last executing test programs: 4m49.644920488s ago: executing program 2 (id=16): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@multicast1, @remote}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xfffffffb, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffd8) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb380018000000000000007c000000d600000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000009000000000000800000000009000000000000"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x8001, [{0x6, 0x4, 0x5}]}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r3, 0x0) 4m47.423867949s ago: executing program 2 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, &(0x7f0000000000)='./file0\x00') socket$inet_tcp(0x2, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') open(&(0x7f00000003c0)='./bus\x00', 0x2282, 0x80) lstat(0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x3090040, &(0x7f0000000840)={[{@verity_on}], [{@permit_directio}, {@audit}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@fowner_gt}, {@smackfsdef={'smackfsdef', 0x3d, '$--^&]'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@euid_lt={'euid<', r5}}, {@pcr={'pcr', 0x3d, 0x18}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x65, 0x64, 0x62, 0x61, 0x52, 0x33, 0x66], 0x2d, [0x32, 0x36, 0x63, 0x62], 0x2d, [0x38, 0x63, 0x0, 0x65], 0x2d, [0x30, 0x39, 0x30, 0x35], 0x2d, [0x63, 0x31, 0x31, 0x34, 0x39, 0x34, 0x36, 0x31]}}}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m46.232548099s ago: executing program 2 (id=20): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x1, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)='\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10000000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = getuid() lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000500), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r9, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) fsetxattr$system_posix_acl(r0, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x1}, [{0x2, 0x7, r5}], {0x4, 0x2}, [{0x8, 0x2, r6}, {0x8, 0x1, r7}, {0x8, 0x3, r8}, {0x8, 0x6}], {0x10, 0x2}, {0x20, 0x2}}, 0x4c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0132014010ff"}) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000580)) 4m45.546983855s ago: executing program 2 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000300)={0x28, 0x0, r4, r6, 0x0, 0x80}) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) gettid() r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) close(r7) 4m44.498600188s ago: executing program 2 (id=25): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) truncate(&(0x7f0000000080)='./file0\x00', 0x101000) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getpgid(0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000300000008000000fd7f"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 4m40.407085591s ago: executing program 2 (id=30): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000200)=0x7, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES8=r0], 0xbc}, 0x1, 0x0, 0x0, 0x40044080}, 0x20000000) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4m24.8669848s ago: executing program 32 (id=30): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f0000000200)=0x7, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES8=r0], 0xbc}, 0x1, 0x0, 0x0, 0x40044080}, 0x20000000) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m44.004233229s ago: executing program 0 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$netlink(0x10, 0x3, 0x0) 2m42.007457018s ago: executing program 0 (id=231): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x22000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x761ad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xffffff63) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r6 = io_uring_setup(0x7bcd, &(0x7f00000002c0)={0x0, 0x40000401, 0x10200, 0x80000000, 0x29c}) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r7) close_range(r6, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, 0x0) 2m40.666571792s ago: executing program 0 (id=235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000200)) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r6, &(0x7f0000000000)='1\x00', 0x1) socket$netlink(0x10, 0x3, 0x5) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "000800003f98afbe"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 2m38.30082798s ago: executing program 0 (id=237): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) write$binfmt_aout(r0, 0x0, 0x28) 2m37.884078595s ago: executing program 0 (id=238): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004045}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) 2m33.379136947s ago: executing program 0 (id=250): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sync() ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_vhci(0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x101}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="73ab50b23324238f2b6106b5a365422a4e795546312d75a563a1305452fe240465f0834adc8ff6eeb3e6c1fef95890dfe97826da9f1df1dea68a3455dfc8bed1d378fb98b717fb26c377efaf4c45bb8b728a8674a59255b1", 0x58) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x124, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xdc, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x60, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x124}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x111, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x103, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x0, 0x0, 0x1}, {"6a12c08f53f0bbd065ef4b27ac8ab2af6bad1ffc4f3d2d3c89dcf091875a795cbcdb77a9e9d878252397c0f59ffef66dee6edf897aa4cb6be6dcdb74119db2c8e788493dc5c9fe39a00b3109ef039a43de37cb725b8a74e5679ba8db18f0ddce037dbab42b357b0acc7d4d8bd103420c2d9e7884caaccc05c635c49b20be3a42a6af95767b9d08dd8121e8a828f191bc3f17771a11306c8220a27bed6308f8fcbc6453a1acf5fd8204a456780e8132a51f48cf4706179abdbb8ef17563b37c63f9db8dcb440df8af269e971dd8fbf28f899bc76167973d9d037a51"}}}}}}, 0x0) 2m18.195019979s ago: executing program 33 (id=250): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sync() ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_vhci(0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x101}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd2088a8006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000000c0)="73ab50b23324238f2b6106b5a365422a4e795546312d75a563a1305452fe240465f0834adc8ff6eeb3e6c1fef95890dfe97826da9f1df1dea68a3455dfc8bed1d378fb98b717fb26c377efaf4c45bb8b728a8674a59255b1", 0x58) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x124, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0xdc, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x60, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x124}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x111, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x103, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x0, 0x0, 0x1}, {"6a12c08f53f0bbd065ef4b27ac8ab2af6bad1ffc4f3d2d3c89dcf091875a795cbcdb77a9e9d878252397c0f59ffef66dee6edf897aa4cb6be6dcdb74119db2c8e788493dc5c9fe39a00b3109ef039a43de37cb725b8a74e5679ba8db18f0ddce037dbab42b357b0acc7d4d8bd103420c2d9e7884caaccc05c635c49b20be3a42a6af95767b9d08dd8121e8a828f191bc3f17771a11306c8220a27bed6308f8fcbc6453a1acf5fd8204a456780e8132a51f48cf4706179abdbb8ef17563b37c63f9db8dcb440df8af269e971dd8fbf28f899bc76167973d9d037a51"}}}}}}, 0x0) 2m18.16119747s ago: executing program 3 (id=287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) write$binfmt_aout(r7, 0x0, 0x28) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="09dea4afb76288fa135537845f3188b4cb061c94084050d4", 0x18}], 0x1, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000000240)=""/163, 0xa3}], 0x1}, 0x1}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00'}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c841}, 0x4000000) 2m16.063331637s ago: executing program 3 (id=288): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[], 0x3b13) 2m11.930367479s ago: executing program 3 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_open_dev$sg(0x0, 0x0, 0x40042) syz_io_uring_submit(r3, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) listen(r6, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) accept4$unix(r6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 2m9.565514574s ago: executing program 3 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) preadv2(r6, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r7) sendmsg$IEEE802154_START_REQ(r5, 0x0, 0x20000080) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) fstat(r1, &(0x7f0000000180)) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000a004204ffffffffff0100000000000000000000000000017ad500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000affd562b1ab3b40022a42eec7c3f00000000000000000000000000000000000000000001000000000000000000000000000000000000000000e222afbce4638f912b30124d95b2534553c62a6ac3f7685defa288e65336"], 0x90) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') 2m7.400039549s ago: executing program 3 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r4, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x8000, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) close(r5) 2m5.389857209s ago: executing program 3 (id=304): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x8, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000008, 0x20000000cc830, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000000c0)=@t={0x81, 0x5, 0x25, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="bbe964303506de7b976470"]) ustat(0x1, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="60030ac0b61da6093a132837f17504005b000600650002000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x1}) 1m49.935508714s ago: executing program 34 (id=304): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x8, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000008, 0x20000000cc830, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000000c0)=@t={0x81, 0x5, 0x25, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="bbe964303506de7b976470"]) ustat(0x1, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="60030ac0b61da6093a132837f17504005b000600650002000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000600)={0x0, 0x1}) 31.218961915s ago: executing program 5 (id=462): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) write$binfmt_aout(r7, 0x0, 0x28) bind$alg(r3, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="09dea4afb76288fa135537845f3188b4cb061c94084050d4", 0x18}], 0x1, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000000240)=""/163, 0xa3}], 0x1}, 0x1}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001d40)={0x44, 0xb, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x6b}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00'}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c841}, 0x4000000) 28.520883811s ago: executing program 5 (id=467): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @remote, 0x7}, 0x1c) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x8000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000480), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000900)="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", 0x146, r4) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) 23.293980809s ago: executing program 5 (id=476): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) openat$rfkill(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r4}, 0x18) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) sendfile(r3, 0xffffffffffffffff, &(0x7f00000000c0)=0x8e, 0x180000504) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008044}, 0x40000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x10}]}]}, 0x28}}, 0x0) 21.090760497s ago: executing program 1 (id=480): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 19.503712513s ago: executing program 1 (id=481): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000bc0)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x3, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x68, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x40, 0x141a, 0x0, 0x15f1, {[@mptcp=@ack={0x1e, 0x9, 0x9, 0x4, "51e79f48fd"}]}}, {"b898f48a5203aec1c20360cd2ef7d58da55b659aa6992f305f3fb5d188f517abf96e559cce7d2282a54862bc80a51035e81c9f2d030a6cd6e7c83ed735fe91a467f79be2c7d85f7529eff6f03e92199b12eae0ad8d098f78165de6ccd711c6be47076c700a8a74e5b91a9355bb250b70cc5af2c4219f1cf2fa23910722a02956f3612fc9f024e77b9d745b22dacc05c41e125d6487e6ffd4ca8db7a1f2befb5708d551a43ad989dc418b24f8fefc9febd72b8504db532be5759ec8a0e4e48662c5f29dd566101c64946a9c9b8e12fd22f56093a80f345a106dc2b95ccb043f0131602e6ef13caddcc9fcfa2e40ab3b603ff5881f4fba3c8bbfffd05510a5952a6335b6e02fe85927bd050bfc265b2afd2735345a9380f5af87e6a3d2479fc06afc9252d7d28710570837daa46d2b942be5433f46ca6cc0efe65e5b874fede589d6026c20e28749a857eb0b9bd9157a247cde360572592da40909d903ef6c4c10cc06f59b45d0e0991bc820bfef700ca4e2b6aad5c32d2a8a807e9333e0eddec1c0ed393deb690e1b827db9f5da75dbc32874e5fcc5c76c05c0ec2fb1e8d5918cd09023865e9008cca311ed9672237bcf925fa09ae410683726998bf0ef51937e764e55a09e009429c8eeae288eda500541b7a33d29d492493084ba2c0a89dc61126d3fae08440bb57473adfdeadb98bdada889ebc36ae25649e5b7187e0d2dd011b39e037f3cad6e0e2161ab344173e125545945b1debe71f24213f581df639d486bf77ccc6da56997708b76eb6cbde470ad004fbfb84e8d1495a2d7bb544f282dad56316b50472015c74847e3209ef4a6edbff327ec99dd0288214d9329f433bc71698808201bf0a769d608fac5faf16c32a09c34750040d9d19aa8b4071c051338527952e5afcfd2e33a14d9f123c6dd5f1a3c47583ff6e3c154eff46c1942bbc357add5253d96f5b6dc6e440271a377b03db190ed081e2989dec4a839e1c2d7fecfaa2459f62151b9ef4716fbc15fd86812763fbaf38e4d5af6d0c8b830436770819361104f30bd8ba795f9104dfb7370d1c6940819d6432b159fbbe633a093ff4dc3c44c4623e16eddb6151ef904fc96b87957ab22230dd6c2458fbaa438d3c222c055ce4253db8fdda2077f0159fddc1306b0277d122c51cc577b2b6dee459f1bf28c6d94178a0fc3e382f6b58e1db6cda5eca7dc0720e61d59ec794a02295ccdeedc811457e30e8548a8be271c69f0cbfd08fdcfa281ec3b1ea7bb2ff784be0a732344cc0978b37507d448330149537f1de512d4952e2d6a8901be7bf9c8497ffdc3910096e2ef5c2d056f909621f1c8c90702c9ff9fcfb9ccda91123da96c4c8381718624e74948ce35b4ddc47982d392d84fe377a0e4edcf34f4bc814d12a5fee04ed6750b074fd046a47c59b84c6d465bce16101ced3d8f6b8a9d1d8b96f730569dd4bce831c188c236b5c600349932d42d846dbd6d5ecd07a89c6f535237567aebd4eb12bbfe5120e0c0e5f077005394e71772d796bbe82be4e014c63c8a1c4bbbddf186d94eb73313e91a97ce8ade5c6ec3defd412842f1afc7c642bbb94ce29a16ea298291519a5f5a6f5782a17fcd9af20699f70307270c5b6f88606c986aae6766130d63278b64a09fa4850ec92b72d2e19f1b8a305c237061af9f85ea6d2d33ea5c77754eaaa0b221e7883da6e95d6f031f033df057faa24c078a7ad1e922f371b076d7b492d5837f6f4a0980f882b160f581f2fdd551baf1fdccfb2677871eb55bdaf8c6c158bb9ae0684fec562045ba365ff7443c60e7381d0ffa426b98640bc6f95b8191dc2e14cec948871d5fbbfe46c6f669c1a4f98dc4cfdebe8bca4fd627acb475c9c80862d766c976116e7a2245088cc70a51242756710a6164e417d4fe7f2bb4f878df548598021f246492211d9c780a9d66b47c19e4924f2ba392a54ddbf73d61eab4c45dfa3510f705bd23c0ecc7210b3f982e328142f74e10edce9677990b862965594b9c671dc0e7c193b7df65de53f953e53ec0789a36c0895cf063ff0d2711b28e177d457192493454d07ad162c8f4a2db7db5761928fdb45311a44be6af7e170b3dd38783ceb9c5745deb957f6fc1cc073d7abe2cc5c58c29136b89c745085304457ce9e1394b1c4de3c664fa843c5183e45f65137e57b627a9938dfcb3cdf60829e5d8014534df04da80c53613a419d8811a4cc9f8a483a3488f942b1e9f69730f9861b70d6e42efbb147ce969854a56877c64a9c5e7e3852994d8d36b86aadc74c3b765307af433c23b0e963f95966beb7cc859bcf9217a52df243a41532cb4b0b316677db0104f12aca9fee6fd5908169451b0fcccf0cfdfbf3de802cc2488a532d5d7de6582c5645160c5ef673d2c95d5b8b2d99ed9486c069798f13c14eab4c99fd509fa9f879d18a5f0bdefd8f44ad0c9280ca9335ed661cb6cc22264f95e1f3443b41a044e4a15ab73f20bed9f6caa6bf231351fd882c11320e40f61718d4c43e99f98a72b459e9ce6eab66903a4ca67560e6c3579c558140e9a035d380b21064f70ed5ad62be784e4f75619fe92a4b6c22438a5907bb234570b962389228a9a454caa0579253a8d697dd890663f0bbed83e2c249dcab4db3d4124202abed769bbc90aa21ae521d9153352bec7eb6e0623fe9486bb2c1dbda0726daa64343304e6b878f768404848e5df3be0f1838f71a232cc8737fbc62172c7ee73306edf0b621e76ef35d76c86473926f47bfaaf943abcf63a81449006583ecfbbc3c498f5dd176bbff6e4e51134ffa5b92dcf4719cb789c9fec63955607da72b335ef7fe1c12dc9cdf44a9e83d7ab5a51977ba1168354a1e89bc5e420329c5864393bd3c72cd9f2c9d7b8e79f661a37f4a03105e77aaa28f4978f44abc4f89c458080e93cfaa043c105f396badc033d12dbed823a2e4d24406c7b77cd33630e6257d21a27857beaad037c1031a319d79e6103e1b7600ad9d418e5af02d372d0ddd5e328edf7245b7907632eae607992a8048a24721e8ce32a5be8adc4704c58de99613bf254d0448c452b7e81fdfd8b3c1b3ff8d573678448aef089e5477e1174bc424c77b08bf81144faadd289d04a02fc19cab03ff2cee402693fb215c4b4b12afcbc532646eed43aa6408df1b2d738e611d5082053882b5a69e0e6ae967c89ebb2980c933c04337acac94130def1edeb0220cf1bb7a4d0e3f7c95179f4e8d6674ced26a91099da84fa0ff485a0cab23b35de4f8091a22e22a969d1daf17549b092b0353468b3d0918f514a1248a3d4a19767bf037cff673771fa22c6ee4952728a8126eac03e50aece013d0c59bb9bc230c48f3115b37a482bae47ca56f8b10419f78195ec89dbd381a04a7ffb645ad53f60783d4997d7cab42591735ad56d565d33325715e2fc29ed8c64869485fd6e14136f4a5f66681668b519c749a790b6417a853ef04015aeeefc48bd85aa351186f728b5f1b0183c03d2168d52dbed1ce13aa3c673458dabeed746d513593b6c561a79f399b498396fd94473aa2acea127591eeeff8f691dddf95288e06203c1e779ba7f5b2b7764e8aad4a44e547d5470193acfbfac984bdda75d8b35eb2258abdcf47ee7df2b549d499204d19c0b89a91f1aef847f375b5cf1f0829d538d14361327073c0edb6605810f330c401270c8eb35eb97aed751feb21211a51a9031ed386fa1598618a38ae9a1c86ae64c84727b1864f64b4da71a7a3195c2757fed49945d63458d89cf5c536bdd441f3f265fc9d61a554087a9b2b83660c0c17e15d9d1d40065ba244453fb08b4ea027e3301ea254513633704ca1a496c7ad2227ca99cf07c58b1c11deb9216e940e2e1243d75b4a6882e84581cc727bcfea0d20d39cb545830a99da07659b347922df1f29ca7496e493826fac4b8f1d641fee7460e99fccd8672473e59a6c240d09a541e460e5f2945776c707212bb33a5ee5051961f21592d9ea3ae018b8fbc2140e6151f14ff033a6dbb1afbddd684b6a9d5f29b7f273b430dab91c53cd89e191adc78c7ce20bb4340425531cfc23f119a5eab1d7c73bc703b7fba48c8038c068df1f77eda5e18b2f2609d9d99de2768349987ba51cb98f698797051844c0c8637bf2f7ffac991ccf95e1b5eae9d7d25e7f3e0bdc788d99754a8be1baddafc4f0914f1a05bf8bec1a40bd2135539150da59d4163c67a575bc6dd7f2f786114c372842795601e8569e28c949e8bdc96e5a43cb6639dedf1ef1f054e0d42589a16d30e296b6dfdac6e13a6c68e03bd39dc172b6007b01793ceafa13c6379d2b820e98e9e87891e3bbdc688f62c56ef80c67ad066a53e36141af58fa9734429498580dc6d32d1c2e8cc722b4f9dd9d165d07b7b536c398df39dee06f48ad422492fe1777619f49e153ad276c86fbf8f607e7b1e9d6040889f166eb8a73ddba4668d6618b31c36b6427b1cd3cb97ef268ec1f1b049a35bceddff9147fde7309db0c474be42a6d54150172df4d5614106ea5f134cf543a70105a0a75f649d6de1a9bd3858bcccf3b220886ea6a7702dbe7f17e03a022a0ffc5145da4895bcb41da3fc5a2a10bc7b2a70a3a86ef8fa600d24894260cdbbf3c36313f3b1e9e8096921b625cb9c7f3ab8423277c9b80743a2185c95e9e7fb3f6d63669257fac197b7a73c5a4a2c4a2df52af705b46b56ade64c8a4265373a770676ec7fe3738843402f63a79f0ddb59e4bf439e4eac709a0127e9588e1538872af3916a12a1a850206392c16e17fab5a7d72bc3e9caad7bab64481728861016c124888210d06e31005ffbd39a65abbf69ce1683de2bb9f90e4955deb7afd23e90e3e11fcbd55627ab48cea806cf5da35e094bbaab42dbbdb454599a6659c2ce10845dc2beba123ae01f043c8c13c463634546e3fc913360adf2441ce3753840af235b0828ee6f74bac40d08d7b8dd8828af44a577e52e9adc86d895e1e561881320091c18bf7c466c945c4872dfc884858f5d710e0f9786878e09a906896308135097da35e465e140f22171878a42f3fe2f0872656b4ffbacc54dd99baef3c58450f1d585e3e3b8c1a9bf0f6afb9858fd6f58791382ff65d926d49f5e02abc84bd4df49ed5beec83517fbf782f983353398063831a1a4668afd7bbe2275c712497686ccff4c447f34cb4dd6b5af0f2e517fea11783d265db2c6dacb393fa3e2d484c3a62c516fe24294ca324bea8095265d560c6f68ae278c7bc34afb7309eb96fbf851af3616fd07e335d010804e60e44a57d38a2d79a19a5f9b22daec534d0379b3fe8a3a6cd8c63b585dcf00abef832b402fd3c0dd95037bb5be517b14ac6627408ba35f15cc4aa0fa96d888baa2d82b4efdf27a018330cca8a83eb587ca8a2536bdd5ab7d783044c76166d27c15299cbe3d82a612236157d25c73b19a3f454309500822206d9ea91f77ea58291d3527f85fcd7f44f1dd4bec1fdd26ee5bbc11620a62fc8c6887904b9f3bde3c640b7e4ba801f49f90e191ade5df7d39f0999a2b5e32f3385c0ec657c6ea6da3bc3d417b3b3856f92bcbbf0eb30ef02715a53dfece840180678d156e79d8149987a1172212529cec710a2bed59478371ab88b8c769ae17b8cf8b1f"}}}}, 0xfce) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}}, 0x0) 19.195145861s ago: executing program 7 (id=483): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000feffffff0f000000050038000000000008000300", @ANYRES32=r8, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x40080) 16.278818296s ago: executing program 6 (id=485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) r6 = dup3(r5, r4, 0x0) recvmmsg$unix(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000003100)=""/4090, 0xffa}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000001200)=""/213, 0xd5}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000200)=""/114, 0x72}], 0x1}}], 0x4, 0x400021c0, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000002080)=""/4096) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000040)='./bus\x00') unlink(&(0x7f0000000180)='./bus\x00') 16.277115597s ago: executing program 7 (id=486): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @remote, 0x7}, 0x1c) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x8000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000480), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000900)="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", 0x146, r4) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) 16.213190628s ago: executing program 5 (id=487): r0 = dup(0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0xfffffffd, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xd, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r2, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff, 0x0, 0x0, r0}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_collapse_huge_page_isolate\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r6, 0xa3c3}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000002c0)="ff004000", 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x4004, @fd_index=0x9, 0x800, 0x4, 0x6, 0x18, 0x0, {0x3, r7}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r8, 0x29, 0x6, 0x0, &(0x7f0000000240)) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x8000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ppoll(&(0x7f0000000700)=[{r9}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x1, 0xf8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x6, 0x53, 0x9, 0x8, 0x7}, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="e547a4a500"]}) 15.048281581s ago: executing program 1 (id=489): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004045}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r5, 0x58, &(0x7f0000000140)}, 0x10) unshare(0x62040200) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000b40)=""/263, 0x107, 0x0, 0x3, 0x2}}, 0x9) 13.26822452s ago: executing program 6 (id=490): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000020000009511000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639a", 0x51, 0x0, 0x0, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="19b200000400000016000000639e87aaffffff7f88bb2f7c73b834cc8a2bec601d8601c8c2462049460a7cc7c276dd3dbc723cc83ed7123aa7c95b4bb03ae7d274010d6742a5777ecf909c2a12046313dca95c77599e518d70d3fd0e7e46e0f11b30c152575625e4ad4f172057e44786a0a859ba4bba1b679faaf121ba3781aa3204323e04b2878fa61692b0c565b3352ee9e7a99bd2b8f9aa444ddd6c1deeb1f91e8dc138b576adeac6d455e04e181e2d7b", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000000e00000010000000000000000017f8c98dc0ddf9e9bfa93bb4fd8a47ec23ff0b06108246e1805611c3d4aa3f6f9dd6ba5768ef53b8e9d016606a686"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x94}}, 0x0) r5 = openat$uinput(0xffffff9c, &(0x7f0000000700), 0x0, 0x0) r6 = openat$snapshot(0xffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$SNAPSHOT_FREE(r6, 0x3305) ioctl$UI_GET_VERSION(r5, 0x405c5503, &(0x7f0000000780)) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x24028024) 12.806050382s ago: executing program 1 (id=492): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @remote, 0x7}, 0x1c) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x8000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) r4 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000480), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000900)="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", 0x146, r4) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) 11.756702154s ago: executing program 4 (id=493): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[], 0x3b13) dup3(0xffffffffffffffff, r5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r4, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 10.908848572s ago: executing program 5 (id=494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xe7b}], 0x1, 0x12123, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x30, 0x2, r7, 0x0, 0x0, 0x0, 0x40, 0x1, {0x1}}) io_uring_enter(r5, 0x8aa, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 10.344585195s ago: executing program 6 (id=495): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0xcf7) r0 = syz_open_dev$sndctrl(&(0x7f00000070c0), 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x7, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405668, &(0x7f0000000100)={0x2, 0x3, 0x2, 0x880}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)=@multiplanar_mmap={0x6, 0x1, 0x4, 0x2, 0x3ff, {}, {0x7, 0x0, 0x7, 0x80, 0x2, 0x1, "b2515fb5"}, 0x5, 0x1, {&(0x7f0000000000)=[{0x8, 0x5, {0x9}, 0x3ff}, {0xc, 0x5, {0xa}, 0x80000000}]}, 0x9, 0x0, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000100)=""/184) 9.633356056s ago: executing program 5 (id=496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x22100, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0x400, 0x300, 0x300, 0x20, 0xffffffff, 0x8000000, 0xcb1c552c0402932, 0x2000000, {}, {0x0, 0x0, 0x2}, {0xf7ffffff, 0x4}, {0x0, 0x0, 0x8}, 0x2, 0x100, 0xfff, 0x0, 0x0, 0xfffffffb, 0x4, 0x7, 0x1, 0x20, 0x0, 0x0, 0x3c, 0x1, 0x0, 0xc}) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1b) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) 9.632770917s ago: executing program 7 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000004c0)=@multiplanar_userptr={0x4, 0x9, 0x4, 0x70000, 0x6, {}, {0x3, 0xc, 0x6, 0x6, 0x34, 0x10, "3129d16b"}, 0x101, 0x2, {&(0x7f0000000440)=[{0x1, 0x8, {0x0}, 0x7fffffff}, {0x3, 0xfffff463, {0x0}, 0x3}]}, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000080)) r4 = semget(0x3, 0x3, 0x40) semctl$SETVAL(r4, 0x0, 0x10, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000100)='5\x00', 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = getpgid(r1) prlimit64(r10, 0x7, &(0x7f0000000180)={0x200, 0x100000001}, &(0x7f0000000240)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'lo\x00'}, 0x18) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b00000000002992b09662bde852e86a6d9de59275539d6ea0475c0dd85b9ddec464716575c24702fdbf5aa2ba84bcc3c8903fa5ecc464d3750f1a1239278a7acc8f76dc10e00d0588dd63210ed6f59dcaba2e25284323733c87ffe73a64855939c16fceb5a2868b72aa7c3c71171d13fa2796c4d212e782dae1bf0bed8a9f3a30f02245e183a206b75516a972e6814c1846bc30d58c"], 0x34}}, 0x0) 9.438325491s ago: executing program 4 (id=498): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[], 0x3b13) dup3(0xffffffffffffffff, r5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r4, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 7.591390401s ago: executing program 7 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.325803884s ago: executing program 6 (id=500): io_uring_setup(0x177f, &(0x7f0000000140)) r0 = socket(0x2b, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x802) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x22, &(0x7f00000003c0)) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000080)=[@sack_perm, @sack_perm, @timestamp, @sack_perm, @timestamp], 0x5) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0xfffffffc) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 5.432480894s ago: executing program 7 (id=501): io_submit(0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) syz_io_uring_setup(0x3bd6, &(0x7f0000000000)={0x0, 0xfffffffc, 0x2, 0xfffffff7, 0x10330}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) 5.431168859s ago: executing program 4 (id=502): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004045}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r5, 0x58, &(0x7f0000000140)}, 0x10) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg_v2(r6, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000b40)=""/263, 0x107, 0x0, 0x3, 0x2}}, 0x9) 4.121374658s ago: executing program 4 (id=503): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x81010000000000, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, 0x0, 0x3) close_range(r5, 0xffffffffffffffff, 0x0) 3.756708291s ago: executing program 6 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2020) r4 = msgget$private(0x0, 0x3c2) capset(0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'macvlan1\x00', &(0x7f0000000040)=@ethtool_sfeatures}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x6, 0x0, 0x20000000, 0x0, 0xfffffffc}}) mount(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$inet6(0xa, 0x80002, 0x0) msgrcv(r4, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000100)={{0x3}}) 3.755608721s ago: executing program 1 (id=505): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x800, 0x0, 0x0, 0x17, 0x0, 0x8}, 0x9c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x1, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f00000000c0)=0x3, 0x4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0xa, &(0x7f0000000040), &(0x7f0000000000)=0x4) 1.716779193s ago: executing program 4 (id=506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000300), 0x10000, &(0x7f0000000340)=ANY=[]) syz_io_uring_setup(0x1661, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029680000001e"], 0xec}}, 0x0) fanotify_init(0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f00008d5000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) readv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/80, 0x50}], 0x7) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x0, 0x0) 1.278472507s ago: executing program 6 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0xe7b}], 0x1, 0x12123, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x1, 0x250}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r6, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x30, 0x2, r7, 0x0, 0x0, 0x0, 0x40, 0x1, {0x1}}) io_uring_enter(r5, 0x8aa, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 35.164451ms ago: executing program 1 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$netlink(0x10, 0x3, 0x0) 31.884085ms ago: executing program 4 (id=509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x1, 0x8000000, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0xa8, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x8, 0x0, 0x1, r2, 0x5}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, r3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x34) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x241, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000000c0)={0x3, 0xa, 0x2, 0x3, "3955eea6b998cc759d84d5632e853ba5be755ad9231661b74bd34e969a1dfdbb"}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) 0s ago: executing program 7 (id=510): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004045}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r5, 0x58, &(0x7f0000000140)}, 0x10) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$vhost_msg_v2(r6, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000b40)=""/263, 0x107, 0x0, 0x3, 0x2}}, 0x9) kernel console output (not intermixed with test programs): ssive=1 [ 74.699084][ T29] audit: type=1400 audit(1736440725.762:179): avc: denied { create } for pid=5971 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.724825][ T29] audit: type=1400 audit(1736440725.902:180): avc: denied { unlink } for pid=5980 comm="syz.2.19" name="#1" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.747294][ T29] audit: type=1400 audit(1736440725.912:181): avc: denied { mount } for pid=5980 comm="syz.2.19" name="/" dev="overlay" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.770125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.783673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.815534][ T5959] pim6reg: left allmulticast mode [ 74.893519][ T969] usb 2-1: Using ep0 maxpacket: 32 [ 74.911348][ T969] usb 2-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 74.962512][ T5989] @ÿ: renamed from bond_slave_0 (while UP) [ 75.367508][ T969] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 75.437488][ T969] usb 2-1: string descriptor 0 read error: -71 [ 75.443928][ T969] usb 2-1: New USB device found, idVendor=03f0, idProduct=421d, bcdDevice=bf.81 [ 75.493908][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.586314][ T969] usb 2-1: config 0 descriptor?? [ 75.592968][ T969] usb 2-1: can't set config #0, error -71 [ 75.765363][ T969] usb 2-1: USB disconnect, device number 2 [ 75.862112][ T6000] syz.2.21: attempt to access beyond end of device [ 75.862112][ T6000] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 77.220785][ T1198] cfg80211: failed to load regulatory.db [ 77.724366][ T6012] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0 [ 78.087215][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 78.087232][ T29] audit: type=1400 audit(1736440729.812:193): avc: denied { shutdown } for pid=5992 comm="syz.4.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.373539][ T29] audit: type=1400 audit(1736440729.842:194): avc: denied { create } for pid=5992 comm="syz.4.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 78.393662][ T29] audit: type=1400 audit(1736440730.242:195): avc: denied { mounton } for pid=6006 comm="syz.2.25" path="/5/file0" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 78.416817][ T29] audit: type=1400 audit(1736440730.432:196): avc: denied { search } for pid=5485 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.438105][ T29] audit: type=1400 audit(1736440730.432:197): avc: denied { read } for pid=5485 comm="dhcpcd" name="n100" dev="tmpfs" ino=1890 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.459794][ T29] audit: type=1400 audit(1736440730.432:198): avc: denied { open } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=1890 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.482880][ T29] audit: type=1400 audit(1736440730.442:199): avc: denied { getattr } for pid=5485 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=1890 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.965166][ T29] audit: type=1400 audit(1736440730.812:200): avc: denied { write } for pid=6006 comm="syz.2.25" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.143535][ T29] audit: type=1400 audit(1736440730.812:201): avc: denied { open } for pid=6006 comm="syz.2.25" path="/5/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.386717][ T6028] syz.1.28: attempt to access beyond end of device [ 79.386717][ T6028] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 80.383578][ T29] audit: type=1400 audit(1736440731.972:202): avc: denied { create } for pid=6025 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 82.896336][ T6061] mkiss: ax0: crc mode is auto. [ 83.520456][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 83.520475][ T29] audit: type=1400 audit(1736440735.562:215): avc: denied { unlink } for pid=5820 comm="syz-executor" name="file0" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 83.780865][ T29] audit: type=1400 audit(1736440735.872:216): avc: denied { mount } for pid=6068 comm="syz.1.34" name="/" dev="configfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 84.479728][ T6078] 9pnet_fd: Insufficient options for proto=fd [ 84.599703][ T29] audit: type=1400 audit(1736440735.872:217): avc: denied { read } for pid=6068 comm="syz.1.34" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.217650][ T29] audit: type=1400 audit(1736440735.872:218): avc: denied { open } for pid=6068 comm="syz.1.34" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.266727][ T29] audit: type=1400 audit(1736440735.882:219): avc: denied { write } for pid=6035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.414754][ T29] audit: type=1400 audit(1736440735.882:220): avc: denied { add_name } for pid=6035 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.437747][ T29] audit: type=1400 audit(1736440735.882:221): avc: denied { create } for pid=6035 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.460230][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.466498][ T29] audit: type=1400 audit(1736440735.882:222): avc: denied { write } for pid=6035 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfttyS3.link" dev="tmpfs" ino=1932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.492748][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.499524][ T29] audit: type=1400 audit(1736440735.882:223): avc: denied { append } for pid=6035 comm="dhcpcd-run-hook" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.525223][ T29] audit: type=1400 audit(1736440737.492:224): avc: denied { remove_name } for pid=6080 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=1932 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.433515][ T46] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.653684][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 87.667634][ T46] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 88.055343][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.150967][ T46] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 88.313340][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.337922][ T46] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 88.347133][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.475263][ T46] usb 4-1: config 0 descriptor?? [ 88.522303][ T46] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 89.171007][ T5862] usb 4-1: USB disconnect, device number 2 [ 89.204056][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 89.204072][ T29] audit: type=1400 audit(1736440740.752:239): avc: denied { write } for pid=6108 comm="syz.1.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.347058][ T6113] warning: `syz.0.40' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.361490][ T29] audit: type=1800 audit(1736440741.432:240): pid=6113 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.40" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 89.463082][ T29] audit: type=1400 audit(1736440741.442:241): avc: denied { bind } for pid=6095 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.505955][ T29] audit: type=1400 audit(1736440741.462:242): avc: denied { read write } for pid=6095 comm="syz.0.40" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.529250][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.535440][ T29] audit: type=1400 audit(1736440741.462:243): avc: denied { open } for pid=6095 comm="syz.0.40" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.558616][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.787732][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 89.814272][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.43'. [ 90.055726][ T29] audit: type=1400 audit(1736440741.852:244): avc: denied { getopt } for pid=6116 comm="syz.1.43" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.550006][ T29] audit: type=1400 audit(1736440742.632:245): avc: denied { ioctl } for pid=6121 comm="syz.3.44" path="socket:[9424]" dev="sockfs" ino=9424 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.575223][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.428184][ T6127] syz.3.44[6127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.428255][ T6127] syz.3.44[6127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.462862][ T6127] syz.3.44[6127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.552051][ T6134] netlink: 96 bytes leftover after parsing attributes in process `syz.1.46'. [ 91.664111][ T29] audit: type=1400 audit(1736440743.692:246): avc: denied { create } for pid=6128 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.203078][ T29] audit: type=1400 audit(1736440743.712:247): avc: denied { bind } for pid=6128 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.262815][ T29] audit: type=1400 audit(1736440744.352:248): avc: denied { setopt } for pid=6135 comm="syz.1.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.220946][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 94.220964][ T29] audit: type=1400 audit(1736440746.262:261): avc: denied { mount } for pid=6147 comm="syz.4.51" name="/" dev="pstore" ino=2735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 95.246718][ T6168] befs: (nbd1): No write support. Marking filesystem read-only [ 95.255727][ T6168] syz.1.54: attempt to access beyond end of device [ 95.255727][ T6168] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 95.268604][ T6168] befs: (nbd1): unable to read superblock [ 96.410887][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 96.729783][ T5818] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 97.160444][ T29] audit: type=1400 audit(1736440749.252:262): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 97.623544][ T29] audit: type=1400 audit(1736440749.312:263): avc: denied { ioctl } for pid=6186 comm="syz.3.58" path="socket:[8485]" dev="sockfs" ino=8485 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 97.869435][ T29] audit: type=1400 audit(1736440749.372:264): avc: denied { append } for pid=6186 comm="syz.3.58" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 97.898483][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.907246][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.503518][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.511571][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.519449][ T5826] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.528075][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.813689][ T29] audit: type=1400 audit(1736440750.722:265): avc: denied { mounton } for pid=6192 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 98.963856][ T29] audit: type=1326 audit(1736440751.012:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6200 comm="syz.3.61" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb4bd85d29 code=0x0 [ 99.116102][ T29] audit: type=1400 audit(1736440751.112:267): avc: denied { create } for pid=6200 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.317133][ T29] audit: type=1400 audit(1736440751.122:268): avc: denied { write } for pid=6200 comm="syz.3.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.740099][ T6218] netlink: 'syz.4.59': attribute type 16 has an invalid length. [ 100.747824][ T1198] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.753626][ T6218] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.59'. [ 100.764513][ T969] IPVS: starting estimator thread 0... [ 100.764729][ T5826] Bluetooth: hci5: command tx timeout [ 100.902772][ T29] audit: type=1400 audit(1736440752.532:269): avc: denied { create } for pid=6211 comm="syz.3.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 101.033691][ T6219] IPVS: using max 27 ests per chain, 64800 per kthread [ 101.051310][ T1198] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.060436][ T1198] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 101.079536][ T29] audit: type=1400 audit(1736440753.052:270): avc: denied { append } for pid=6209 comm="syz.1.63" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.110516][ T1198] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.125655][ T1198] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 101.141008][ T29] audit: type=1400 audit(1736440753.052:271): avc: denied { map } for pid=6209 comm="syz.1.63" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.165904][ T1198] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 101.177651][ T29] audit: type=1400 audit(1736440753.142:272): avc: denied { execute } for pid=6209 comm="syz.1.63" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.286927][ T1198] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 102.268543][ T29] audit: type=1800 audit(1736440753.852:273): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.65" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 102.486579][ T1198] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 102.780105][ T1198] usb 1-1: Product: syz [ 102.784511][ T1198] usb 1-1: Manufacturer: syz [ 102.893452][ T1198] usb 1-1: can't set config #1, error -71 [ 102.934352][ T1198] usb 1-1: USB disconnect, device number 2 [ 102.979555][ T6192] chnl_net:caif_netlink_parms(): no params data found [ 102.993547][ T5826] Bluetooth: hci5: command tx timeout [ 103.985763][ T29] audit: type=1400 audit(1736440756.032:274): avc: denied { map } for pid=6233 comm="syz.1.68" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.022665][ T29] audit: type=1400 audit(1736440756.032:275): avc: denied { read write } for pid=6233 comm="syz.1.68" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 104.718170][ T6250] binder: 6249:6250 ioctl c0306201 20000380 returned -22 [ 104.909351][ T29] audit: type=1400 audit(1736440756.812:276): avc: denied { write } for pid=6249 comm="syz.0.70" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 105.654055][ T29] audit: type=1400 audit(1736440756.812:277): avc: denied { ioctl } for pid=6249 comm="syz.0.70" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 105.916934][ T29] audit: type=1400 audit(1736440757.672:278): avc: denied { ioctl } for pid=6239 comm="syz.4.69" path="socket:[9578]" dev="sockfs" ino=9578 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.618109][ T29] audit: type=1400 audit(1736440757.712:279): avc: denied { append } for pid=6249 comm="syz.0.70" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 106.646042][ T29] audit: type=1400 audit(1736440757.722:280): avc: denied { read write } for pid=6249 comm="syz.0.70" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.899203][ T29] audit: type=1400 audit(1736440757.722:281): avc: denied { open } for pid=6249 comm="syz.0.70" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 106.899274][ T29] audit: type=1800 audit(1736440757.822:282): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.72" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 106.923472][ T6260] capability: warning: `syz.1.72' uses 32-bit capabilities (legacy support in use) [ 106.934760][ T5826] Bluetooth: hci5: command tx timeout [ 107.235635][ T6261] program syz.4.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.275085][ T6260] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 107.899088][ T6259] tty tty28: ldisc open failed (-12), clearing slot 27 [ 108.081579][ T29] audit: type=1400 audit(1736440760.172:283): avc: denied { read } for pid=6245 comm="syz.3.71" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.156272][ T29] audit: type=1400 audit(1736440760.172:284): avc: denied { open } for pid=6245 comm="syz.3.71" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.180640][ T29] audit: type=1400 audit(1736440760.202:285): avc: denied { ioctl } for pid=6245 comm="syz.3.71" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.984636][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.992302][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.993784][ T5826] Bluetooth: hci5: command tx timeout [ 109.000684][ T6192] bridge_slave_0: entered allmulticast mode [ 109.011903][ T6192] bridge_slave_0: entered promiscuous mode [ 109.091706][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.099102][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.106374][ T6192] bridge_slave_1: entered allmulticast mode [ 109.120411][ T6192] bridge_slave_1: entered promiscuous mode [ 109.430965][ T6279] ptrace attach of "./syz-executor exec"[5813] was attempted by ""[6279] [ 109.965190][ T6277] wg2: entered promiscuous mode [ 109.970097][ T6277] wg2: entered allmulticast mode [ 110.015265][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.090761][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.188123][ T6192] team0: Port device team_slave_0 added [ 110.204276][ T6192] team0: Port device team_slave_1 added [ 110.279060][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 110.279076][ T29] audit: type=1400 audit(1736440762.372:294): avc: denied { setopt } for pid=6282 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.435204][ T29] audit: type=1400 audit(1736440762.372:295): avc: denied { mount } for pid=6282 comm="syz.0.77" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 111.039013][ T29] audit: type=1400 audit(1736440762.642:296): avc: denied { write } for pid=6284 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.180016][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.205337][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.261704][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.341742][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.575028][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.601252][ T29] audit: type=1400 audit(1736440763.672:297): avc: denied { write } for pid=6290 comm="syz.1.80" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.783975][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.82'. [ 112.323552][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.580536][ T29] audit: type=1400 audit(1736440764.672:298): avc: denied { getopt } for pid=6305 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 112.662850][ T6192] hsr_slave_0: entered promiscuous mode [ 112.672895][ T6192] hsr_slave_1: entered promiscuous mode [ 112.693156][ T6192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.711070][ T6192] Cannot create hsr debugfs directory [ 112.823846][ T969] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.833241][ T29] audit: type=1400 audit(1736440764.922:299): avc: denied { connect } for pid=6294 comm="syz.4.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.861040][ T5863] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.040232][ T6192] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.074523][ T969] usb 2-1: Using ep0 maxpacket: 16 [ 113.143501][ T6192] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.153549][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 113.405359][ T5863] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de [ 113.424143][ T969] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 113.432864][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.433170][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.451907][ T5863] usb 4-1: Product: syz [ 113.454212][ T6192] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.463251][ T969] usb 2-1: Product: syz [ 113.463451][ T5863] usb 4-1: Manufacturer: syz [ 113.483900][ T969] usb 2-1: Manufacturer: syz [ 113.488521][ T969] usb 2-1: SerialNumber: syz [ 113.490569][ T5863] usb 4-1: SerialNumber: syz [ 113.504673][ T6192] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.522407][ T969] usb 2-1: config 0 descriptor?? [ 113.534292][ T5863] usb 4-1: config 0 descriptor?? [ 113.545129][ T969] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 113.570457][ T969] usb 2-1: Detected FT232H [ 113.590066][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.604442][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.618359][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.625516][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.626148][ T5863] ems_usb 4-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 113.643735][ T5863] ems_usb 4-1:0.0: probe with driver ems_usb failed with error -22 [ 113.685040][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.692217][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.760652][ T969] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 113.773547][ T969] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 113.801239][ T6192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 113.817522][ T969] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 113.836039][ T6192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.858602][ T969] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 113.895517][ T5863] usb 4-1: USB disconnect, device number 3 [ 113.950938][ T969] usb 2-1: USB disconnect, device number 3 [ 113.984532][ T969] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 114.024025][ T969] ftdi_sio 2-1:0.0: device disconnected [ 114.345501][ T6324] binder: 6316:6324 ioctl c0306201 20000080 returned -11 [ 114.788755][ T6192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.840430][ T6322] Can't find ip_set type ha [ 116.366414][ T29] audit: type=1400 audit(1736440768.132:300): avc: denied { mount } for pid=6327 comm="syz.0.86" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 116.670655][ T6333] tty tty3: ldisc open failed (-12), clearing slot 2 [ 116.751662][ T6335] tty tty20: ldisc open failed (-12), clearing slot 19 [ 116.837305][ T29] audit: type=1400 audit(1736440768.932:301): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 116.951555][ T6192] veth0_vlan: entered promiscuous mode [ 117.127658][ T6192] veth1_vlan: entered promiscuous mode [ 117.729782][ T6192] veth0_macvtap: entered promiscuous mode [ 117.768212][ T6192] veth1_macvtap: entered promiscuous mode [ 117.781930][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.792498][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.802430][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.812902][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.822768][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.833271][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.843677][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.854438][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.864365][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.874911][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.886106][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.895384][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.905909][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.915760][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.926262][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.936181][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.946931][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.957246][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.967728][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.977633][ T6192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.988147][ T6192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.998834][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.008470][ T6192] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.017240][ T6192] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.026024][ T6192] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.034774][ T6192] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.053267][ T29] audit: type=1400 audit(1736440769.322:302): avc: denied { write } for pid=6345 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 118.133970][ T29] audit: type=1400 audit(1736440770.172:303): avc: denied { create } for pid=6353 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.310520][ T29] audit: type=1400 audit(1736440770.402:304): avc: denied { append } for pid=6360 comm="syz.0.94" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.312714][ T6361] loop6: detected capacity change from 0 to 524287999 [ 118.346978][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.356449][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.367770][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.376975][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.390621][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.399864][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.424943][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.434138][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.448050][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.457298][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.473386][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.482553][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.525072][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.534390][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.569521][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.578693][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.634712][ T6361] ldm_validate_partition_table(): Disk read failed. [ 118.745162][ T29] audit: type=1400 audit(1736440770.692:305): avc: denied { create } for pid=6355 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.835248][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.844444][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.943739][ T29] audit: type=1400 audit(1736440770.732:306): avc: denied { setopt } for pid=6355 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.982457][ T29] audit: type=1400 audit(1736440770.752:307): avc: denied { connect } for pid=6355 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 118.983919][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.001706][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.010817][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.217882][ T6361] Dev loop6: unable to read RDB block 0 [ 119.262389][ T29] audit: type=1400 audit(1736440770.812:308): avc: denied { append } for pid=6355 comm="syz.1.93" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 119.295370][ T6361] loop6: unable to read partition table [ 119.301225][ T6361] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 119.320587][ T29] audit: type=1400 audit(1736440771.382:309): avc: denied { execute } for pid=6360 comm="syz.0.94" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 119.340687][ T3062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.352394][ T3062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.515501][ T5918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.537808][ T5918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.743586][ T6377] nbd4: detected capacity change from 0 to 67108884 [ 119.756634][ T5962] block nbd4: Send control failed (result -89) [ 119.774054][ T5962] block nbd4: Request send failed, requeueing [ 119.797736][ T5826] block nbd4: Receive control failed (result -32) [ 119.799001][ T58] block nbd4: Dead connection, failed to find a fallback [ 119.813959][ T58] block nbd4: shutting down sockets [ 119.824981][ T5962] ldm_validate_partition_table(): Disk read failed. [ 119.837719][ T5962] Dev nbd4: unable to read RDB block 0 [ 119.847358][ T5962] nbd4: unable to read partition table [ 120.382015][ T5962] ldm_validate_partition_table(): Disk read failed. [ 120.390810][ T5962] Dev nbd4: unable to read RDB block 0 [ 120.396817][ T5962] nbd4: unable to read partition table [ 121.079271][ T6381] ldm_validate_partition_table(): Disk read failed. [ 121.125066][ T6381] Dev nbd4: unable to read RDB block 0 [ 121.131010][ T6381] nbd4: unable to read partition table [ 121.173527][ T969] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.289799][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 121.304084][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554441, location=33554441 [ 121.339040][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554185, location=33554185 [ 121.625117][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 121.625153][ T29] audit: type=1400 audit(1736440773.722:320): avc: denied { ioctl } for pid=6390 comm="syz.1.100" path="socket:[9129]" dev="sockfs" ino=9129 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.655910][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.754991][ T969] usb 4-1: no configurations [ 121.759605][ T969] usb 4-1: can't read configurations, error -22 [ 121.803803][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554440, location=33554440 [ 121.959147][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554184, location=33554184 [ 122.599232][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554439, location=33554439 [ 122.610007][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554183, location=33554183 [ 122.620883][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554291, location=33554291 [ 122.777073][ T969] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 122.828606][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554035, location=33554035 [ 122.839437][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554289, location=33554289 [ 122.850181][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=33554033, location=33554033 [ 122.861462][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 122.873063][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 122.884610][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777220, location=16777220 [ 122.895443][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776964, location=16776964 [ 122.901995][ T6410] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.906456][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777219, location=16777219 [ 122.929093][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776963, location=16776963 [ 122.941759][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777218, location=16777218 [ 122.952339][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776962, location=16776962 [ 122.963303][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777070, location=16777070 [ 122.974267][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776814, location=16776814 [ 122.986972][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16777068, location=16777068 [ 123.653292][ T6381] blk_print_req_error: 81 callbacks suppressed [ 123.653313][ T6381] I/O error, dev nbd4, sector 67107248 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.673716][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=16776812, location=16776812 [ 123.698387][ T6381] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.905584][ T29] audit: type=1400 audit(1736440775.942:321): avc: denied { accept } for pid=6408 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.661843][ T969] usb 4-1: device descriptor read/all, error -71 [ 124.663639][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 124.670088][ T969] usb usb4-port1: attempt power cycle [ 125.030467][ T6381] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.277600][ T6381] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.663685][ T29] audit: type=1400 audit(1736440775.972:322): avc: denied { bind } for pid=6408 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.691744][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 125.719558][ T6381] I/O error, dev nbd4, sector 67108872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.853593][ T29] audit: type=1400 audit(1736440775.972:323): avc: denied { write } for pid=6408 comm="syz.0.102" path="socket:[9149]" dev="sockfs" ino=9149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.872115][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388609, location=8388609 [ 125.880046][ T29] audit: type=1400 audit(1736440777.212:324): avc: denied { bind } for pid=6418 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.919994][ T29] audit: type=1400 audit(1736440777.222:325): avc: denied { name_bind } for pid=6418 comm="syz.1.106" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 125.945239][ T6381] I/O error, dev nbd4, sector 67106824 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.957503][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388353, location=8388353 [ 126.443674][ T29] audit: type=1400 audit(1736440777.222:326): avc: denied { node_bind } for pid=6418 comm="syz.1.106" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 126.612723][ T29] audit: type=1400 audit(1736440777.242:327): avc: denied { create } for pid=6420 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 126.700145][ T6381] I/O error, dev nbd4, sector 67108864 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.718620][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388608, location=8388608 [ 126.728709][ T29] audit: type=1400 audit(1736440777.992:328): avc: denied { write } for pid=5173 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.729126][ T6381] I/O error, dev nbd4, sector 67106816 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.761771][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388352, location=8388352 [ 126.774718][ T6381] I/O error, dev nbd4, sector 67108856 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.785608][ T29] audit: type=1400 audit(1736440777.992:329): avc: denied { remove_name } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.809830][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388607, location=8388607 [ 126.829838][ T6381] I/O error, dev nbd4, sector 67106808 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.840325][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388351, location=8388351 [ 126.851108][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388459, location=8388459 [ 126.862273][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388203, location=8388203 [ 126.873518][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388457, location=8388457 [ 126.884130][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=8388201, location=8388201 [ 126.894640][ T6381] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 126.904508][ T6381] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 126.921226][ T29] audit: type=1400 audit(1736440777.992:330): avc: denied { rename } for pid=5173 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 126.948373][ T29] audit: type=1400 audit(1736440777.992:331): avc: denied { add_name } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.981310][ T29] audit: type=1400 audit(1736440777.992:332): avc: denied { unlink } for pid=5173 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.020983][ T29] audit: type=1400 audit(1736440777.992:333): avc: denied { create } for pid=5173 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 127.041810][ T29] audit: type=1400 audit(1736440779.112:334): avc: denied { ioctl } for pid=6423 comm="syz.0.107" path="socket:[10119]" dev="sockfs" ino=10119 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 128.386131][ T6441] Bluetooth: MGMT ver 1.23 [ 129.565311][ T6458] Debayer B: ================= START STATUS ================= [ 129.572983][ T6458] Debayer B: Debayer Mean Window Size: 3 [ 129.578975][ T6458] Debayer B: ================== END STATUS ================== [ 129.806100][ T29] audit: type=1400 audit(1736440781.652:335): avc: denied { open } for pid=6445 comm="syz.1.111" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 129.839180][ T1198] IPVS: starting estimator thread 0... [ 130.680082][ T5818] Bluetooth: hci0: command 0x0401 tx timeout [ 130.706053][ T5826] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 130.910313][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 130.998785][ T29] audit: type=1400 audit(1736440783.092:336): avc: denied { setopt } for pid=6448 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.837690][ T6459] IPVS: using max 29 ests per chain, 69600 per kthread [ 132.490282][ T29] audit: type=1400 audit(1736440784.152:337): avc: denied { ioctl } for pid=6471 comm="syz.4.117" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 132.669506][ T6480] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 132.774246][ T29] audit: type=1400 audit(1736440784.742:338): avc: denied { mount } for pid=6475 comm="syz.1.118" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 133.233882][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.268310][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.766412][ T29] audit: type=1400 audit(1736440785.432:339): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 133.943765][ T6491] hub 2-0:1.0: USB hub found [ 133.953619][ T6491] hub 2-0:1.0: 1 port detected [ 135.146721][ T6510] syz.3.125: attempt to access beyond end of device [ 135.146721][ T6510] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 136.621053][ T29] audit: type=1400 audit(1736440788.712:340): avc: denied { listen } for pid=6489 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.033554][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.986631][ T6528] capability: warning: `syz.3.128' uses deprecated v2 capabilities in a way that may be insecure [ 138.780049][ T6533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.129'. [ 139.527875][ T29] audit: type=1400 audit(1736440791.592:341): avc: denied { watch watch_reads } for pid=6539 comm="syz.1.132" path="/34" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 140.640434][ T6544] tty tty21: ldisc open failed (-12), clearing slot 20 [ 141.283238][ T6554] syz.1.136: attempt to access beyond end of device [ 141.283238][ T6554] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 141.812409][ T6556] 9pnet_fd: Insufficient options for proto=fd [ 142.088503][ T29] audit: type=1400 audit(1736440794.182:342): avc: denied { create } for pid=6562 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.405216][ T6582] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 144.414347][ T6582] overlayfs: missing 'lowerdir' [ 145.294179][ T29] audit: type=1400 audit(1736440797.382:343): avc: denied { setopt } for pid=6575 comm="syz.5.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 146.111136][ T6593] ======================================================= [ 146.111136][ T6593] WARNING: The mand mount option has been deprecated and [ 146.111136][ T6593] and is ignored by this kernel. Remove the mand [ 146.111136][ T6593] option from the mount to silence this warning. [ 146.111136][ T6593] ======================================================= [ 146.111697][ T6593] new mount options do not match the existing superblock, will be ignored [ 148.137881][ T6594] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 148.144729][ T6594] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 148.160931][ T6594] vhci_hcd vhci_hcd.0: Device attached [ 148.372960][ T969] vhci_hcd: vhci_device speed not set [ 148.433476][ T969] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 148.945623][ T6618] syz.5.147: attempt to access beyond end of device [ 148.945623][ T6618] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 149.276196][ T6601] vhci_hcd: connection reset by peer [ 149.296610][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.145'. [ 149.310906][ T3041] vhci_hcd: stop threads [ 149.316892][ T3041] vhci_hcd: release socket [ 149.322518][ T3041] vhci_hcd: disconnect device [ 149.744022][ T29] audit: type=1400 audit(1736440801.782:344): avc: denied { read write } for pid=6622 comm="syz.4.146" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.983804][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 149.990436][ T5862] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 150.009951][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 150.188752][ T29] audit: type=1400 audit(1736440801.782:345): avc: denied { open } for pid=6622 comm="syz.4.146" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.235841][ T6625] ceph: No mds server is up or the cluster is laggy [ 150.273766][ T29] audit: type=1400 audit(1736440801.792:346): avc: denied { ioctl } for pid=6622 comm="syz.4.146" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 150.763493][ T29] audit: type=1400 audit(1736440802.372:347): avc: denied { getopt } for pid=6629 comm="syz.5.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.025373][ T5862] usb 1-1: device descriptor read/all, error -71 [ 151.515640][ T29] audit: type=1400 audit(1736440803.232:348): avc: denied { ioctl } for pid=6637 comm="syz.0.151" path="socket:[10537]" dev="sockfs" ino=10537 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 151.896563][ T29] audit: type=1400 audit(1736440803.952:349): avc: denied { map } for pid=6636 comm="syz.3.150" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 152.433603][ T29] audit: type=1400 audit(1736440803.952:350): avc: denied { execute } for pid=6636 comm="syz.3.150" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 152.595821][ T6648] syz.4.152: attempt to access beyond end of device [ 152.595821][ T6648] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 152.633611][ T29] audit: type=1400 audit(1736440803.992:351): avc: denied { ioctl } for pid=6636 comm="syz.3.150" path="socket:[10549]" dev="sockfs" ino=10549 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 153.087356][ T29] audit: type=1400 audit(1736440804.592:352): avc: denied { bind } for pid=6629 comm="syz.5.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.323470][ T29] audit: type=1400 audit(1736440805.292:353): avc: denied { write } for pid=6650 comm="syz.3.153" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 154.513751][ T969] vhci_hcd: vhci_device speed not set [ 156.333223][ T29] audit: type=1400 audit(1736440807.762:354): avc: denied { append } for pid=6664 comm="syz.0.157" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 156.645272][ T6676] syz.1.158: attempt to access beyond end of device [ 156.645272][ T6676] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 157.343470][ T29] audit: type=1400 audit(1736440807.762:355): avc: denied { ioctl } for pid=6664 comm="syz.0.157" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 157.378581][ T29] audit: type=1400 audit(1736440808.432:356): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 157.704369][ T6681] overlayfs: failed to resolve './file1': -2 [ 158.699410][ T29] audit: type=1400 audit(1736440810.792:357): avc: denied { name_bind } for pid=6687 comm="syz.4.162" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 158.781350][ T6689] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 159.692692][ T6698] vxcan1: tx address claim with dest, not broadcast [ 159.763681][ T29] audit: type=1400 audit(1736440811.712:358): avc: denied { ioctl } for pid=6693 comm="syz.5.163" path="socket:[10640]" dev="sockfs" ino=10640 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.123626][ T29] audit: type=1400 audit(1736440811.782:359): avc: denied { bind } for pid=6693 comm="syz.5.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.174860][ T29] audit: type=1400 audit(1736440811.782:360): avc: denied { write } for pid=6693 comm="syz.5.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.293571][ T29] audit: type=1400 audit(1736440812.332:361): avc: denied { bind } for pid=6699 comm="syz.4.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.321834][ T5826] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 160.416509][ T29] audit: type=1400 audit(1736440812.492:362): avc: denied { execute } for pid=6683 comm="syz.0.161" path="/36/cpu.stat" dev="tmpfs" ino=203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.441749][ T29] audit: type=1400 audit(1736440812.492:363): avc: denied { setcheckreqprot } for pid=6683 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 162.001461][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 162.001480][ T29] audit: type=1400 audit(1736440813.812:367): avc: denied { read write } for pid=6706 comm="syz.5.165" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 162.901572][ T29] audit: type=1400 audit(1736440813.812:368): avc: denied { open } for pid=6706 comm="syz.5.165" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 163.025929][ T6718] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.941044][ T29] audit: type=1400 audit(1736440815.962:369): avc: denied { append } for pid=6724 comm="syz.3.169" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 165.023299][ T6738] 9pnet_fd: Insufficient options for proto=fd [ 168.467101][ T6756] syz.3.173: attempt to access beyond end of device [ 168.467101][ T6756] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 170.178933][ T6769] fuse: Bad value for 'rootmode' [ 170.246250][ T6766] tty tty28: ldisc open failed (-12), clearing slot 27 [ 171.353798][ T29] audit: type=1400 audit(1736440822.632:370): avc: denied { bind } for pid=6771 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 171.522042][ T29] audit: type=1400 audit(1736440823.612:371): avc: denied { read } for pid=6768 comm="syz.3.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 171.711992][ T29] audit: type=1400 audit(1736440823.662:372): avc: denied { mount } for pid=6768 comm="syz.3.176" name="/" dev="hugetlbfs" ino=10934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 171.787377][ T29] audit: type=1400 audit(1736440823.852:373): avc: denied { audit_write } for pid=6786 comm="syz.5.182" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 172.069980][ T29] audit: type=1400 audit(1736440823.982:374): avc: denied { map } for pid=6783 comm="syz.4.179" path="socket:[10943]" dev="sockfs" ino=10943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.255433][ T29] audit: type=1400 audit(1736440824.352:375): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 172.740928][ T6799] syz.3.184 uses obsolete (PF_INET,SOCK_PACKET) [ 175.862455][ T6826] netlink: 32 bytes leftover after parsing attributes in process `syz.0.189'. [ 176.708912][ T29] audit: type=1400 audit(1736440828.562:376): avc: denied { getopt } for pid=6829 comm="syz.4.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.794310][ T6834] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 176.813176][ T6834] netlink: 224 bytes leftover after parsing attributes in process `syz.3.202'. [ 176.853496][ T29] audit: type=1400 audit(1736440828.942:377): avc: denied { name_bind } for pid=6823 comm="syz.1.190" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 176.967898][ T29] audit: type=1400 audit(1736440829.062:378): avc: denied { setopt } for pid=6836 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 177.132617][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 177.768529][ T29] audit: type=1326 audit(1736440829.782:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e2985d29 code=0x7ffc0000 [ 178.231460][ T29] audit: type=1326 audit(1736440829.782:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e2985d29 code=0x7ffc0000 [ 178.302460][ T6847] veth1_macvtap: left promiscuous mode [ 178.307989][ T6847] macsec0: entered promiscuous mode [ 178.383818][ T29] audit: type=1326 audit(1736440829.782:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06e2985d29 code=0x7ffc0000 [ 178.652281][ T29] audit: type=1326 audit(1736440829.792:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e2985d29 code=0x7ffc0000 [ 179.128600][ T29] audit: type=1326 audit(1736440829.792:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e2985d29 code=0x7ffc0000 [ 179.151835][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.283452][ T29] audit: type=1326 audit(1736440829.792:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f06e2985d29 code=0x7ffc0000 [ 180.436507][ T29] audit: type=1326 audit(1736440829.792:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6843 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06e2985d29 code=0x7ffc0000 [ 181.741145][ T5139] Bluetooth: hci2: command 0x0406 tx timeout [ 181.748416][ T5139] Bluetooth: hci1: command 0x0406 tx timeout [ 181.755829][ T5139] Bluetooth: hci3: command 0x0406 tx timeout [ 181.762958][ T5139] Bluetooth: hci0: command 0x0401 tx timeout [ 182.672899][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 182.922919][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 182.922935][ T29] audit: type=1400 audit(1736440835.012:414): avc: denied { block_suspend } for pid=6890 comm="syz.0.205" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.024061][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 183.031676][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.042962][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 183.086575][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 183.208391][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.210552][ T46] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 183.484421][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.502728][ T46] usb 5-1: Product: syz [ 183.507302][ T46] usb 5-1: Manufacturer: syz [ 183.512002][ T46] usb 5-1: SerialNumber: syz [ 183.545368][ T46] usb 5-1: config 0 descriptor?? [ 183.829769][ T46] usb 5-1: can't set config #0, error -71 [ 184.189060][ T6899] tipc: Started in network mode [ 184.194521][ T6899] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 184.209184][ T6899] tipc: Enabled bearer , priority 10 [ 184.443142][ T46] usb 5-1: USB disconnect, device number 2 [ 186.538129][ T46] tipc: Node number set to 4269801488 [ 187.950836][ T6928] netlink: 'syz.5.210': attribute type 10 has an invalid length. [ 187.958862][ T6928] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.210'. [ 187.968194][ T6928] openvswitch: netlink: Flow key attr not present in new flow. [ 194.393780][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.467851][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 196.364072][ T5865] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 196.552681][ T5865] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 196.570197][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.593662][ T29] audit: type=1400 audit(1736440848.182:415): avc: denied { bind } for pid=6980 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 196.600667][ T5865] usb 5-1: config 0 descriptor?? [ 198.891288][ T5865] kaweth 5-1:0.0: Firmware present in device. [ 198.954083][ T5865] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 198.962741][ T5865] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 199.008194][ T29] audit: type=1400 audit(1736440850.972:416): avc: denied { mount } for pid=7004 comm="syz.1.229" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 199.025313][ T5865] usb 5-1: USB disconnect, device number 3 [ 199.383984][ T29] audit: type=1400 audit(1736440851.462:417): avc: denied { ioctl } for pid=7008 comm="syz.0.231" path="socket:[12367]" dev="sockfs" ino=12367 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.874089][ T7019] netlink: 'syz.4.232': attribute type 9 has an invalid length. [ 200.191799][ T29] audit: type=1326 audit(1736440852.092:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7007 comm="syz.4.232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x0 [ 200.214498][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.575616][ T29] audit: type=1400 audit(1736440852.672:419): avc: denied { read append } for pid=7025 comm="syz.4.234" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 200.599177][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.937136][ T29] audit: type=1400 audit(1736440852.702:420): avc: denied { open } for pid=7025 comm="syz.4.234" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.012220][ T29] audit: type=1400 audit(1736440852.722:421): avc: denied { ioctl } for pid=7025 comm="syz.4.234" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 201.037106][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.121729][ T7030] 9pnet_fd: Insufficient options for proto=fd [ 201.817300][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 201.877216][ T29] audit: type=1400 audit(1736440853.972:422): avc: denied { create } for pid=7003 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.083518][ T29] audit: type=1400 audit(1736440854.002:423): avc: denied { create } for pid=7032 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 203.193472][ T29] audit: type=1400 audit(1736440854.732:424): avc: denied { ioctl } for pid=7032 comm="syz.1.236" path="socket:[11984]" dev="sockfs" ino=11984 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 203.223754][ T29] audit: type=1400 audit(1736440854.762:425): avc: denied { connect } for pid=7003 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 203.244073][ T29] audit: type=1400 audit(1736440854.862:426): avc: denied { write } for pid=7003 comm="syz.3.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 204.119602][ T7060] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 207.580206][ T29] audit: type=1326 audit(1736440859.282:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 207.823495][ T29] audit: type=1326 audit(1736440859.282:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 207.910334][ T29] audit: type=1326 audit(1736440859.282:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 208.091420][ T7083] veth1_macvtap: left promiscuous mode [ 208.100052][ T7083] macsec0: entered promiscuous mode [ 208.133737][ T29] audit: type=1326 audit(1736440859.282:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 208.216383][ T29] audit: type=1326 audit(1736440859.282:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 208.246244][ T29] audit: type=1326 audit(1736440859.282:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 208.269964][ T29] audit: type=1326 audit(1736440859.282:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 208.293931][ T29] audit: type=1326 audit(1736440859.282:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 208.318945][ T29] audit: type=1326 audit(1736440859.282:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 208.342536][ T29] audit: type=1326 audit(1736440859.282:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7080 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 208.554024][ T5865] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 209.203787][ T5865] usb 4-1: Using ep0 maxpacket: 32 [ 209.211123][ T5865] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 209.243327][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.318283][ T5865] usb 4-1: config 0 descriptor?? [ 209.331142][ T5865] gspca_main: sq930x-2.14.0 probing 041e:403c [ 210.823510][ T5865] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 210.829539][ T5865] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 211.241645][ T5863] usb 4-1: USB disconnect, device number 7 [ 212.596942][ T7135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.261'. [ 212.633892][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 212.633903][ T29] audit: type=1326 audit(1736440864.732:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 212.739362][ T29] audit: type=1326 audit(1736440864.762:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 212.742106][ T29] audit: type=1326 audit(1736440864.762:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7145 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25fc5b85e5 code=0x7ffc0000 [ 212.792308][ T29] audit: type=1326 audit(1736440864.762:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25fc584690 code=0x7ffc0000 [ 212.792344][ T29] audit: type=1326 audit(1736440864.762:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 212.792371][ T29] audit: type=1326 audit(1736440864.762:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 212.792402][ T29] audit: type=1326 audit(1736440864.772:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25fc584690 code=0x7ffc0000 [ 212.792429][ T29] audit: type=1326 audit(1736440864.772:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 212.792455][ T29] audit: type=1326 audit(1736440864.772:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 212.792483][ T29] audit: type=1326 audit(1736440864.772:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7141 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25fc585d29 code=0x7ffc0000 [ 212.843918][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.056805][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.687161][ T7164] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 214.695368][ T7164] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 214.704420][ T7164] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 214.712565][ T7164] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 215.266117][ T7165] ipt_ECN: cannot use operation on non-tcp rule [ 215.293112][ T7165] xt_nat: multiple ranges no longer supported [ 215.959519][ T7172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.143958][ T7174] syz.1.269: attempt to access beyond end of device [ 216.143958][ T7174] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 218.144547][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 218.144564][ T29] audit: type=1400 audit(1736440869.322:499): avc: denied { remount } for pid=7176 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 218.338048][ T29] audit: type=1400 audit(1736440869.332:500): avc: denied { write } for pid=7176 comm="syz.3.273" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 218.360904][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.828523][ T29] audit: type=1400 audit(1736440870.542:501): avc: denied { read } for pid=7191 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 219.638179][ T29] audit: type=1400 audit(1736440871.732:502): avc: denied { create } for pid=7199 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 219.861456][ T7204] autofs: Bad value for 'fd' [ 220.193899][ T29] audit: type=1400 audit(1736440871.732:503): avc: denied { connect } for pid=7199 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 220.262930][ T29] audit: type=1400 audit(1736440871.732:504): avc: denied { listen } for pid=7199 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 220.688922][ T29] audit: type=1400 audit(1736440871.792:505): avc: denied { setopt } for pid=7199 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 220.734062][ T29] audit: type=1400 audit(1736440872.032:506): avc: denied { write } for pid=7199 comm="syz.4.284" path="socket:[12209]" dev="sockfs" ino=12209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 220.821636][ T29] audit: type=1400 audit(1736440872.052:507): avc: denied { listen } for pid=7199 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 221.573968][ T7220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.594493][ T29] audit: type=1400 audit(1736440873.682:508): avc: denied { bind } for pid=7211 comm="syz.5.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 222.103955][ T7228] syz.1.282: attempt to access beyond end of device [ 222.103955][ T7228] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 225.343458][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 225.361338][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.289'. [ 225.382762][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 225.382798][ T29] audit: type=1400 audit(1736440877.422:518): avc: denied { accept } for pid=7253 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 226.129878][ T29] audit: type=1400 audit(1736440877.432:519): avc: denied { bind } for pid=7253 comm="syz.1.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 226.911809][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.963901][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.973728][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 227.043775][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 227.055530][ T5827] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 227.062782][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 227.290928][ T7263] chnl_net:caif_netlink_parms(): no params data found [ 227.394513][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.409443][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.423797][ T7263] bridge_slave_0: entered allmulticast mode [ 227.434445][ T7263] bridge_slave_0: entered promiscuous mode [ 227.451308][ T7263] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.463569][ T7263] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.471088][ T7263] bridge_slave_1: entered allmulticast mode [ 227.493927][ T7263] bridge_slave_1: entered promiscuous mode [ 227.647708][ T7263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.708045][ T7263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.786181][ T7263] team0: Port device team_slave_0 added [ 227.793182][ T7263] team0: Port device team_slave_1 added [ 227.812162][ T7263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.821101][ T7263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.847376][ T7263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.859031][ T7263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.866051][ T7263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.892280][ T7263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.921988][ T7263] hsr_slave_0: entered promiscuous mode [ 227.931928][ T7263] hsr_slave_1: entered promiscuous mode [ 227.937971][ T7263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.945584][ T7263] Cannot create hsr debugfs directory [ 228.041534][ T7263] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 228.053844][ T7263] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 228.062186][ T7263] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 228.074733][ T7263] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.093169][ T7263] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.100370][ T7263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.108715][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.115813][ T7263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.162563][ T7263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.177653][ T7263] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.186996][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.198663][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.216904][ T6654] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.223998][ T6654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.237426][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.244534][ T6691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.277727][ T7263] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.288830][ T7263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.387721][ T7263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.519172][ T7263] veth0_vlan: entered promiscuous mode [ 228.530384][ T7263] veth1_vlan: entered promiscuous mode [ 228.551962][ T7263] veth0_macvtap: entered promiscuous mode [ 228.560550][ T7263] veth1_macvtap: entered promiscuous mode [ 228.572843][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.584024][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.594402][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.605900][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.615990][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.626696][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.636706][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.647908][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.657833][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.668319][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.678392][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.689099][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.700035][ T7263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.716242][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.726970][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.736836][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.748174][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.758109][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.768652][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.778579][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.789133][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.799002][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.809569][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.819568][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.830131][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.842909][ T7263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.853844][ T7263] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.862549][ T7263] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.871514][ T7263] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.880446][ T7263] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.939758][ T7168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.954385][ T7168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.973160][ T6190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.981293][ T6190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.078660][ T5818] Bluetooth: hci6: command tx timeout [ 229.990234][ T7299] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 231.023519][ T29] audit: type=1400 audit(1736440882.442:520): avc: denied { accept } for pid=7292 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 231.153821][ T5818] Bluetooth: hci6: command tx timeout [ 232.553442][ T29] audit: type=1400 audit(1736440884.562:521): avc: denied { set_context_mgr } for pid=7311 comm="syz.5.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 232.625099][ T7321] binder: 7311:7321 ioctl c018620c 20000000 returned -22 [ 233.499900][ T5818] Bluetooth: hci6: command tx timeout [ 234.442514][ T7337] binder: 7336:7337 ioctl c0306201 20000380 returned -22 [ 234.763710][ T7341] syz.3.296: attempt to access beyond end of device [ 234.763710][ T7341] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 235.443976][ T29] audit: type=1400 audit(1736440887.542:522): avc: denied { connect } for pid=7336 comm="syz.6.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.639019][ T5818] Bluetooth: hci6: command tx timeout [ 238.080085][ T7361] nfs4: Unknown parameter '»éd05Þ{—dp' [ 238.827266][ T7370] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.981592][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.304'. [ 238.992265][ T7361] xt_CT: No such helper "snmp_trap" [ 239.958639][ T7381] Cannot find add_set index 32768 as target [ 240.551615][ T5903] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 240.893630][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 240.917515][ T5903] usb 7-1: config 0 has an invalid descriptor of length 208, skipping remainder of the config [ 240.946908][ T5903] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.404235][ T5903] usb 7-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 241.423302][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.440677][ T5903] usb 7-1: Product: syz [ 241.456101][ T5903] usb 7-1: Manufacturer: syz [ 241.468818][ T5903] usb 7-1: SerialNumber: syz [ 241.626369][ T5903] usb 7-1: config 0 descriptor?? [ 243.432778][ T7405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.311'. [ 247.791103][ T5903] usb 7-1: USB disconnect, device number 2 [ 249.165297][ T7448] NILFS (loop5): device size too small [ 249.774306][ T29] audit: type=1400 audit(1736440901.262:523): avc: denied { getopt } for pid=7434 comm="syz.5.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 251.947653][ T7472] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 252.030399][ T5826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 253.091612][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 253.098967][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 253.107702][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 253.115819][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 253.123894][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 253.131005][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 253.576332][ T7485] netlink: 20 bytes leftover after parsing attributes in process `syz.5.332'. [ 254.280591][ T7491] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 254.363776][ T5823] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 255.032275][ T7492] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 255.051687][ T7492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.144687][ T29] audit: type=1400 audit(1736440907.222:524): avc: denied { write } for pid=7484 comm="syz.5.332" name="file0" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 255.169407][ T29] audit: type=1400 audit(1736440907.222:525): avc: denied { open } for pid=7484 comm="syz.5.332" path="/46/file0" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 255.191833][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.198729][ T29] audit: type=1400 audit(1736440907.222:526): avc: denied { ioctl } for pid=7484 comm="syz.5.332" path="/46/file0" dev="tmpfs" ino=272 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 255.233714][ T5818] Bluetooth: hci7: command tx timeout [ 255.358735][ T7471] chnl_net:caif_netlink_parms(): no params data found [ 255.798714][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.073449][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.082090][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.091429][ T7471] bridge_slave_0: entered allmulticast mode [ 257.074665][ T7471] bridge_slave_0: entered promiscuous mode [ 257.091883][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.099136][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.145625][ T7471] bridge_slave_1: entered allmulticast mode [ 257.284420][ T7471] bridge_slave_1: entered promiscuous mode [ 257.336094][ T5818] Bluetooth: hci7: command tx timeout [ 257.484586][ T7521] xt_hashlimit: max too large, truncated to 1048576 [ 258.519842][ T7471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.534555][ T7471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.077124][ T29] audit: type=1400 audit(1736440911.172:527): avc: denied { getopt } for pid=7543 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 260.038990][ T5818] Bluetooth: hci7: command tx timeout [ 260.064181][ T7471] team0: Port device team_slave_0 added [ 260.102540][ T7471] team0: Port device team_slave_1 added [ 261.870779][ T29] audit: type=1400 audit(1736440913.962:528): avc: denied { read write } for pid=7565 comm="syz.5.350" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 261.905801][ T7471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.921455][ T7471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.931213][ T29] audit: type=1400 audit(1736440913.962:529): avc: denied { open } for pid=7565 comm="syz.5.350" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 262.019214][ T7471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.093315][ T7471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.126605][ T5818] Bluetooth: hci7: command tx timeout [ 262.151055][ T7471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.603030][ T7471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.766489][ T7471] hsr_slave_0: entered promiscuous mode [ 262.834184][ T7471] hsr_slave_1: entered promiscuous mode [ 262.852053][ T7562] Invalid ELF header magic: != ELF [ 262.877814][ T29] audit: type=1400 audit(1736440914.942:530): avc: denied { module_load } for pid=7555 comm="syz.6.348" path="/sys/kernel/notes" dev="sysfs" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 262.921632][ T7471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.928035][ T7562] ntfs3(nullb0): Primary boot signature is not NTFS. [ 262.979592][ T7471] Cannot create hsr debugfs directory [ 262.993309][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.350'. [ 263.006145][ T7566] netlink: 48 bytes leftover after parsing attributes in process `syz.5.350'. [ 263.022999][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.350'. [ 263.222807][ T7562] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 263.403700][ T29] audit: type=1800 audit(1736440915.472:531): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.351" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 263.736213][ T7566] vlan2: entered allmulticast mode [ 265.294207][ T7471] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 265.658581][ T3062] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.985161][ T7471] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 266.037145][ T7471] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 267.284971][ T3062] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.481199][ T7471] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 267.898822][ T7614] syz.6.360: attempt to access beyond end of device [ 267.898822][ T7614] nbd6: rw=0, sector=2, nr_sectors = 1 limit=0 [ 268.926815][ T3062] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.874340][ T29] audit: type=1400 audit(1736440921.902:532): avc: denied { listen } for pid=7620 comm="syz.6.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 270.276948][ T29] audit: type=1400 audit(1736440921.902:533): avc: denied { accept } for pid=7620 comm="syz.6.362" lport=33190 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 270.822135][ T3062] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.876312][ T7471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.912129][ T7471] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.971305][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.978468][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.015300][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.022489][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.113568][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 272.120353][ T7629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.127558][ T7629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 272.141602][ T7629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.147677][ T7629] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 272.155851][ T7629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.162742][ T7629] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 272.181007][ T7629] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 272.187145][ T7629] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 272.205216][ T7629] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 272.211199][ T7629] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 272.222787][ T7629] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 272.228946][ T7629] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 272.265022][ T7471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.283980][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 272.305250][ T8] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 272.384809][ T8] usb 2-1: config 0 has no interface number 0 [ 273.317152][ T7629] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 273.326659][ T3062] bridge_slave_1: left allmulticast mode [ 273.332694][ T3062] bridge_slave_1: left promiscuous mode [ 273.350655][ T7664] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 273.363332][ T7629] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 273.369740][ T7629] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 273.377744][ T7629] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 273.472354][ T3062] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.492567][ T7658] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 273.546988][ T3062] bridge_slave_0: left allmulticast mode [ 273.584533][ T3062] bridge_slave_0: left promiscuous mode [ 273.590447][ T3062] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.624540][ T8] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 273.633935][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.641942][ T8] usb 2-1: Product: syz [ 273.673502][ T8] usb 2-1: Manufacturer: syz [ 273.678139][ T8] usb 2-1: SerialNumber: syz [ 273.704860][ T8] usb 2-1: config 0 descriptor?? [ 274.012120][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 274.195371][ T5818] Bluetooth: hci4: command 0x0405 tx timeout [ 274.201925][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 274.215428][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 274.296103][ T8] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 274.306622][ T8] pctv452e: pctv452e_power_ctrl: 1 [ 274.306622][ T8] [ 274.315273][ T8] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 274.315273][ T8] [ 274.325712][ T5818] Bluetooth: hci6: command 0x0c1a tx timeout [ 274.331783][ T5818] Bluetooth: hci5: command 0x0406 tx timeout [ 274.345579][ T8] dvb-usb: bulk message failed: -22 (5/0) [ 274.367385][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.378172][ T8] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 274.388112][ T8] usb 2-1: media controller created [ 274.395636][ T8] dvb-usb: bulk message failed: -22 (8/0) [ 274.402449][ T8] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 274.411826][ T8] dvb-usb: MAC address reading failed. [ 274.434514][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.647698][ T7676] syz.5.371: attempt to access beyond end of device [ 274.647698][ T7676] nbd5: rw=0, sector=2, nr_sectors = 1 limit=0 [ 275.484138][ T5823] Bluetooth: hci7: command 0x0c1a tx timeout [ 275.698472][ T8] DVB: Unable to find symbol stb0899_attach() [ 275.706227][ T8] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 275.822059][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 275.831529][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 275.841446][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.374'. [ 276.633661][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 276.755485][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 276.805962][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 276.812027][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 276.818111][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 276.824188][ T5823] Bluetooth: hci6: command 0x0c1a tx timeout [ 277.043491][ T8] rc_core: IR keymap rc-tt-1500 not found [ 277.049435][ T8] Registered IR keymap rc-empty [ 277.057804][ T8] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 277.069336][ T8] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input8 [ 277.204567][ T29] audit: type=1400 audit(1736440929.252:534): avc: denied { mounton } for pid=7692 comm="syz.1.376" path="/proc/430/task" dev="proc" ino=15021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 277.628503][ T8] dvb-usb: schedule remote query interval to 100 msecs. [ 277.635680][ T8] pctv452e: pctv452e_power_ctrl: 0 [ 277.635680][ T8] [ 277.642994][ T8] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 277.655988][ T8] usb 2-1: USB disconnect, device number 4 [ 277.669292][ T29] audit: type=1400 audit(1736440929.762:535): avc: denied { read } for pid=5176 comm="acpid" name="event4" dev="devtmpfs" ino=2854 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.693212][ T5818] Bluetooth: hci7: command 0x0c1a tx timeout [ 277.709443][ T29] audit: type=1400 audit(1736440929.762:536): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2854 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.732871][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.297808][ T7702] netlink: 'syz.4.378': attribute type 16 has an invalid length. [ 278.306543][ T7702] netlink: 'syz.4.378': attribute type 3 has an invalid length. [ 278.315136][ T7702] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 278.322904][ T7702] netlink: 'syz.4.378': attribute type 2 has an invalid length. [ 278.330745][ T7702] netlink: 64022 bytes leftover after parsing attributes in process `syz.4.378'. [ 278.364227][ T7702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.850760][ T8] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 278.864808][ T5823] Bluetooth: hci6: command 0x0c1a tx timeout [ 280.517118][ T5823] Bluetooth: hci7: command 0x0c1a tx timeout [ 281.745865][ T3062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.792880][ T3062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.836570][ T3062] bond0 (unregistering): Released all slaves [ 282.229775][ T7736] tmpfs: Bad value for 'size' [ 282.611032][ T29] audit: type=1400 audit(1736440934.702:537): avc: denied { module_request } for pid=7471 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 283.194442][ T7750] libceph: resolve '+ælc' (ret=-3): failed [ 283.960121][ T7758] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 284.206762][ T7471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.574471][ T3062] hsr_slave_0: left promiscuous mode [ 287.729774][ T29] audit: type=1400 audit(1736440938.882:538): avc: denied { connect } for pid=7790 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 287.755882][ T29] audit: type=1400 audit(1736440938.882:539): avc: denied { write } for pid=7790 comm="syz.1.392" path="socket:[15726]" dev="sockfs" ino=15726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 288.300204][ T3062] hsr_slave_1: left promiscuous mode [ 288.455195][ T3062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.462831][ T3062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.476962][ T3062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.013623][ T3062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.073383][ T3062] veth1_macvtap: left promiscuous mode [ 289.096370][ T3062] veth0_macvtap: left promiscuous mode [ 289.109095][ T3062] veth1_vlan: left promiscuous mode [ 289.116714][ T3062] veth0_vlan: left promiscuous mode [ 291.346328][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.396'. [ 292.511104][ T7846] Invalid logical block size (68) [ 292.523235][ T29] audit: type=1400 audit(1736440944.602:540): avc: denied { write } for pid=7840 comm="syz.6.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 294.927156][ T3062] team0 (unregistering): Port device team_slave_1 removed [ 295.171052][ T3062] team0 (unregistering): Port device team_slave_0 removed [ 296.322475][ T29] audit: type=1400 audit(1736440948.412:541): avc: denied { accept } for pid=7873 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 296.955776][ T7471] veth0_vlan: entered promiscuous mode [ 296.965563][ T7471] veth1_vlan: entered promiscuous mode [ 297.044853][ T7888] bridge0: port 3(syz_tun) entered blocking state [ 297.051807][ T7888] bridge0: port 3(syz_tun) entered disabled state [ 297.059664][ T7888] syz_tun: entered allmulticast mode [ 297.071212][ T7888] syz_tun: entered promiscuous mode [ 297.079842][ T7888] bridge0: port 3(syz_tun) entered blocking state [ 297.086639][ T7888] bridge0: port 3(syz_tun) entered forwarding state [ 297.920479][ T7471] veth0_macvtap: entered promiscuous mode [ 298.130435][ T7471] veth1_macvtap: entered promiscuous mode [ 299.521215][ T29] audit: type=1400 audit(1736440951.342:542): avc: denied { read } for pid=7904 comm="syz.5.410" laddr=172.20.20.170 lport=255 faddr=172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 300.867571][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.895728][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.909150][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.919694][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.929656][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.940769][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.951260][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.961749][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.971666][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.984195][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.994172][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.004949][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.015877][ T7471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.027503][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.038840][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.049586][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.060820][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.071044][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.081761][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.093677][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.104196][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.114029][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.124574][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.134404][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.145366][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.156845][ T7471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.205249][ T7471] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.262544][ T7471] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.474056][ T29] audit: type=1400 audit(1736440953.552:543): avc: denied { watch } for pid=7924 comm="syz.5.413" path="/proc/282/task" dev="proc" ino=16414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 301.713753][ T7471] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.413585][ T7471] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.649551][ T29] audit: type=1400 audit(1736440954.582:544): avc: denied { bind } for pid=7923 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 303.005314][ T29] audit: type=1400 audit(1736440954.662:545): avc: denied { write } for pid=7923 comm="syz.4.412" path="socket:[15927]" dev="sockfs" ino=15927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 303.221001][ T7950] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 304.101366][ T7965] netlink: 72 bytes leftover after parsing attributes in process `syz.5.417'. [ 304.295161][ T29] audit: type=1400 audit(1736440956.022:546): avc: denied { create } for pid=7945 comm="syz.5.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 304.541421][ T29] audit: type=1400 audit(1736440956.172:547): avc: denied { append } for pid=7945 comm="syz.5.417" name="v4l-subdev5" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 304.609884][ T29] audit: type=1400 audit(1736440956.182:548): avc: denied { write } for pid=7945 comm="syz.5.417" path="socket:[15952]" dev="sockfs" ino=15952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 304.632961][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.855351][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.863198][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.868628][ T3062] IPVS: stop unused estimator thread 0... [ 305.250165][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.287587][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.480568][ T7991] netlink: 28 bytes leftover after parsing attributes in process `syz.7.330'. [ 307.344568][ T7998] Bluetooth: MGMT ver 1.23 [ 307.368375][ T29] audit: type=1400 audit(1736440959.462:549): avc: denied { setopt } for pid=7997 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.563769][ T5863] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 310.123521][ T5863] usb 7-1: Using ep0 maxpacket: 32 [ 310.254868][ T29] audit: type=1400 audit(1736440962.282:550): avc: denied { listen } for pid=8011 comm="syz.5.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 310.287970][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 310.299169][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 310.394935][ T5863] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 310.423451][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.805525][ T5863] usb 7-1: config 0 descriptor?? [ 310.837986][ T5863] usb 7-1: can't set config #0, error -71 [ 310.974418][ T5863] usb 7-1: USB disconnect, device number 3 [ 314.485118][ T29] audit: type=1400 audit(1736440966.542:551): avc: denied { append } for pid=8060 comm="syz.7.435" name="event3" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.703458][ T29] audit: type=1400 audit(1736440969.032:552): avc: denied { connect } for pid=8083 comm="syz.1.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 317.723132][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.560900][ T29] audit: type=1400 audit(1736440973.432:553): avc: denied { search } for pid=8111 comm="syz.4.445" name="/" dev="configfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.912921][ T29] audit: type=1400 audit(1736440973.452:554): avc: denied { mounton } for pid=8111 comm="syz.4.445" path="/" dev="configfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.973469][ T29] audit: type=1400 audit(1736440973.482:555): avc: denied { remount } for pid=8111 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 322.119258][ T29] audit: type=1400 audit(1736440973.562:556): avc: denied { read } for pid=8111 comm="syz.4.445" name="/" dev="configfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 322.141014][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.193674][ T29] audit: type=1400 audit(1736440973.572:557): avc: denied { open } for pid=8111 comm="syz.4.445" path="/" dev="configfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 322.363468][ T29] audit: type=1400 audit(1736440974.252:558): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 322.524508][ T29] audit: type=1400 audit(1736440974.612:559): avc: denied { mount } for pid=8131 comm="syz.5.450" name="/" dev="autofs" ino=16319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 322.977981][ T29] audit: type=1400 audit(1736440975.062:560): avc: denied { create } for pid=8141 comm="syz.4.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 323.848317][ T5863] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 324.299611][ T8157] trusted_key: encrypted_key: insufficient parameters specified [ 324.335212][ T5863] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 324.344508][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.308361][ T5863] usb 5-1: config 0 descriptor?? [ 325.474515][ T29] audit: type=1400 audit(1736440977.562:561): avc: denied { sys_chroot } for pid=8152 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 325.596075][ T29] audit: type=1400 audit(1736440977.562:562): avc: denied { setgid } for pid=8152 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 326.677249][ T5863] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 326.686099][ T5863] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 326.694378][ T5863] [drm:udl_init] *ERROR* Selecting channel failed [ 326.712511][ T5863] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 326.719421][ T5863] [drm] Initialized udl on minor 2 [ 326.727644][ T5863] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 326.743408][ T5863] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 326.755248][ T5862] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 326.856079][ T5862] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 328.040948][ T5863] usb 5-1: USB disconnect, device number 4 [ 329.741083][ T8181] netlink: 80 bytes leftover after parsing attributes in process `syz.1.457'. [ 331.553296][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 331.553315][ T29] audit: type=1400 audit(1736440983.642:565): avc: denied { search } for pid=5485 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=15650 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 332.710040][ T29] audit: type=1400 audit(1736440984.802:566): avc: denied { create } for pid=8219 comm="syz.6.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 332.969182][ T8228] Cannot find add_set index 32768 as target [ 333.063240][ T8238] netlink: 'syz.1.466': attribute type 7 has an invalid length. [ 333.897593][ T8247] syz.7.469: attempt to access beyond end of device [ 333.897593][ T8247] nbd7: rw=0, sector=2, nr_sectors = 1 limit=0 [ 336.180259][ T8262] ufs: You didn't specify the type of your ufs filesystem [ 336.180259][ T8262] [ 336.180259][ T8262] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 336.180259][ T8262] [ 336.180259][ T8262] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 336.211576][ T8262] ufs: ufstype=old is supported read-only [ 336.219520][ T8262] syz.6.473: attempt to access beyond end of device [ 336.219520][ T8262] loop13: rw=0, sector=16, nr_sectors = 2 limit=0 [ 336.603522][ T29] audit: type=1400 audit(1736440988.262:567): avc: denied { mounton } for pid=8258 comm="syz.6.473" path="/34/file0" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 336.786215][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.7.471'. [ 336.878529][ T8266] netlink: 'syz.7.471': attribute type 12 has an invalid length. [ 337.281783][ T8255] blktrace: Concurrent blktraces are not allowed on sg0 [ 337.486351][ T29] audit: type=1400 audit(1736440989.502:568): avc: denied { setopt } for pid=8254 comm="syz.4.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 339.755949][ T29] audit: type=1326 audit(1736440990.532:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8273 comm="syz.1.475" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06e2985d29 code=0x0 [ 339.826869][ T29] audit: type=1400 audit(1736440991.312:570): avc: denied { read } for pid=8270 comm="syz.6.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 339.846612][ T29] audit: type=1400 audit(1736440991.312:571): avc: denied { ioctl } for pid=8270 comm="syz.6.474" path="socket:[16987]" dev="sockfs" ino=16987 ioctlcmd=0x451a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 339.958645][ T29] audit: type=1400 audit(1736440992.052:572): avc: denied { connect } for pid=8276 comm="syz.7.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 341.083463][ T29] audit: type=1400 audit(1736440992.052:573): avc: denied { setopt } for pid=8276 comm="syz.7.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 341.551353][ T29] audit: type=1400 audit(1736440993.642:574): avc: denied { read } for pid=8299 comm="syz.6.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 342.746536][ T8311] syzkaller1: entered promiscuous mode [ 342.752219][ T8311] syzkaller1: entered allmulticast mode [ 342.916837][ T8311] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 342.934094][ T8311] batman_adv: batadv0: Adding interface: gretap1 [ 342.940640][ T8311] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.966497][ T8311] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 346.983806][ T8341] 9pnet_virtio: no channels available for device syz [ 347.320576][ T29] audit: type=1400 audit(1736440999.092:575): avc: denied { ioctl } for pid=8336 comm="syz.4.488" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 347.371698][ T8340] befs: (nbd4): No write support. Marking filesystem read-only [ 347.379489][ T8340] syz.4.488: attempt to access beyond end of device [ 347.379489][ T8340] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 347.392207][ T8340] befs: (nbd4): unable to read superblock [ 348.454974][ T1198] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 349.083541][ T1198] usb 6-1: device descriptor read/64, error -71 [ 349.928283][ T1198] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 350.174122][ T8379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 350.180338][ T8379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 350.187736][ T8379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.193959][ T8379] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 350.201379][ T8379] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 350.447153][ T8379] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 350.453228][ T8379] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 351.648259][ T8402] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 352.397908][ T8405] lo speed is unknown, defaulting to 1000 [ 352.409389][ T8405] lo speed is unknown, defaulting to 1000 [ 352.417357][ T8405] lo speed is unknown, defaulting to 1000 [ 352.510673][ T8405] infiniband sz1: set active [ 352.516010][ T8405] infiniband sz1: added lo [ 352.522555][ T8405] sz1: rxe_create_cq: returned err = -12 [ 352.528783][ T8405] infiniband sz1: Couldn't create ib_mad CQ [ 352.534964][ T8405] infiniband sz1: Couldn't open port 1 [ 352.548759][ T5863] lo speed is unknown, defaulting to 1000 [ 352.646926][ T8405] RDS/IB: sz1: added [ 352.651467][ T8405] smc: adding ib device sz1 with port count 1 [ 352.657996][ T8405] smc: ib device sz1 port 1 has pnetid [ 352.668196][ T8405] lo speed is unknown, defaulting to 1000 [ 352.762492][ T8405] lo speed is unknown, defaulting to 1000 [ 352.855321][ T8405] lo speed is unknown, defaulting to 1000 [ 352.948136][ T8405] lo speed is unknown, defaulting to 1000 [ 353.041886][ T8405] lo speed is unknown, defaulting to 1000 [ 353.140610][ T8405] lo speed is unknown, defaulting to 1000 [ 353.234354][ T8405] lo speed is unknown, defaulting to 1000 [ 353.332367][ T5863] lo speed is unknown, defaulting to 1000 [ 353.364791][ T5818] Bluetooth: hci5: command 0x0406 tx timeout [ 353.370846][ T5818] Bluetooth: hci4: command 0x0405 tx timeout [ 353.377119][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 353.383239][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 353.389319][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 353.395491][ T5818] Bluetooth: hci7: command 0x0c1a tx timeout [ 353.401517][ T5818] Bluetooth: hci6: command 0x0c1a tx timeout [ 355.833462][ T29] audit: type=1400 audit(1736441007.882:576): avc: denied { sqpoll } for pid=8426 comm="syz.7.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 356.625463][ T29] audit: type=1400 audit(1736441008.032:577): avc: denied { write } for pid=8423 comm="syz.6.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 359.802968][ T8469] 9pnet_virtio: no channels available for device syz [ 360.413578][ T29] audit: type=1400 audit(1736441011.702:578): avc: denied { getopt } for pid=8451 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 360.503445][ T8470] befs: (nbd4): No write support. Marking filesystem read-only [ 360.511850][ T8470] syz.4.506: attempt to access beyond end of device [ 360.511850][ T8470] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 360.524870][ T8470] befs: (nbd4): unable to read superblock [ 362.033643][ T30] INFO: task syz.0.250:7088 blocked for more than 143 seconds. [ 362.041314][ T30] Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 362.049011][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.057863][ T30] task:syz.0.250 state:D stack:24752 pid:7088 tgid:7087 ppid:5815 flags:0x00004006 [ 362.068643][ T30] Call Trace: [ 362.072502][ T30] [ 362.075521][ T30] __schedule+0xe58/0x5ad0 [ 362.080004][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 362.085490][ T30] ? mark_lock+0xb5/0xc60 [ 362.358075][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 362.363298][ T30] ? __pfx___schedule+0x10/0x10 [ 362.368242][ T30] ? schedule+0x298/0x350 [ 362.373580][ T30] ? __pfx_lock_release+0x10/0x10 [ 362.378627][ T30] ? lock_acquire+0x2f/0xb0 [ 362.383135][ T30] ? schedule+0x1fd/0x350 [ 362.387618][ T30] schedule+0xe7/0x350 [ 362.391698][ T30] schedule_preempt_disabled+0x13/0x30 [ 362.397212][ T30] rwsem_down_read_slowpath+0x61e/0xb20 [ 362.402784][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 362.409958][ T30] ? super_lock+0x31a/0x3f0 [ 362.414565][ T30] ? lock_acquire+0x2f/0xb0 [ 362.419079][ T30] ? super_lock+0x31a/0x3f0 [ 362.423656][ T30] down_read+0x124/0x330 [ 362.427912][ T30] ? __pfx_down_read+0x10/0x10 [ 362.432686][ T30] ? sync_inodes_sb+0x6c4/0xa50 [ 362.437641][ T30] ? __pfx___might_resched+0x10/0x10 [ 362.442944][ T30] super_lock+0x31a/0x3f0 [ 362.447336][ T30] ? __pfx_super_lock+0x10/0x10 [ 362.452201][ T30] ? __pfx_lock_release+0x10/0x10 [ 362.457261][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 362.462308][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 362.467737][ T30] ? lock_acquire+0x2f/0xb0 [ 362.472246][ T30] ? iterate_supers+0x11d/0x240 [ 362.477696][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 362.483256][ T30] iterate_supers+0xb9/0x240 [ 362.488404][ T30] ksys_sync+0x8a/0x150 [ 362.492576][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 362.497373][ T30] ? rcu_is_watching+0x12/0xc0 [ 362.502161][ T30] ? do_syscall_64+0x91/0x250 [ 362.506915][ T30] __do_sys_sync+0xe/0x20 [ 362.511255][ T30] do_syscall_64+0xcd/0x250 [ 362.515807][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.521712][ T30] RIP: 0033:0x7f67fb985d29 [ 362.526216][ T30] RSP: 002b:00007f67fc6ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 362.534676][ T30] RAX: ffffffffffffffda RBX: 00007f67fbb75fa0 RCX: 00007f67fb985d29 [ 362.542653][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 362.550704][ T30] RBP: 00007f67fbb75fa0 R08: 0000000000000000 R09: 0000000000000000 [ 362.558744][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.566830][ T30] R13: 0000000000000000 R14: 00007f67fbb75fa0 R15: 00007ffc685089e8 [ 362.574858][ T30] [ 362.578860][ T30] [ 362.578860][ T30] Showing all locks held in the system: [ 362.586698][ T30] 1 lock held by khungtaskd/30: [ 362.591552][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 362.601464][ T30] 4 locks held by kworker/u8:2/35: [ 362.813542][ T30] #0: ffff8881446ff948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 362.886450][ T30] #1: ffffc90000ab7d80 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 363.115536][ T30] #2: ffff8880b873ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 363.142766][ T30] #3: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 363.166797][ T30] 3 locks held by kworker/u8:7/3062: [ 363.181295][ T30] 3 locks held by dhcpcd/5485: [ 363.191812][ T30] #0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 363.203590][ T30] #1: ffff8880b8628a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 363.233815][ T30] #2: ffff88803107d298 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb6/0x1490 [ 363.243198][ T30] 2 locks held by getty/5576: [ 363.247994][ T30] #0: ffff8880365e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 363.257875][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 363.268523][ T30] 1 lock held by syz-executor/5822: [ 363.273796][ T30] #0: ffff88807dfc80e0 (&type->s_umount_key#70){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 363.284212][ T30] 1 lock held by syz.0.250/7088: [ 363.289168][ T30] #0: ffff88807dfc80e0 (&type->s_umount_key#70){++++}-{4:4}, at: super_lock+0x31a/0x3f0 [ 363.300496][ T30] 1 lock held by syz.1.508/8481: [ 363.305541][ T30] #0: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 363.324310][ T30] 1 lock held by syz.7.510/8475: [ 363.329992][ T30] #0: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 363.340239][ T30] 1 lock held by syz.4.509/8487: [ 363.345248][ T30] #0: ffffffff8e089a68 (sched_core_mutex){+.+.}-{4:4}, at: sched_core_get+0x3f/0xa0 [ 363.354961][ T30] 1 lock held by dhcpcd/8494: [ 363.359719][ T30] #0: ffff888028166258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 363.369566][ T30] 1 lock held by dhcpcd/8495: [ 363.374353][ T30] #0: ffff888033b00258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 363.384287][ T30] 1 lock held by dhcpcd/8496: [ 363.389001][ T30] #0: ffff88805ac5e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 363.399312][ T30] 1 lock held by dhcpcd/8497: [ 363.404736][ T30] #0: ffff8880269c6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 363.414528][ T30] 1 lock held by dhcpcd/8498: [ 363.419257][ T30] #0: ffff8880317aa258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 363.429148][ T30] 1 lock held by dhcpcd/8499: [ 363.433892][ T30] #0: ffff8880317ac258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 363.443664][ T30] 1 lock held by dhcpcd/8500: [ 363.448440][ T30] #0: ffff888029cda258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 363.458375][ T30] 1 lock held by dhcpcd/8503: [ 363.463133][ T30] [ 363.465577][ T30] ============================================= [ 363.465577][ T30] [ 363.474125][ T30] NMI backtrace for cpu 0 [ 363.478459][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 363.488969][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 363.499035][ T30] Call Trace: [ 363.502319][ T30] [ 363.505251][ T30] dump_stack_lvl+0x116/0x1f0 [ 363.509948][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 363.514903][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 363.520891][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 363.526883][ T30] watchdog+0xf14/0x1240 [ 363.531145][ T30] ? __pfx_watchdog+0x10/0x10 [ 363.535829][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 363.541045][ T30] ? __kthread_parkme+0x148/0x220 [ 363.546088][ T30] ? __pfx_watchdog+0x10/0x10 [ 363.550778][ T30] kthread+0x2c1/0x3a0 [ 363.554867][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.560078][ T30] ? __pfx_kthread+0x10/0x10 [ 363.564693][ T30] ret_from_fork+0x45/0x80 [ 363.569108][ T30] ? __pfx_kthread+0x10/0x10 [ 363.573696][ T30] ret_from_fork_asm+0x1a/0x30 [ 363.578468][ T30] [ 363.582031][ T30] Sending NMI from CPU 0 to CPUs 1: [ 363.587866][ C1] NMI backtrace for cpu 1 [ 363.587877][ C1] CPU: 1 UID: 0 PID: 5820 Comm: syz-executor Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 363.587898][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 363.587908][ C1] RIP: 0010:__x64_sys_read+0x0/0xb0 [ 363.587930][ C1] Code: f7 e8 34 c4 ee ff e9 21 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 53 48 89 fb 48 83 ec 10 e8 ef 1f 8c ff 48 8d 7b 60 48 [ 363.587946][ C1] RSP: 0018:ffffc90003377f20 EFLAGS: 00000246 [ 363.587961][ C1] RAX: ffffffffffffffff RBX: ffffc90003377f58 RCX: 1ffffffff20bdf49 [ 363.587973][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003377f58 [ 363.587984][ C1] RBP: ffffc90003377f48 R08: 0000000000000001 R09: 0000000000000001 [ 363.587995][ C1] R10: ffffffff905f3d97 R11: 0000000000000000 R12: 0000000000000000 [ 363.588007][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 363.588018][ C1] FS: 0000555559801500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 363.588036][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.588048][ C1] CR2: 00007f06e2b47ab8 CR3: 000000005fff2000 CR4: 00000000003526f0 [ 363.588060][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 363.588070][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 363.588081][ C1] Call Trace: [ 363.588086][ C1] [ 363.588093][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 363.588113][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 363.588130][ C1] ? nmi_handle+0x1ac/0x5d0 [ 363.588149][ C1] ? __pfx___x64_sys_read+0x10/0x10 [ 363.588166][ C1] ? default_do_nmi+0x6a/0x160 [ 363.588183][ C1] ? exc_nmi+0x170/0x1e0 [ 363.588199][ C1] ? end_repeat_nmi+0xf/0x53 [ 363.588226][ C1] ? __pfx___x64_sys_read+0x10/0x10 [ 363.588244][ C1] ? __pfx___x64_sys_read+0x10/0x10 [ 363.588262][ C1] ? __pfx___x64_sys_read+0x10/0x10 [ 363.588279][ C1] [ 363.588285][ C1] [ 363.588290][ C1] do_syscall_64+0xcd/0x250 [ 363.588312][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.588333][ C1] RIP: 0033:0x7f06e298473c [ 363.588346][ C1] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 363.588362][ C1] RSP: 002b:00007ffcd16fb1b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 363.588378][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f06e298473c [ 363.588389][ C1] RDX: 0000000000000030 RSI: 00007ffcd16fb260 RDI: 00000000000000f9 [ 363.588401][ C1] RBP: 00007ffcd16fb20c R08: 0000000000000000 R09: 0079746972756365 [ 363.588412][ C1] R10: 00007f06e2b487e0 R11: 0000000000000246 R12: 0000000000000032 [ 363.588423][ C1] R13: 000000000005889a R14: 00007ffcd16fb260 R15: 0000000000000081 [ 363.588439][ C1] [ 363.588868][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 363.877242][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 363.887748][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 363.897795][ T30] Call Trace: [ 363.901067][ T30] [ 363.903999][ T30] dump_stack_lvl+0x3d/0x1f0 [ 363.908598][ T30] panic+0x71d/0x800 [ 363.912493][ T30] ? __pfx_panic+0x10/0x10 [ 363.916917][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 363.922308][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 363.928291][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 363.933669][ T30] ? watchdog+0xd7e/0x1240 [ 363.938087][ T30] ? watchdog+0xd71/0x1240 [ 363.942504][ T30] watchdog+0xd8f/0x1240 [ 363.946754][ T30] ? __pfx_watchdog+0x10/0x10 [ 363.951430][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 363.956628][ T30] ? __kthread_parkme+0x148/0x220 [ 363.961661][ T30] ? __pfx_watchdog+0x10/0x10 [ 363.966331][ T30] kthread+0x2c1/0x3a0 [ 363.970392][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.975584][ T30] ? __pfx_kthread+0x10/0x10 [ 363.980171][ T30] ret_from_fork+0x45/0x80 [ 363.984578][ T30] ? __pfx_kthread+0x10/0x10 [ 363.989163][ T30] ret_from_fork_asm+0x1a/0x30 [ 363.993933][ T30] [ 363.997170][ T30] Kernel Offset: disabled [ 364.001477][ T30] Rebooting in 86400 seconds..