last executing test programs: 20.474540284s ago: executing program 2 (id=100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x14305, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f00000000c0)=0x80000000, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0xc4, 0x0, 0x2, 0x5, 0x0, 0x0, {0x8, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x5}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20048010}, 0x24000000) set_robust_list(0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x2, 0x0, 0x0, 0xfff, 0xfffffffffffffffc}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@rand_addr=0x64010102}}, @algo_crypt={0x48, 0x2, {{'cbc-serpent-avx2\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xc001, 0x0) ioctl$TIOCGSERIAL(r6, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4070}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 17.582136806s ago: executing program 2 (id=105): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) creat(0x0, 0x61616f309f697a14) socket$inet_udp(0x2, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000280)={0x24, @short}, 0xfffffffffffffe40) r4 = dup(0xffffffffffffffff) connect$802154_dgram(r4, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) sendto$inet6(r4, 0x0, 0x0, 0x40dc880, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @local}, 0x1c) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000), 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00", @ANYRESDEC=r2], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 14.552367422s ago: executing program 0 (id=110): pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'pim6reg0\x00'}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xfffffffe, 0x8, 0x10000000}, 0x34) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="1400010020010000000000000000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xb2) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000380)=0x70, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e644}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x40, 0x7fff0000}]}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) 14.454849026s ago: executing program 4 (id=111): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000001c0)=""/88) r4 = socket(0x1d, 0x2, 0x6) r5 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r5, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904000003080662"], 0x0) 14.027004479s ago: executing program 2 (id=113): syz_open_dev$sndctrl(0x0, 0xfffffffffffffffe, 0x200000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x48, &(0x7f0000000140)={0x11, 0x7, 0x0, 0x1, 0x89, 0x6, @link_local}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) accept$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001040)=0x14) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000180)=0x1b34a93f, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x3, 0x40, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x83, 0x76, 0xd9, 0x8, 0x67b, 0x0, 0x4442, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x98, 0x8, 0x90, 0xe, [{{0x9, 0x4, 0x88, 0x3, 0x2, 0xf9, 0x32, 0x8f, 0x42, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x4, 0x7f, 0xb, [@generic={0x2, 0xb}]}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x7f, 0x4, 0x9a, [@generic={0x8, 0xb, "8d77ecad1235"}]}}]}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4a, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) 12.093624012s ago: executing program 3 (id=115): mount(0x0, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4048aecb, &(0x7f00000034c0)={{0x0, 0x0, 0x80, {0xeeee0000, 0x5, 0x2}}, "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", "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"}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r3, 0x9620}], 0x1, 0x0, 0x0, 0x0) setrlimit(0xa, &(0x7f00000001c0)={0x3, 0xf}) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) gettid() ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, &(0x7f00000000c0)="1a0138cc8789936da4d13ff61391fd885892438bbddcd23728899bc327ebd5ee897569c6cca184eabb97ad9f53f120b4136118aed4b48f820d8f8f"}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000100)={0x30, r4, 0x1, 0x0, 0x7, 0x81, 0x1000, 0x0}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @pic={0x4, 0x1, 0x7f, 0x4, 0x96, 0x5, 0x0, 0xf9, 0x4, 0x1, 0x9, 0x10, 0x10, 0x7, 0x4, 0x9}}) setitimer(0x0, 0x0, 0x0) 11.940091731s ago: executing program 0 (id=116): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffd, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0x164}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x7e, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmget$private(0x0, 0x4000, 0x20, &(0x7f000026b000/0x4000)=nil) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010000000000000002000600", @ANYRES32, @ANYBLOB="02000100166dcb987054ba99e79217e2229b2c97649688e41ead8c78587640fc46aa331e3887083894afe53f90aa591ef62ac38f100cc0ba5913b50e501bf7f9405451c38079bb253950d6128fd7ef1c7e3c9ab193c5b9f3b7bb38a404a68533669f8e75f098d3df37da62b90ad3295bbe62f22c859e9a3af05feaa860497d95e2be9896f0ea3f72fcc015aa85bedc2fdc5a21d500b25f8951bc35adbe7f5c9797e9320cedfdfeac77d32ea63ca6cfa0dd760ebf5a6c9a31", @ANYRES32, @ANYBLOB="040000000000000010000000000000002000000000000000"], 0x34, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010029bd7000f9d3df250d00000006000a0001060000"], 0x1c}, 0x1, 0x0, 0x0, 0x2000008c}, 0x10) rmdir(&(0x7f0000000040)='./bus\x00') 11.852180673s ago: executing program 1 (id=117): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'team_slave_1\x00', &(0x7f0000000340)=@ethtool_eeprom={0x18, 0x2, 0x80000001}}) openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f00000005c0)=[@wrmsr={0x1e, 0x20, {0x410, 0x2}}, @wr_drn={0x6e, 0x20, {0x7}}, @cpuid={0x14, 0x18, {0xd06, 0x4}}, @rdmsr={0x32, 0x18, {0x10}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x8, 0x7f}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x5}], 0xd8}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003180)={{0x0, 0x0, 0x80, {0xeeee0000, 0xffff1000, 0x5}}, "9eaf7ba34063f802cb60f86604542977b439bbb0e730875f547f919f415a304f75888e016dc975da0f3723d837f7e56052872f22dbf00a1fc5f1e45909e8e40bdb400f4fd5bd413a6b200eb3161393a12315ddf12dd7dc12ffff844812ea87d0ec564b4f8cefb6908e49fad53d4bea4c876e5c04968a96fde2c291a99861ec754d362917248486f77fac0740c5df4d5e40e2e6a0c5197ec2719f504a4969dd6ddd855b9ff19536984fb2cc0f2ed68e8181f2b74558302eb4227bfad6792fc15d0de5d10645b94decaa216493d44e0d243c97cdb4a791bd96d95cb0fb04a663bedfa87fe68aa546592170495f34f61fd7fc7bc4806faae33a68a8e4c224e08c6f86e80d635f9200342f2892906312bb6b2efdbe9a06e9e1e2d4deacf60e229ed757ff2a4bbd2420651f805e9af97d172c37cf9e79945fae421480d8665ca3d2b4ac57d38eee790a23fe7f76e2c5366663cdb7cd9c47ec46536635ac514a791f53db8abcd19b6e3892926e3d0dc4e32e58c2fe8f35eb4d39904148688da4c0cb83a305978c31440fc1a293d9a2d78f63c27c9d3b472895bd865ad2a94795cd66321ce719b2d8a2308b7ef2d7531bedcf6bc3e53c343b0c932c114d1d3d73b65b487d7f610a043120eb284b1d5437bfb5d5fa8862123f93924c8b59e341159f170637ad5e7f52ca363fa66d379cf3373d1dc44f6459cc595c05fb54d89d5eafd3f1ae839e2c4af4779ef81e394776fd2ff5ee9a6415de46bae593c00711e68709265d1a6f7b25b0b9e4d4ddd6cbfd55d8b16a35809bbb8f30d78e57395bd13b3f17f9eab364fb5e29d2a889fe408e1aa90513485a0dff3fee11b35f9cb1a673f0d38c963aa40122ce8d11240e7f68f433a4e150fffcfe602748c764219f848a211e0ad227737c3c63d5b287ece38abb9a3e038bed110569cf32a76886bf5a29878948f3d84789b5b51b0702bbea3ea3bebbc10f34c924f19c22750b225a895d03e3b7da84f8949a2f02adbaf5b6b62435030b249f8696c68a11f8939aa82063fd57e81e4d2398d18ca8dff6b78006d0a51aa320ee56ef03f2abb8c7630674ec3155e366c9f75d78a89a1af2f5b277385b3ddbc0a1a9ce2c326507f854dc5ff3ac46be2acf160ce347934084d9da716113b859ea140b4101e952967b897efd559fe37ee894346b427bcd7f73195d3b5eaac500074d13f6fb9259fa3a1a62534985d803d1e361f7e122c3f05f56aad3444a48d3b6e2f8c82288ee0e6fbe07fd80216b7380ca945bada23cc9a0cb7e42573fcd76de6116ec875f62542969b21af11e67f6d02834fd4bbc356754bad0397a7c4a1404ca74b6c147478a45107fcd6dfc81ba504420165d81dd6add98c71b54e1a6e84e66b53da45cd195875ccc4519e7b2a1476bc71c544de5e4a1da30768795193e02d126c5c95c0a9bb64ad36ed63c6800e0542962832f03f9d505d6bcd035aed54571cd297d63d1e638472d722c0d55c53dd2e13d6078bebeea396a7b76fae3f31caa22e04322ed007821cc11af7fd707be44e8659d07e4a66e19e72ed1474e661d15de28e3e173ecb8bb905b6b549960641c2c59b1e02619024c00ea5c70e2f2724d0811b0c5f6a0c62b53ffacf5b57d54529d88f948ba185977f4cfe483457f384129d4c085319302fc9db9816e38b729425c74155907eb5369f7ccc3f732af51de2874ec5d709504056044ff0100004fa8cc96854f58a649428c7d1d513c73ec7910c2e3f1a0e787df58ea3e8e587130eb86f44e6a613559e511dd1317495adb7be5640c56a088772d91fe7735a9791bffa6a50f1b308e34bfb3ec89593d0568587f118cdbeefe51a830197964c468a7c772705159935acd78cee202414043f36cec02e4b8f8289db6ca23f8f6143309748dd460272bb52f157257d17dfc66e26b32c9b6a82f59010eeb598b16e71f6edeacf496a32f0dc2885aec5844067b98a09db513654e9f995f939f714cdf36a1d7754a6fc7022e146cac6c508e05a5ac6037fb64476e40053c3958076e534205b5bd41519bfa0392b2d50996af4dd0ebafd9a48f7221bfc34771ee1f735dc82a9fc1f9956d855e9c4da9f1247a6fea0d0abf74900ae9cada26ae6a5002ce38c23484d9a6464fba66c356bced21ed48093b9bb0d52f26e2dd8b001c22c26fa91dd56ef573ae4c4fbc56c0d69ddd1083a8e34b07b0669c3bef0e7aaac52a1499e8a83318385ad160e52ce0bcf4ad56122c8909e263920ce4d367050d507787b82f8c67feda1fca034d2076b71b5b4294b0e0315d090ffc7026fd3eefbaa26334ae0fde5ed70c6d6c2ce24b4cd14ad5d258d95a23ee7a964cb8e4689d0e46447e9d47b24c34ea6c0de382c430a655f24e4f88064792be2e2043f294904ec47bbd603dbca34ffea7d35d3295ea382d88558e06a019b2348e6c509bc386cf8d6813fb3eaf859a44ef751161cf6b37da8bb6401f6fa57ddbecbda0c6226a76550e72e6aac341e3c9c1130c369bc4c357ee21a2ba0048d0d8f6a0988f3742195eb6f24e6980c5fede10758aaa22856b7b2f076d964a6f075280059c00d7fe7de61f9c00c534875601dfacfdd2ff1b24d4839604d030137023985fb9565dcc43e9fcc17462e2eef441a5232e2d4380f3b484de59b8049490d89700acc63b755dc06a5ec43f14f111f69855ae2c66976fcc2e3f22ac69868ef086d231948a13bf429c2e65b3a7d3f1d17dd78cfcd7d58a182afd77c5e4681657e36321176d1c7a6601fcc3dd5c676ebd735d35b549650d4a2b5d299206724b7f57a9e1498b2100204df7343afb37bce14251f5ab881ccad508cbb498f3c2eae9e489d5a50141b717102d8eb56adf6c7f0900294d3273f87bfabbd21ea628895209c74f458ea2331799f4d75ffb51e4cbdc89526e98cef2672ea1a1270e0f381f9ed4bdfc9941f9c94359a72f90e0dd8cb01d5345f2fb79ecd12da7c03ac49140cbb9d3ac3d501ef20c46ca88aad759bfddff230f134bed313105fd1012b81e1a2383ae2e496543625ea1b4c7ad7843dc2754566c9dd8526e43124110222957ad32876428d62bc2846517e756c499e160516cfe12517ec11655c8b86e950a65fdb5503f920a284c11c9598adec3bf88e15a308398ce8877bdfaf62256f2daa65606995b73a50408717fd96d07f1dd7fb8ec848c2d965d6cd5f2a5d08e5deab2532dfb355d4896620f54a51266e528ad57f6c70b9ad5a896aa6560b595fdfc9d9ba04cf3bedd803774395bf88ec1f626312567fae530c7d0bb6d27fb7779ad8673382d2516f4685b437a2ae050ada8532895b0368d67d01c857f837917d40dbbc94951e376af6851875eb7d76a021d8e5353d8f06f7000a70c13ae00cbd17ab05060768e5b522da9a323806f7dd510962f90ae2dd1b4b4e0726acb37fe37b5cac3e2c3542e6b1abf720b44d87698792b365a2f5a6444faff451b69e7186935bd7abf0bc35cde9467bdd7ca2a9b5d894c0b21e37d8213fddcd1ef22118e7354971fe107f7be0d2b49e21bbff1f1e54b5d0fc1dbc5c20b15d136b0a185ce8e7fce058b1d181640559f0804585977624fbb2f2ab9f70d33d3a78d0ccb6bf6cefb7f90ba18df79b6500e97a7283d12fc6bb910f9d5023d23eacb62d162edfe010c757eda07b1850730e81db3a162f6af358fc9c42dd8ad32be3d640e2ec3d412979137b16a5537ce1fe72db20e39e3f6418dc4ca739e16e9a8e44c4231d67e928b6f981ba31e7f12a3184001eb0dfc1db5468cdab2e427294494d745c4a77d8c0e3035044dabc612ad7e24cc12fbc7de14417ae035094629e506909fb205123b2abaf7f02edc97b462ed0c8ce6f291efc3f59a7ae31bd6a7cbc599c3d5da3d537ca4708ed012c6e7575f3a72a3eabf06b730bf733874949760998df45dd0131b3cf98f9625049cedcd99364e98f84a686fdf1f718a306a95016bf5d1bcc6ef82c84c717f6a4b013580e471e797aa2fb557dddac13db0ae012d0d0949841c787973d6e7aa5449a7422c5b4a3c3e6adedc80c56102673447e27306dbc38330bfe16189bcc4f98b214495cd920a2095a8fcbfef88ffbd042bdf65c94d8d67a436df93dd2d10bd317b97211c1da73ac09774b9bd95ff15894e47e25f8668fc6386a9a3297eb9ffc8d98f85880f0225155426e036c6e53adb12972f32fea84629d0d599de8bccc4acb8af7b6c6547761c072fc97d0ecfe19d4c985c6f01ba8cb1c30c9f145511083f6d03506fe9193252b04deaab341fbca1c67bc8c9ca06aaa22275d07a1282c866e0ae56d2a4d1ccd3688d467353bef18a4897ed12b59f36b0627f25e99f2b34e60efffdbf43bffb572478ced36e55fcec5ffe1251d493f8251e834d76bee2b8fcbed94b0f28c93b7502c4d68298c3701654bc13630cecc20cf85eaa85507f1a7d759d827c0a331dfb920f9d90b476bb07bef4ec23da5e751764a47c50a9a0df36bb7beefd7175cb7aa0a299a4d60212fb55656284ee809439c1a4ea37989db09a917f30001227caf312bc396cedab92adfb97cde9963ec5f927ecb817e7313b71a9327e5ce40ce12a2012625ea8ff6adb956094c7af961df5af939f6199b1ed61aff0b09c70ecc889ce79532cee07f63069b29828b4adc1b0dfbe7e1faf81ca82b473faed96dc02728036b64b5b488c0f90c5b5e67256fc9a08e2473d64829a883eab84f99f9b92c79f2574bf6483460b8edac59782189938aba01d3e623e67c3d4b65e4cc4787eb82cd5b40ceaf7574c931f73d80486994f903fbd6519bdc70c04215649b1a4e40c74673ecaf7daaf85137608784dc7fa0c7d5b5c0f101ec2bd3c3ed95d0a7108a5cdbb815611e7508d38e888f747f59243f31479804e2a4cba3d81c1adc02cea731642694b39ffd1f87d04850bc496588ad57346f530e736b3f290655ff4b6d36ef5e7db4117a43566510ffbccea4cb01809b3ef906f6630e572b77db16fe956b56968503561ae3b3ca8924f36056d3dc7bc96a2d1e5eecfcfc0ee3aa82ad9c216d7bff44405e95ddd1ae3a6f895dd06d2471a15421720f444bf0b321a2ee873de0fd810550d461fe7209a9608b42c4d55d43f39c9d16cc2b30fde49aeb0b56a4986954b515d1fdf2d3f9c8028536e1aa02dfd50c68fb25d37fbeaf118aad15901dcd7b311240a4810a4f2340be9e754478b9a51def52cc1be8410354c37491f1e854c2eca640d0a21bc4e90adf0069727283cbf00000000000083f8bdc0826a9407c9971143be41a07750e4ce998239e3d1c1c8bacb547d46950080903fe191eb997204fa6beceef5a7deb33fbd69ce3712713885e1f7daf1e2400c6c41b5c751bba358c5928262854bd53b6b320423185953a0e9d21249ccbbd893625ecf60620c6cdf907d709bcb678dd8d1e6f0d2ea0290d7dc75415b060f993f8b05770726e4aa78a28781fb8aa553d3e1b14cde2371af3aa907fba7cfd7d1378b727cb51ccf276b28d0c79d2b66a707fd5c7266490704b5fbd328a194a1398a170555e09bd6e449ac0f1bc2eefdb1d0646f80b0689324151793be9386bb29ebd3a77baff46c0059b5613b374f9849a8b864d181cbbfa28b9109ccd0ded71a9b54266ebbc4fddc261c379017772edb5bfd3759d1fcd3c52eb0cf0bcb45c1cd9a95727e8fae4a0f8bbf957bd990bd9e78ce583aed0f46f58114182ea92a33813bbeb1c60e9bf394c8496d328413da6a375362d3f9ba663423a6f0de0000000000000000000000000000000000000000000000000000000000008000", "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"}) socket$igmp(0x2, 0x3, 0x2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r5) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0x1, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000300) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0x1, 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000040), 0x7ff, r6}, 0x38) 10.768661491s ago: executing program 3 (id=118): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r5, 0x1000000, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60e400ff00403a00fe800000000000000000004000000027fe059078020000006f000000000000000000000000000001fe8000000000000000000000000000372900040001300200f1a96e3d0e3a60"], 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x3, 0x4ea, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000011000000110000000017766574683000000000000000000000007767320000000000000000000000000064766d727030000000000000000000007866726d300000000000000000000000aaaaaaaaaaaaffffff000000aaaaaaaaaaaa0000000000ff1e0100001e0100004e010000636f6e6e62797465730000000000000000000000000000000000000000000000180000000000000003000000000000000400000000000000020200000000000070687973646576000000000000000000000000000000c3b7e2d460bc74ef000048000000000000007866726d300000000000000000000000000000000000000000000000000000007465616d3000000000000000000000000000000000000000000000000000000000100000000000004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001000000010000000000000029000000000170696d7265673000000000000000000064766d727030000000000000000000006d6163766c616e30000000000000000070696d72656700000000000000000000000000000000000000ffffffaaaaaaaaaaaa00009887e1f1a7fc4e0000b700c60100003e0200006e0200006367726f7570000000000000000000000000000000000000000000000000000008000000000000008000000001000000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000434c415353494659000000000000000000000000000000000000000000000000080000000000000081000000000000004552524f52000000000000000000000000000000000000000000000000000000200000000000000064fd0216455f55b4792b85ead600d58edee1b35fcb704a4aa813cac8f1da0000434c4153534946590000000000000000000000000000000000000000000000000800000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feffffff01000000050000000000000000186261746164765f736c6176655f3000006970365f7674693000000000000000006e657464657673696d3000000000000076657468315f746f5f7465616d000000bbbbbbbbbbbb00ff0000ff00000000000000ffff00ff00ff6e0000006e0000009e0000004155444954000000000000000000000000000000000000000000000000000000080000000000000001"]}, 0x562) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010125bd7000000000000000", @ANYRES8=r6], 0x20}}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() 9.441705979s ago: executing program 4 (id=119): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000180)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) 9.14857128s ago: executing program 1 (id=120): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x0, 0x5002) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) socket(0x9, 0x3, 0x6) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 8.251482363s ago: executing program 3 (id=121): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf5}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x1}, 0x21, 0x0) landlock_restrict_self(r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x3, 0xbfdffff8}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@caif=@dgm={0x25, 0x8, 0xcd}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r5 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000100)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, 0x0, 0x48040) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x3, 0x3a) 8.17748512s ago: executing program 0 (id=122): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00') read$FUSE(r1, &(0x7f0000000800)={0x2020}, 0x2020) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)=[0x6], 0x0, 0x0, 0x1}}, 0x40) r3 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000480)={0x5, 0x20, 0x6, 0x20, 0x7}, 0x48) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r4 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) ppoll(&(0x7f0000002280)=[{r4, 0x800}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x100000000a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 8.108814095s ago: executing program 2 (id=123): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES16=r6], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="2004000000000000ff7f1b0000000000f30d"], 0x28}}, 0x0) recvmmsg$unix(r5, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) 7.825900257s ago: executing program 1 (id=124): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2f", 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) 6.966615122s ago: executing program 0 (id=125): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x3, 0x5) r2 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r2, r1) sendmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x2, 0x0, 0x1, 0x3}}, 0x80, 0x0}, 0x5b4}, {{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, 0x0}}], 0x2, 0x850) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="000000000000000800000000658b82f200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x18}, 0x20) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000400)=@md0, 0x0, &(0x7f0000000480)) fsmount(r5, 0x0, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="4eff3d20000014e2ff022b00"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000a0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0xf0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 6.951608017s ago: executing program 3 (id=126): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) ptrace$peeksig(0x4209, r3, &(0x7f0000000180)={0x8, 0x0, 0x2}, &(0x7f00000003c0)=[{}, {}]) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, 0x0, 0x2100, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x2c020400) r4 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) socket$netlink(0x10, 0x3, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) poll(&(0x7f0000000100)=[{r5}], 0x1, 0x4) 5.968762194s ago: executing program 0 (id=127): openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$pptp(0x18, 0x1, 0x2) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000000c0)={0x5, 0x2, 0x6, 0x0, 0x2, 0x0, [{0x2, 0xe, 0x3, '\x00', 0x806}, {0x401, 0x7fff, 0x7, '\x00', 0x8}]}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000023896) close(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket(0xa, 0x3, 0x8000003a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 5.770946674s ago: executing program 2 (id=128): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2f", 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r7, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r9, 0x0, 0xffffffff004) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd02337761000200048140060905870308"], 0x0) 5.707622197s ago: executing program 1 (id=129): fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) syz_open_dev$MSR(&(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7019fddbdf2501000000000000000000000000000007e2"], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x80) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='reno', 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="8b", 0x1}], 0x1, 0x0, 0x57}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)='q', 0x1}], 0x1}}], 0x3, 0x0) shutdown(r5, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0xc000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) 5.508233291s ago: executing program 4 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_TIMEOUT(r0, 0x702, 0x66a0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(0x0, 0x1a1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) inotify_init() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) unshare(0x72040e80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x181000) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x5cac3000) listen(0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000580)) close(r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x1}, 0x18) 5.024569424s ago: executing program 1 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x404000000000008b}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) getegid() syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) 3.210659208s ago: executing program 0 (id=132): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r5, 0x1000000, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60e400ff00403a00fe800000000000000000004000000027fe059078020000006f000000000000000000000000000001fe8000000000000000000000000000372900040001300200f1a96e3d0e3a60"], 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x3, 0x4ea, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, &(0x7f0000000040), &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x562) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010125bd700000000000000000", @ANYRES8=r6], 0x20}}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() 3.015724002s ago: executing program 4 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x4, 0x0, &(0x7f0000000600)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100f285dd00ff000071000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/83, 0x53}, {&(0x7f00000000c0)}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/111, 0x6f}], 0x4, &(0x7f0000000540)=""/100, 0x64}, 0x9}, {{&(0x7f00000006c0)=@ax25={{0x3, @null}, [@netrom, @rose, @netrom, @null, @remote, @bcast, @default]}, 0x80, 0x0, 0x0, &(0x7f0000000840)=""/60, 0x3c}, 0xcfeb5e57}, {{&(0x7f0000000880)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/109, 0x6d}, 0x5}, {{0x0, 0x0, &(0x7f0000002680)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002880)=""/208, 0xd0}, {&(0x7f0000001380)=""/59, 0x3b}, {&(0x7f0000002a40)=""/121, 0x79}, {&(0x7f00000007c0)=""/7, 0x7}, {&(0x7f0000002b00)=""/211, 0xd3}, {&(0x7f0000002c00)=""/10, 0xa}, {&(0x7f0000002c40)=""/25, 0x19}], 0x7}, 0xd}, {{&(0x7f0000002e00)=@tipc=@name, 0x80, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000030c0), 0x0, &(0x7f0000003100)=""/145, 0x91}, 0x1000380}], 0x7, 0x20, &(0x7f00000033c0)={0x0, 0x989680}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) 1.880094282s ago: executing program 3 (id=134): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000005, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0xa4000021) close(r6) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r5}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000140)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = syz_io_uring_setup(0x7a6e, &(0x7f0000000040)={0x0, 0x80000000}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) 1.748447493s ago: executing program 4 (id=135): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xfffffffc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x40) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1000000) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0x9, {0x22, 0xff, 0x4, 0x7, 0x800}}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xa13, 0x4) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xffffa811}, 0x8) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000200)=@get={0x1, &(0x7f0000000180)=""/85, 0x9}) 664.752002ms ago: executing program 2 (id=136): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00') read$FUSE(r1, &(0x7f0000000800)={0x2020}, 0x2020) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)=[0x6], 0x0, 0x0, 0x1}}, 0x40) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r4 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) ppoll(&(0x7f0000002280)=[{r4, 0x800}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x100000000a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 607.300335ms ago: executing program 1 (id=137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) socket$netlink(0x10, 0x3, 0x12) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78) lremovexattr(0x0, &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x6, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x163) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r7, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000056544820e10508041125010203010902"], 0x0) 96.441873ms ago: executing program 4 (id=138): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000180)=ANY=[], 0x48) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) 0s ago: executing program 3 (id=139): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) waitid(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) mlock(&(0x7f0000646000/0x3000)=nil, 0x3000) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r5, 0x0) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x11, 0x0) r7 = syz_io_uring_setup(0xce, &(0x7f0000000480)={0x0, 0x1b69, 0x800, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x3, 0x0}) io_uring_enter(r7, 0x47ba, 0x98f1, 0x20, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000008000000000000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000c9030000000000008500000083000000bf090000000000005509010000000000950000000c03000000000000b702000000000087737eeef16bb86d00b7000000000000009500001b58bd56e87688cefc000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 65.102028][ T30] audit: type=1400 audit(1759627351.847:62): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.125488][ T30] audit: type=1400 audit(1759627351.877:63): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.127966][ T5810] cgroup: Unknown subsys name 'net' [ 65.154544][ T30] audit: type=1400 audit(1759627351.907:64): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.295218][ T5810] cgroup: Unknown subsys name 'cpuset' [ 65.302844][ T5810] cgroup: Unknown subsys name 'rlimit' [ 65.418489][ T30] audit: type=1400 audit(1759627352.167:65): avc: denied { setattr } for pid=5810 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.452923][ T30] audit: type=1400 audit(1759627352.167:66): avc: denied { create } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.473512][ T30] audit: type=1400 audit(1759627352.167:67): avc: denied { write } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.495633][ T30] audit: type=1400 audit(1759627352.167:68): avc: denied { read } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.516223][ T30] audit: type=1400 audit(1759627352.167:69): avc: denied { mounton } for pid=5810 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.541205][ T30] audit: type=1400 audit(1759627352.167:70): avc: denied { mount } for pid=5810 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.562306][ T5812] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.565290][ T30] audit: type=1400 audit(1759627352.207:71): avc: denied { read } for pid=5492 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 66.573803][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.649413][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.649697][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.657755][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.665237][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.671623][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.679074][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.686240][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.693685][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.700702][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.706982][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.715560][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.723113][ T5147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.728060][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.735147][ T5147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.741851][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.755812][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.759226][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.770935][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.773802][ T5147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.791481][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.804435][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.805395][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.827165][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.839589][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.847414][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.320186][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 69.338300][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 69.347599][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 69.399807][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 69.509529][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 69.585232][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.592405][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.600428][ T5820] bridge_slave_0: entered allmulticast mode [ 69.607391][ T5820] bridge_slave_0: entered promiscuous mode [ 69.629019][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.636501][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.643711][ T5827] bridge_slave_0: entered allmulticast mode [ 69.650464][ T5827] bridge_slave_0: entered promiscuous mode [ 69.658113][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.665218][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.672330][ T5827] bridge_slave_1: entered allmulticast mode [ 69.679209][ T5827] bridge_slave_1: entered promiscuous mode [ 69.686164][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.693268][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.700369][ T5822] bridge_slave_0: entered allmulticast mode [ 69.707222][ T5822] bridge_slave_0: entered promiscuous mode [ 69.714244][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.721293][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.728480][ T5822] bridge_slave_1: entered allmulticast mode [ 69.735149][ T5822] bridge_slave_1: entered promiscuous mode [ 69.741859][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.749115][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.756297][ T5820] bridge_slave_1: entered allmulticast mode [ 69.763144][ T5820] bridge_slave_1: entered promiscuous mode [ 69.814444][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.821627][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.829061][ T5821] bridge_slave_0: entered allmulticast mode [ 69.836742][ T5821] bridge_slave_0: entered promiscuous mode [ 69.847549][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.854702][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.861782][ T5821] bridge_slave_1: entered allmulticast mode [ 69.868749][ T5821] bridge_slave_1: entered promiscuous mode [ 69.925807][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.937340][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.948296][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.966306][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.973507][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.980594][ T5823] bridge_slave_0: entered allmulticast mode [ 69.987697][ T5823] bridge_slave_0: entered promiscuous mode [ 69.996827][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.007933][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.018763][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.029473][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.038993][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.046199][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.053620][ T5823] bridge_slave_1: entered allmulticast mode [ 70.060262][ T5823] bridge_slave_1: entered promiscuous mode [ 70.068254][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.155213][ T5821] team0: Port device team_slave_0 added [ 70.163854][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.174400][ T5827] team0: Port device team_slave_0 added [ 70.181255][ T5822] team0: Port device team_slave_0 added [ 70.188538][ T5820] team0: Port device team_slave_0 added [ 70.195748][ T5821] team0: Port device team_slave_1 added [ 70.203270][ T5820] team0: Port device team_slave_1 added [ 70.210458][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.221258][ T5827] team0: Port device team_slave_1 added [ 70.228369][ T5822] team0: Port device team_slave_1 added [ 70.310229][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.317498][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.343538][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.355900][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.363012][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.389356][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.401080][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.408147][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.434050][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.445748][ T5823] team0: Port device team_slave_0 added [ 70.452764][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.459709][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.485860][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.497249][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.504356][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.530313][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.541699][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.548850][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.575273][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.591832][ T5823] team0: Port device team_slave_1 added [ 70.598322][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.605382][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.631375][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.646771][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.653879][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.679814][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.764779][ T5822] hsr_slave_0: entered promiscuous mode [ 70.770945][ T5822] hsr_slave_1: entered promiscuous mode [ 70.778655][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.786236][ T5825] Bluetooth: hci0: command tx timeout [ 70.791788][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.817690][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.829675][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.836631][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.862957][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.862961][ T5825] Bluetooth: hci4: command tx timeout [ 70.877703][ T5821] hsr_slave_0: entered promiscuous mode [ 70.885304][ T5821] hsr_slave_1: entered promiscuous mode [ 70.891182][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 70.897014][ T5821] Cannot create hsr debugfs directory [ 70.941492][ T5820] hsr_slave_0: entered promiscuous mode [ 70.947251][ T5837] Bluetooth: hci1: command tx timeout [ 70.947960][ T5820] hsr_slave_1: entered promiscuous mode [ 70.953257][ T5147] Bluetooth: hci3: command tx timeout [ 70.959721][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 70.964529][ T5825] Bluetooth: hci2: command tx timeout [ 70.970115][ T5820] Cannot create hsr debugfs directory [ 70.991344][ T5827] hsr_slave_0: entered promiscuous mode [ 70.997697][ T5827] hsr_slave_1: entered promiscuous mode [ 71.003682][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 71.009383][ T5827] Cannot create hsr debugfs directory [ 71.060039][ T5823] hsr_slave_0: entered promiscuous mode [ 71.066143][ T5823] hsr_slave_1: entered promiscuous mode [ 71.072011][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 71.078408][ T5823] Cannot create hsr debugfs directory [ 71.105469][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.111943][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.407092][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.417488][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.429006][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.445261][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.483158][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.512944][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.522383][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.534957][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.587014][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.614433][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.637988][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.648136][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.716651][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.724368][ T5823] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.748848][ T5823] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.759364][ T5823] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.769357][ T5823] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.799783][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.827633][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.834820][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.857256][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.864339][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.889753][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.898768][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.925144][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.935321][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.972163][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.041861][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.060488][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 72.060503][ T30] audit: type=1400 audit(1759627358.807:86): avc: denied { sys_module } for pid=5822 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.090031][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.104988][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.123940][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.131005][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.139497][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.146574][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.184399][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.257645][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.270609][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.304139][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.314442][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.321591][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.357308][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.386389][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.402544][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.409709][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.429683][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.436828][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.475539][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.490236][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.497383][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.541633][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.548813][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.574730][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.581821][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.601081][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.613750][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.666122][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.804270][ T5822] veth0_vlan: entered promiscuous mode [ 72.847706][ T5821] veth0_vlan: entered promiscuous mode [ 72.868799][ T5822] veth1_vlan: entered promiscuous mode [ 72.874701][ T5825] Bluetooth: hci0: command tx timeout [ 72.921831][ T5821] veth1_vlan: entered promiscuous mode [ 72.941080][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.948487][ T5825] Bluetooth: hci4: command tx timeout [ 72.980073][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.006345][ T5821] veth0_macvtap: entered promiscuous mode [ 73.017127][ T5821] veth1_macvtap: entered promiscuous mode [ 73.022989][ T5825] Bluetooth: hci2: command tx timeout [ 73.024807][ T5837] Bluetooth: hci3: command tx timeout [ 73.028376][ T5825] Bluetooth: hci1: command tx timeout [ 73.056631][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.076964][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.094503][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.124236][ T5822] veth0_macvtap: entered promiscuous mode [ 73.134420][ T3007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.144148][ T3007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.160025][ T5823] veth0_vlan: entered promiscuous mode [ 73.167690][ T5822] veth1_macvtap: entered promiscuous mode [ 73.175941][ T3007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.193527][ T5827] veth0_vlan: entered promiscuous mode [ 73.213541][ T3007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.231640][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.249966][ T5827] veth1_vlan: entered promiscuous mode [ 73.259166][ T5823] veth1_vlan: entered promiscuous mode [ 73.277520][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.321702][ T5820] veth0_vlan: entered promiscuous mode [ 73.329958][ T3007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.339529][ T3007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.364012][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.373204][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.381183][ T3007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.394300][ T3007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.434849][ T5820] veth1_vlan: entered promiscuous mode [ 73.435524][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.449863][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.453757][ T5823] veth0_macvtap: entered promiscuous mode [ 73.482397][ T5827] veth0_macvtap: entered promiscuous mode [ 73.490339][ T5823] veth1_macvtap: entered promiscuous mode [ 73.501014][ T30] audit: type=1400 audit(1759627360.257:87): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.gDEcS1/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.533579][ T30] audit: type=1400 audit(1759627360.257:88): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.559085][ T30] audit: type=1400 audit(1759627360.257:89): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.gDEcS1/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.588492][ T30] audit: type=1400 audit(1759627360.277:90): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.612364][ T30] audit: type=1400 audit(1759627360.277:91): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.gDEcS1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.616036][ T5827] veth1_macvtap: entered promiscuous mode [ 73.650212][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.667602][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.683302][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.691073][ T30] audit: type=1400 audit(1759627360.287:92): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/root/syzkaller.gDEcS1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7521 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.706539][ T5820] veth0_macvtap: entered promiscuous mode [ 73.721856][ T30] audit: type=1400 audit(1759627360.287:93): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.731389][ T5820] veth1_macvtap: entered promiscuous mode [ 73.751878][ T30] audit: type=1400 audit(1759627360.307:94): avc: denied { mounton } for pid=5821 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.756147][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.783434][ T30] audit: type=1400 audit(1759627360.307:95): avc: denied { mount } for pid=5821 comm="syz-executor" name="/" dev="gadgetfs" ino=7559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.833485][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.850888][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.854161][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.870808][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.884036][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.895738][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.924529][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.937325][ T3007] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.963812][ T3007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.973065][ T3007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.002239][ T3007] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.013604][ T3007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.133528][ T3007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.142378][ T3007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.272991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.286854][ T3007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.313886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.322462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.412680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.621072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.715528][ T3007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.725851][ T3007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.737880][ T5951] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 74.758610][ T3007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.795572][ T3007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.833561][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.841567][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.849572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.857958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.907395][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.915523][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.943243][ T5825] Bluetooth: hci0: command tx timeout [ 74.991434][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.025224][ T5825] Bluetooth: hci4: command tx timeout [ 75.044550][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.092905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.103139][ T5825] Bluetooth: hci3: command tx timeout [ 75.103833][ T5837] Bluetooth: hci1: command tx timeout [ 75.103843][ T5147] Bluetooth: hci2: command tx timeout [ 75.180511][ T5958] netlink: 'syz.4.6': attribute type 21 has an invalid length. [ 75.188445][ T5958] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6'. [ 75.337976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.425081][ T5958] netlink: 'syz.4.6': attribute type 5 has an invalid length. [ 75.432957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.435209][ T5943] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 75.450058][ T5958] netlink: 'syz.4.6': attribute type 6 has an invalid length. [ 75.462686][ T5958] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6'. [ 75.545935][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.560163][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.592069][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.638492][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.677781][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.707048][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.933991][ T5882] IPVS: starting estimator thread 0... [ 76.425148][ T5967] IPVS: using max 45 ests per chain, 108000 per kthread [ 76.840157][ T5977] tmpfs: Bad value for 'mpol' [ 77.042713][ T5825] Bluetooth: hci0: command 0x0419 tx timeout [ 77.090423][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 77.090439][ T30] audit: type=1400 audit(1759627363.837:128): avc: denied { bind } for pid=5969 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.116088][ T5825] Bluetooth: hci4: command tx timeout [ 77.152093][ T30] audit: type=1400 audit(1759627363.887:130): avc: denied { name_bind } for pid=5969 comm="syz.1.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 77.174409][ T30] audit: type=1400 audit(1759627363.887:131): avc: denied { node_bind } for pid=5969 comm="syz.1.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 77.178013][ T5980] Bluetooth: MGMT ver 1.23 [ 77.235060][ T5825] Bluetooth: hci3: command tx timeout [ 77.235609][ T5837] Bluetooth: hci1: command tx timeout [ 77.240993][ T5825] Bluetooth: hci2: command tx timeout [ 77.260034][ T30] audit: type=1400 audit(1759627363.887:129): avc: denied { create } for pid=5971 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.281956][ T30] audit: type=1400 audit(1759627363.927:132): avc: denied { accept } for pid=5971 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.660066][ T5978] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 77.872733][ T30] audit: type=1400 audit(1759627363.927:133): avc: denied { setopt } for pid=5971 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.975714][ T30] audit: type=1400 audit(1759627363.927:134): avc: denied { bind } for pid=5971 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.001854][ T5978] batman_adv: batadv0: Adding interface: team0 [ 78.008108][ T5978] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.033404][ T5978] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 78.098155][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.173325][ T30] audit: type=1400 audit(1759627363.927:135): avc: denied { write } for pid=5971 comm="syz.2.8" path="socket:[8568]" dev="sockfs" ino=8568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.212076][ T30] audit: type=1400 audit(1759627364.117:136): avc: denied { getopt } for pid=5969 comm="syz.1.2" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.242710][ T30] audit: type=1400 audit(1759627364.117:137): avc: denied { connect } for pid=5969 comm="syz.1.2" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.023807][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 79.083691][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 79.097221][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 79.110945][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11'. [ 79.124509][ T5837] Bluetooth: hci0: command 0x0419 tx timeout [ 79.271871][ T5997] netlink: 'syz.4.11': attribute type 3 has an invalid length. [ 81.054445][ T6008] syz.4.13 uses obsolete (PF_INET,SOCK_PACKET) [ 81.383202][ T5947] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 81.536802][ T9] cfg80211: failed to load regulatory.db [ 81.794070][ T5947] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 82.033797][ T6024] mmap: syz.1.17 (6024) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.062883][ T5947] usb 5-1: config 0 has no interface number 0 [ 82.187863][ T5947] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 82.264648][ T5947] usb 5-1: New USB device found, idVendor=0421, idProduct=0492, bcdDevice=49.fc [ 82.296399][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.319978][ T5947] usb 5-1: Product: syz [ 82.333312][ T5947] usb 5-1: Manufacturer: syz [ 82.342855][ T5947] usb 5-1: SerialNumber: syz [ 82.385610][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 82.385626][ T30] audit: type=1400 audit(1759627369.137:170): avc: denied { ioctl } for pid=6010 comm="syz.3.15" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9225 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.417331][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.532196][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 82.551906][ T5947] usb 5-1: config 0 descriptor?? [ 82.592416][ T6008] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 82.604357][ T5947] usb-storage 5-1:0.132: USB Mass Storage device detected [ 82.690039][ T5947] usb-storage 5-1:0.132: Quirks match for vid 0421 pid 0492: 400 [ 83.029819][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 84.068813][ T30] audit: type=1326 audit(1759627370.807:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7ffc0000 [ 84.264821][ T6053] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 84.282843][ T30] audit: type=1326 audit(1759627370.807:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6603d8eec9 code=0x7ffc0000 [ 84.315353][ T30] audit: type=1326 audit(1759627370.807:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7ffc0000 [ 84.341886][ T5947] usb 5-1: USB disconnect, device number 2 [ 84.511289][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 84.531572][ T6054] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.574784][ T30] audit: type=1326 audit(1759627370.807:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7ffc0000 [ 84.611942][ T30] audit: type=1326 audit(1759627370.807:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6603d8eec9 code=0x7ffc0000 [ 84.782591][ T30] audit: type=1326 audit(1759627370.807:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7ffc0000 [ 84.890301][ T30] audit: type=1326 audit(1759627370.807:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6603d8eec9 code=0x7ffc0000 [ 84.968433][ T30] audit: type=1326 audit(1759627370.807:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7ffc0000 [ 85.019843][ T30] audit: type=1326 audit(1759627370.807:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6042 comm="syz.2.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6603d8eec9 code=0x7ffc0000 [ 85.243096][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 85.970071][ T6061] infiniband syz2: set active [ 85.977358][ T6061] infiniband syz2: added bond0 [ 86.007464][ T6061] RDS/IB: syz2: added [ 86.312675][ T5147] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 86.319068][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 87.951489][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 87.951505][ T30] audit: type=1326 audit(1759627374.697:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7fc00000 [ 88.617633][ T30] audit: type=1400 audit(1759627375.297:200): avc: denied { accept } for pid=6081 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 88.784504][ T6089] netlink: 'syz.3.28': attribute type 10 has an invalid length. [ 88.792168][ T6089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.28'. [ 88.812800][ T6089] team0: entered promiscuous mode [ 88.817933][ T6089] team_slave_0: entered promiscuous mode [ 88.832921][ T6089] team_slave_1: entered promiscuous mode [ 88.850784][ T6089] team0: entered allmulticast mode [ 88.863560][ T6089] team_slave_0: entered allmulticast mode [ 88.874204][ T6089] team_slave_1: entered allmulticast mode [ 88.880717][ T6089] bridge0: port 3(team0) entered blocking state [ 89.128794][ T30] audit: type=1326 audit(1759627375.697:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6603d8eec9 code=0x7fc00000 [ 89.169402][ T30] audit: type=1326 audit(1759627375.697:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7fc00000 [ 89.245958][ T6089] bridge0: port 3(team0) entered disabled state [ 89.255159][ T6089] bridge0: port 3(team0) entered blocking state [ 89.261613][ T6089] bridge0: port 3(team0) entered forwarding state [ 89.300051][ T30] audit: type=1326 audit(1759627375.697:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7fc00000 [ 89.572993][ T30] audit: type=1326 audit(1759627375.697:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7fc00000 [ 89.650033][ T30] audit: type=1326 audit(1759627375.697:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7fc00000 [ 89.678048][ T30] audit: type=1326 audit(1759627375.697:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7fc00000 [ 89.701753][ T30] audit: type=1326 audit(1759627375.697:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7fc00000 [ 89.725849][ T30] audit: type=1326 audit(1759627375.697:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6072 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6603d8eec9 code=0x7fc00000 [ 90.440096][ T6103] IPv6: Can't replace route, no match found [ 90.818537][ T6096] SELinux: failed to load policy [ 90.890823][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 91.276735][ T6113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.681373][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 91.690376][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 92.561654][ T6118] netlink: 'syz.1.35': attribute type 21 has an invalid length. [ 92.570230][ T6118] netlink: 128 bytes leftover after parsing attributes in process `syz.1.35'. [ 92.611762][ T6118] netlink: 'syz.1.35': attribute type 5 has an invalid length. [ 92.621361][ T6118] netlink: 'syz.1.35': attribute type 6 has an invalid length. [ 92.630823][ T6118] netlink: 3 bytes leftover after parsing attributes in process `syz.1.35'. [ 93.762103][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 93.762122][ T30] audit: type=1400 audit(1759627379.691:278): avc: denied { read append } for pid=6119 comm="syz.4.38" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 93.859177][ T30] audit: type=1400 audit(1759627379.691:279): avc: denied { open } for pid=6119 comm="syz.4.38" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.503042][ T30] audit: type=1400 audit(1759627379.691:280): avc: denied { ioctl } for pid=6119 comm="syz.4.38" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.527457][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.536579][ T30] audit: type=1400 audit(1759627379.731:281): avc: denied { write } for pid=6119 comm="syz.4.38" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.559129][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.565601][ T30] audit: type=1400 audit(1759627380.621:282): avc: denied { name_bind } for pid=6135 comm="syz.0.40" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 94.595029][ T30] audit: type=1400 audit(1759627380.841:283): avc: denied { name_connect } for pid=6135 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 94.620179][ T30] audit: type=1400 audit(1759627381.331:284): avc: denied { read } for pid=6127 comm="syz.2.39" name="video8" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.642913][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.662050][ T30] audit: type=1400 audit(1759627381.331:285): avc: denied { open } for pid=6127 comm="syz.2.39" path="/dev/video8" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.776664][ T30] audit: type=1400 audit(1759627381.331:286): avc: denied { ioctl } for pid=6127 comm="syz.2.39" path="/dev/video8" dev="devtmpfs" ino=950 ioctlcmd=0x565f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 94.827139][ T6142] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 94.923404][ T6147] Zero length message leads to an empty skb [ 95.723748][ T30] audit: type=1400 audit(1759627381.851:287): avc: denied { mounton } for pid=6143 comm="syz.0.42" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 96.581198][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 96.885794][ T6167] netlink: 36 bytes leftover after parsing attributes in process `syz.4.44'. [ 97.713382][ T6172] evm: overlay not supported [ 98.633843][ T5882] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.819692][ T5882] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 98.831669][ T5882] usb 1-1: config 0 has no interface number 0 [ 98.871187][ T5882] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 98.912644][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.941785][ T5882] usb 1-1: config 0 descriptor?? [ 99.033446][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 99.033459][ T30] audit: type=1400 audit(1759627385.791:292): avc: denied { create } for pid=6181 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.532885][ T30] audit: type=1400 audit(1759627385.821:293): avc: denied { bind } for pid=6181 comm="syz.4.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.552060][ T30] audit: type=1400 audit(1759627385.821:294): avc: denied { ioctl } for pid=6181 comm="syz.4.50" path="socket:[9014]" dev="sockfs" ino=9014 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.166514][ T30] audit: type=1400 audit(1759627385.971:295): avc: denied { ioctl } for pid=6181 comm="syz.4.50" path="socket:[9016]" dev="sockfs" ino=9016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.380699][ T30] audit: type=1400 audit(1759627386.991:296): avc: denied { getopt } for pid=6183 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.843406][ T6203] Invalid ELF header magic: != ELF [ 100.857383][ T30] audit: type=1400 audit(1759627387.591:297): avc: denied { module_load } for pid=6199 comm="syz.4.51" path="/10/bus" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 100.882020][ T30] audit: type=1400 audit(1759627387.601:298): avc: denied { execute } for pid=6199 comm="syz.4.51" path="/10/bus" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.904916][ T30] audit: type=1400 audit(1759627387.611:299): avc: denied { shutdown } for pid=6199 comm="syz.4.51" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.414358][ T6193] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 101.658304][ T5882] usb 1-1: string descriptor 0 read error: -71 [ 101.665989][ T5882] usb-storage 1-1:0.168: USB Mass Storage device detected [ 101.716063][ T5882] usb-storage 1-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 102.074614][ T30] audit: type=1400 audit(1759627388.791:300): avc: denied { create } for pid=6212 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.271222][ T6223] ======================================================= [ 102.271222][ T6223] WARNING: The mand mount option has been deprecated and [ 102.271222][ T6223] and is ignored by this kernel. Remove the mand [ 102.271222][ T6223] option from the mount to silence this warning. [ 102.271222][ T6223] ======================================================= [ 102.307508][ T6223] new mount options do not match the existing superblock, will be ignored [ 102.355535][ T6223] option changes via remount are deprecated (pid=6212 comm=syz.2.53) [ 102.482593][ T30] audit: type=1400 audit(1759627388.791:301): avc: denied { setopt } for pid=6212 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.530922][ T5882] usb 1-1: USB disconnect, device number 2 [ 103.585417][ T6226] netlink: 68 bytes leftover after parsing attributes in process `syz.3.55'. [ 103.697358][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 104.150617][ T6242] process 'syz.2.57' launched './file1' with NULL argv: empty string added [ 104.159441][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 104.159451][ T30] audit: type=1400 audit(1759627390.901:307): avc: denied { execute } for pid=6239 comm="syz.2.57" name="file1" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.230417][ T30] audit: type=1400 audit(1759627390.951:308): avc: denied { execute_no_trans } for pid=6239 comm="syz.2.57" path="/11/file1" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 105.502730][ T30] audit: type=1400 audit(1759627391.291:309): avc: denied { bind } for pid=6243 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.572555][ T30] audit: type=1400 audit(1759627391.341:310): avc: denied { write } for pid=6243 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.814007][ T30] audit: type=1400 audit(1759627392.431:311): avc: denied { block_suspend } for pid=6249 comm="syz.4.60" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.914218][ T30] audit: type=1400 audit(1759627392.641:312): avc: denied { setopt } for pid=6249 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.172598][ T30] audit: type=1400 audit(1759627392.661:313): avc: denied { create } for pid=6249 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 107.108802][ T30] audit: type=1400 audit(1759627393.841:314): avc: denied { create } for pid=6259 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.934072][ T6275] Bluetooth: hci5: Frame reassembly failed (-84) [ 108.095211][ T3007] Bluetooth: hci5: Frame reassembly failed (-84) [ 108.125132][ T30] audit: type=1400 audit(1759627394.861:315): avc: denied { setopt } for pid=6272 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.802568][ T30] audit: type=1400 audit(1759627395.441:316): avc: denied { getopt } for pid=6277 comm="syz.0.64" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.230718][ T30] audit: type=1400 audit(1759627395.981:317): avc: denied { mounton } for pid=6281 comm="syz.2.65" path="/13/file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.370280][ T6289] netlink: 'syz.1.66': attribute type 5 has an invalid length. [ 109.425898][ T6289] ip6erspan0: entered promiscuous mode [ 110.162560][ T5147] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 110.487556][ T30] audit: type=1400 audit(1759627397.241:318): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.020289][ T30] audit: type=1400 audit(1759627398.761:319): avc: denied { write } for pid=6304 comm="syz.0.70" name="video2" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 112.904084][ T30] audit: type=1400 audit(1759627399.131:320): avc: denied { ioctl } for pid=6310 comm="syz.2.71" path="socket:[9968]" dev="sockfs" ino=9968 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.930738][ T30] audit: type=1400 audit(1759627399.301:321): avc: denied { read write } for pid=6310 comm="syz.2.71" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.162150][ T30] audit: type=1400 audit(1759627399.301:322): avc: denied { open } for pid=6310 comm="syz.2.71" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.887943][ T6324] netlink: 68 bytes leftover after parsing attributes in process `syz.2.73'. [ 114.521699][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 115.310053][ T30] audit: type=1400 audit(1759627401.601:323): avc: denied { ioctl } for pid=6332 comm="syz.4.77" path="socket:[9991]" dev="sockfs" ino=9991 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.399295][ T30] audit: type=1400 audit(1759627401.601:324): avc: denied { setopt } for pid=6332 comm="syz.4.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.478136][ T30] audit: type=1400 audit(1759627402.091:325): avc: denied { write } for pid=6327 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.502577][ T30] audit: type=1400 audit(1759627402.101:326): avc: denied { setopt } for pid=6327 comm="syz.1.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 115.607635][ T6334] can: request_module (can-proto-0) failed. [ 116.159150][ T6359] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 118.163855][ T30] audit: type=1400 audit(1759627404.761:327): avc: denied { read } for pid=6372 comm="syz.1.84" name="sg0" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.374111][ T6337] syz.3.74 (6337): drop_caches: 2 [ 118.427076][ T30] audit: type=1400 audit(1759627404.761:328): avc: denied { open } for pid=6372 comm="syz.1.84" path="/dev/sg0" dev="devtmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 118.461785][ T5947] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 118.701511][ T30] audit: type=1400 audit(1759627404.761:329): avc: denied { ioctl } for pid=6372 comm="syz.1.84" path="/dev/sg0" dev="devtmpfs" ino=757 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 119.041991][ T5947] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 119.052807][ T5947] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.095722][ T5947] usb 2-1: config 0 has no interface number 0 [ 119.102362][ T5947] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 119.239249][ T30] audit: type=1400 audit(1759627405.931:330): avc: denied { mount } for pid=6387 comm="syz.3.86" name="/" dev="ramfs" ino=10057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 119.262030][ T5947] usb 2-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.344014][ T6396] Lens A: ================= START STATUS ================= [ 119.351433][ T6396] Lens A: Focus, Absolute: 0 [ 119.357001][ T6396] Lens A: ================== END STATUS ================== [ 119.552887][ T30] audit: type=1800 audit(1759627406.131:331): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.86" name="bus" dev="ramfs" ino=10379 res=0 errno=0 [ 119.576397][ T30] audit: type=1400 audit(1759627406.241:332): avc: denied { mount } for pid=6391 comm="syz.2.87" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 119.598608][ T5947] usb 2-1: config 0 interface 11 has no altsetting 0 [ 119.606191][ T5947] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 119.615466][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.647209][ T5947] usb 2-1: config 0 descriptor?? [ 119.802391][ T5947] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 119.816921][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 7 [ 119.882890][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 120.082845][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 120.293693][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 120.302644][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 120.310393][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 120.412753][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 120.492794][ T5947] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 120.529352][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 120.549388][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 120.597932][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 120.912779][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 120.921687][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 120.930861][ T5947] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 120.941013][ T5947] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 121.204145][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 121.204162][ T30] audit: type=1400 audit(1759627407.941:334): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 121.744897][ T5947] usb 2-1: USB disconnect, device number 2 [ 121.781802][ T5947] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 121.796216][ T5947] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 121.825840][ T5947] keyspan 2-1:0.11: device disconnected [ 122.642602][ T30] audit: type=1400 audit(1759627409.381:335): avc: denied { append } for pid=6410 comm="syz.2.90" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.368658][ T6422] syz.4.93 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.587196][ T30] audit: type=1400 audit(1759627410.091:336): avc: denied { execute } for pid=6419 comm="syz.4.93" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 123.610820][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.622310][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 123.628540][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 124.808183][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 124.814246][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 124.834497][ T6424] ceph: No mds server is up or the cluster is laggy [ 125.286967][ T30] audit: type=1400 audit(1759627412.031:337): avc: denied { create } for pid=6440 comm="syz.0.95" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 125.312631][ T55] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.490230][ T6446] new mount options do not match the existing superblock, will be ignored [ 125.502726][ T6446] option changes via remount are deprecated (pid=6438 comm=syz.3.96) [ 125.952193][ T6442] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 125.994199][ T6442] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 126.003704][ T6442] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 126.011571][ T6442] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 126.438660][ T55] usb 2-1: device descriptor read/all, error -71 [ 126.564871][ T24] IPVS: starting estimator thread 0... [ 126.665487][ T6457] IPVS: using max 36 ests per chain, 86400 per kthread [ 126.764687][ T6448] bridge0: entered promiscuous mode [ 126.771673][ T6448] macsec1: entered promiscuous mode [ 126.806627][ T6448] bridge0: port 3(macsec1) entered blocking state [ 127.347343][ T6448] bridge0: port 3(macsec1) entered disabled state [ 127.355870][ T6448] macsec1: entered allmulticast mode [ 127.361782][ T6448] bridge0: entered allmulticast mode [ 127.382648][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.401808][ T6448] macsec1: left allmulticast mode [ 127.408097][ T6448] bridge0: left allmulticast mode [ 127.446027][ T6448] bridge0: left promiscuous mode [ 127.555345][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 127.740484][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.932806][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.694686][ T6467] netlink: 'syz.2.100': attribute type 32 has an invalid length. [ 128.977839][ T30] audit: type=1400 audit(1759627415.451:338): avc: denied { nlmsg_write } for pid=6464 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.731348][ T6478] random: crng reseeded on system resumption [ 129.746958][ T30] audit: type=1400 audit(1759627416.481:339): avc: denied { append } for pid=6462 comm="syz.4.99" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.770970][ T30] audit: type=1400 audit(1759627416.481:340): avc: denied { open } for pid=6462 comm="syz.4.99" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.838286][ T6483] warning: `syz.4.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 129.852091][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.417707][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.428415][ T24] usb 1-1: config 0 descriptor?? [ 130.738097][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 131.360762][ T30] audit: type=1400 audit(1759627417.431:341): avc: denied { create } for pid=6487 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 131.416672][ T30] audit: type=1326 audit(1759627417.561:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6485 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10dd8eec9 code=0x7ffc0000 [ 131.448142][ T30] audit: type=1326 audit(1759627417.571:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6485 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10dd8eec9 code=0x7ffc0000 [ 131.499501][ T24] usb 1-1: can't set config #0, error -71 [ 131.521044][ T6492] vlan2: entered allmulticast mode [ 131.600122][ T30] audit: type=1326 audit(1759627417.571:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6485 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7fe10dd8eec9 code=0x7ffc0000 [ 131.653303][ T24] usb 1-1: USB disconnect, device number 3 [ 131.783543][ T5889] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.889824][ T30] audit: type=1326 audit(1759627418.241:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6485 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10dd8eec9 code=0x7ffc0000 [ 132.100233][ T5889] usb 3-1: config 27 has an invalid descriptor of length 48, skipping remainder of the config [ 132.130277][ T5889] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 48, changing to 9 [ 132.143299][ T5889] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.156873][ T5889] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.171101][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.208985][ T5889] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.219691][ T5889] usb 3-1: invalid MIDI out EP 0 [ 132.226978][ T30] audit: type=1326 audit(1759627418.241:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6485 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10dd8eec9 code=0x7ffc0000 [ 132.534852][ T6491] delete_channel: no stack [ 132.602747][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.609037][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.636833][ T30] audit: type=1400 audit(1759627418.381:347): avc: denied { unlink } for pid=5827 comm="syz-executor" name="file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 133.538095][ T5889] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 133.553710][ T5889] usb 3-1: USB disconnect, device number 2 [ 133.645069][ T6517] Bluetooth: hci5: Frame reassembly failed (-84) [ 133.675508][ T3000] Bluetooth: hci5: Frame reassembly failed (-84) [ 134.451346][ T5947] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.714428][ T6538] netlink: 'syz.3.114': attribute type 7 has an invalid length. [ 134.782646][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 134.782664][ T30] audit: type=1400 audit(1759627421.521:354): avc: denied { watch watch_reads } for pid=6530 comm="syz.3.114" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 134.822528][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 134.976782][ T5909] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 135.247477][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.258585][ T5947] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.410877][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 135.420047][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.440720][ T5909] usb 3-1: Using ep0 maxpacket: 8 [ 135.452516][ T5947] usb 5-1: Product: syz [ 135.456694][ T5947] usb 5-1: Manufacturer: syz [ 135.466412][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 135.485820][ T5947] usb 5-1: SerialNumber: syz [ 135.504512][ T5909] usb 3-1: config 152 has an invalid interface number: 136 but max is 0 [ 135.513747][ T5947] usb 5-1: config 0 descriptor?? [ 135.527942][ T5909] usb 3-1: config 152 has an invalid interface association descriptor of length 2, skipping [ 135.601223][ T5947] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 135.608385][ T5947] gspca_stv06xx: st6422 sensor detected [ 135.613983][ T5909] usb 3-1: config 152 has no interface number 0 [ 135.657397][ T5909] usb 3-1: config 152 interface 136 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 135.662642][ T5147] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 135.674973][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 135.944878][ T5909] usb 3-1: config 152 interface 136 has no altsetting 0 [ 136.014562][ T5909] usb 3-1: New USB device found, idVendor=067b, idProduct=0000, bcdDevice=44.42 [ 136.024037][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.032347][ T5909] usb 3-1: Product: syz [ 136.037738][ T5909] usb 3-1: Manufacturer: syz [ 136.053852][ T5909] usb 3-1: SerialNumber: syz [ 137.115932][ T30] audit: type=1400 audit(1759627423.871:355): avc: denied { read } for pid=6551 comm="syz.1.117" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 137.170379][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.432763][ T5947] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71 [ 138.538229][ T5947] usb 5-1: USB disconnect, device number 3 [ 138.742589][ T30] audit: type=1326 audit(1759627425.481:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 138.782620][ T30] audit: type=1326 audit(1759627425.481:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 138.805830][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.875126][ T30] audit: type=1326 audit(1759627425.481:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 138.899467][ T30] audit: type=1326 audit(1759627425.481:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 138.922665][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.003310][ T30] audit: type=1326 audit(1759627425.481:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 139.161042][ T30] audit: type=1326 audit(1759627425.481:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 139.184287][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.654294][ T30] audit: type=1326 audit(1759627425.481:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 139.782686][ T30] audit: type=1326 audit(1759627425.481:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 139.805894][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.826546][ T30] audit: type=1326 audit(1759627425.481:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 139.891634][ T5909] plusb 3-1:152.136: probe with driver plusb failed with error -22 [ 140.370001][ T5909] usb 3-1: USB disconnect, device number 3 [ 140.375936][ T30] audit: type=1326 audit(1759627425.481:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 140.440593][ T30] audit: type=1326 audit(1759627425.481:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 140.596144][ T30] audit: type=1326 audit(1759627425.481:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 140.957918][ T30] audit: type=1326 audit(1759627425.481:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 140.982284][ T30] audit: type=1326 audit(1759627425.481:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 141.005482][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.067825][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 141.078077][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 141.121623][ T30] audit: type=1326 audit(1759627425.481:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 141.148400][ T30] audit: type=1400 audit(1759627426.151:371): avc: denied { create } for pid=6564 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 141.167715][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.742961][ T30] audit: type=1400 audit(1759627426.161:372): avc: denied { read } for pid=6564 comm="syz.1.120" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.800502][ T30] audit: type=1400 audit(1759627426.171:373): avc: denied { open } for pid=6564 comm="syz.1.120" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 141.862603][ T5889] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.052637][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 142.077262][ T5889] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 142.086810][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.163890][ T5889] usb 4-1: config 0 descriptor?? [ 142.200071][ T5889] gspca_main: sunplus-2.14.0 probing 041e:400b [ 142.908709][ T6608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.919342][ T5889] gspca_sunplus: reg_w_riv err -110 [ 142.942643][ T5889] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 142.974621][ T6608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.942677][ T5909] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 144.263555][ T5909] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 144.361785][ T6611] IPVS: You probably need to specify IP address on multicast interface. [ 144.370357][ T6611] IPVS: Error connecting to the multicast addr [ 144.468523][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.613996][ T5909] usb 3-1: config 0 has no interface number 0 [ 144.642561][ T5909] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 144.698407][ T5909] usb 3-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.743592][ T5909] usb 3-1: config 0 interface 11 has no altsetting 0 [ 144.818023][ T5909] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 144.889020][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.125115][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 145.125131][ T30] audit: type=1800 audit(1759627431.881:377): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.132" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 145.262812][ T5909] usb 3-1: config 0 descriptor?? [ 145.284766][ T5909] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 145.294952][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 7 [ 146.034786][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 146.077544][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 146.097637][ T5953] usb 4-1: USB disconnect, device number 2 [ 146.182692][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 146.190413][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 146.199308][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 146.207501][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 147.155521][ T5909] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 147.265421][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 147.273318][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 147.281121][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 147.289365][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 147.297315][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 147.712363][ T5909] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 147.720164][ T30] audit: type=1400 audit(1759627434.291:378): avc: denied { watch watch_reads } for pid=6632 comm="syz.3.134" path="/26" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 147.750413][ T5909] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 147.763014][ T5909] usb 3-1: USB disconnect, device number 4 [ 147.925185][ T5909] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 147.949057][ T5909] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 147.980750][ T5909] keyspan 3-1:0.11: device disconnected [ 148.206648][ T30] audit: type=1326 audit(1759627434.801:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6647 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc6c38eec9 code=0x7ffc0000 [ 148.354966][ T6652] ================================================================== [ 148.363049][ T6652] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 148.370255][ T6652] Read of size 8 at addr ffff8880629f7d88 by task syz.1.137/6652 [ 148.377963][ T6652] [ 148.380307][ T6652] CPU: 1 UID: 0 PID: 6652 Comm: syz.1.137 Not tainted syzkaller #0 PREEMPT(full) [ 148.380331][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.380342][ T6652] Call Trace: [ 148.380350][ T6652] [ 148.380359][ T6652] dump_stack_lvl+0x116/0x1f0 [ 148.380386][ T6652] print_report+0xcd/0x630 [ 148.380411][ T6652] ? __virt_addr_valid+0x81/0x610 [ 148.380440][ T6652] ? __phys_addr+0xe8/0x180 [ 148.380470][ T6652] ? __cpa_addr+0x1d3/0x220 [ 148.380490][ T6652] kasan_report+0xe0/0x110 [ 148.380514][ T6652] ? __cpa_addr+0x1d3/0x220 [ 148.380537][ T6652] __cpa_addr+0x1d3/0x220 [ 148.380557][ T6652] cpa_flush+0x28b/0x8a0 [ 148.380580][ T6652] ? __pfx_cpa_flush+0x10/0x10 [ 148.380603][ T6652] ? pgprot2cachemode+0x9a/0x130 [ 148.380630][ T6652] ? __pfx_pgprot2cachemode+0x10/0x10 [ 148.380657][ T6652] ? drm_gem_get_pages+0x6a0/0xa10 [ 148.380682][ T6652] change_page_attr_set_clr+0x34e/0x4a0 [ 148.380713][ T6652] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 148.380746][ T6652] _set_pages_array+0x1ab/0x2c0 [ 148.380770][ T6652] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 148.380791][ T6652] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 148.380811][ T6652] ? __pfx___might_resched+0x10/0x10 [ 148.380842][ T6652] drm_gem_shmem_mmap+0xc9/0x550 [ 148.380860][ T6652] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 148.380880][ T6652] drm_gem_mmap_obj+0x1b5/0x560 [ 148.380903][ T6652] drm_gem_mmap+0x40b/0x620 [ 148.380927][ T6652] ? __pfx_drm_gem_mmap+0x10/0x10 [ 148.380948][ T6652] ? vm_area_alloc+0x1f/0x160 [ 148.380976][ T6652] ? lockdep_init_map_type+0x5c/0x280 [ 148.380999][ T6652] __mmap_region+0x1306/0x27a0 [ 148.381018][ T6652] ? __pfx___mmap_region+0x10/0x10 [ 148.381035][ T6652] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 148.381062][ T6652] ? audit_log_end+0x1f/0x30 [ 148.381082][ T6652] ? audit_log_end+0x1f/0x30 [ 148.381100][ T6652] ? common_lsm_audit+0x260/0x300 [ 148.381147][ T6652] ? __lock_acquire+0xb97/0x1ce0 [ 148.381170][ T6652] mmap_region+0x32b/0x3f0 [ 148.381189][ T6652] do_mmap+0xa3e/0x1210 [ 148.381213][ T6652] ? __pfx_do_mmap+0x10/0x10 [ 148.381235][ T6652] ? __pfx_down_write_killable+0x10/0x10 [ 148.381264][ T6652] vm_mmap_pgoff+0x29e/0x470 [ 148.381288][ T6652] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 148.381312][ T6652] ? __fget_files+0x20e/0x3c0 [ 148.381335][ T6652] ksys_mmap_pgoff+0x32c/0x5c0 [ 148.381359][ T6652] __x64_sys_mmap+0x125/0x190 [ 148.381380][ T6652] do_syscall_64+0xcd/0x4e0 [ 148.381404][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.381424][ T6652] RIP: 0033:0x7fe10dd8eec9 [ 148.381440][ T6652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.381457][ T6652] RSP: 002b:00007fe10ebb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 148.381475][ T6652] RAX: ffffffffffffffda RBX: 00007fe10dfe6270 RCX: 00007fe10dd8eec9 [ 148.381487][ T6652] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 148.381498][ T6652] RBP: 00007fe10de11f91 R08: 0000000000000005 R09: 0000000100000000 [ 148.381510][ T6652] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 148.381521][ T6652] R13: 00007fe10dfe6308 R14: 00007fe10dfe6270 R15: 00007fffd50d8658 [ 148.381540][ T6652] [ 148.381547][ T6652] [ 148.701736][ T6652] Allocated by task 6652: [ 148.706045][ T6652] kasan_save_stack+0x33/0x60 [ 148.710712][ T6652] kasan_save_track+0x14/0x30 [ 148.715368][ T6652] __kasan_kmalloc+0xaa/0xb0 [ 148.719939][ T6652] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 148.725295][ T6652] drm_gem_get_pages+0x144/0xa10 [ 148.730213][ T6652] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 148.736257][ T6652] drm_gem_shmem_mmap+0xc9/0x550 [ 148.741170][ T6652] drm_gem_mmap_obj+0x1b5/0x560 [ 148.745998][ T6652] drm_gem_mmap+0x40b/0x620 [ 148.750499][ T6652] __mmap_region+0x1306/0x27a0 [ 148.755237][ T6652] mmap_region+0x32b/0x3f0 [ 148.759634][ T6652] do_mmap+0xa3e/0x1210 [ 148.763773][ T6652] vm_mmap_pgoff+0x29e/0x470 [ 148.768344][ T6652] ksys_mmap_pgoff+0x32c/0x5c0 [ 148.773093][ T6652] __x64_sys_mmap+0x125/0x190 [ 148.777753][ T6652] do_syscall_64+0xcd/0x4e0 [ 148.782237][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.788112][ T6652] [ 148.790415][ T6652] The buggy address belongs to the object at ffff8880629f7d00 [ 148.790415][ T6652] which belongs to the cache kmalloc-192 of size 192 [ 148.804448][ T6652] The buggy address is located 0 bytes to the right of [ 148.804448][ T6652] allocated 136-byte region [ffff8880629f7d00, ffff8880629f7d88) [ 148.818914][ T6652] [ 148.821214][ T6652] The buggy address belongs to the physical page: [ 148.827597][ T6652] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880629f7400 pfn:0x629f7 [ 148.837646][ T6652] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 148.845171][ T6652] page_type: f5(slab) [ 148.849174][ T6652] raw: 00fff00000000000 ffff88801b0263c0 0000000000000000 dead000000000001 [ 148.857736][ T6652] raw: ffff8880629f7400 000000008010000e 00000000f5000000 0000000000000000 [ 148.866293][ T6652] page dumped because: kasan: bad access detected [ 148.872681][ T6652] page_owner tracks the page as allocated [ 148.878370][ T6652] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 6192, tgid 6179 (syz.0.48), ts 99888450362, free_ts 99001452950 [ 148.897537][ T6652] post_alloc_hook+0x1c0/0x230 [ 148.902288][ T6652] get_page_from_freelist+0x10a3/0x3a30 [ 148.907820][ T6652] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 148.913697][ T6652] new_slab+0xa5/0x360 [ 148.917753][ T6652] ___slab_alloc+0xdc4/0x1ae0 [ 148.922412][ T6652] __slab_alloc.constprop.0+0x63/0x110 [ 148.927863][ T6652] __kmalloc_node_noprof+0x4dd/0x8a0 [ 148.933127][ T6652] alloc_slab_obj_exts+0x3a/0xd0 [ 148.938053][ T6652] __memcg_slab_post_alloc_hook+0x251/0x940 [ 148.943925][ T6652] kmem_cache_alloc_lru_noprof+0x556/0x6e0 [ 148.949717][ T6652] __d_alloc+0x32/0xae0 [ 148.953854][ T6652] d_alloc_parallel+0x111/0x1480 [ 148.958788][ T6652] __lookup_slow+0x193/0x460 [ 148.963366][ T6652] lookup_noperm+0xe1/0x110 [ 148.967863][ T6652] simple_start_creating+0xd1/0x1b0 [ 148.973040][ T6652] debugfs_start_creating.part.0+0x82/0x190 [ 148.978912][ T6652] page last free pid 5841 tgid 5841 stack trace: [ 148.985214][ T6652] __free_frozen_pages+0x7df/0x1160 [ 148.990393][ T6652] qlist_free_all+0x4d/0x120 [ 148.994961][ T6652] kasan_quarantine_reduce+0x195/0x1e0 [ 149.000395][ T6652] __kasan_slab_alloc+0x69/0x90 [ 149.005231][ T6652] kmem_cache_alloc_noprof+0x250/0x6e0 [ 149.010673][ T6652] getname_flags.part.0+0x4c/0x550 [ 149.015785][ T6652] getname_flags+0x93/0xf0 [ 149.020177][ T6652] do_readlinkat+0xb4/0x3a0 [ 149.024667][ T6652] __x64_sys_readlink+0x78/0xc0 [ 149.029502][ T6652] do_syscall_64+0xcd/0x4e0 [ 149.033986][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.039857][ T6652] [ 149.042161][ T6652] Memory state around the buggy address: [ 149.047853][ T6652] ffff8880629f7c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 149.055902][ T6652] ffff8880629f7d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 149.063941][ T6652] >ffff8880629f7d80: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.071976][ T6652] ^ [ 149.076279][ T6652] ffff8880629f7e00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 149.084314][ T6652] ffff8880629f7e80: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc [ 149.092353][ T6652] ================================================================== [ 149.101329][ T6652] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.108530][ T6652] CPU: 1 UID: 0 PID: 6652 Comm: syz.1.137 Not tainted syzkaller #0 PREEMPT(full) [ 149.117813][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.127874][ T6652] Call Trace: [ 149.131138][ T6652] [ 149.134051][ T6652] dump_stack_lvl+0x3d/0x1f0 [ 149.138646][ T6652] vpanic+0x640/0x6f0 [ 149.142633][ T6652] panic+0xca/0xd0 [ 149.146343][ T6652] ? __pfx_panic+0x10/0x10 [ 149.150747][ T6652] ? __cpa_addr+0x1d3/0x220 [ 149.155233][ T6652] ? preempt_schedule_common+0x44/0xc0 [ 149.160677][ T6652] ? preempt_schedule_thunk+0x16/0x30 [ 149.166042][ T6652] check_panic_on_warn+0xab/0xb0 [ 149.170966][ T6652] end_report+0x107/0x170 [ 149.175292][ T6652] kasan_report+0xee/0x110 [ 149.179716][ T6652] ? __cpa_addr+0x1d3/0x220 [ 149.184225][ T6652] __cpa_addr+0x1d3/0x220 [ 149.188542][ T6652] cpa_flush+0x28b/0x8a0 [ 149.192770][ T6652] ? __pfx_cpa_flush+0x10/0x10 [ 149.197539][ T6652] ? pgprot2cachemode+0x9a/0x130 [ 149.202465][ T6652] ? __pfx_pgprot2cachemode+0x10/0x10 [ 149.207829][ T6652] ? drm_gem_get_pages+0x6a0/0xa10 [ 149.212929][ T6652] change_page_attr_set_clr+0x34e/0x4a0 [ 149.218465][ T6652] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 149.224521][ T6652] _set_pages_array+0x1ab/0x2c0 [ 149.229357][ T6652] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 149.235427][ T6652] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 149.241997][ T6652] ? __pfx___might_resched+0x10/0x10 [ 149.247292][ T6652] drm_gem_shmem_mmap+0xc9/0x550 [ 149.252217][ T6652] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 149.258353][ T6652] drm_gem_mmap_obj+0x1b5/0x560 [ 149.263195][ T6652] drm_gem_mmap+0x40b/0x620 [ 149.267686][ T6652] ? __pfx_drm_gem_mmap+0x10/0x10 [ 149.272697][ T6652] ? vm_area_alloc+0x1f/0x160 [ 149.277380][ T6652] ? lockdep_init_map_type+0x5c/0x280 [ 149.282736][ T6652] __mmap_region+0x1306/0x27a0 [ 149.287494][ T6652] ? __pfx___mmap_region+0x10/0x10 [ 149.292587][ T6652] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 149.298555][ T6652] ? audit_log_end+0x1f/0x30 [ 149.303127][ T6652] ? audit_log_end+0x1f/0x30 [ 149.307695][ T6652] ? common_lsm_audit+0x260/0x300 [ 149.312728][ T6652] ? __lock_acquire+0xb97/0x1ce0 [ 149.317651][ T6652] mmap_region+0x32b/0x3f0 [ 149.322049][ T6652] do_mmap+0xa3e/0x1210 [ 149.326192][ T6652] ? __pfx_do_mmap+0x10/0x10 [ 149.330767][ T6652] ? __pfx_down_write_killable+0x10/0x10 [ 149.336403][ T6652] vm_mmap_pgoff+0x29e/0x470 [ 149.340993][ T6652] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 149.346089][ T6652] ? __fget_files+0x20e/0x3c0 [ 149.350758][ T6652] ksys_mmap_pgoff+0x32c/0x5c0 [ 149.355505][ T6652] __x64_sys_mmap+0x125/0x190 [ 149.360166][ T6652] do_syscall_64+0xcd/0x4e0 [ 149.364657][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.370535][ T6652] RIP: 0033:0x7fe10dd8eec9 [ 149.374931][ T6652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.394704][ T6652] RSP: 002b:00007fe10ebb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 149.403102][ T6652] RAX: ffffffffffffffda RBX: 00007fe10dfe6270 RCX: 00007fe10dd8eec9 [ 149.411052][ T6652] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 149.419003][ T6652] RBP: 00007fe10de11f91 R08: 0000000000000005 R09: 0000000100000000 [ 149.426962][ T6652] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 149.434933][ T6652] R13: 00007fe10dfe6308 R14: 00007fe10dfe6270 R15: 00007fffd50d8658 [ 149.442904][ T6652] [ 149.446088][ T6652] Kernel Offset: disabled [ 149.450403][ T6652] Rebooting in 86400 seconds..