last executing test programs: 8m21.235587484s ago: executing program 0 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00!\x00\t'], 0x24}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) 8m20.772658363s ago: executing program 0 (id=92): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}, {@posixacl}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r3, r3, 0x0, 0x7a680000) 8m20.602816628s ago: executing program 0 (id=93): uname(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_script(r4, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r3, r2, 0x9, 0x8) 8m19.624871646s ago: executing program 0 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x842cc0, 0x0) 8m19.217231284s ago: executing program 0 (id=104): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000200ffff0300000082b0cfc43379"], 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 8m18.125329827s ago: executing program 0 (id=111): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 8m17.561790822s ago: executing program 32 (id=111): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 16.954959729s ago: executing program 1 (id=1553): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480)) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0xfff) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) 12.180358528s ago: executing program 4 (id=1561): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000af7000/0x4000)=nil) munlockall() r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r2, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) 12.117083191s ago: executing program 3 (id=1562): timer_create(0x3, 0x0, 0x0) memfd_secret(0x80000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0xfffffffffffffe40}}, 0x1047) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.723723908s ago: executing program 3 (id=1563): r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4010, 0xffffffffffffffff, 0x10000000) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) preadv(r5, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000300)=""/59, 0xffffff9f}], 0x2, 0xb, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_UNLINKAT={0x24, 0x6, 0x0, r5, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x1}) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x3, 0x31d}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0xb16, 0x1, 0x1}) openat2(r5, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x220040, 0x28, 0x14}, 0x18) 9.413317971s ago: executing program 4 (id=1565): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x36}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f00000004c0)=0x80) 9.392378559s ago: executing program 1 (id=1566): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x1, 0x288}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'sit0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) openat$mixer(0xffffffffffffff9c, 0x0, 0x121040, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r8, 0x4068aea3, &(0x7f0000000080)={0xb6, 0x0, 0x8000000000000001}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 9.169882418s ago: executing program 2 (id=1568): epoll_create1(0x0) fanotify_init(0x1, 0x101000) fanotify_mark(0xffffffffffffffff, 0x22, 0x800101b, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmmsg$inet6(r4, 0x0, 0x0, 0x40081) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) 8.812528043s ago: executing program 3 (id=1569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000000000000000000000000000000000000000000068a62418725a6a161e9293b4153a600be779376fb8074b9e2a8fe01664fd822d6ebfd7798d25c0ea4a61811bd20c0960b625df8123"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r6, 0x58, &(0x7f0000000400)}, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) 7.677756748s ago: executing program 5 (id=1570): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) socket(0x2, 0x80805, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x34d4ddce7c5c73c0}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) 7.405451414s ago: executing program 5 (id=1571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) timer_create(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x11, 0xffffffffffffffff, 0xec776000) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') 7.363124758s ago: executing program 5 (id=1572): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7eff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x25000001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 7.361570873s ago: executing program 3 (id=1573): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) socket(0xa, 0x80000, 0x7a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001900010000000000fbdbdf09000000000000008018008080080027000e0000000c0043800400be800400e38007443f6e1014513901be58c364ec4951de53e7d560839f05e71924c40d65a0f5c831fb288077998e3a61f6f12ac282436678d34da4d67d93ca20fc8294c2afac16d49ac2cb5c30a378858b7c4fae566c5c8da6d819321e41bbdb8dc8c92e3f4a5e1dca9c1d3290e8a85b8619753ab9df725975caba8f7b4ec9f0"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_end\x00'}, 0x18) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/124, 0x7c}], 0x1) 7.177987089s ago: executing program 4 (id=1574): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x680800, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r3 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_fuse_handle_req(r2, &(0x7f0000002140)="44537b155ef845a1f85dbb5685d3a2f08032da2ff0d23b50182c14ca472e2dde3d25842ebeb7cc8176d6e0cdb83789d7728bdb7d9f3a588ee8362eaa7e97a882e9b0cdb3f5185cdc938dd83b20aa5f507eef681cf7c1f783c58afcc14b565d8ae92cdd756b70be61ea21f737d2e630452399b6c95afaae0651d1c1df7fb63113eb06e10f7a3e9ed0ac5ff75882affe72be5f764b51f9ed797a9812178f0fe7b3667ff4c4679bb56e1eb5ecee573a975bd6bedd137c5f670db98c7289919e1e7770b4612c63b4baedc0369cbee21a6ee5c2dc3b79df85c5f34de3eea257553c5eb298737322a024c23a35b8a2739aa3e3fb693401803e2602a1df0811f0a5e873c7170058bfd068dec51d583dad4beefb11404df893d983f3ff9ec2c9378cd28ca24efc3457138be1ffa025807414159800d1724158d68357fc5574d135a2ba296ec19af292a2a2271457111469e5878994074af9f1e13884c688df585c082b7e7e7699ada3896e304940c78fccc2691324ed5d09d3c19bd4e742f58328e9609030da336971fc395fb3fd8849e3e087953310ce897483f6cd942adfea9cfcac81a4f9e4e1de0845d61e981fe769be29c01831a2befee69d50dc94d973ba51090978f35613b73f10e5c21afff7b1a974034500ae5e74d486982e19f8efbe1e48a9d9fe68cad6884fc4b47bff4d8e1c3705cddf5e64472ca3cb47fcef8a5e0ba9c5db4bfe03719465a5bb3cce83b42bf7b82c19a66e7d65b736a2565ffd81c0eaff81afbbf34fc42c83681e27c070ba944e5812f05b75b3b5a35015736fca92f7b717eefee4d7cb9e1797755fb07b653065c7cafa83475729ecddce1c4a8ad6b0ccdc0f1da9f2378330e181df642cfef9acb059a58a7fdeda865c5e0b0ebdfaa0a738a91b1cc09f4312abc710aebab1c0d31c0b57d2a3ca8a2195e2a806e18b62714601c4c4a1d1608a5a6d650095fc4d2a710c16dca3d68c0a601a596b3ec64912ecf6a60e2ebc478772d3cbab5aea972ca22ebcb00e654662b783fa7eade3bc6009260f299d13a432f726727a9ebd9006084f4abac3c402c95cc6938e5c75cf9e85c1a3c500fd9ac28034ea46c4f6678084b95e7a62d9a11e322dc55f21d3a3686c8e4609233752786c3e144118f0a5acdcbd289a7815b8796757c07f15ac1846e6cc8513fc9a76efd908b7e70a6e76f3214cf07e23fecd3ff7a086505563d9f87cc723b953b036ef0a360cc99579d2c10c2907b082752a82cea34b16f1fe8a9cfaac8dfd9d0bc0d92682de7f23d392a078abea73f244f740672099455075db2f94b6fdea7546f19f79a6f611ec6814f77890fbb6a6da5526133ac5c109c07bcba10ab9ba651106d64b28aa262da7d96eff4aff7ad0ca902eca6856f394ba7bc706d5982dad47c5fa603fccde5f3579f071d8b083ad93e0395cd6100e774b3e35ffed3128c3099a21627caefd4d8535e8cf2880a2ac9d4e775659a8a598ceffdf73dacd16ba73bf63393125770896d7e8681bedbbdda9cf8191642ed26060997fab4487ff23c8d96cf566a44e9b4db2e6254530cd40a065beebc89316f2b333513e1f4f611288a3897cc5233b7c4d1b06112236a01e0be6d8466a338d8a80795471c71c5775aff992a0f664bcd0854ce3aeea0803b153af11ee9af2a9121a8baa8f7790c23f905c8fb5c7d014ab80daa2fa8e3a44429f32cf6d96f180e89c34f106953aeded290a36a8f29ff1bf036c2c24479439993f98633457376720cd4f12171b66c01914dc3cf6da1611a5558e97d25ea83cf737695adc0846ad69c1a6bff1359d52550d1e3ba6c2d7a60bc476b04116c9d4fe5013fb3bbce7ecc3979822df7637af5ef325c14b2105028f2ffaa10e308bdb7c01d576e733b0d35ac5f6e00e78458ace82dbc6a703dfcd8ff166a2cff5ff4ac32692363389f500c46bec37a8c90b30cada62e6f2d60f580c5a33b70a9d9ab13ab4a6d5b74225450f1fb68894582c59d7718352175aac4b7d2f2d55119a62956d2d2861e961767a69e9cb33af33fe059e2742881aa681fc17880eacf67ff5b3c00dd0532f3b1725788478576a1d488df4788f3d05796086f9bb5e411a0e46bd6217abd9daf30990f04a9f66d9b24532445919bfe512d75a3bb36ec8be028e59051154445c902067878085224ecf481e82e9d7e201d21a32167eb81f50edeb432caa3431756c83e066879017bbfbd02fe605265f23e5e314949d05986cdff00779ef22ef29a2149abd0bf60177a75d382241fb35b6b3110f08d3b567b9befcf21eafbc379db8125718ce266690011ec2535e47f4b2e2864386fa53bb60286bb7ce1852b93f9b7ba7260b3aa792d7b35425fa18df07dcb92edce6071ea382130a02a7f215b7452d0cac17afd89a9899865e479a1dc78eb012c81bcff178e0003ea503e62e50aebd74af4ada4ccb45e1083b64964d1953779473948a8a7aa1bd6798db51d5a73907ea06730fd0083766bb6c5baa4cd03fb0da153d2e4d51e1b6f685f36b0759d7bbea75c65efe3f4ec4cde961a1090c2ca5cbe861237fb188148abeb5b94479f25302cf4a6fbfb58adad96c36e0dc23155e43e3d2b3b45f4f35696f7f685bb75a4d04e2e4b01cb3d39f0a1b562b18ca40b3b9ef4ca3c95f20e355708b9cd73dfc617bd1af93a79d561151003ceb62f9745e1e1c8e7f687c5ad61d12675983b19ace49da1f1c333297d7caaaf3d99dda459d0bd721ad49d71db32f55fa70ff13b7af14f4d3c61697e80ce28cde6e9a199612bdfd12ba7fcd99e35dadf07ecda7bd8e747db45378bb8311ca1908ead9055f06c9cee302e4ea65f71cbde23a4d8f3e9986b3291c1ee3a6fb95d81c2d68305385841a33c8216a6bcdd4e994bc94ad46b919c3e170de814fe7541ec87b85aedbd3d2728372547d350185dabab5d04524521d4f61b98e9cfa1609034df2bfbed9794dbe2d8c8acefc473df01810bbd02da54e8e82388c67a48279c3883f4e6d8fb588b751ac6e1f422ca51c709a88a8eba73b3a746ff199a83e663f476e9daa572e78f98acee39489993dfb346d61cf7d55c5a5aca53a634c89bc2239c77d6994af63e7e0b78912239f51b9cde30340efdf5b17ce2325f03556d571512f26b325c7b7e8aa3a80d593db2b9249160c532cee2b8c23794a80eb5c37bcf5e531af2d01156fd170b3a0263bdfe36bc12a7481072dd5098a95bc9dba1c16d5c14129496d766cbb48c0a1f6b0fe3dcb31e4ad5e5f319cc90c63b904f22b1c83b284225d58813493d3e9be818d8d5705f7cc346b4f831d4cd03d9a5e3e3de97107ce24bcb8c5b2daec332f5a61afe454239af8c5c380c0cdfd95c135b8b3989a64e0fa8007bb8cbcd0896e1d9b076d2e90992629792b4f154fecbde30f1507bd79a6b44db6909d5df3207aae33fd1bf88ce790fd5afdc3694a846d6f620673dc1191762dc038975861048a98b5f93c8a947fd8b698924798fd6b5cb22ebba7e5e6ae43f4a9cea7ba978346d38ac6610d286d2215a098677b51d8d6e6e5db677dac1080b24a0ab90b8bf5a556086f9f167896cb7e77db348c04a24a78f1e6d3bd099c6f128cdf4f835261b36fcd101786d5d5f9d95d614933d1dfa8add93ddcab654a7bc01b5d445648d9fd9d629f1b9a515942b1d2d635880b8e6dcf4ca79542defc2c3b351e662031baa3927afb1f24be960dbe426beecef9cfda2af039cb11bc53ed7e4addb488ef68008e0aa148552e1227b499ca9dfc9a51d95571b9d0e8b43f74fafcebafc16acd22bf69ead0bc8ebfca066b06f156eb901a91b7364a0eb74ac0094a182b4ff31880b5ac531f8498e1be1c7c4fbbd0e5c8a90c1279817bd9020e8e3f50e3f3071cad88574b2b426d8e99eb2fe44316ac312b8539ca0dd0abd3c5518d9a23355ee6627023e00fd5de7b8dd677f0b65f45ef422f132ba86693e22b7be15ebbec1516c6e9c9abb3b6c04a8b4e6da3ad72a9429609453e6146ac88fac190450b84b3a67284d86b87f2b7b97669eba881bda1c8c559d41f9500cb018643c641a7a63bacb4a8af2f12576c527d34680a27f0b5ee585eaf90d0e165e8df7b34af26368e9ac58b282e04fdf66ab14db0e7a7c0eba86cf3b92625fada506f7f36ce5e70e659d366e3c9bec7b4e8abc47d1a387fff042b60fc535bd78ab37b83cc1de0dd8a1beb7c409c8a6da8b01084890ae628e4b44e386945ee83649361c6d7080b8c5a53e544147fa71214ff2b87b98f6633e0c4ffbd9e5e08a5e922dc4f7bcc41373727df5e8255c399b83bd0204e51036db9cc55c57797bd216654a94e0f0f491864cf88f8284fb53de56c98c30d28f7b85771c8f5a571909964033e351d155e45f6ef1521cfa74b8ab3cf9e9b59f8c05d5c8a8c575f40e83302386bc173a4b30db3471fcec973350d979780fd1ffacdac488624a68e82ec1cf3db640a13b88e7951685e256ec617a6b65fc13ddc7de2f81637479ec804da6a47712acdabf53eef99e946cf93d5c077541d0142556c5669fe53281f0d780b9dc4e123e0e2e43a6a3aa397a65b1c77196e9871beeebaecd9ac6445dcb50cad46c1952f5a613d93d591e54358d9b19b1c968b47fb917505a6dd33a957fee4685b5189f928736850d000028469a76e1a9664b42848566c222dc852b89794cd637ae479451a387aa0f68639820118961b55022570259dcbdf2ee00ddc9a71aacb8e3ff3fad814f01cfed504fa2040d0b4fe28fdef6d19602c0a7721744febdd77f65d79202b357d2d1f44bffbb0386f15c6ae900fe3b12a03f9fdf57632f971dac9efc212625cdbe6e2c20f70ee514138ad667f29d2aec02b37bbe871a364d00cc32eb1205282e801969e88bc20094ff79224beda16752cb3dfb85f421aee28d68c79da60c883fd129115b3fbd74f20cf77ef41158ceb09d4f058930146362cfddd024e13a66d15f17b7372ef6e0aba09a4b072e3df4208fd7e7efed8fd7effab756d060b7ec9efe5ebffb09a8c20bdac1d44fc4d7642ace850d52b6280bc0346a549df37f566364aad48b4cef9331f3a0c2bf4fdcf241fa384abd471eb47061a7fe964ec482da9573a82c651f01a18bde08e6b7bb3677a24fcc3d5c2987e48759d20054d6a3a5b9863315680f6a5ae772f322e996f7c39eae7eb9a847247f6907c1b57de1ef2fa4268c885ed9f81afaebf3588861f8a54943e548b04155fe1db9db1a5b447e80c062126d109414aaf5bc093cd4c7a4a43465e202be01b60f283f9ca8f7f4ebb283a6626d82d0c8e24366d23fad880c350a95b183a598a5a3c3dc353544c284579832658b7b96f0c4dd2b43cc38bf024500d07b3bb11b873e5255115db408ed580f89767c4cd6bd23f76ff926f4861ea1f59e33f28d0a8052b5a70fe68dd2f5a7d1623f36cd1bd9d331db43ebb9e26af5210f7118e908405e165fca25a4f5f0db7f5346aef2d4b9ce223b00b305f7dbd334f346e2b1d4fd582740e698793ee1cb84a24fe473e690799dfd951494da3d75d8860b6e9ed15c409295ba87748d2e91d3070216e9c9d08624c93a28c7d7ce9d2292375a5205e494d3eeeb32f619a10a75269434eab45e513e0039ba012cea814177d429b21f51ec2a6b83ab4f882f778638b1d1bdb198b76b93189da733179bf22375c9d0a277d68ed2630365c355baa336c6a8828aacc92e9a4427d27fbe970b03e0eca5a1d40191101665d160ed925e7ac906fdb1b086a77490ff0f2b5ba885fb1f7aadfbc93a9ccf0daf338cb5efcb16f963bff20c9d5a349b213f5c8392f6d6fb6f4b208e99a111f0251620c3ca1ce836901fc9b3e0f85166f853a91680b36733242ecac4a485791b616ae296ca31f4ee508b83e0d819fb90bb6fed69a0509205061c8fa6d4d3f29b9893eb4da220ad11484e32034ff155450a5476df18da2db459359e3a322e235f78ed5ab25400cabeac7963b77072dcc592ee3c91534a4153e05e62a8e5bb00108e80b4c29407848d4c392c6a496f1d9e6d32475bbe25f4f25a28e230f1cf2d58968f8652bbc27ebbd493c8cd72c2822aeb755e789efe888f86f9d878ca7309a4af7c40f08ef91d710180ba5cc9bdaa5ceb3d760511f8408d7718b3c0d8b6442d98f3faddef4ef868a25b66ee0c917efeab373fb1c0857c9a9f0c5595c0798f69efe3b3a41bc55c6266f64bf56bc4f4ee38e42865d49a9813f7ab9708063609bf2af130f1161a39e3800aebfebc148ea01fe789949c6865e77b6b1bd6a67f29d21e8e65853b029fc8c221e652e8a017de558b0ee06ea191b5fa508e8029afbb7afa0045425e7c10ccb72def5c5c7d2ee66570b93de75757ad608166bbdec159653ec1d00825f59a35d7c6fedc36d34024a568ce2aab2a12f32c1d856cfcef19a512fa50e93eb5280bdc23f96865baf946106e5e23854df9c90dda886d9151bdc521052658edc582bd6a3b5839b6caacb3b5cc56c241f6cd472310e2a6873531459c735cfd8b4aba224b38a17b2c7bcee1c4cc0b86c002c4b24944c34d7cef0472546e8cfa55075c252d19a91ec46acdb73c5fa25aaf1fa6490818da4d867bdb6abf99c1bab44f539f01b95c2daf7ad6f8ce465ce9871129a4918bc4168b7b222de39cad796fb351d9976d67a920db0a4b117b11f88c120e0f03f2b08ff40aa04cf4764ec90d46e821d5c4047f787b16a3ce9316d5f5c5af44eb71e293e1d58890515817836fdc45b838e4624ed5da5214d52c3b7058b7fa9042577dc3b0297ee8c890a6604b483b5b415e20d55e5224240989d969b35c7981416a5e2b86991a72236b10a234400ca632618208d07e2740a36da679a32f19631bdcd43df4c6db3b346a9efad9d67409704f8b2c05a4c3ae77d3df1b13803d144b2d69a33a49c465615b2ec7494ebe99560202361fff19eff7b2d72be8ed86d32f05927391de1f6d238d402143cc80b7d9c275a3fb30d8b698359ee3b304ccdaa7c57a34d3f3987ffcb9143c387f89cbf00879d0b7fa79cd65234e7dfedc4de0e5fd033822a044ea2ed51f2dbde87465055ff81c44f8e8d9211cdc1363956adfcd6ccc1ab5822a31a50f843ce02fb93f4fd760aeb860859877daeca3ebd5b3b11344cb18bdffac70a33aa17682e880ccc238aa6673c807c463c7711511ed0e25abcfde4a8509cd1e245ecc27d5c41920af30c6baa8b57f7ff2dca908098bfd7d27a92d60ca39e366127365cc7f3d54e13a0ab91b1144fb809402853a14ecc9902705ac880b2f49d6a8c8bd0dd04b9c09383485cf6e339fd4d3bf7ea4054307bc73ee6fa397cdb43af51e1bc4e17baaf10e774f493e3e81c5398a4f92181103b3c8bc68fcd93c766529f5232a3e6d2708035930a6a0a2d56d3bf83fe44efd21c310c355e6bfcc7cde3bf21da3754b017b0a8f0bd7a2e0577149d12fce4d64217c8ddf9d8e9820539862f2c79062c7247c89298a7b959c8ae887f1e91b5e19d44acb13fdfc19da9e693525444c574daf5b2e8afdebe3c83acdebb5333d8880f794cf72b89e611414fc3ab2907e6bfa0ed3f9b04f56c59bbd9bb14b24c1ed850904a291c4a8803145c0c80a6008e44f44365199e7f33b2c4eb8824df3be8469dda738a7de6934802db4113a62d08240380afe57eb0ada3f4343607232705a59ccdd7386601c5878b5b34fe461a2f401e94a2e05e74011cf0e67a89b97bee40aeeb6dde2b534001969c62fd87519689c2a83f353d87e91aceaee48f91046aa6b7162356cfc6af0650846b86abf8922fd8687d5230965e5c9ac6481031e06910c1e30709cf29da5b24d8afe89f2738ade1bfb3ef37398bf60d6ebce01d68a953f91dc32035e6e6f3e0c77a1ac2e218ad7e5c44344f4a5e693a7f39c83934328a53e854831b3108c38a26992fae2e115fcf5fce4b78f0d9749ed460906d5f413c6d9dc40b5daf4d8efdd529b457804f196c458dc13308d0915d9cdaba4ae5bdea800678b2ca295f2e79cf1f333b476a705369fdfd30e42313c44918b925f74bd8075e3dacca26014a75d77923c9a1834738a6c0e3a4108c1c7f8a89fe8fc7b3ef17f10f34b66b17a052520eb0e6806fc48ec18c186fdc678fbaa0dc8b51299f6323c5189afebe39deb7383b705f6f0823674a9a6bb3c6aae8049dc06271ec4cc3aba0a6644c69133aa04a1829cc80f724bfd2cb7bfe630dc377777054e2c1a849e81e4b7a7f04cd525d600e0f12c04e7bc37952562aa0f01449b386fd1907d1ebcaaf687992bb4626361d3e5ba37188e3a10391454095600e3b9fc3ac2c92055477973cc8236172dfae24038d09738bb38335305db31608163d865448450d61ec5e19f7cca0f5a67977f0ee2eff105998df32ee27908966e3da578a726613d079e99f60298716f5656288f541c10bb7ecc547fa42a23680bc2330eb2c6fe87ad4d883d0dd2d2c13a0798b0a2fff1d0ca7327d0badb4e91ddc8bda76edeccec60c9e024c09ff0324696bfcb483b9594ea3e4d2aa964aab612d12ee3f5f976514a5f03f83006c784e3543389c077da02d6b574e8005d84e8504211ad4d1a5bbc0a50f2cb0f6ce3f65a460da74f8a6784a6bf128548801681e9c0141ef9f147c670692e7d0221dd9a64198b43a32f6ab36aa5347019910f117e1ec7f2e703b0c814ac6a90d616f1bf184e6eb8763d36540e6142b877302ae58804d6a0420f5b3c684d1465665439a09e9ddb7a0172a5dbbdf49a34d4617ff5ee0f9b1b82762319bac8133b50a59994cf009748738a17773a0d9b7ead81a618b9339c31962a0024724898a5357f2f0c57e924de443acbf02e71a664403e5febe703d53465515bd078cadaa2fd6d7131896abab0db135573e1a759c007ded2316e9b383b6d97b05315602217f75bd4bf6d6058c1109011aad4d4cb1222711f995cdbfcc372cce3090455d66823670efeed8562fcbba5114804f679c4520d336ce20443c66c52246dc6d300ac252463a47d6d43db14f0e1d9fcf512c5283e9c7c1aadf5917ab1f436fe24afaab4e02242cb82c05a9faf03330411d92250cc57cdf69fc573f6a247cae29055fa60678cf01b5e05c7a17e1442f8afe239d800534ae539c64b5b91ffc49868fb21de0015e2595fe380c5b98eb143db01379f6a0b9a7888fcd20b3cba6cbeb37157f0e3a8d4039b83c5022d62cb6cb5ab9e7066efa060204e7952a500eac60011132e5f88c7835612b8245666f55e7bf9bd2c05f3df6f3ed361e74c506d128b9d5c58894e2887971a8c577e432f1f79dfc6321ac3d081907f0b881f27bef85d01c8e5054259a0e59c9fc3749dad7c3c3681437208dcc7ab2cd1db78918201e51b3a54523f8a03a1cf9c01f1f70e9c03fdba10dfea86859c4149c48b523c2900ed52dbffc37fc05e37c60944c4caec730caff849d88284dd300d64eb6b0d8406dce88f44b2b213f437150e6e26ee7a05159e7a76f976b03f7d0fb8f93484ac172cf46ba5aac754707d796ab6556a79ccd904b2dd2194012142ca947681a36dbe6be74e812913e8e731730f4190c8ddf17bf8981bc920d8ea4bd5d46d69db18712b01f2aa078e4e3baa5ffc0880cedf5034f574ae4576d71e71a53e577011cd71b75a62c59ac2e0067756ebfeb39a6aadfa4aee0ea1f76c23c8a0b667a2c567b81f054551271bb9a66ec336540f4630aeb141f744e1295d7629f1f12f45166856ef33eec4b38247726c07f520ec83295bb5230926839e153bed2d23b2550c6ece1be515e58f47f6de6d61e9e6362710e4130fd3eb89104bbd21ba82ec4dc910b2eb3016f748c607f7c9ebb286336ff40dcb3ee5c2a1a4b667ca937722cbfdc18aa14ac2ee2b66e4040a8200aac33179ceec4532f811c5755a11e82b5efd538f29679df4e51fed26d17bd26997b995b536d0cca3a65f1fa3be6b3815571c735933fbdc50151be48eeea1fd43e8a0528afabaf31255f4fcb80486f5f1ebdd1927ca7203059a90aec6baaf376ecd08c3eccea946b46e60134bece88293a66b724debf5fb2e86d2a582efe8dade19231f7b13568f6c3501974c081fc168473ec55641b1efa1800c648f702e4e585814a38262140b39d2a422c12ad44344458dff0eb6b81dbc475f1b353fc834ab66e164864e945e0fd9c600d865e9f57101953e7412bd081526353a05e85cf53f2099c9f557442eb21fd4007134c9a564440845451f481f81154ca54675f3cc956e2167f1bf44b21aad74b103255ddf1d52e6fc425711c844f677d213ad101b3ce029e9c69bd96fe7cd67a4ba56dee0bdc4a54d9c921f600156586313eac369964c3596887ed26653598bdc13fbee6ae6886d5c79a7ff2698cd1d497d258df1bc474646e600df24e0272ea1c0097533bde060767258b5e7c7ed72590a8d6ff7d4246f3973c9d48e16e7b7bb9fcec5cd4847e43b809625493973b34fd2f6581bc9e9061e259b37368de6f6d38301156c95d869d21539bc76d0d4a584394871c03207eff89d08f1961c5e4ebb3f0de07eac5e2c592c9543d9bf36e58fb7473910497057d5dd3564b44cf64f92a02fda5e147436f210d48b22f365a22b82dd4cbec640c721910a42514604b361e123a3178eea7a90261da46aa7a9e56b9f709747b55379f7d06566e5a3de06b39f356793077ab94aaca1dbe06720937f9c84429166f124a94b57c10522a2fb0ecade7e3a9c5249f71129c995548ec07fe02e8def15a9b9e71b65fd221eba8292a38f1da940b9aad5705daed41a001445733bdbeecb677625bd4315599e270d160765b5854ee0a7c86d6f9634a332dc369a41cc09a5e89a7f364b8937af2e606b5459ec49f797022dd897ae3cc12e85bd9e22387429ae9c56a0be8060d530e7f17111db05769d8a3dd492f4101cff03c1ab27e8ce87df6da76c7324b01ec0ce3187d70891678845ae179f150634596adf12ce6e32a62917c95424efc50597987346571090f4543fc5e85917fe98a52fe8a1a9684e8e605ef0deba7bb4346dbacdd1796608495a91fe0a9d6d7c0be9081c9bfc2a96c39134be91e0d09e004b2104b45639a6d57f3679c88377421a6f484184ceab1398bdca3bb665ebd432c93fc3953e0d9b41fc95fc4e2d2e3228869c963fb39a4a997a93617149bd86a171a4deac522c99b370a512b7cca316bfe68a10f0cadf4bd1847720373fd5f98e3f0ee02288aca28213451417356221f4cc77ed90d24ba8914dede83eb7cc8e63ffc055c70355f6649a150eaf56a6585e4789e27ee109af39e5d70df7a9211b07c4aa939060e521067c1afe3d81cc6e33c2009127dfe2d28a7d966b395ed5a2fd3b3cedd0282b040b100b2d03109bb099ab2bc1bbc82752a8e44cdcdee9ef245ce7505ef68218049cbab97b9622942aeb29ed62150a99bf7891206f237f41ba725b8ba83c764a4f0b0a9355832d03c403b266b3d1f104fff7ac90d7840ad4cd56ddd1396527e63a0e035df0596ac0838e2834df443c75c2febbe47661b512d2003f4a2bdba75691c552b530134d2a24a734f13162eee3838ae819f07a88d1d5b9bae554ef7ef56bae1b8b9849f0d53a785eaeef1ea077b25c4c0a507a045780dc775f1b6cbe8b9c623c135e45dd8bd68e7", 0x2000, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x18, 0xfffffffffffffff5, 0x6, {0x7}}, &(0x7f0000000640)={0x28, 0x0, 0x80, {{0x401, 0x3b, 0x1}}}, &(0x7f0000000680)={0x60, 0x0, 0x80, {{0xfffffffffffff8e9, 0x5, 0x8, 0xf, 0x4, 0x1, 0xc78, 0x5}}}, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x78, 0x0, 0x2, {0x5, 0x137, 0x0, {0x1, 0x3, 0x3, 0xa, 0x0, 0x6, 0x800, 0x3, 0x1ff, 0xb000, 0xfffff001, 0x0, 0x0, 0x80000000, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x73dd1273, {0x0, 0x4, 0x2, 0x7022}}, &(0x7f0000000f00)={0x130, 0x0, 0xbc, {0x7f, 0x4, 0x0, '\x00', {0x8000, 0x703, 0x7, 0x0, 0x0, 0x0, 0x1000, '\x00', 0xffffffffffffffff, 0x6, 0x400000000000000, 0x8, {0x2, 0x3}, {0x10000, 0x7}, {0x81, 0xcd27}, {0xfffffffffffffff8, 0x7}, 0x8, 0x2, 0xfffffffb, 0x4}}}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, 0x0, 0x0) 6.74012063s ago: executing program 1 (id=1576): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 6.377238427s ago: executing program 5 (id=1577): timer_create(0x0, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xd94, 0xfffffffffffffff4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) socket$inet6_udp(0xa, 0x2, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', 0x0, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.333645846s ago: executing program 5 (id=1578): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x206) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) signalfd4(r4, &(0x7f00000000c0)={[0x48dc7c62]}, 0x8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000200)=0x8001100) 5.519698254s ago: executing program 2 (id=1579): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="0034e5b70100000000000000a036f04bc1c41dbd854d84671e12b200d1bf1518a67a25e4ce28dc4ee3b22975d1a7d135a7410b6c20d0abf6de0b24b54e4d3013778579a52296ae3d3c55e4ba7218e020d4352abe7c26721c5046d036e949d5e4163f12fa0a6474e300"/118, @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e657665000010000280080002007f00000104000600"], 0x40}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005"], 0x310) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000b300004000000000e0"]) open(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x865}, 0x0) 5.333788362s ago: executing program 2 (id=1580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) add_key$fscrypt_provisioning(&(0x7f00000007c0), 0x0, &(0x7f0000000840)={0x3, 0x0, @a}, 0x48, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 4.453316898s ago: executing program 3 (id=1581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x15, 0x1, 0x10000, 0xe0a, 0x7f, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0x8, 0x5}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xc8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) 4.25561456s ago: executing program 2 (id=1582): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x448800, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) read$msr(r1, &(0x7f0000034000)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040041}, 0x40000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r3, &(0x7f00000000c0)="510003000000", 0x6) listen(r2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 4.239566543s ago: executing program 4 (id=1583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x7) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@fadd={0x58, 0x114, 0x6, {{0xff}, &(0x7f0000000180)=0x4, &(0x7f00000001c0)=0x101, 0x2, 0x0, 0x3b, 0x6, 0x2b, 0xfffffffffffff001}}], 0x58}, 0x0) 3.687075588s ago: executing program 2 (id=1584): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) r6 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r6, &(0x7f0000002ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4000854) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, 0x0) 2.727147892s ago: executing program 3 (id=1585): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) getgroups(0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="01000000000000190000010000001400020077673000000000000000000000000000700008803000008024000100970500000083c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c060005000000000038000080060005000800000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff04000080"], 0x98}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x8, @mcast1, 0x3}}}, 0x88) execveat(r2, &(0x7f0000002080)='./cgroup/cgroup.procs\x00', &(0x7f0000002240)={[&(0x7f00000020c0)='\x8f$))@[*&,\x00', &(0x7f0000002100)='%\x00', &(0x7f0000002140)='/dev/udmabuf\x00', &(0x7f0000002180)='hfs\x00', 0x0, &(0x7f0000002200)='-,\'\x00']}, &(0x7f0000002300)={[&(0x7f00000022c0)='\\!,-]\v:%\x00']}, 0x1000) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) 2.598820242s ago: executing program 2 (id=1586): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) lgetxattr(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)=""/118, 0x76) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.597285997s ago: executing program 4 (id=1587): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), 0x0}, 0x20) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, 0x0, 0x4081) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3}, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x1, 0x5002) read$watch_queue(r4, 0x0, 0x0) 2.484771554s ago: executing program 1 (id=1588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, 0x0, 0x8000) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.46542752s ago: executing program 5 (id=1589): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.153339982s ago: executing program 1 (id=1590): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc800400, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) 139.707396ms ago: executing program 4 (id=1591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b4cb924d"], 0x48) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x40000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) bpf$MAP_CREATE(0x0, 0x0, 0x48) 0s ago: executing program 1 (id=1592): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000300)=r5, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x2, 0x4, 0xc, 0x7}) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r6, 0x4020940d, 0x0) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000005700)=ANY=[@ANYBLOB="140000001000010000000000000000000500001435ba5c0b4c78930400000000000000000a0000010900010073797a310000000018000480140001800b0001006c6f6f6b75700000040002800900020073797a3200000000140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) kernel console output (not intermixed with test programs): 6][ T5890] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 168.504386][ T5890] usb 3-1: USB disconnect, device number 4 [ 168.595108][ T30] audit: type=1400 audit(1757318353.209:417): avc: denied { read } for pid=7422 comm="syz.3.396" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 168.625708][ T30] audit: type=1400 audit(1757318353.239:418): avc: denied { open } for pid=7422 comm="syz.3.396" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 168.651795][ T30] audit: type=1400 audit(1757318353.239:419): avc: denied { ioctl } for pid=7422 comm="syz.3.396" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 169.221929][ T30] audit: type=1400 audit(1757318353.829:420): avc: denied { read } for pid=7440 comm="syz.2.402" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 169.541881][ T5890] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 169.792539][ T5890] usb 3-1: device descriptor read/64, error -71 [ 169.995650][ T30] audit: type=1400 audit(1757318354.599:421): avc: denied { create } for pid=7446 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 170.092526][ T5890] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 170.551112][ T5890] usb 3-1: device descriptor read/64, error -71 [ 170.661553][ T5890] usb usb3-port1: attempt power cycle [ 171.293320][ T5890] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 171.393151][ T5890] usb 3-1: device descriptor read/8, error -71 [ 171.727025][ T5890] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 171.782938][ T5890] usb 3-1: device descriptor read/8, error -71 [ 171.811193][ T7430] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 171.824518][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.398'. [ 171.834021][ T7457] tipc: Started in network mode [ 171.839329][ T7457] tipc: Node identity 2, cluster identity 4711 [ 171.853549][ T7457] tipc: Node number set to 2 [ 171.892560][ T30] audit: type=1400 audit(1757318356.509:422): avc: denied { ioctl } for pid=7458 comm="syz.1.407" path="socket:[15054]" dev="sockfs" ino=15054 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 171.908828][ T5890] usb usb3-port1: unable to enumerate USB device [ 171.980708][ T30] audit: type=1400 audit(1757318356.589:423): avc: denied { execute_no_trans } for pid=7462 comm="syz.4.408" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 172.284804][ T30] audit: type=1400 audit(1757318356.889:424): avc: denied { write } for pid=7466 comm="syz.3.410" path="socket:[15068]" dev="sockfs" ino=15068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.479427][ T30] audit: type=1400 audit(1757318362.089:425): avc: denied { listen } for pid=7509 comm="syz.5.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 177.501904][ T30] audit: type=1400 audit(1757318362.089:426): avc: denied { accept } for pid=7509 comm="syz.5.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 178.064911][ T7519] syz.3.427 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 178.206447][ T30] audit: type=1400 audit(1757318362.819:427): avc: denied { create } for pid=7518 comm="syz.3.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 178.401553][ T30] audit: type=1400 audit(1757318362.849:428): avc: denied { ioctl } for pid=7518 comm="syz.3.427" path="pid:[4026532786]" dev="nsfs" ino=4026532786 ioctlcmd=0x64c2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 178.572473][ T5918] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 178.901133][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 178.915439][ T5918] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 179.375174][ T30] audit: type=1400 audit(1757318363.599:429): avc: denied { getopt } for pid=7532 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.426045][ T5918] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.460287][ T5918] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.976733][ T5918] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.025474][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.323587][ T5918] usb 2-1: Product: syz [ 180.353819][ T5918] usb 2-1: Manufacturer: syz [ 180.378623][ T7543] syzkaller0: entered promiscuous mode [ 180.410878][ T7543] syzkaller0: entered allmulticast mode [ 180.433342][ T5918] usb 2-1: SerialNumber: syz [ 181.073734][ T5918] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 181.724338][ T30] audit: type=1326 audit(1757318366.339:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26d8ebe9 code=0x7ffc0000 [ 181.756043][ T30] audit: type=1326 audit(1757318366.339:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26d8ebe9 code=0x7ffc0000 [ 181.782925][ T30] audit: type=1326 audit(1757318366.339:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbb26d8ebe9 code=0x7ffc0000 [ 181.809726][ T30] audit: type=1326 audit(1757318366.339:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26d8ebe9 code=0x7ffc0000 [ 181.835346][ T30] audit: type=1326 audit(1757318366.339:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7554 comm="syz.4.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb26d8ebe9 code=0x7ffc0000 [ 181.894870][ T5918] usb 2-1: failed to read current rate; disabling the check [ 182.236363][ T5918] usb 2-1: USB disconnect, device number 4 [ 182.779810][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 182.779825][ T30] audit: type=1400 audit(1757318367.389:449): avc: denied { write } for pid=7564 comm="syz.2.442" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.867831][ T30] audit: type=1400 audit(1757318367.479:450): avc: denied { setopt } for pid=7566 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 182.916915][ T30] audit: type=1400 audit(1757318367.479:451): avc: denied { connect } for pid=7566 comm="syz.1.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 185.235508][ T30] audit: type=1400 audit(1757318369.819:452): avc: denied { create } for pid=7591 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 185.503190][ T30] audit: type=1400 audit(1757318369.829:453): avc: denied { write } for pid=7591 comm="syz.3.449" path="socket:[16198]" dev="sockfs" ino=16198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 185.758203][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 185.764517][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 185.823608][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 185.835678][ T30] audit: type=1400 audit(1757318370.449:454): avc: denied { ioctl } for pid=7595 comm="syz.2.450" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.862557][ T7596] input: syz1 as /devices/virtual/input/input6 [ 186.165294][ T7600] binder_alloc: 7598: pid 7598 spamming oneway? 1 buffers allocated for a total size of 4096 [ 186.179496][ T7600] binder_alloc: 7598: pid 7598 spamming oneway? 2 buffers allocated for a total size of 5120 [ 186.841278][ T30] audit: type=1400 audit(1757318371.419:455): avc: denied { read write } for pid=7604 comm="syz.1.453" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 187.991623][ T30] audit: type=1400 audit(1757318371.419:456): avc: denied { open } for pid=7604 comm="syz.1.453" path="/dev/input/mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 188.343579][ T7609] serio: Serial port ptm0 [ 191.257208][ T7642] bridge0: port 1(dummy0) entered disabled state [ 191.506524][ T7642] dummy0: left allmulticast mode [ 191.601486][ T7642] bridge0: port 1(dummy0) entered disabled state [ 191.849231][ T30] audit: type=1400 audit(1757318376.269:457): avc: denied { bind } for pid=7644 comm="syz.5.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 192.414333][ T7656] syz_tun: entered allmulticast mode [ 192.455364][ T7656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 193.659987][ T7656] syz_tun (unregistering): left allmulticast mode [ 193.680183][ T30] audit: type=1400 audit(1757318378.259:458): avc: denied { append } for pid=7680 comm="syz.4.474" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 193.932925][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.939685][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.965778][ T7708] netlink: 20 bytes leftover after parsing attributes in process `syz.5.480'. [ 198.354764][ T7733] netlink: 40 bytes leftover after parsing attributes in process `syz.5.485'. [ 198.465610][ T7733] netlink: 40 bytes leftover after parsing attributes in process `syz.5.485'. [ 199.361172][ T5897] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 199.563404][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 199.633020][ T5897] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 199.793148][ T5897] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 199.813079][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 199.827901][ T5897] usb 3-1: Product: syz [ 199.843360][ T5897] usb 3-1: Manufacturer: syz [ 200.303691][ T5897] usb 3-1: SerialNumber: syz [ 200.440369][ T5897] usb 3-1: config 0 descriptor?? [ 200.465703][ T7742] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.516850][ T30] audit: type=1400 audit(1757318385.109:459): avc: denied { listen } for pid=7758 comm="syz.4.495" lport=39756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 200.928775][ T3090] usb 3-1: USB disconnect, device number 9 [ 200.985872][ T30] audit: type=1400 audit(1757318385.509:460): avc: denied { append } for pid=7768 comm="syz.3.496" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.059722][ T30] audit: type=1400 audit(1757318385.599:461): avc: denied { accept } for pid=7758 comm="syz.4.495" lport=39756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.754536][ T30] audit: type=1400 audit(1757318388.369:462): avc: denied { write } for pid=7792 comm="syz.1.502" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 205.421190][ T30] audit: type=1400 audit(1757318389.629:463): avc: denied { read } for pid=7804 comm="syz.2.505" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 205.760980][ T30] audit: type=1400 audit(1757318390.049:464): avc: denied { bind } for pid=7807 comm="syz.4.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.931230][ T30] audit: type=1400 audit(1757318391.539:465): avc: denied { ioctl } for pid=7833 comm="syz.5.514" path="socket:[16868]" dev="sockfs" ino=16868 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 207.884052][ T30] audit: type=1400 audit(1757318392.489:466): avc: denied { mount } for pid=7847 comm="syz.5.518" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 207.945947][ T30] audit: type=1400 audit(1757318392.539:467): avc: denied { create } for pid=7847 comm="syz.5.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 209.034911][ T7864] netlink: 'syz.2.523': attribute type 1 has an invalid length. [ 209.072000][ T7864] bond1: (slave geneve2): making interface the new active one [ 209.080326][ T7864] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 209.090314][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.106344][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.117460][ T7864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.523'. [ 209.134071][ T2198] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.176731][ T2198] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 209.322091][ T7864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.228954][ T7873] netlink: 'syz.1.525': attribute type 39 has an invalid length. [ 211.421490][ T30] audit: type=1400 audit(1757318395.669:468): avc: denied { watch watch_reads } for pid=7885 comm="syz.4.528" path="/103" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 211.654908][ T30] audit: type=1400 audit(1757318396.269:469): avc: denied { read write } for pid=7898 comm="syz.1.530" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 211.684322][ T3090] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 211.830850][ T3090] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 211.931627][ T30] audit: type=1400 audit(1757318396.269:470): avc: denied { open } for pid=7898 comm="syz.1.530" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 212.902395][ T30] audit: type=1400 audit(1757318397.519:471): avc: denied { add_name } for pid=7910 comm="syz.4.532" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 212.930647][ T30] audit: type=1400 audit(1757318397.519:472): avc: denied { create } for pid=7910 comm="syz.4.532" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 213.055128][ T30] audit: type=1400 audit(1757318397.519:473): avc: denied { associate } for pid=7910 comm="syz.4.532" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 213.335632][ T7924] 9pnet: bogus RWRITE count (2 > 1) [ 215.390585][ T7958] : entered promiscuous mode [ 216.981693][ T30] audit: type=1400 audit(1757318401.589:474): avc: denied { shutdown } for pid=7965 comm="syz.5.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 218.709703][ T30] audit: type=1400 audit(1757318403.259:475): avc: denied { getopt } for pid=7992 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 218.903876][ T30] audit: type=1400 audit(1757318403.509:476): avc: denied { write } for pid=7994 comm="syz.5.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 221.665156][ T5170] Bluetooth: hci4: command 0x0406 tx timeout [ 221.690584][ T8035] ======================================================= [ 221.690584][ T8035] WARNING: The mand mount option has been deprecated and [ 221.690584][ T8035] and is ignored by this kernel. Remove the mand [ 221.690584][ T8035] option from the mount to silence this warning. [ 221.690584][ T8035] ======================================================= [ 221.802772][ T8035] tipc: Started in network mode [ 221.817251][ T8035] tipc: Node identity ac14140f, cluster identity 4711 [ 222.081722][ T8035] tipc: New replicast peer: 255.255.255.255 [ 222.206644][ T8035] tipc: Enabled bearer , priority 10 [ 222.511872][ T8047] netlink: 48 bytes leftover after parsing attributes in process `syz.5.566'. [ 222.559803][ T30] audit: type=1400 audit(1757318406.809:477): avc: denied { read } for pid=8041 comm="syz.1.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 222.650855][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.566'. [ 222.789731][ T8045] tipc: Disabling bearer [ 224.214614][ T30] audit: type=1400 audit(1757318408.829:478): avc: denied { ioctl } for pid=8057 comm="syz.3.575" path="/115/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 224.305539][ T8059] md2: using deprecated bitmap file support [ 224.312506][ T8059] md2: error: bitmap file must be a regular file [ 225.013398][ T30] audit: type=1400 audit(1757318409.629:479): avc: denied { ioctl } for pid=8079 comm="syz.5.583" path="socket:[18596]" dev="sockfs" ino=18596 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 225.383708][ T30] audit: type=1400 audit(1757318409.969:480): avc: denied { read } for pid=8090 comm="syz.3.581" path="socket:[18621]" dev="sockfs" ino=18621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 228.353447][ T3090] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 228.594897][ T3090] usb 5-1: Using ep0 maxpacket: 16 [ 228.649950][ T3090] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.729309][ T3090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.971138][ T3090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 229.175322][ T3090] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 229.609372][ T3090] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.625168][ T3090] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 229.654610][ T3090] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 229.703887][ T3090] usb 5-1: Manufacturer: syz [ 229.732588][ T3090] usb 5-1: config 0 descriptor?? [ 230.081333][ T3090] rc_core: IR keymap rc-hauppauge not found [ 230.110213][ T3090] Registered IR keymap rc-empty [ 230.119489][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.340079][ T8139] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[8139] [ 230.734761][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 230.847660][ T3090] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 230.863494][ T8141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.598'. [ 231.039339][ T3090] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 231.086585][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.163918][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.183260][ T8141] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8141 comm=syz.3.598 [ 231.384090][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.436375][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.491266][ T30] audit: type=1400 audit(1757318416.089:481): avc: denied { sqpoll } for pid=8147 comm="syz.1.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 231.531742][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.573072][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.612138][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.671128][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 231.841512][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 232.319464][ T3090] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 232.353205][ T3090] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 232.371271][ T3090] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 232.434103][ T3090] usb 5-1: USB disconnect, device number 3 [ 232.717032][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.5.605'. [ 235.085777][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 235.742883][ T8207] netlink: 'syz.4.615': attribute type 4 has an invalid length. [ 235.768675][ T8207] netlink: 152 bytes leftover after parsing attributes in process `syz.4.615'. [ 235.872896][ T8207] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 236.874611][ T8215] netlink: 'syz.1.619': attribute type 4 has an invalid length. [ 236.926677][ T8217] netlink: 'syz.1.619': attribute type 4 has an invalid length. [ 236.953063][ T30] audit: type=1326 audit(1757318421.559:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 236.997025][ T30] audit: type=1326 audit(1757318421.559:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 237.170065][ T30] audit: type=1326 audit(1757318421.559:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 237.630250][ T30] audit: type=1326 audit(1757318421.559:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 237.667019][ T8226] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.622'. [ 237.671167][ T975] IPVS: starting estimator thread 0... [ 237.679529][ T30] audit: type=1326 audit(1757318421.559:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 237.786968][ T30] audit: type=1326 audit(1757318421.559:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 237.813079][ T30] audit: type=1326 audit(1757318421.559:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 238.131664][ T8225] IPVS: using max 43 ests per chain, 103200 per kthread [ 238.182300][ T30] audit: type=1326 audit(1757318421.559:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 238.237941][ T30] audit: type=1326 audit(1757318421.559:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 238.286243][ T30] audit: type=1326 audit(1757318421.559:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8216 comm="syz.2.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 240.501558][ T8254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.624'. [ 242.697321][ T8283] overlayfs: failed to clone upperpath [ 243.107848][ T8293] netlink: 68 bytes leftover after parsing attributes in process `syz.2.641'. [ 243.924341][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.639'. [ 244.261217][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 244.261251][ T30] audit: type=1400 audit(1757318428.779:495): avc: denied { setopt } for pid=8299 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 244.943303][ T30] audit: type=1400 audit(1757318429.559:496): avc: denied { ioctl } for pid=8306 comm="syz.5.644" path="socket:[19786]" dev="sockfs" ino=19786 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.388329][ T30] audit: type=1400 audit(1757318430.979:497): avc: denied { shutdown } for pid=8324 comm="syz.2.650" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.395431][ T30] audit: type=1400 audit(1757318432.009:498): avc: denied { checkpoint_restore } for pid=8338 comm="syz.3.654" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 248.564156][ T8349] netlink: 'syz.1.655': attribute type 10 has an invalid length. [ 248.618780][ T8349] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 248.657486][ T8349] team0: Failed to send options change via netlink (err -105) [ 248.699128][ T8349] team0: Port device netdevsim0 added [ 248.740978][ T36] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 249.351109][ T5897] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 249.750531][ T5897] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 249.763566][ T5897] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 249.783796][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 250.081134][ T5897] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.179334][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.274086][ T5897] usb 3-1: config 0 descriptor?? [ 250.313869][ T5897] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 250.539087][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.663'. [ 251.709428][ T5897] usb 3-1: USB disconnect, device number 10 [ 251.936910][ T8371] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8371 comm=syz.1.663 [ 251.982537][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.665'. [ 252.271243][ T30] audit: type=1400 audit(1757318436.879:499): avc: denied { getopt } for pid=8383 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.344358][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.350844][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.815739][ T8426] ceph: No mds server is up or the cluster is laggy [ 256.074556][ T30] audit: type=1400 audit(1757318440.689:500): avc: denied { watch watch_reads } for pid=8434 comm="syz.1.681" path="/" dev="ramfs" ino=19175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 256.104767][ T8435] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 256.147869][ T8435] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 256.164849][ T8435] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 256.195241][ T8435] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 256.204148][ T8435] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 256.213946][ T8435] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 256.221679][ T8435] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 256.231921][ T8437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.258683][ T8435] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 256.268624][ T8435] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 256.290834][ T8435] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 256.323534][ T8437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.398241][ T8437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.424968][ T8437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.759878][ T30] audit: type=1400 audit(1757318442.369:501): avc: denied { read } for pid=8449 comm="syz.1.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 259.397067][ T30] audit: type=1400 audit(1757318443.999:502): avc: denied { module_request } for pid=8472 comm="syz.5.692" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 260.165154][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 260.259968][ T30] audit: type=1400 audit(1757318444.869:503): avc: denied { map } for pid=8479 comm="syz.4.693" path="socket:[20139]" dev="sockfs" ino=20139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 260.323741][ T30] audit: type=1400 audit(1757318444.899:504): avc: denied { read } for pid=8479 comm="syz.4.693" path="socket:[20139]" dev="sockfs" ino=20139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 263.245512][ T8509] netlink: 60 bytes leftover after parsing attributes in process `syz.4.700'. [ 263.428140][ T8515] input: syz1 as /devices/virtual/input/input8 [ 263.817892][ T8528] netlink: 52 bytes leftover after parsing attributes in process `syz.3.703'. [ 264.286515][ T8513] bond1: (slave geneve2): Releasing active interface [ 264.358540][ T8534] netlink: 'syz.4.706': attribute type 4 has an invalid length. [ 264.446224][ T6201] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 265.041791][ T6201] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 265.056118][ T6201] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 265.065540][ T6201] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 265.212436][ T30] audit: type=1400 audit(1757318449.799:505): avc: denied { watch watch_reads } for pid=8539 comm="syz.3.708" path="/141/file1" dev="tmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 265.538592][ T8550] IPv6: Can't replace route, no match found [ 265.801229][ T30] audit: type=1400 audit(1757318450.399:506): avc: denied { read } for pid=8548 comm="syz.5.710" path="socket:[20225]" dev="sockfs" ino=20225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 266.177954][ T30] audit: type=1400 audit(1757318450.789:507): avc: denied { mount } for pid=8557 comm="syz.4.712" name="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 266.181375][ T8558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 266.708889][ T30] audit: type=1400 audit(1757318450.789:508): avc: denied { search } for pid=8557 comm="syz.4.712" name="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.731352][ T30] audit: type=1400 audit(1757318450.789:509): avc: denied { search } for pid=8557 comm="syz.4.712" name="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.755674][ T30] audit: type=1400 audit(1757318450.789:510): avc: denied { read open } for pid=8557 comm="syz.4.712" path="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 266.992262][ T8558] bond0: (slave bond_slave_1): Releasing backup interface [ 267.830257][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.717'. [ 268.269402][ T8584] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 268.646575][ T8585] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 268.664283][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 268.763233][ T8585] bond1 (unregistering): Released all slaves [ 268.780592][ T8594] netlink: 'syz.3.721': attribute type 9 has an invalid length. [ 268.869698][ T30] audit: type=1400 audit(1757318453.469:511): avc: denied { create } for pid=8596 comm="syz.4.722" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 268.920866][ T30] audit: type=1400 audit(1757318453.469:512): avc: denied { write } for pid=8596 comm="syz.4.722" name="file0" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.109055][ T30] audit: type=1400 audit(1757318453.469:513): avc: denied { open } for pid=8596 comm="syz.4.722" path="/137/file0" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 269.782193][ T30] audit: type=1400 audit(1757318453.509:514): avc: denied { unlink } for pid=5852 comm="syz-executor" name="file0" dev="tmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 270.749211][ T8619] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 270.870357][ T30] audit: type=1400 audit(1757318455.479:515): avc: denied { rename } for pid=8612 comm="syz.3.728" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 271.005397][ T30] audit: type=1400 audit(1757318455.609:516): avc: denied { module_load } for pid=8628 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 271.035125][ T30] audit: type=1400 audit(1757318455.649:517): avc: denied { ioctl } for pid=8628 comm="syz.2.732" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 272.014102][ T30] audit: type=1400 audit(1757318456.629:518): avc: denied { mounton } for pid=8648 comm="syz.3.738" path="/147/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 272.041948][ T8649] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.757191][ T30] audit: type=1400 audit(1757318457.369:519): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 273.711306][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.743'. [ 273.883614][ T30] audit: type=1400 audit(1757318458.499:520): avc: denied { write } for pid=8676 comm="syz.4.746" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 275.011329][ T8688] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 275.018141][ T8688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 275.026561][ T8688] vhci_hcd vhci_hcd.0: Device attached [ 275.067806][ T8689] vhci_hcd: connection closed [ 275.126109][ T6203] vhci_hcd: stop threads [ 275.830409][ T30] audit: type=1400 audit(1757318458.499:521): avc: denied { open } for pid=8676 comm="syz.4.746" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 275.855737][ T30] audit: type=1400 audit(1757318458.529:522): avc: denied { create } for pid=8676 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 275.882676][ T6203] vhci_hcd: release socket [ 275.899348][ T6203] vhci_hcd: disconnect device [ 275.919568][ T30] audit: type=1400 audit(1757318459.329:523): avc: denied { read } for pid=8670 comm="syz.3.745" path="socket:[20705]" dev="sockfs" ino=20705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 275.951422][ T975] vhci_hcd: vhci_device speed not set [ 276.749697][ T30] audit: type=1400 audit(1757318460.879:524): avc: denied { name_connect } for pid=8695 comm="syz.4.750" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 278.412861][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.762'. [ 279.541668][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.766'. [ 280.237440][ T8756] overlayfs: failed to clone upperpath [ 282.159810][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.305779][ T8768] bridge_slave_1: left allmulticast mode [ 282.329841][ T8768] bridge_slave_1: left promiscuous mode [ 282.770626][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.875045][ T8768] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 283.207288][ T8777] syz.4.774: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 283.721603][ T8777] CPU: 1 UID: 0 PID: 8777 Comm: syz.4.774 Not tainted syzkaller #0 PREEMPT(full) [ 283.721631][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.721643][ T8777] Call Trace: [ 283.721649][ T8777] [ 283.721655][ T8777] dump_stack_lvl+0x16c/0x1f0 [ 283.721685][ T8777] warn_alloc+0x248/0x3a0 [ 283.721707][ T8777] ? __pfx_warn_alloc+0x10/0x10 [ 283.721722][ T8777] ? __pfx_stack_trace_save+0x10/0x10 [ 283.721744][ T8777] ? kasan_save_stack+0x42/0x60 [ 283.721754][ T8777] ? kasan_save_stack+0x33/0x60 [ 283.721763][ T8777] ? kasan_save_track+0x14/0x30 [ 283.721772][ T8777] ? xskq_create+0x52/0x1d0 [ 283.721782][ T8777] ? xsk_setsockopt+0x792/0x9a0 [ 283.721791][ T8777] ? do_sock_setsockopt+0xf3/0x1d0 [ 283.721809][ T8777] ? xskq_create+0xfb/0x1d0 [ 283.721819][ T8777] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 283.721841][ T8777] ? xskq_create+0xfb/0x1d0 [ 283.721856][ T8777] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.721875][ T8777] ? xskq_create+0xfb/0x1d0 [ 283.721885][ T8777] vmalloc_user_noprof+0x9e/0xe0 [ 283.721900][ T8777] ? xskq_create+0xfb/0x1d0 [ 283.721910][ T8777] xskq_create+0xfb/0x1d0 [ 283.721923][ T8777] xsk_setsockopt+0x792/0x9a0 [ 283.721934][ T8777] ? __pfx_xsk_setsockopt+0x10/0x10 [ 283.721943][ T8777] ? find_held_lock+0x2b/0x80 [ 283.721959][ T8777] ? selinux_socket_setsockopt+0x6a/0x80 [ 283.721973][ T8777] ? __pfx_xsk_setsockopt+0x10/0x10 [ 283.721984][ T8777] do_sock_setsockopt+0xf3/0x1d0 [ 283.722001][ T8777] __sys_setsockopt+0x1a0/0x230 [ 283.722015][ T8777] __x64_sys_setsockopt+0xbd/0x160 [ 283.722026][ T8777] ? do_syscall_64+0x91/0x4c0 [ 283.722039][ T8777] ? lockdep_hardirqs_on+0x7c/0x110 [ 283.722052][ T8777] do_syscall_64+0xcd/0x4c0 [ 283.722066][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.722077][ T8777] RIP: 0033:0x7fbb26d8ebe9 [ 283.722088][ T8777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.722098][ T8777] RSP: 002b:00007fbb27b6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 283.722108][ T8777] RAX: ffffffffffffffda RBX: 00007fbb26fc5fa0 RCX: 00007fbb26d8ebe9 [ 283.722115][ T8777] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 283.722121][ T8777] RBP: 00007fbb26e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 283.722127][ T8777] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 283.722133][ T8777] R13: 00007fbb26fc6038 R14: 00007fbb26fc5fa0 R15: 00007ffeb8f73468 [ 283.722146][ T8777] [ 284.131669][ T8777] Mem-Info: [ 284.135054][ T30] audit: type=1400 audit(1757318468.659:525): avc: denied { wake_alarm } for pid=8784 comm="syz.2.778" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 284.159512][ T8777] active_anon:22840 inactive_anon:0 isolated_anon:0 [ 284.159512][ T8777] active_file:13257 inactive_file:40666 isolated_file:0 [ 284.159512][ T8777] unevictable:768 dirty:318 writeback:0 [ 284.159512][ T8777] slab_reclaimable:12021 slab_unreclaimable:100661 [ 284.159512][ T8777] mapped:41493 shmem:15181 pagetables:1376 [ 284.159512][ T8777] sec_pagetables:0 bounce:0 [ 284.159512][ T8777] kernel_misc_reclaimable:0 [ 284.159512][ T8777] free:1294582 free_pcp:14086 free_cma:0 [ 284.207965][ T8777] Node 0 active_anon:91360kB inactive_anon:0kB active_file:53028kB inactive_file:162464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165972kB dirty:1272kB writeback:0kB shmem:59188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12476kB pagetables:5380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 284.240321][ T8777] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 284.321553][ T8777] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 284.390017][ T8777] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 284.427381][ T8777] Node 0 DMA32 free:1266916kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:87736kB inactive_anon:0kB active_file:53028kB inactive_file:161144kB unevictable:1536kB writepending:1272kB present:3129332kB managed:2539344kB mlocked:0kB bounce:0kB free_pcp:45180kB local_pcp:24156kB free_cma:0kB [ 284.534163][ T8777] lowmem_reserve[]: 0 0 1 1 1 [ 284.551610][ T8777] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 284.641383][ T5890] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 284.660352][ T8777] lowmem_reserve[]: 0 0 0 0 0 [ 284.666799][ T8777] Node 1 Normal free:3897688kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16512kB local_pcp:6752kB free_cma:0kB [ 284.842571][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 284.874583][ T8777] lowmem_reserve[]: 0 0 0 0 0 [ 284.900326][ T8777] Node 0 DMA: 0*4kB [ 284.900447][ T5890] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 284.917590][ T8777] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 284.968107][ T5890] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 284.987590][ T8777] Node 0 DMA32: 877*4kB (UE) 823*8kB (UME) 137*16kB (UME) 214*32kB (UM) 60*64kB (UME) 11*128kB (UE) 8*256kB (UME) 3*512kB (U) 3*1024kB (UM) 3*2048kB (UE) 298*4096kB (UM) = 1257788kB [ 285.022740][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0 [ 285.060139][ T5890] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 285.121076][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.125498][ T8777] Node 0 [ 285.161885][ T5890] usb 2-1: config 0 descriptor?? [ 285.180212][ T8777] Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 285.701180][ T8777] Node 1 Normal: 162*4kB (UME) 42*8kB (UME) 32*16kB (UME) 142*32kB (UME) 45*64kB (UME) 9*128kB (UME) 6*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3897688kB [ 285.895168][ T5890] elecom 0003:056E:011C.0004: hidraw0: USB HID vf4.f6 Device [HID 056e:011c] on usb-dummy_hcd.1-1/input0 [ 286.011115][ T8777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.047615][ T8777] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.126778][ T8777] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.183928][ T8777] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.239197][ T5897] usb 2-1: USB disconnect, device number 5 [ 286.247875][ T8777] 73157 total pagecache pages [ 286.337164][ T8777] 0 pages in swap cache [ 286.349876][ T8777] Free swap = 124996kB [ 286.362715][ T8777] Total swap = 124996kB [ 286.368863][ T8777] 2097051 pages RAM [ 286.373011][ T8777] 0 pages HighMem/MovableOnly [ 286.378970][ T8777] 430253 pages reserved [ 286.496666][ T8777] 0 pages cma reserved [ 287.122853][ T8817] netlink: 'syz.4.785': attribute type 10 has an invalid length. [ 287.161865][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.176384][ T8817] bond0: (slave team0): Enslaving as an active interface with an up link [ 288.716772][ T30] audit: type=1400 audit(1757318473.329:526): avc: denied { write } for pid=8830 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 289.842156][ T5918] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 290.084811][ T5918] usb 4-1: config 0 has an invalid interface number: 220 but max is 0 [ 290.116958][ T5918] usb 4-1: config 0 has no interface number 0 [ 290.187883][ T5918] usb 4-1: config 0 interface 220 has no altsetting 0 [ 290.259497][ T5918] usb 4-1: New USB device found, idVendor=0ace, idProduct=1611, bcdDevice=b7.19 [ 290.311464][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.328090][ T5918] usb 4-1: Product: syz [ 290.336342][ T5918] usb 4-1: Manufacturer: syz [ 290.344034][ T5918] usb 4-1: SerialNumber: syz [ 290.366882][ T5918] usb 4-1: config 0 descriptor?? [ 290.385031][ T5918] cdc_acm 4-1:0.220: Zero length descriptor references [ 290.403578][ T5918] cdc_acm 4-1:0.220: probe with driver cdc_acm failed with error -22 [ 290.790448][ T30] audit: type=1400 audit(1757318475.399:527): avc: denied { watch } for pid=8858 comm="syz.1.795" path="/152/file1" dev="tmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 291.401525][ T30] audit: type=1400 audit(1757318475.399:528): avc: denied { watch_sb } for pid=8858 comm="syz.1.795" path="/152/file1" dev="tmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.971505][ T975] usb 4-1: USB disconnect, device number 6 [ 293.259150][ T30] audit: type=1400 audit(1757318477.869:529): avc: denied { read } for pid=8873 comm="syz.5.798" lport=52783 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 296.021911][ T8900] netlink: 'syz.2.806': attribute type 1 has an invalid length. [ 296.755364][ T8900] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 296.813877][ T8911] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 297.014458][ T8911] bond2 (unregistering): Released all slaves [ 298.494269][ T8937] netlink: 'syz.3.814': attribute type 1 has an invalid length. [ 298.802115][ T30] audit: type=1400 audit(1757318483.169:530): avc: denied { write } for pid=8933 comm="syz.1.813" path="socket:[21133]" dev="sockfs" ino=21133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 299.088131][ T8937] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 299.100847][ T8937] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 299.206867][ T8942] gretap1: entered promiscuous mode [ 299.301467][ T8942] bond3: (slave gretap1): making interface the new active one [ 299.323640][ T8942] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 299.640911][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 300.871981][ T30] audit: type=1400 audit(1757318485.059:531): avc: denied { mount } for pid=8956 comm="syz.2.819" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 300.939007][ T30] audit: type=1400 audit(1757318485.549:532): avc: denied { execute } for pid=8960 comm="syz.4.820" name="file1" dev="ramfs" ino=21164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 301.024016][ T30] audit: type=1400 audit(1757318485.579:533): avc: denied { execute_no_trans } for pid=8960 comm="syz.4.820" path="/file1/file1" dev="ramfs" ino=21164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 302.925561][ T30] audit: type=1400 audit(1757318487.519:534): avc: denied { map } for pid=8976 comm="syz.4.826" path="/dev/sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 303.105742][ T30] audit: type=1400 audit(1757318487.719:535): avc: denied { append } for pid=8983 comm="syz.3.828" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 303.205036][ T8985] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 304.495795][ T30] audit: type=1400 audit(1757318489.109:536): avc: denied { read write } for pid=9001 comm="syz.4.835" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 304.523413][ T30] audit: type=1400 audit(1757318489.139:537): avc: denied { open } for pid=9001 comm="syz.4.835" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 304.730603][ T30] audit: type=1400 audit(1757318489.339:538): avc: denied { getattr } for pid=9007 comm="syz.3.837" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 305.031573][ T30] audit: type=1400 audit(1757318489.489:539): avc: denied { write } for pid=9004 comm="syz.1.836" path="socket:[21307]" dev="sockfs" ino=21307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 305.114902][ T8993] Zero length message leads to an empty skb [ 305.135270][ T6203] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.158606][ T6203] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.172289][ T6203] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.217249][ T6203] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.579233][ T9016] netlink: 'syz.2.838': attribute type 3 has an invalid length. [ 305.587470][ T9016] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.838'. [ 306.490714][ T30] audit: type=1400 audit(1757318491.079:540): avc: denied { create } for pid=9020 comm="syz.2.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 307.121307][ T30] audit: type=1400 audit(1757318491.079:541): avc: denied { connect } for pid=9020 comm="syz.2.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 307.345421][ T30] audit: type=1400 audit(1757318491.149:542): avc: denied { write } for pid=9020 comm="syz.2.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 308.241373][ T30] audit: type=1400 audit(1757318492.849:543): avc: denied { getopt } for pid=9032 comm="syz.3.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.362769][ T30] audit: type=1400 audit(1757318494.979:544): avc: denied { connect } for pid=9060 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 310.462974][ T30] audit: type=1400 audit(1757318494.999:545): avc: denied { setopt } for pid=9060 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 311.761065][ T975] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 311.931102][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 311.940915][ T975] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 311.954760][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.971422][ T975] usb 3-1: Product: syz [ 312.033856][ T975] usb 3-1: Manufacturer: syz [ 312.038845][ T975] usb 3-1: SerialNumber: syz [ 312.297481][ T975] r8152-cfgselector 3-1: Unknown version 0x0000 [ 312.304059][ T975] r8152-cfgselector 3-1: config 0 descriptor?? [ 312.538848][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.557263][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.597413][ T975] r8152-cfgselector 3-1: Unknown version 0x0000 [ 312.604597][ T975] r8152-cfgselector 3-1: bad CDC descriptors [ 312.624430][ T975] r8152-cfgselector 3-1: USB disconnect, device number 11 [ 314.587597][ T30] audit: type=1400 audit(1757318499.189:546): avc: denied { watch watch_reads } for pid=9120 comm="syz.3.867" path="/" dev="configfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 315.542551][ T30] audit: type=1400 audit(1757318499.929:547): avc: denied { write } for pid=9138 comm="syz.4.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 316.799213][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.881978][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.864355][ T9166] overlayfs: failed to clone lowerpath [ 317.918306][ T9169] overlayfs: failed to clone upperpath [ 319.377922][ T30] audit: type=1400 audit(1757318503.989:548): avc: denied { accept } for pid=9184 comm="syz.2.881" path="/183/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 320.125245][ T30] audit: type=1400 audit(1757318504.329:549): avc: denied { bind } for pid=9188 comm="syz.2.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 320.228852][ T30] audit: type=1400 audit(1757318504.339:550): avc: denied { write } for pid=9188 comm="syz.2.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 320.966398][ T30] audit: type=1400 audit(1757318505.579:551): avc: denied { ioctl } for pid=9199 comm="syz.1.885" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 324.586728][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'. [ 324.656291][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'. [ 325.713882][ T30] audit: type=1326 audit(1757318510.329:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 325.725401][ T9245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.897'. [ 325.819481][ T30] audit: type=1326 audit(1757318510.429:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 325.851915][ T30] audit: type=1326 audit(1757318510.459:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 325.960269][ T30] audit: type=1326 audit(1757318510.459:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 326.014331][ T30] audit: type=1326 audit(1757318510.459:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 326.038243][ T30] audit: type=1326 audit(1757318510.459:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 326.073806][ T9250] bpq0: entered allmulticast mode [ 326.083168][ T30] audit: type=1326 audit(1757318510.459:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 326.152246][ T9252] loop2: detected capacity change from 0 to 7 [ 326.169978][ T30] audit: type=1326 audit(1757318510.459:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 326.214348][ T6217] Dev loop2: unable to read RDB block 7 [ 326.220804][ T6217] loop2: AHDI p2 p3 [ 326.331230][ T6217] loop2: partition table partially beyond EOD, truncated [ 326.345083][ T6217] loop2: p3 start 335544320 is beyond EOD, truncated [ 326.353313][ T30] audit: type=1326 audit(1757318510.459:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 326.423137][ T9252] Dev loop2: unable to read RDB block 7 [ 326.443098][ T9252] loop2: AHDI p2 p3 [ 326.453145][ T9252] loop2: partition table partially beyond EOD, truncated [ 326.490253][ T9252] loop2: p3 start 335544320 is beyond EOD, truncated [ 326.540796][ T30] audit: type=1326 audit(1757318510.469:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 326.757254][ T30] audit: type=1326 audit(1757318510.469:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 326.781079][ T30] audit: type=1326 audit(1757318510.469:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 327.274514][ T30] audit: type=1326 audit(1757318510.469:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 327.339099][ T30] audit: type=1326 audit(1757318510.499:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9243 comm="syz.2.896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fa408d8ebe9 code=0x7ffc0000 [ 330.382358][ T9288] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 332.656263][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 332.721602][ T9299] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.729041][ T9299] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.143208][ T9318] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.918'. [ 333.190382][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'. [ 333.567875][ T9319] libceph: resolve '. [ 333.567875][ T9319] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 333.567875][ T9319] ' (ret=-3): failed [ 333.710722][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.920'. [ 333.754963][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.920'. [ 333.880211][ T9299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.909646][ T9299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.510586][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.539200][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.607112][ T9342] cgroup: fork rejected by pids controller in /syz2 [ 335.039071][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.238826][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.327046][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 335.327062][ T30] audit: type=1400 audit(1757318519.939:581): avc: denied { create } for pid=9826 comm="syz.3.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 335.457622][T10104] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 335.505576][ T30] audit: type=1400 audit(1757318519.979:582): avc: denied { accept } for pid=9826 comm="syz.3.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 335.525880][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.801589][ T30] audit: type=1400 audit(1757318520.999:583): avc: denied { read } for pid=10121 comm="syz.3.933" path="socket:[23929]" dev="sockfs" ino=23929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 337.436616][ T30] audit: type=1400 audit(1757318522.049:584): avc: denied { name_bind } for pid=10138 comm="syz.5.937" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 337.661245][ T5962] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 337.843799][ T5962] usb 3-1: Using ep0 maxpacket: 32 [ 337.866853][ T5962] usb 3-1: config 0 has an invalid interface number: 162 but max is 0 [ 337.875789][ T5962] usb 3-1: config 0 has no interface number 0 [ 337.882195][ T5962] usb 3-1: config 0 interface 162 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 337.957907][ T5962] usb 3-1: config 0 interface 162 has no altsetting 0 [ 337.986825][ T5962] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 338.006482][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.021776][ T5962] usb 3-1: Product: syz [ 338.036207][ T5962] usb 3-1: Manufacturer: syz [ 338.070251][ T5962] usb 3-1: SerialNumber: syz [ 338.110269][ T5962] usb 3-1: config 0 descriptor?? [ 338.363183][ T5962] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 338.391386][ T5962] gspca_topro: reg_w err -71 [ 338.481240][ T5962] gspca_topro: Sensor soi763a [ 338.573949][ T5962] usb 3-1: USB disconnect, device number 12 [ 341.656437][ T30] audit: type=1400 audit(1757318526.269:585): avc: denied { read write } for pid=10180 comm="syz.3.948" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 341.801253][ T30] audit: type=1400 audit(1757318526.269:586): avc: denied { open } for pid=10180 comm="syz.3.948" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 343.137888][ T30] audit: type=1400 audit(1757318527.649:587): avc: denied { execmem } for pid=10190 comm="syz.3.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 343.160521][T10191] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 343.168325][T10191] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.952'. [ 343.525214][T10199] bridge0: port 1(vxlan0) entered blocking state [ 343.549221][T10199] bridge0: port 1(vxlan0) entered disabled state [ 343.607446][T10199] vxlan0: entered allmulticast mode [ 343.626067][T10199] vxlan0: entered promiscuous mode [ 345.004883][ T5962] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 345.039079][ T5962] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 346.335562][T10231] netlink: 'syz.1.963': attribute type 10 has an invalid length. [ 346.353688][T10231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.370087][T10231] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 347.735205][ T30] audit: type=1400 audit(1757318532.339:588): avc: denied { ioctl } for pid=10241 comm="syz.2.966" path="socket:[24102]" dev="sockfs" ino=24102 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 348.448220][ T30] audit: type=1400 audit(1757318533.059:589): avc: denied { create } for pid=10250 comm="syz.5.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 348.999449][ T30] audit: type=1400 audit(1757318533.599:590): avc: denied { accept } for pid=10262 comm="syz.1.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 349.318595][ T30] audit: type=1400 audit(1757318533.649:591): avc: denied { mounton } for pid=10255 comm="syz.3.971" path="/190/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 349.571670][T10270] tmpfs: Bad value for 'mpol' [ 349.858089][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 349.867064][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.974'. [ 352.055468][ T30] audit: type=1400 audit(1757318536.659:592): avc: denied { read } for pid=10298 comm="syz.2.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 353.054179][T10317] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.985'. [ 355.928341][ T30] audit: type=1400 audit(1757318540.539:593): avc: denied { mounton } for pid=10347 comm="syz.1.995" path="/194/file0" dev="tmpfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 356.261685][ T30] audit: type=1400 audit(1757318540.619:594): avc: denied { bind } for pid=10341 comm="syz.5.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 356.297627][ T30] audit: type=1800 audit(1757318540.909:595): pid=10349 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.995" name="/" dev="9p" ino=589826 res=0 errno=0 [ 356.383165][T10354] Cache volume key already in use (9p,(null),) [ 357.461522][ T30] audit: type=1800 audit(1757318542.069:596): pid=10358 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.998" name="/" dev="9p" ino=2 res=0 errno=0 [ 358.629121][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 359.018894][ T30] audit: type=1400 audit(1757318543.629:597): avc: denied { write } for pid=10376 comm="syz.1.1004" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 360.532822][ T30] audit: type=1400 audit(1757318545.139:598): avc: denied { lock } for pid=10386 comm="syz.1.1006" path="socket:[25546]" dev="sockfs" ino=25546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 361.173617][T10398] netlink: 'syz.5.1007': attribute type 11 has an invalid length. [ 366.608313][ T30] audit: type=1400 audit(1757318551.169:599): avc: denied { write } for pid=10443 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 366.792521][ T30] audit: type=1400 audit(1757318551.169:600): avc: denied { nlmsg_write } for pid=10443 comm="syz.2.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 367.525589][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1022'. [ 370.501517][T10490] Option ' ' to dns_resolver key: bad/missing value [ 372.483679][ T30] audit: type=1400 audit(1757318557.099:601): avc: denied { remount } for pid=10502 comm="syz.2.1035" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 372.651209][ T30] audit: type=1400 audit(1757318557.119:602): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 372.696631][T10507] netlink: 'syz.2.1037': attribute type 1 has an invalid length. [ 373.056504][T10507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.235242][T10507] vlan2: entered promiscuous mode [ 373.242694][T10507] bond2: entered promiscuous mode [ 373.248364][T10507] vlan2: entered allmulticast mode [ 373.257943][T10507] bond2: entered allmulticast mode [ 373.351095][ T30] audit: type=1400 audit(1757318557.959:603): avc: denied { write } for pid=10506 comm="syz.2.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 373.410692][T10507] bond2: (slave gretap1): making interface the new active one [ 373.514347][T10507] gretap1: entered promiscuous mode [ 373.888251][T10507] gretap1: entered allmulticast mode [ 373.897946][T10507] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 375.216949][T10524] cgroup: fork rejected by pids controller in /syz3 [ 375.660443][ C0] hrtimer: interrupt took 11723 ns [ 378.238888][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.246108][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.920146][ T30] audit: type=1400 audit(1757318563.529:604): avc: denied { append } for pid=10624 comm="syz.3.1058" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.195530][T10640] cgroup: fork rejected by pids controller in /syz1 [ 382.579723][T11133] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 383.776057][T11149] sp0: Synchronizing with TNC [ 383.908449][T11150] overlayfs: failed to clone upperpath [ 385.255249][T11174] vxcan1 speed is unknown, defaulting to 1000 [ 385.274604][T11174] vxcan1 speed is unknown, defaulting to 1000 [ 385.292365][T11174] vxcan1 speed is unknown, defaulting to 1000 [ 385.680730][T11174] infiniband syz2: set down [ 385.685518][T11174] infiniband syz2: added vxcan1 [ 385.722894][T11174] RDS/IB: syz2: added [ 385.727429][T11174] smc: adding ib device syz2 with port count 1 [ 385.733890][T11174] smc: ib device syz2 port 1 has pnetid [ 385.742260][T11174] vxcan1 speed is unknown, defaulting to 1000 [ 385.831320][T11174] vxcan1 speed is unknown, defaulting to 1000 [ 385.899259][ T5897] vxcan1 speed is unknown, defaulting to 1000 [ 385.920240][ T5897] vxcan1 speed is unknown, defaulting to 1000 [ 385.966152][T11174] vxcan1 speed is unknown, defaulting to 1000 [ 386.061435][T11174] vxcan1 speed is unknown, defaulting to 1000 [ 386.147739][T11174] vxcan1 speed is unknown, defaulting to 1000 [ 387.106998][T11193] cgroup: fork rejected by pids controller in /syz4 [ 387.715720][ T30] audit: type=1400 audit(1757318572.329:605): avc: denied { create } for pid=11442 comm="syz.1.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 387.817192][T11577] vxcan1 speed is unknown, defaulting to 1000 [ 388.861943][T11650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1083'. [ 389.141094][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'. [ 391.096292][T11673] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1092'. [ 391.109787][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1092'. [ 391.310640][T11679] netlink: 'syz.5.1092': attribute type 10 has an invalid length. [ 391.321918][T11680] netlink: 'syz.4.1094': attribute type 1 has an invalid length. [ 391.360462][T11680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.381638][T11679] bridge0: port 3(team0) entered blocking state [ 391.391220][T11679] bridge0: port 3(team0) entered disabled state [ 391.406064][T11679] team0: entered allmulticast mode [ 391.413993][T11679] team0: entered promiscuous mode [ 391.423501][T11679] bridge0: port 3(team0) entered blocking state [ 391.429862][T11679] bridge0: port 3(team0) entered forwarding state [ 391.474046][T11680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.521663][T11680] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 391.573394][T11688] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1094'. [ 391.594888][T11680] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 391.961236][T11684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.970192][T11684] batadv_slave_1: entered promiscuous mode [ 392.041928][T11684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.264898][T11697] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1098'. [ 392.881586][T11684] bond1: (slave batadv_slave_1): making interface the new active one [ 392.902547][T11684] bond1: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 393.032525][T11688] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.254104][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1100'. [ 393.263632][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1100'. [ 393.272725][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1100'. [ 393.281905][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1100'. [ 395.093363][T11714] tipc: Started in network mode [ 395.281562][T11714] tipc: Node identity 922baa5e9d65, cluster identity 4711 [ 395.795267][T11714] tipc: Enabled bearer , priority 0 [ 395.846415][T11719] syzkaller0: entered promiscuous mode [ 395.877997][T11719] syzkaller0: entered allmulticast mode [ 395.904444][T11714] tipc: Resetting bearer [ 395.917771][T11713] tipc: Resetting bearer [ 395.935930][T11713] tipc: Disabling bearer [ 397.121096][ T5890] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 398.332408][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 398.404934][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.554365][ T5890] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 398.570588][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.108287][ T5890] usb 2-1: config 0 descriptor?? [ 399.812235][ T5890] usbhid 2-1:0.0: can't add hid device: -71 [ 399.819302][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 399.829497][ T5890] usb 2-1: USB disconnect, device number 6 [ 401.591436][ T5890] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 401.821574][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 402.258776][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.411969][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.432222][ T5890] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 402.959718][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.971665][ T5890] usb 2-1: config 0 descriptor?? [ 403.863176][ T5890] logitech 0003:046D:C20E.0006: rdesc size test failed for formula gp [ 403.881928][ T5890] logitech 0003:046D:C20E.0006: unbalanced collection at end of report description [ 403.961914][T11789] loop2: detected capacity change from 0 to 7 [ 403.986350][ C0] blk_print_req_error: 43 callbacks suppressed [ 403.986372][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.001822][ C0] buffer_io_error: 43 callbacks suppressed [ 404.001841][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 404.019125][ T5890] logitech 0003:046D:C20E.0006: parse failed [ 404.062172][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.071418][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 404.086636][T11794] usb usb8: usbfs: process 11794 (syz.3.1122) did not claim interface 0 before use [ 404.090114][ T5890] logitech 0003:046D:C20E.0006: probe with driver logitech failed with error -22 [ 404.096174][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.096215][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 404.131277][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.140484][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 404.152593][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.161784][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 404.179793][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.188756][ T5890] usb 2-1: USB disconnect, device number 7 [ 404.189077][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 404.705574][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.714817][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 404.753873][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 404.763152][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 404.774364][T11789] ldm_validate_partition_table(): Disk read failed. [ 405.879188][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.888877][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 405.901437][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 405.910657][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 405.966933][T11789] Dev loop2: unable to read RDB block 0 [ 406.116327][T11813] netlink: 'syz.1.1127': attribute type 1 has an invalid length. [ 406.243039][T11789] loop2: unable to read partition table [ 406.250828][T11789] loop2: partition table beyond EOD, truncated [ 406.264291][T11789] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 406.457377][T11819] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 406.703197][T11819] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 407.015998][T11821] gretap1: entered promiscuous mode [ 407.042615][T11821] bond1: (slave gretap1): making interface the new active one [ 407.067016][T11821] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 407.112589][T11813] macvlan2: entered promiscuous mode [ 407.118006][T11813] macvlan2: entered allmulticast mode [ 407.127915][T11813] bond1: entered promiscuous mode [ 407.140603][T11813] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 407.211795][T11813] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 407.235059][T11813] bond1: left promiscuous mode [ 407.887727][T11835] netlink: 'syz.3.1132': attribute type 11 has an invalid length. [ 409.431079][ T30] audit: type=1400 audit(1757318593.899:606): avc: denied { getopt } for pid=11839 comm="syz.4.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 410.828250][T11853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.195561][T11867] tipc: Enabling of bearer rejected, failed to enable media [ 411.737005][ T3090] IPVS: starting estimator thread 0... [ 411.744690][T11868] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 411.841345][T11874] IPVS: using max 76 ests per chain, 182400 per kthread [ 413.594083][T11900] geneve2: entered promiscuous mode [ 413.599327][T11900] geneve2: entered allmulticast mode [ 416.493076][T11931] netlink: 'syz.4.1154': attribute type 1 has an invalid length. [ 416.936230][T11933] vxcan1 speed is unknown, defaulting to 1000 [ 418.678878][T11952] __nla_validate_parse: 46 callbacks suppressed [ 418.678896][T11952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1160'. [ 418.739152][ T57] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 418.921125][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 418.930021][ T57] usb 5-1: config 0 interface 0 has no altsetting 0 [ 418.939383][ T57] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 419.509717][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.524034][ T57] usb 5-1: Product: syz [ 420.141710][ T57] usb 5-1: Manufacturer: syz [ 420.146395][ T57] usb 5-1: SerialNumber: syz [ 420.159169][ T57] usb 5-1: config 0 descriptor?? [ 420.950798][ T57] gs_usb 5-1:0.0: Configuring for 2 interfaces [ 421.936868][ T30] audit: type=1400 audit(1757318606.549:607): avc: denied { write } for pid=11954 comm="syz.4.1162" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 422.021187][ T57] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 422.263473][ T57] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 422.303823][ T57] usb 5-1: USB disconnect, device number 4 [ 422.367565][ T30] audit: type=1400 audit(1757318606.979:608): avc: denied { setattr } for pid=11990 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 422.909644][ T30] audit: type=1400 audit(1757318606.979:609): avc: denied { getopt } for pid=11990 comm="syz.2.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 429.041796][T12062] nfs: Unknown parameter 'smackfstransmute' [ 432.787668][ T5170] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 432.801953][ T5170] CPU: 1 UID: 0 PID: 5170 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 432.801981][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.801999][ T5170] Workqueue: hci2 hci_rx_work [ 432.802025][ T5170] Call Trace: [ 432.802030][ T5170] [ 432.802038][ T5170] dump_stack_lvl+0x16c/0x1f0 [ 432.802063][ T5170] sysfs_warn_dup+0x7f/0xa0 [ 432.802087][ T5170] sysfs_create_dir_ns+0x24b/0x2b0 [ 432.802111][ T5170] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 432.802134][ T5170] ? find_held_lock+0x2b/0x80 [ 432.802162][ T5170] ? do_raw_spin_unlock+0x172/0x230 [ 432.802182][ T5170] kobject_add_internal+0x2c4/0x9b0 [ 432.802211][ T5170] kobject_add+0x16e/0x240 [ 432.802234][ T5170] ? __pfx_kobject_add+0x10/0x10 [ 432.802259][ T5170] ? do_raw_spin_unlock+0x172/0x230 [ 432.802279][ T5170] ? kobject_put+0xab/0x5a0 [ 432.802305][ T5170] device_add+0x288/0x1aa0 [ 432.802330][ T5170] ? __pfx_dev_set_name+0x10/0x10 [ 432.802347][ T5170] ? __pfx_device_add+0x10/0x10 [ 432.802373][ T5170] ? mgmt_send_event_skb+0x2fb/0x460 [ 432.802398][ T5170] hci_conn_add_sysfs+0x17e/0x230 [ 432.802421][ T5170] le_conn_complete_evt+0x1075/0x1d70 [ 432.802439][ T5170] ? preempt_count_sub+0xb0/0x160 [ 432.802465][ T5170] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 432.802483][ T5170] ? hci_event_packet+0x459/0x11c0 [ 432.802510][ T5170] hci_le_conn_complete_evt+0x23c/0x370 [ 432.802534][ T5170] hci_le_meta_evt+0x354/0x5e0 [ 432.802555][ T5170] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 432.802578][ T5170] hci_event_packet+0x682/0x11c0 [ 432.802597][ T5170] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 432.802615][ T5170] ? __pfx_hci_event_packet+0x10/0x10 [ 432.802636][ T5170] ? kcov_remote_start+0x3c9/0x6d0 [ 432.802655][ T5170] ? lockdep_hardirqs_on+0x7c/0x110 [ 432.802680][ T5170] hci_rx_work+0x2c5/0x16b0 [ 432.802699][ T5170] ? rcu_is_watching+0x12/0xc0 [ 432.802722][ T5170] process_one_work+0x9cc/0x1b70 [ 432.802750][ T5170] ? __pfx_process_one_work+0x10/0x10 [ 432.802775][ T5170] ? assign_work+0x1a0/0x250 [ 432.802795][ T5170] worker_thread+0x6c8/0xf10 [ 432.802825][ T5170] ? __pfx_worker_thread+0x10/0x10 [ 432.802845][ T5170] kthread+0x3c2/0x780 [ 432.802864][ T5170] ? __pfx_kthread+0x10/0x10 [ 432.802884][ T5170] ? rcu_is_watching+0x12/0xc0 [ 432.802906][ T5170] ? __pfx_kthread+0x10/0x10 [ 432.802923][ T5170] ret_from_fork+0x5d4/0x6f0 [ 432.802938][ T5170] ? __pfx_kthread+0x10/0x10 [ 432.802953][ T5170] ret_from_fork_asm+0x1a/0x30 [ 432.802984][ T5170] [ 432.803017][ T5170] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 433.105003][ T5170] Bluetooth: hci2: failed to register connection device [ 433.781251][ T30] audit: type=1400 audit(1757318618.359:610): avc: denied { mounton } for pid=12118 comm="syz.2.1200" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 435.489285][T12131] vlan2: entered promiscuous mode [ 435.494805][T12131] vlan2: entered allmulticast mode [ 435.500111][T12131] hsr_slave_1: entered allmulticast mode [ 435.529213][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 438.836983][T12178] batman_adv: batadv0: Adding interface: dummy0 [ 438.851051][T12178] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.911082][T12178] batman_adv: batadv0: Interface activated: dummy0 [ 439.035561][T12178] batadv0: mtu less than device minimum [ 439.056760][T12178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.068573][T12178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.079978][T12178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.091332][T12178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.102747][T12178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.114073][T12178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.125476][T12178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.136851][T12178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.148201][T12178] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.223410][T12184] netlink: 'syz.5.1217': attribute type 10 has an invalid length. [ 439.387724][T12184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.482283][T12184] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 439.590874][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 439.670960][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.703780][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.907336][T12237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12237 comm=syz.2.1230 [ 442.922469][T12238] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1229'. [ 447.111160][ T30] audit: type=1400 audit(1757318631.289:611): avc: denied { remount } for pid=12276 comm="syz.1.1241" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 448.817634][ T30] audit: type=1400 audit(1757318633.419:612): avc: denied { connect } for pid=12304 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 449.031103][ T30] audit: type=1400 audit(1757318633.549:613): avc: denied { bind } for pid=12304 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 449.263501][ T30] audit: type=1400 audit(1757318633.549:614): avc: denied { listen } for pid=12304 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 449.385710][ T30] audit: type=1400 audit(1757318633.549:615): avc: denied { accept } for pid=12304 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 449.478438][ T30] audit: type=1400 audit(1757318633.649:616): avc: denied { read } for pid=12304 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 449.621156][ T30] audit: type=1400 audit(1757318633.649:617): avc: denied { write } for pid=12304 comm="syz.4.1249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 454.617743][T12369] overlayfs: failed to resolve './bus': -2 [ 455.679929][ T30] audit: type=1400 audit(1757318639.859:618): avc: denied { map } for pid=12370 comm="syz.2.1266" path="socket:[28801]" dev="sockfs" ino=28801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 455.706193][T12368] nbd3: detected capacity change from 0 to 63 [ 455.716525][T12374] block nbd3: NBD_DISCONNECT [ 455.725004][T12374] block nbd3: Disconnected due to user request. [ 455.731729][T12374] block nbd3: shutting down sockets [ 455.767895][ C0] blk_print_req_error: 11 callbacks suppressed [ 455.767908][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 455.783150][ C0] buffer_io_error: 11 callbacks suppressed [ 455.783159][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 455.798636][T12368] bond5: entered promiscuous mode [ 455.800381][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 455.812765][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 455.820541][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 455.829652][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 455.837488][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 455.846594][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 455.856709][ T6217] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 455.868424][ T6217] Buffer I/O error on dev nbd3, logical block 0, async page read [ 455.876771][ T6217] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 455.887171][T12368] bond5: entered allmulticast mode [ 455.895159][T12368] 8021q: adding VLAN 0 to HW filter on device bond5 [ 455.902233][ T6217] Buffer I/O error on dev nbd3, logical block 1, async page read [ 455.910124][ T6217] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 456.148067][ T6217] Buffer I/O error on dev nbd3, logical block 2, async page read [ 456.169937][ T6217] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 456.216624][ T6217] Buffer I/O error on dev nbd3, logical block 3, async page read [ 456.228078][ T6217] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 456.247854][ T6217] Buffer I/O error on dev nbd3, logical block 0, async page read [ 456.449220][ T6217] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 456.918250][ T6217] Buffer I/O error on dev nbd3, logical block 1, async page read [ 457.087991][ T6217] ldm_validate_partition_table(): Disk read failed. [ 457.126503][ T6217] Dev nbd3: unable to read RDB block 0 [ 457.969086][ T6217] nbd3: unable to read partition table [ 458.241637][T12403] tipc: Started in network mode [ 458.246724][ T6217] ldm_validate_partition_table(): Disk read failed. [ 458.253423][T12403] tipc: Node identity 7a4226fe7431, cluster identity 4711 [ 458.269415][ T6217] Dev nbd3: unable to read RDB block 0 [ 458.299921][T12403] tipc: Enabled bearer , priority 0 [ 458.308607][ T6217] nbd3: unable to read partition table [ 458.408128][T12405] syzkaller0: entered promiscuous mode [ 458.511350][T12405] syzkaller0: entered allmulticast mode [ 458.634328][T12405] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 458.707997][T12409] tipc: Enabled bearer , priority 0 [ 458.721918][T12401] tipc: Resetting bearer [ 458.739250][T12401] tipc: Disabling bearer [ 458.769260][T12409] syzkaller0: entered promiscuous mode [ 458.788444][T12409] syzkaller0: entered allmulticast mode [ 459.914408][ T3090] tipc: Node number set to 256813662 [ 460.022862][ T30] audit: type=1400 audit(1757318644.609:619): avc: denied { remove_name } for pid=12410 comm="syz.3.1276" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 460.198577][T12409] tipc: Resetting bearer [ 460.398231][T12421] batman_adv: batadv0: Adding interface: ipvlan2 [ 460.404782][T12421] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.430650][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.441332][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.451605][T12421] batman_adv: batadv0: Interface activated: ipvlan2 [ 460.508014][ T30] audit: type=1400 audit(1757318644.609:620): avc: denied { unlink } for pid=12410 comm="syz.3.1276" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 460.831761][T12408] tipc: Resetting bearer [ 460.863353][T12408] tipc: Disabling bearer [ 461.165626][T12437] tipc: Enabled bearer , priority 0 [ 461.998456][T12445] SELinux: Context system_u:object_r:hald_cache_t:s0 is not valid (left unmapped). [ 462.231065][ T30] audit: type=1400 audit(1757318646.619:621): avc: denied { relabelto } for pid=12438 comm="syz.1.1282" name="cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_cache_t:s0" [ 462.309429][ T5904] tipc: Node number set to 2886997007 [ 462.361373][ T30] audit: type=1400 audit(1757318646.629:622): avc: denied { associate } for pid=12438 comm="syz.1.1282" name="cgroup.procs" dev="cgroup" ino=294 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_cache_t:s0" [ 463.675009][T12464] vxcan1 speed is unknown, defaulting to 1000 [ 465.584569][ T30] audit: type=1400 audit(1757318649.749:623): avc: denied { mount } for pid=12486 comm="syz.2.1295" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 465.681437][ T30] audit: type=1400 audit(1757318649.759:624): avc: denied { remount } for pid=12486 comm="syz.2.1295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 465.870479][T12490] delete_channel: no stack [ 465.876823][ T30] audit: type=1400 audit(1757318650.419:625): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 466.074627][ T30] audit: type=1400 audit(1757318650.479:626): avc: denied { bind } for pid=12490 comm="syz.1.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 469.721961][T12521] tipc: Enabling of bearer rejected, already enabled [ 471.699300][T12538] tipc: Enabled bearer , priority 0 [ 471.737055][T12538] syzkaller0: entered promiscuous mode [ 471.754961][T12538] syzkaller0: entered allmulticast mode [ 471.869779][T12538] tipc: Resetting bearer [ 471.880041][T12537] tipc: Resetting bearer [ 471.927037][T12537] tipc: Disabling bearer [ 473.814704][T12570] 9pnet: Could not find request transport: fd0x00000000000000000xffffffffffffffff [ 477.009217][T12601] tipc: Enabling of bearer rejected, already enabled [ 477.480829][T12610] tipc: Enabled bearer , priority 0 [ 477.498272][T12610] syzkaller0: entered promiscuous mode [ 477.563695][T12610] syzkaller0: entered allmulticast mode [ 478.061620][T12616] tipc: Resetting bearer [ 478.079500][T12609] tipc: Resetting bearer [ 478.306269][T12609] tipc: Disabling bearer [ 479.639945][T12633] Bluetooth: MGMT ver 1.23 [ 480.337398][T12639] tipc: Started in network mode [ 480.408190][T12639] tipc: Node identity e29ac84f37de, cluster identity 4711 [ 480.431240][T12639] tipc: Enabled bearer , priority 0 [ 480.460388][T12640] syzkaller0: entered promiscuous mode [ 481.130604][T12640] syzkaller0: entered allmulticast mode [ 481.150315][T12639] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 481.333499][T12639] tipc: Resetting bearer [ 481.416936][T12638] tipc: Resetting bearer [ 481.471027][ T5904] tipc: Node number set to 3578054735 [ 481.851958][T12638] tipc: Disabling bearer [ 484.003617][T12688] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 484.060750][T12688] trusted_key: encrypted_key: insufficient parameters specified [ 484.751886][T12693] tipc: Enabled bearer , priority 0 [ 484.808771][T12693] syzkaller0: entered promiscuous mode [ 484.822715][T12693] syzkaller0: entered allmulticast mode [ 484.877865][T12693] tipc: Resetting bearer [ 484.969478][T12692] tipc: Resetting bearer [ 485.250281][T12692] tipc: Disabling bearer [ 486.177796][ T30] audit: type=1400 audit(1757318670.789:627): avc: denied { setopt } for pid=12707 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 487.161141][ T30] audit: type=1400 audit(1757318671.769:628): avc: denied { map } for pid=12712 comm="syz.1.1354" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 487.371355][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1356'. [ 487.459373][ T30] audit: type=1400 audit(1757318671.769:629): avc: denied { execute } for pid=12712 comm="syz.1.1354" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 487.662450][T12730] net_ratelimit: 11 callbacks suppressed [ 487.662470][T12730] netlink: zone id is out of range [ 488.546426][T12730] netlink: zone id is out of range [ 488.796444][T12730] netlink: zone id is out of range [ 488.959955][T12730] netlink: zone id is out of range [ 489.012765][T12730] netlink: set zone limit has 4 unknown bytes [ 490.016007][T12748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1362'. [ 490.275910][T12752] tipc: Enabling of bearer rejected, already enabled [ 492.742948][T12791] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 492.888508][T12776] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1365'. [ 492.981179][ T30] audit: type=1400 audit(1757318677.589:630): avc: denied { open } for pid=12786 comm="syz.1.1368" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 492.987073][T12788] 9pnet_fd: Insufficient options for proto=fd [ 494.793361][T12818] vxcan1 speed is unknown, defaulting to 1000 [ 497.852047][T12851] trusted_key: encrypted_key: keylen parameter is missing [ 499.386584][T12865] netlink: zone id is out of range [ 499.400132][T12865] netlink: zone id is out of range [ 499.480353][T12865] netlink: zone id is out of range [ 499.571124][T12865] netlink: zone id is out of range [ 499.576601][T12865] netlink: zone id is out of range [ 499.602437][T12865] netlink: zone id is out of range [ 499.636879][T12865] netlink: zone id is out of range [ 500.087891][T12865] netlink: zone id is out of range [ 500.093583][T12865] netlink: zone id is out of range [ 500.099478][T12865] netlink: zone id is out of range [ 501.104266][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.199499][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.935875][T12916] mmap: syz.2.1392 (12916) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 508.198787][T12952] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 508.984339][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'. [ 509.929635][T12962] rdma_op ffff88807bc179f0 conn xmit_rdma 0000000000000000 [ 510.212021][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 510.311246][T12961] netlink: 'syz.1.1405': attribute type 11 has an invalid length. [ 510.903132][T12969] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.910477][T12969] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.929069][T12961] netlink: 'syz.1.1405': attribute type 13 has an invalid length. [ 510.938989][T12969] bridge0: entered allmulticast mode [ 511.318363][T12973] bridge_slave_1: left allmulticast mode [ 511.370299][T12973] bridge_slave_1: left promiscuous mode [ 511.378278][T12973] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.418414][T12986] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 511.500445][T12973] bridge_slave_0: left allmulticast mode [ 511.589298][T12973] bridge_slave_0: left promiscuous mode [ 511.617527][T12973] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.731104][ T30] audit: type=1400 audit(1757318696.339:631): avc: denied { bind } for pid=12987 comm="syz.5.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 511.866041][T12989] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 511.895022][T12989] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 511.921307][T12991] gretap1: entered promiscuous mode [ 511.928749][T12991] bond2: (slave gretap1): making interface the new active one [ 511.940989][T12991] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 511.999988][T12992] macvlan3: entered promiscuous mode [ 512.047293][T12992] macvlan3: entered allmulticast mode [ 512.296038][T12992] bond2: entered promiscuous mode [ 512.311567][T12992] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 512.790011][T12992] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 512.909628][T12992] bond2: left promiscuous mode [ 516.101147][T13042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1422'. [ 516.110239][T13042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1422'. [ 516.657338][T13045] netlink: 'syz.5.1423': attribute type 1 has an invalid length. [ 517.005551][T13045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.898184][T13052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.905264][T13052] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 518.916270][T13052] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 519.576018][T13064] gretap1: entered promiscuous mode [ 520.150297][T13064] bond1: (slave gretap1): making interface the new active one [ 520.163623][T13064] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 520.264565][T13045] macvlan2: entered promiscuous mode [ 520.269893][T13045] macvlan2: entered allmulticast mode [ 520.277700][T13045] bond1: entered promiscuous mode [ 520.292800][T13045] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 520.467582][T13045] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 520.569006][T13091] IPv6: NLM_F_CREATE should be specified when creating new route [ 520.578019][T13091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.585267][T13091] IPv6: NLM_F_CREATE should be set when creating new route [ 520.592571][T13091] IPv6: NLM_F_CREATE should be set when creating new route [ 521.070062][ T30] audit: type=1400 audit(1757318705.549:632): avc: denied { setopt } for pid=13088 comm="syz.1.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 521.180572][T13045] bond1: left promiscuous mode [ 521.488255][T13083] vxcan1 speed is unknown, defaulting to 1000 [ 521.734380][T13103] ptrace attach of "./syz-executor exec"[6348] was attempted by " /dev/video# 8    \x09       \x0c  "[13103 [ 521.764966][T13095] kvm: kvm [13094]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 522.299056][T13095] kvm: kvm [13094]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x100000000 [ 525.531019][ T30] audit: type=1400 audit(1757318710.089:633): avc: denied { override_creds } for pid=13131 comm="syz.2.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 525.672558][T13116] netlink: 'syz.4.1436': attribute type 10 has an invalid length. [ 525.818205][T13116] batman_adv: batadv0: Adding interface: wlan0 [ 525.835836][T13116] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.897064][T13116] batman_adv: batadv0: Interface activated: wlan0 [ 525.953078][T13142] netlink: 'syz.5.1443': attribute type 1 has an invalid length. [ 526.063904][T13142] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.103257][T13144] bond2: (slave geneve2): making interface the new active one [ 526.163927][T13144] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 526.314905][T13149] nbd_handle_cmd: 2 callbacks suppressed [ 526.314921][T13149] block nbd1: Attempted send on invalid socket [ 526.328460][T13149] blk_print_req_error: 138 callbacks suppressed [ 526.328477][T13149] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 526.358729][T13149] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 526.399979][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 527.444488][T13142] veth3: entered promiscuous mode [ 527.481471][T13142] bond2: (slave veth3): Enslaving as an active interface with a down link [ 527.556024][T13144] vlan2: entered allmulticast mode [ 527.588191][T13144] bond2: entered allmulticast mode [ 527.731112][T13144] geneve2: entered allmulticast mode [ 527.737878][T13144] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 530.349557][T13185] netlink: 'syz.3.1448': attribute type 30 has an invalid length. [ 531.504069][ T30] audit: type=1400 audit(1757318716.119:634): avc: denied { getopt } for pid=13194 comm="syz.1.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 534.363879][T13208] kexec: Could not allocate control_code_buffer [ 535.309501][T13220] net_ratelimit: 2 callbacks suppressed [ 535.309564][T13220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 535.761356][ T30] audit: type=1400 audit(1757318720.369:635): avc: denied { create } for pid=13214 comm="syz.3.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 536.400135][T13233] mac80211_hwsim hwsim6 : renamed from wlan0 [ 537.228624][ T30] audit: type=1400 audit(1757318721.829:636): avc: denied { bind } for pid=13235 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 537.440035][ T30] audit: type=1400 audit(1757318721.839:637): avc: denied { connect } for pid=13235 comm="syz.1.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 538.864172][T13257] block nbd0: Attempted send on invalid socket [ 538.902861][T13257] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 539.759055][T13265] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 543.443654][T13299] hub 9-0:1.0: USB hub found [ 543.452891][T13299] hub 9-0:1.0: 1 port detected [ 544.413995][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 544.673639][T13318] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1485'. [ 544.683749][T13318] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1485'. [ 545.151201][ T30] audit: type=1400 audit(1757318729.389:638): avc: denied { mount } for pid=13314 comm="syz.4.1484" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 547.719260][ T30] audit: type=1400 audit(1757318732.329:639): avc: denied { ioctl } for pid=13368 comm="syz.4.1493" path="socket:[31384]" dev="sockfs" ino=31384 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 548.921923][T13376] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 548.928468][T13376] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 548.946178][T13379] vhci_hcd: connection closed [ 548.951914][T13376] vhci_hcd vhci_hcd.0: Device attached [ 548.967721][ T78] vhci_hcd: stop threads [ 548.972043][ T78] vhci_hcd: release socket [ 548.976543][ T78] vhci_hcd: disconnect device [ 549.844714][T13378] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 551.265436][ T30] audit: type=1400 audit(1757318735.879:640): avc: denied { watch watch_reads } for pid=13413 comm="syz.4.1501" path="/297/file0" dev="tmpfs" ino=1565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 556.120670][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'. [ 556.130074][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'. [ 556.673363][T13458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1510'. [ 557.907246][T13463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1510'. [ 558.323059][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 559.776886][T13493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.441661][ T30] audit: type=1400 audit(1757318745.059:641): avc: denied { getopt } for pid=13480 comm="syz.1.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 561.452602][ T30] audit: type=1400 audit(1757318746.059:642): avc: denied { read } for pid=13508 comm="syz.1.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 561.881351][ T30] audit: type=1400 audit(1757318746.389:643): avc: denied { ioctl } for pid=13512 comm="syz.2.1522" path="socket:[31584]" dev="sockfs" ino=31584 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 562.591612][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.597934][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.657183][ T30] audit: type=1400 audit(1757318748.089:644): avc: denied { ioctl } for pid=13524 comm="syz.3.1524" path="/298/file0" dev="tmpfs" ino=1575 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 564.190291][T13538] fuse: Bad value for 'fd' [ 568.842735][ T30] audit: type=1400 audit(1757318753.419:645): avc: denied { ioctl } for pid=13580 comm="syz.1.1534" path="socket:[31997]" dev="sockfs" ino=31997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 569.195679][T13588] 9pnet_fd: Insufficient options for proto=fd [ 569.498732][ T30] audit: type=1400 audit(1757318754.099:646): avc: denied { write } for pid=13591 comm="syz.3.1537" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 570.196462][T13602] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 570.664284][T13612] pimreg: entered allmulticast mode [ 570.869090][T13612] pimreg: left allmulticast mode [ 572.278890][T13633] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1546'. [ 572.741227][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'. [ 573.996649][ T30] audit: type=1400 audit(1757318758.609:647): avc: denied { read } for pid=13643 comm="syz.1.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 574.069715][ T30] audit: type=1326 audit(1757318758.639:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8338ebe9 code=0x7ffc0000 [ 574.094918][ T30] audit: type=1326 audit(1757318758.639:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8f8338ebe9 code=0x7ffc0000 [ 574.146095][ T30] audit: type=1326 audit(1757318758.639:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8338ebe9 code=0x7ffc0000 [ 574.210987][ T30] audit: type=1326 audit(1757318758.639:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8f8338ebe9 code=0x7ffc0000 [ 574.357272][ T30] audit: type=1326 audit(1757318758.639:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8338ebe9 code=0x7ffc0000 [ 574.389963][ T30] audit: type=1326 audit(1757318758.639:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f8f8338ebe9 code=0x7ffc0000 [ 574.855251][ T30] audit: type=1326 audit(1757318758.639:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8338ebe9 code=0x7ffc0000 [ 574.881660][ T30] audit: type=1326 audit(1757318758.639:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f8f8338ebe9 code=0x7ffc0000 [ 574.942985][ T30] audit: type=1326 audit(1757318758.639:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.1.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8338ebe9 code=0x7ffc0000 [ 575.216306][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 575.225387][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 575.234355][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 575.243424][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 575.252337][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 575.261465][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 575.270372][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 575.279295][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1552'. [ 576.417549][T13656] overlayfs: failed to clone upperpath [ 577.461036][ T57] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 577.691204][ T57] usb 4-1: Using ep0 maxpacket: 32 [ 577.698152][ T57] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.709407][ T57] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 578.237274][ T57] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 578.253327][ T57] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.264508][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.272794][ T57] usb 4-1: Product: syz [ 578.276956][ T57] usb 4-1: Manufacturer: syz [ 578.282737][ T57] usb 4-1: SerialNumber: syz [ 578.302847][ T57] cdc_ncm 4-1:1.0: skipping garbage [ 578.308561][ T57] cdc_ncm 4-1:1.0: skipping garbage [ 578.317362][ T57] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 578.324394][ T57] cdc_ncm 4-1:1.0: bind() failure [ 579.965293][ T5904] usb 4-1: USB disconnect, device number 7 [ 581.494184][T13700] ALSA: mixer_oss: invalid OSS volume 'u' [ 582.871285][T13719] netlink: 'syz.4.1565': attribute type 1 has an invalid length. [ 582.996392][T13719] 8021q: adding VLAN 0 to HW filter on device bond3 [ 583.477334][T13727] bond3: (slave geneve2): making interface the new active one [ 583.487004][T13727] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 583.677390][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 583.677407][ T30] audit: type=1400 audit(1757318768.159:673): avc: denied { read write } for pid=13734 comm="syz.3.1569" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 583.707150][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.138351][T13729] veth1: entered promiscuous mode [ 584.371570][T13729] bond3: (slave veth1): Enslaving as an active interface with a down link [ 584.382459][ T30] audit: type=1400 audit(1757318768.159:674): avc: denied { open } for pid=13734 comm="syz.3.1569" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 584.403860][T13719] vlan2: entered allmulticast mode [ 584.412528][T13719] bond3: entered allmulticast mode [ 584.432745][T13719] geneve2: entered allmulticast mode [ 584.473325][T13719] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 584.545656][ T30] audit: type=1400 audit(1757318768.159:675): avc: denied { ioctl } for pid=13734 comm="syz.3.1569" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 588.769535][T13799] atomic_op ffff88805b3d3198 conn xmit_atomic 0000000000000000 [ 592.161330][T13822] page: refcount:515 mapcount:0 mapping:ffff888057161b70 index:0x0 pfn:0x46000 [ 592.171393][T13822] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 592.179910][T13822] aops:hugetlbfs_aops ino:80ca dentry name(?):"anon_hugepage" [ 592.187390][T13822] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 592.195556][T13822] page_type: f4(hugetlb) [ 592.199790][T13822] raw: 00fff00000000041 ffffc90004dafd68 ffffc90004dafd68 ffff888057161b70 [ 592.208360][T13822] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 592.216933][T13822] head: 00fff00000000041 ffffc90004dafd68 ffffc90004dafd68 ffff888057161b70 [ 592.225588][T13822] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 592.234244][T13822] head: 00fff00000000009 ffffea0001180001 0000000000000000 0000000000000000 [ 592.242895][T13822] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 592.251547][T13822] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 592.258818][T13822] page_owner tracks the page as allocated [ 592.265387][T13822] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 13411, tgid 13407 (syz.2.1500), ts 551016904683, free_ts 539728356832 [ 592.286137][T13822] post_alloc_hook+0x1c0/0x230 [ 592.290912][T13822] get_page_from_freelist+0x132b/0x38e0 [ 592.296442][T13822] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 592.302330][T13822] alloc_surplus_hugetlb_folio+0x1ad/0x4a0 [ 592.308124][T13822] alloc_hugetlb_folio+0xed4/0x1560 [ 592.313307][T13822] hugetlb_fault+0x1bce/0x2f40 [ 592.318058][T13822] handle_mm_fault+0xbfa/0xd10 [ 592.322805][T13822] __get_user_pages+0x551/0x34a0 [ 592.327727][T13822] populate_vma_page_range+0x267/0x3f0 [ 592.333168][T13822] __mm_populate+0x1d8/0x380 [ 592.337743][T13822] vm_mmap_pgoff+0x37f/0x470 [ 592.342317][T13822] ksys_mmap_pgoff+0x1c8/0x5c0 [ 592.347064][T13822] __x64_sys_mmap+0x125/0x190 [ 592.351721][T13822] do_syscall_64+0xcd/0x4c0 [ 592.356213][T13822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.362085][T13822] page last free pid 13411 tgid 13407 stack trace: [ 592.368563][T13822] __free_frozen_pages+0x7d5/0x10f0 [ 592.373748][T13822] free_contig_range+0x183/0x4b0 [ 592.378670][T13822] destroy_args+0x794/0xc10 [ 592.383151][T13822] debug_vm_pgtable+0x1a32/0x3640 [ 592.388188][T13822] do_one_initcall+0x120/0x6e0 [ 592.392935][T13822] kernel_init_freeable+0x5c2/0x910 [ 592.398116][T13822] kernel_init+0x1c/0x2b0 [ 592.402432][T13822] ret_from_fork+0x5d4/0x6f0 [ 592.407004][T13822] ret_from_fork_asm+0x1a/0x30 [ 592.411751][T13822] page has been migrated, last migrate reason: mempolicy_mbind [ 592.419361][T13822] ------------[ cut here ]------------ [ 592.424798][T13822] kernel BUG at mm/filemap.c:154! [ 592.429804][T13822] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 592.436198][T13822] CPU: 1 UID: 0 PID: 13822 Comm: syz.5.1589 Not tainted syzkaller #0 PREEMPT(full) [ 592.445545][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.455579][T13822] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 592.461724][T13822] Code: a7 1e c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 da 19 c9 ff 85 ed 7e 17 e8 91 1e c9 ff 48 c7 c6 40 1d b9 8b 48 89 df e8 72 cf 11 00 90 <0f> 0b e8 7a 1e c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 592.481311][T13822] RSP: 0018:ffffc900056bf310 EFLAGS: 00010046 [ 592.487358][T13822] RAX: 0000000000080000 RBX: ffffea0001180000 RCX: ffffc90011c88000 [ 592.495316][T13822] RDX: 0000000000080000 RSI: ffffffff81f2704e RDI: ffff88807c7b8444 [ 592.503335][T13822] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 592.511286][T13822] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888057161b70 [ 592.519264][T13822] R13: ffffea0001180030 R14: 0000000000000510 R15: ffffea0001180000 [ 592.527305][T13822] FS: 00007fc838e6c6c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 592.536246][T13822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.542830][T13822] CR2: 00007f8bd6cb2e9c CR3: 000000004fa0c000 CR4: 00000000003526f0 [ 592.550794][T13822] Call Trace: [ 592.554056][T13822] [ 592.556985][T13822] filemap_remove_folio+0xf1/0x250 [ 592.562084][T13822] remove_inode_hugepages+0x74a/0xed0 [ 592.567438][T13822] ? __schedule+0x11a3/0x5de0 [ 592.572099][T13822] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 592.577970][T13822] ? __pfx___schedule+0x10/0x10 [ 592.582800][T13822] ? __pfx_try_to_wake_up+0x10/0x10 [ 592.587985][T13822] ? up_write+0x209/0x520 [ 592.592294][T13822] hugetlbfs_fallocate+0xf3f/0x12e0 [ 592.597470][T13822] ? trace_sched_exit_tp+0xd1/0x120 [ 592.602649][T13822] ? __schedule+0x11a3/0x5de0 [ 592.607394][T13822] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 592.613017][T13822] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 592.618628][T13822] ? vfs_fallocate+0x5b1/0x10e0 [ 592.623460][T13822] vfs_fallocate+0x5b1/0x10e0 [ 592.628117][T13822] ? __pfx_vfs_fallocate+0x10/0x10 [ 592.633236][T13822] ? madvise_vma_behavior+0x2b20/0x2d60 [ 592.638766][T13822] madvise_vma_behavior+0x2ad7/0x2d60 [ 592.644123][T13822] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 592.649848][T13822] ? __pfx_mas_prev+0x10/0x10 [ 592.654597][T13822] ? find_vma_prev+0xda/0x160 [ 592.659257][T13822] ? __pfx_find_vma_prev+0x10/0x10 [ 592.664371][T13822] madvise_walk_vmas+0x31f/0x9c0 [ 592.669297][T13822] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 592.674757][T13822] ? madvise_do_behavior+0x1da/0x530 [ 592.680027][T13822] madvise_do_behavior+0x1e2/0x530 [ 592.685122][T13822] ? __pfx_madvise_do_behavior+0x10/0x10 [ 592.690735][T13822] ? down_read+0x13d/0x480 [ 592.695138][T13822] do_madvise+0x176/0x240 [ 592.699451][T13822] ? __pfx_do_madvise+0x10/0x10 [ 592.704290][T13822] __x64_sys_madvise+0xa9/0x110 [ 592.709122][T13822] do_syscall_64+0xcd/0x4c0 [ 592.713609][T13822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.719485][T13822] RIP: 0033:0x7fc837f8ebe9 [ 592.723879][T13822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.743486][T13822] RSP: 002b:00007fc838e6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 592.751878][T13822] RAX: ffffffffffffffda RBX: 00007fc8381c6270 RCX: 00007fc837f8ebe9 [ 592.759828][T13822] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 592.767786][T13822] RBP: 00007fc838011e19 R08: 0000000000000000 R09: 0000000000000000 [ 592.775737][T13822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.783687][T13822] R13: 00007fc8381c6308 R14: 00007fc8381c6270 R15: 00007fff62bc8fc8 [ 592.791642][T13822] [ 592.794647][T13822] Modules linked in: [ 592.798532][T13822] ---[ end trace 0000000000000000 ]--- [ 592.803962][T13822] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 592.810105][T13822] Code: a7 1e c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 da 19 c9 ff 85 ed 7e 17 e8 91 1e c9 ff 48 c7 c6 40 1d b9 8b 48 89 df e8 72 cf 11 00 90 <0f> 0b e8 7a 1e c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 592.829779][T13822] RSP: 0018:ffffc900056bf310 EFLAGS: 00010046 [ 592.835828][T13822] RAX: 0000000000080000 RBX: ffffea0001180000 RCX: ffffc90011c88000 [ 592.843778][T13822] RDX: 0000000000080000 RSI: ffffffff81f2704e RDI: ffff88807c7b8444 [ 592.851729][T13822] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 592.859692][T13822] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888057161b70 [ 592.867643][T13822] R13: ffffea0001180030 R14: 0000000000000510 R15: ffffea0001180000 [ 592.875596][T13822] FS: 00007fc838e6c6c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 592.884532][T13822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 592.891098][T13822] CR2: 00007f8bd6cb2e9c CR3: 000000004fa0c000 CR4: 00000000003526f0 [ 592.899054][T13822] Kernel panic - not syncing: Fatal exception [ 592.905395][T13822] Kernel Offset: disabled [ 592.909698][T13822] Rebooting in 86400 seconds..