 code=0x7ffc0000 [ 986.252962][T16975] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 986.773898][ T30] audit: type=1326 audit(1759625444.872:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17082 comm="syz.1.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac358eec9 code=0x7ffc0000 [ 986.801365][T16975] wireguard: wg0: Could not create IPv4 socket [ 986.823732][T16975] wireguard: wg1: Could not create IPv4 socket [ 986.852171][T16975] wireguard: wg2: Could not create IPv4 socket [ 986.870212][ T30] audit: type=1326 audit(1759625444.872:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17082 comm="syz.1.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac358eec9 code=0x7ffc0000 [ 986.995711][ T30] audit: type=1326 audit(1759625444.902:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17082 comm="syz.1.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdac358eec9 code=0x7ffc0000 [ 987.057375][ T30] audit: type=1326 audit(1759625444.902:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17082 comm="syz.1.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdac358ef03 code=0x7ffc0000 [ 987.156546][T17116] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 987.168075][T17116] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 987.185241][T17116] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 987.213137][T17116] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 988.852094][T17169] Failed to initialize the IGMP autojoin socket (err -2) [ 991.922576][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 991.922592][ T30] audit: type=1400 audit(1759625452.172:1930): avc: denied { ioctl } for pid=17248 comm="syz.2.2065" path="socket:[50004]" dev="sockfs" ino=50004 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 991.953337][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.141567][ T30] audit: type=1326 audit(1759625452.382:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17254 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205b58eec9 code=0x7ffc0000 [ 992.211257][ T30] audit: type=1326 audit(1759625452.452:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17254 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205b58eec9 code=0x7ffc0000 [ 992.234811][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.268671][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 992.284261][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 992.294324][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 992.302695][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 992.312107][ T30] audit: type=1326 audit(1759625452.562:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17254 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f205b58eec9 code=0x7ffc0000 [ 992.335551][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.344390][ T30] audit: type=1326 audit(1759625452.562:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17254 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205b58eec9 code=0x7ffc0000 [ 992.367818][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.376088][T17262] debugfs: '!' already exists in 'ieee80211' [ 992.377744][ T30] audit: type=1326 audit(1759625452.562:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17254 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205b58eec9 code=0x7ffc0000 [ 992.405615][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 992.412945][ T30] audit: type=1326 audit(1759625452.622:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17254 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f205b58eec9 code=0x7ffc0000 [ 992.436376][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.447853][ T30] audit: type=1326 audit(1759625452.622:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17254 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205b58eec9 code=0x7ffc0000 [ 992.471285][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.515360][T17266] Failed to initialize the IGMP autojoin socket (err -2) [ 992.524135][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.534104][ T30] audit: type=1326 audit(1759625452.622:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17254 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f205b58eec9 code=0x7ffc0000 [ 992.557753][ T30] audit: type=1326 audit(1759625452.732:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17254 comm="syz.0.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f205b58eec9 code=0x7ffc0000 [ 992.558531][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.571235][ T5823] Bluetooth: hci0: command tx timeout [ 994.792436][T17290] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 995.231848][T17266] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 995.254238][T17266] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 995.294666][T17266] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 995.322542][T17266] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 996.649886][ T5823] Bluetooth: hci0: command tx timeout [ 996.724897][T17266] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 996.902707][T17266] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 997.079011][T17266] wireguard: wg0: Could not create IPv4 socket [ 997.119501][T17266] wireguard: wg1: Could not create IPv4 socket [ 997.153600][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 997.153612][ T30] audit: type=1400 audit(1759625457.402:1964): avc: denied { setopt } for pid=17318 comm="syz.3.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 997.207012][T17266] wireguard: wg2: Could not create IPv4 socket [ 997.410533][T17329] Failed to initialize the IGMP autojoin socket (err -2) [ 998.687655][ T30] audit: type=1400 audit(1759625458.912:1965): avc: denied { create } for pid=17348 comm="syz.0.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 998.757275][ T30] audit: type=1400 audit(1759625458.912:1966): avc: denied { setopt } for pid=17348 comm="syz.0.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 999.754750][ T30] audit: type=1400 audit(1759625459.112:1967): avc: denied { mount } for pid=17344 comm="syz.2.2080" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1000.003967][T17358] fuse: Bad value for 'fd' [ 1000.272868][T17360] siw: device registration error -23 [ 1001.678554][ T30] audit: type=1400 audit(1759625461.922:1968): avc: denied { ioctl } for pid=17382 comm="syz.0.2086" path="socket:[51532]" dev="sockfs" ino=51532 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1001.815709][ T30] audit: type=1400 audit(1759625461.992:1969): avc: denied { write } for pid=17382 comm="syz.0.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1002.185515][T17393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2086'. [ 1002.216708][ T30] audit: type=1400 audit(1759625462.462:1970): avc: denied { write } for pid=17382 comm="syz.0.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1002.315886][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 1002.882612][T17419] 9pnet_fd: Insufficient options for proto=fd [ 1004.168389][T17456] cgroup: Unknown subsys name 'hash' [ 1004.183732][ T30] audit: type=1400 audit(1759625464.432:1971): avc: denied { wake_alarm } for pid=17453 comm="syz.1.2093" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1004.416659][ T30] audit: type=1400 audit(1759625464.662:1972): avc: denied { watch } for pid=17448 comm="syz.0.2091" path="/446/file1" dev="tmpfs" ino=2406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1004.453840][ T30] audit: type=1400 audit(1759625464.662:1973): avc: denied { watch_sb watch_reads } for pid=17448 comm="syz.0.2091" path="/446/file1" dev="tmpfs" ino=2406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1004.499441][T17459] netlink: 'syz.2.2094': attribute type 1 has an invalid length. [ 1009.622845][T17589] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 1010.738332][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2097'. [ 1010.835642][ T30] audit: type=1400 audit(1759625471.052:1974): avc: denied { create } for pid=17591 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1011.497149][ T30] audit: type=1400 audit(1759625471.062:1975): avc: denied { accept } for pid=17591 comm="syz.2.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1011.499347][T17605] macvlan2: entered promiscuous mode [ 1011.499366][T17605] macvlan2: entered allmulticast mode [ 1011.501253][T17605] bond3: (slave macvlan2): Opening slave failed [ 1012.607439][T15814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1012.669242][T15814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1012.688499][T15814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1012.698680][T15814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1012.706990][T15814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1012.754884][T17614] Failed to initialize the IGMP autojoin socket (err -2) [ 1012.776045][T17620] ceph: No mds server is up or the cluster is laggy [ 1012.788005][T12292] libceph: mon0 (1)[c::]:6789 connect error [ 1012.878391][T17631] Failed to initialize the IGMP autojoin socket (err -2) [ 1012.952578][ T30] audit: type=1400 audit(1759625473.182:1976): avc: denied { create } for pid=17624 comm="syz.1.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1013.533009][T17646] usb usb5: usbfs: process 17646 (syz.1.2108) did not claim interface 0 before use [ 1013.548218][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2108'. [ 1013.557243][T17646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2108'. [ 1013.649862][ T30] audit: type=1400 audit(1759625473.772:1977): avc: denied { bind } for pid=17639 comm="syz.1.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1014.008736][T17649] Failed to initialize the IGMP autojoin socket (err -2) [ 1015.128148][T17644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.138028][T15814] Bluetooth: hci0: command tx timeout [ 1015.404942][T17659] Failed to initialize the IGMP autojoin socket (err -2) [ 1015.451479][T17656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2111'. [ 1017.210566][T15814] Bluetooth: hci0: command tx timeout [ 1017.218945][T17676] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2116'. [ 1018.063490][T17614] netdevsim netdevsim6 netdevsim0: renamed from eth9 [ 1018.141737][T17614] netdevsim netdevsim6 netdevsim1: renamed from eth10 [ 1018.173492][T17614] netdevsim netdevsim6 netdevsim2: renamed from eth11 [ 1018.212682][T17614] netdevsim netdevsim6 netdevsim3: renamed from eth12 [ 1018.570067][T17696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1019.291128][T15814] Bluetooth: hci0: command tx timeout [ 1020.327929][ T846] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1020.876611][ T846] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1020.928760][ T846] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1021.041075][ T846] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1021.050153][ T846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.070800][T17705] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1021.083341][ T846] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1021.565122][T15814] Bluetooth: hci0: command tx timeout [ 1021.865599][ T30] audit: type=1400 audit(1759625482.092:1978): avc: denied { watch } for pid=17746 comm="syz.2.2124" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1608 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1021.892894][ C1] vkms_vblank_simulate: vblank timer overrun [ 1022.127388][T17614] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1022.207296][T17614] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1022.249615][ T846] usb 4-1: USB disconnect, device number 14 [ 1022.257665][T17614] wireguard: wg0: Could not create IPv4 socket [ 1022.281048][T17614] wireguard: wg1: Could not create IPv4 socket [ 1022.311374][T17614] wireguard: wg2: Could not create IPv4 socket [ 1022.406420][ T30] audit: type=1326 audit(1759625482.652:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17755 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 1022.461749][ T30] audit: type=1326 audit(1759625482.662:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17755 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 1022.716986][ T30] audit: type=1326 audit(1759625482.662:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17755 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 1022.845628][ T30] audit: type=1326 audit(1759625482.662:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17755 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 1022.903996][ T30] audit: type=1326 audit(1759625482.662:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17755 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 1022.946126][ T30] audit: type=1326 audit(1759625482.662:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17755 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 1023.129891][ T30] audit: type=1326 audit(1759625482.662:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17755 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 1023.153704][ T30] audit: type=1326 audit(1759625482.662:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17755 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 1023.183223][T17769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2127'. [ 1023.859836][ T30] audit: type=1326 audit(1759625482.672:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17755 comm="syz.3.2125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fde3ad8eec9 code=0x7ffc0000 [ 1023.956270][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2130'. [ 1024.731903][T17793] netlink: 'syz.3.2132': attribute type 4 has an invalid length. [ 1025.054892][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 1026.256620][T17796] ================================================================== [ 1026.264702][T17796] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 1026.271885][T17796] Read of size 8 at addr ffff8880672d7de0 by task syz.1.2133/17796 [ 1026.279750][T17796] [ 1026.282058][T17796] CPU: 0 UID: 0 PID: 17796 Comm: syz.1.2133 Not tainted syzkaller #0 PREEMPT(full) [ 1026.282077][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1026.282086][T17796] Call Trace: [ 1026.282092][T17796] [ 1026.282098][T17796] dump_stack_lvl+0x116/0x1f0 [ 1026.282119][T17796] print_report+0xcd/0x630 [ 1026.282138][T17796] ? __virt_addr_valid+0x81/0x610 [ 1026.282161][T17796] ? __phys_addr+0xe8/0x180 [ 1026.282184][T17796] ? __cpa_addr+0x1d3/0x220 [ 1026.282199][T17796] kasan_report+0xe0/0x110 [ 1026.282218][T17796] ? __cpa_addr+0x1d3/0x220 [ 1026.282235][T17796] __cpa_addr+0x1d3/0x220 [ 1026.282250][T17796] cpa_flush+0x28b/0x8a0 [ 1026.282268][T17796] ? __pfx_cpa_flush+0x10/0x10 [ 1026.282286][T17796] ? pgprot2cachemode+0x9a/0x130 [ 1026.282308][T17796] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1026.282329][T17796] ? drm_gem_get_pages+0x6a0/0xa10 [ 1026.282348][T17796] change_page_attr_set_clr+0x34e/0x4a0 [ 1026.282367][T17796] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1026.282392][T17796] _set_pages_array+0x1ab/0x2c0 [ 1026.282411][T17796] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 1026.282427][T17796] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1026.282445][T17796] drm_gem_shmem_pin_locked+0x223/0x470 [ 1026.282460][T17796] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1026.282474][T17796] ? __pfx___might_resched+0x10/0x10 [ 1026.282497][T17796] drm_gem_map_attach+0x184/0x270 [ 1026.282518][T17796] ? __pfx_drm_gem_map_attach+0x10/0x10 [ 1026.282540][T17796] dma_buf_dynamic_attach+0x1f0/0x530 [ 1026.282557][T17796] ? __fget_files+0x20e/0x3c0 [ 1026.282573][T17796] drm_gem_shmem_prime_import_no_map+0x67/0x3c0 [ 1026.282587][T17796] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1026.282602][T17796] drm_gem_prime_fd_to_handle+0x1a9/0x5f0 [ 1026.282618][T17796] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 1026.282634][T17796] drm_ioctl_kernel+0x1f4/0x3e0 [ 1026.282652][T17796] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1026.282673][T17796] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1026.282695][T17796] drm_ioctl+0x5c9/0xc30 [ 1026.282715][T17796] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1026.282731][T17796] ? __pfx_drm_ioctl+0x10/0x10 [ 1026.282755][T17796] ? selinux_file_ioctl+0x180/0x270 [ 1026.282773][T17796] ? selinux_file_ioctl+0xb4/0x270 [ 1026.282791][T17796] ? __pfx_drm_ioctl+0x10/0x10 [ 1026.282812][T17796] __x64_sys_ioctl+0x18e/0x210 [ 1026.282836][T17796] do_syscall_64+0xcd/0x4e0 [ 1026.282856][T17796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.282871][T17796] RIP: 0033:0x7fdac358eec9 [ 1026.282883][T17796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.282897][T17796] RSP: 002b:00007fdac4438038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1026.282912][T17796] RAX: ffffffffffffffda RBX: 00007fdac37e6180 RCX: 00007fdac358eec9 [ 1026.282922][T17796] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000009 [ 1026.282932][T17796] RBP: 00007fdac3611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1026.282942][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.282951][T17796] R13: 00007fdac37e6218 R14: 00007fdac37e6180 R15: 00007ffc7e04ee28 [ 1026.282966][T17796] [ 1026.282971][T17796] [ 1026.598456][T17796] Allocated by task 17796: [ 1026.602844][T17796] kasan_save_stack+0x33/0x60 [ 1026.607503][T17796] kasan_save_track+0x14/0x30 [ 1026.612155][T17796] __kasan_kmalloc+0xaa/0xb0 [ 1026.616722][T17796] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 1026.622072][T17796] drm_gem_get_pages+0x144/0xa10 [ 1026.626990][T17796] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 1026.633032][T17796] drm_gem_shmem_pin_locked+0x223/0x470 [ 1026.638551][T17796] drm_gem_map_attach+0x184/0x270 [ 1026.643557][T17796] dma_buf_dynamic_attach+0x1f0/0x530 [ 1026.648907][T17796] drm_gem_shmem_prime_import_no_map+0x67/0x3c0 [ 1026.655120][T17796] drm_gem_prime_fd_to_handle+0x1a9/0x5f0 [ 1026.660814][T17796] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 1026.666598][T17796] drm_ioctl_kernel+0x1f4/0x3e0 [ 1026.671428][T17796] drm_ioctl+0x5c9/0xc30 [ 1026.675654][T17796] __x64_sys_ioctl+0x18e/0x210 [ 1026.680399][T17796] do_syscall_64+0xcd/0x4e0 [ 1026.684883][T17796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.690753][T17796] [ 1026.693055][T17796] The buggy address belongs to the object at ffff8880672d7d80 [ 1026.693055][T17796] which belongs to the cache kmalloc-96 of size 96 [ 1026.706907][T17796] The buggy address is located 0 bytes to the right of [ 1026.706907][T17796] allocated 96-byte region [ffff8880672d7d80, ffff8880672d7de0) [ 1026.721286][T17796] [ 1026.723586][T17796] The buggy address belongs to the physical page: [ 1026.729966][T17796] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x672d7 [ 1026.738697][T17796] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1026.746213][T17796] page_type: f5(slab) [ 1026.750170][T17796] raw: 00fff00000000000 ffff88801b026280 ffffea00019118c0 dead000000000005 [ 1026.758728][T17796] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 1026.767280][T17796] page dumped because: kasan: bad access detected [ 1026.773664][T17796] page_owner tracks the page as allocated [ 1026.779348][T17796] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6531, tgid 6522 (syz.3.119), ts 120430936283, free_ts 108808276083 [ 1026.798513][T17796] post_alloc_hook+0x1c0/0x230 [ 1026.803275][T17796] get_page_from_freelist+0x10a3/0x3a30 [ 1026.808812][T17796] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1026.814695][T17796] alloc_pages_mpol+0x1fb/0x550 [ 1026.819530][T17796] new_slab+0x24a/0x360 [ 1026.823671][T17796] ___slab_alloc+0xdc4/0x1ae0 [ 1026.828333][T17796] __slab_alloc.constprop.0+0x63/0x110 [ 1026.833776][T17796] __kmalloc_noprof+0x501/0x880 [ 1026.838620][T17796] hash_ipport6_resize+0x10f6/0x1c30 [ 1026.843898][T17796] call_ad.constprop.0+0x36d/0x940 [ 1026.848992][T17796] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 1026.854871][T17796] nfnetlink_rcv_msg+0x9f9/0x1200 [ 1026.859876][T17796] netlink_rcv_skb+0x155/0x420 [ 1026.864626][T17796] nfnetlink_rcv+0x1b3/0x430 [ 1026.869204][T17796] netlink_unicast+0x5aa/0x870 [ 1026.873954][T17796] netlink_sendmsg+0x8c8/0xdd0 [ 1026.878702][T17796] page last free pid 5814 tgid 5814 stack trace: [ 1026.885005][T17796] __free_frozen_pages+0x7df/0x1160 [ 1026.890191][T17796] vfree+0x1fd/0xb50 [ 1026.894066][T17796] kcov_close+0x34/0x60 [ 1026.898203][T17796] __fput+0x3ff/0xb70 [ 1026.902168][T17796] task_work_run+0x150/0x240 [ 1026.906737][T17796] do_exit+0x86f/0x2bf0 [ 1026.910871][T17796] do_group_exit+0xd3/0x2a0 [ 1026.915350][T17796] __x64_sys_exit_group+0x3e/0x50 [ 1026.920349][T17796] x64_sys_call+0x150b/0x1730 [ 1026.925007][T17796] do_syscall_64+0xcd/0x4e0 [ 1026.929489][T17796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.935359][T17796] [ 1026.937663][T17796] Memory state around the buggy address: [ 1026.943269][T17796] ffff8880672d7c80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1026.951308][T17796] ffff8880672d7d00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1026.959346][T17796] >ffff8880672d7d80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 1026.967378][T17796] ^ [ 1026.974546][T17796] ffff8880672d7e00: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 1026.982582][T17796] ffff8880672d7e80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1026.990617][T17796] ================================================================== [ 1027.008315][T17796] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1027.015518][T17796] CPU: 1 UID: 0 PID: 17796 Comm: syz.1.2133 Not tainted syzkaller #0 PREEMPT(full) [ 1027.024857][T17796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1027.034912][T17796] Call Trace: [ 1027.038178][T17796] [ 1027.041094][T17796] dump_stack_lvl+0x3d/0x1f0 [ 1027.045667][T17796] vpanic+0x640/0x6f0 [ 1027.049620][T17796] panic+0xca/0xd0 [ 1027.053325][T17796] ? __pfx_panic+0x10/0x10 [ 1027.057730][T17796] ? __cpa_addr+0x1d3/0x220 [ 1027.062208][T17796] ? preempt_schedule_common+0x44/0xc0 [ 1027.067673][T17796] ? preempt_schedule_thunk+0x16/0x30 [ 1027.073033][T17796] check_panic_on_warn+0xab/0xb0 [ 1027.077944][T17796] end_report+0x107/0x170 [ 1027.082246][T17796] kasan_report+0xee/0x110 [ 1027.086641][T17796] ? __cpa_addr+0x1d3/0x220 [ 1027.091119][T17796] __cpa_addr+0x1d3/0x220 [ 1027.095423][T17796] cpa_flush+0x28b/0x8a0 [ 1027.099640][T17796] ? __pfx_cpa_flush+0x10/0x10 [ 1027.104380][T17796] ? pgprot2cachemode+0x9a/0x130 [ 1027.109308][T17796] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1027.114670][T17796] ? drm_gem_get_pages+0x6a0/0xa10 [ 1027.119761][T17796] change_page_attr_set_clr+0x34e/0x4a0 [ 1027.125295][T17796] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1027.131342][T17796] _set_pages_array+0x1ab/0x2c0 [ 1027.136181][T17796] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 1027.142222][T17796] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1027.148784][T17796] drm_gem_shmem_pin_locked+0x223/0x470 [ 1027.154299][T17796] ? __pfx_drm_gem_shmem_pin_locked+0x10/0x10 [ 1027.160334][T17796] ? __pfx___might_resched+0x10/0x10 [ 1027.165595][T17796] drm_gem_map_attach+0x184/0x270 [ 1027.170628][T17796] ? __pfx_drm_gem_map_attach+0x10/0x10 [ 1027.176149][T17796] dma_buf_dynamic_attach+0x1f0/0x530 [ 1027.181493][T17796] ? __fget_files+0x20e/0x3c0 [ 1027.186143][T17796] drm_gem_shmem_prime_import_no_map+0x67/0x3c0 [ 1027.192351][T17796] ? __pfx_drm_gem_shmem_prime_import_no_map+0x10/0x10 [ 1027.199170][T17796] drm_gem_prime_fd_to_handle+0x1a9/0x5f0 [ 1027.204861][T17796] drm_prime_fd_to_handle_ioctl+0xd6/0x110 [ 1027.210638][T17796] drm_ioctl_kernel+0x1f4/0x3e0 [ 1027.215463][T17796] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1027.221845][T17796] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1027.227191][T17796] drm_ioctl+0x5c9/0xc30 [ 1027.231407][T17796] ? __pfx_drm_prime_fd_to_handle_ioctl+0x10/0x10 [ 1027.237791][T17796] ? __pfx_drm_ioctl+0x10/0x10 [ 1027.242531][T17796] ? selinux_file_ioctl+0x180/0x270 [ 1027.247702][T17796] ? selinux_file_ioctl+0xb4/0x270 [ 1027.252785][T17796] ? __pfx_drm_ioctl+0x10/0x10 [ 1027.257524][T17796] __x64_sys_ioctl+0x18e/0x210 [ 1027.262264][T17796] do_syscall_64+0xcd/0x4e0 [ 1027.266742][T17796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.272604][T17796] RIP: 0033:0x7fdac358eec9 [ 1027.276991][T17796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1027.296568][T17796] RSP: 002b:00007fdac4438038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1027.304951][T17796] RAX: ffffffffffffffda RBX: 00007fdac37e6180 RCX: 00007fdac358eec9 [ 1027.312891][T17796] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000009 [ 1027.320832][T17796] RBP: 00007fdac3611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1027.328776][T17796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1027.336717][T17796] R13: 00007fdac37e6218 R14: 00007fdac37e6180 R15: 00007ffc7e04ee28 [ 1027.344662][T17796] [ 1027.347847][T17796] Kernel Offset: disabled [ 1027.352163][T17796] Rebooting in 86400 seconds..