last executing test programs: 8m38.649232329s ago: executing program 0 (id=383): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x73}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x8, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0x1, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x7, 0x81, 0x6, 0x6, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x3, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x9, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x9, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) 8m37.690560971s ago: executing program 0 (id=385): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000300)=0x1) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1000002, &(0x7f0000000280)={[{@huge_within_size}, {@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}, {@grpquota_block_hardlimit}, {@huge_advise}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}, {@subj_type}]}) syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ff010000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x7fff, 0x2, 0x3) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 8m35.176476816s ago: executing program 0 (id=390): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000100)=0x103, 0x3) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0/file0\x00') ioctl$FS_IOC_GETVERSION(r3, 0x40045b0a, &(0x7f0000000040)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x1, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-neon\x00'}, 0x58) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x1, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x7, 0xe, 0x7ff, 0x4, 0x9, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x736, 0x9be, 0x3, 0x7, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x4, 0x4, 0xfffffffb, 0x8, 0x80000004, 0x5, 0x2000100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0xfffffff4, 0x5, 0x48e3, 0x0, 0x0, 0x4, 0x4, 0xc, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x80000083, 0xe39, 0xcf, 0x10, 0x401, 0xb00f, 0x7, 0x2a, 0x71c9, 0x2004, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0xb, 0xceaac57, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x9, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) r8 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x6000880}, 0x4000051) socket$nl_netfilter(0x10, 0x3, 0xc) 8m31.293340224s ago: executing program 0 (id=397): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) getresuid(&(0x7f0000002f80), &(0x7f0000002fc0), &(0x7f0000003000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x2, 0x4002) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x1, 0x4002) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x63) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r3}}, 0xc) ptrace(0x4206, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f00000002c0)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x0, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 8m30.625536108s ago: executing program 0 (id=400): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) recvfrom$inet_nvme(r2, &(0x7f0000000480)=""/204, 0xcc, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks']) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r6, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)='+', 0x1}], 0x2) 8m27.862507868s ago: executing program 0 (id=404): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001fc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r1, 0xfffffffffffffd71, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x448800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xe) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000034000)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r7, &(0x7f00000000c0)="510003000000", 0x6) listen(r6, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_open_procfs(r1, &(0x7f00000010c0)='oom_score_adj\x00') 8m12.46860964s ago: executing program 32 (id=404): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001fc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r1, 0xfffffffffffffd71, &(0x7f00000002c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x448800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0xe) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000034000)=""/102392, 0x18ff8) socket(0x10, 0x803, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r7, &(0x7f00000000c0)="510003000000", 0x6) listen(r6, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) syz_open_procfs(r1, &(0x7f00000010c0)='oom_score_adj\x00') 22.09746617s ago: executing program 1 (id=1230): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x7fff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) getpid() r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp\x00') pread64(r4, &(0x7f0000000000)=""/65, 0x41, 0x96) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r6 = syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd499286199000000000000000000ba00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) close(0x3) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r5, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) vmsplice(r8, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) 19.266201497s ago: executing program 3 (id=1234): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') move_mount(0xffffffffffffffff, &(0x7f0000000880)='./mnt\x00', r0, 0x0, 0x240) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=@base={0x7, 0x9, 0x1, 0x0, 0x40, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0xc14f, 0x1}, 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0x4143, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000240)={0x18, r8}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000440)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) 16.91697476s ago: executing program 1 (id=1239): socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb48, 0x9, 0x8, 0xfffffffa, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x364, 0xa4, 0x27c, 0xfeffffff, 0x138, 0x0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0x94, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xa4}}, {{@uncond, 0x0, 0xc0, 0xf4, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) renameat2(0xffffffffffffffff, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$packet(r6, &(0x7f0000000b80)="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", 0x100, 0x8001, 0x0, 0x0) recvmsg(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f00000022c0)=""/144, 0x90}], 0x2}, 0x40) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_disconnect(r7) syz_open_dev$dmmidi(&(0x7f0000000040), 0x0, 0x80000) 15.857425795s ago: executing program 5 (id=1240): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) fchmod(0xffffffffffffffff, 0x32) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = fcntl$getown(r0, 0x9) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x0, 0x0, 0xb49, 0x80, 0x9, 0x0, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0x1, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f00000005c0)={0x9, "3961a5f3e938611456d9d4a6cf4d1df140faec2224cba0489f9f8183f5b34738", 0x3, 0x7, 0x5, 0x40000, 0x402, 0x8}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs$pagemap(r4, &(0x7f0000000040)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 14.589553387s ago: executing program 4 (id=1241): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x65364000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xff) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000180000/0x4000)=nil, &(0x7f0000977000/0x3000)=nil, 0x9, 0x0, 0x0, 0x1c, 0x46, 0x4, 0x0, 0x67}) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xc2480, 0x34, 0x8}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000340)={{0x0, @remote, 0x4e21, 0x4, 'lc\x00', 0x8, 0x8001, 0x6d}, {@loopback, 0x4e22, 0x2, 0x6, 0x44a, 0x3ff}}, 0x44) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000050, 0x0, 0x0, 0xb49, 0xa, 0x3, 0xffffff82, 0xfffff000}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028004001200060018000900000005001700010000000500160002000000"], 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x1000}, 0x1c) recvmmsg(r6, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x2c}, 0x1c) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) io_uring_enter(0xffffffffffffffff, 0x17ec, 0xea1d, 0x21, &(0x7f0000000000)={[0xe]}, 0x8) 13.577988222s ago: executing program 5 (id=1243): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0x400) write$nbd(r0, 0x0, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r2 = syz_clone3(&(0x7f0000000440)={0xa0004000, &(0x7f0000000140), 0x0, &(0x7f0000000300), {0x3c}, &(0x7f0000000340)=""/59, 0x3b, &(0x7f0000000380)=""/38, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) getpgid(r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) fchdir(r5) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peekuser(0x3, r6, 0x128) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="17090000000000000600010000000800090000000000050013000b000000"], 0x24}}, 0x41084) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0xe, 0x800, 0x4e, 0x3}, 0x33, [0x0, 0xfffffff8, 0x800, 0x3, 0xfffffff8, 0x19, 0x5, 0x47a, 0x1, 0x1, 0x5, 0x9, 0x4, 0x6, 0x10000, 0x1b0, 0x1, 0x20, 0x7, 0x100, 0xfffffeff, 0x4, 0x10, 0x37d, 0x6, 0xe, 0x6, 0x8, 0x3, 0x42e, 0xfffffff9, 0xe, 0x7, 0x9, 0x401, 0xba, 0xa7, 0xfffffffe, 0x3, 0xfffffff6, 0x600, 0x7, 0x5, 0x200, 0x10001, 0x0, 0x81, 0x6, 0x7268, 0x7, 0x1ff, 0x5, 0x5, 0x3, 0x4, 0xf70, 0x9, 0xffffff00, 0xdfcf, 0x9, 0x3, 0xdb24, 0x7], [0x6beba7ac, 0x0, 0x5, 0x4, 0x0, 0x8, 0xff, 0x232, 0x5, 0x6, 0x8001, 0x100, 0x8f, 0xc220, 0x0, 0x4, 0x3, 0x12, 0x6, 0x2, 0x5, 0xc, 0x0, 0x2518, 0x80000000, 0xfefc, 0x8, 0x8, 0x6, 0x6, 0xffff, 0x57, 0x38a, 0x7, 0x9, 0x78, 0x2, 0x9, 0x4, 0x7f, 0x0, 0x6, 0x6, 0x80000000, 0xfffff5f6, 0xfffffff0, 0x8, 0x3, 0x7f, 0x5, 0x5, 0x8, 0x5, 0x1, 0xfffff801, 0x6, 0x2, 0x1000, 0x7, 0x7, 0xe, 0x1, 0xda09c73, 0x2], [0x6, 0xfffffff9, 0x0, 0x4, 0x5, 0x1, 0x9, 0x9, 0x0, 0x2, 0x8, 0x0, 0x3, 0x5, 0x2, 0x7, 0x401, 0x7, 0x3, 0x9, 0xdd9, 0x46, 0xfffffffd, 0x80000000, 0x5, 0x7, 0x80, 0x7, 0xaeee, 0x6, 0x401, 0x1, 0x2, 0xffffffff, 0x1, 0x6, 0xa98f, 0x2, 0xff, 0x6, 0x0, 0x87, 0xcb2f, 0x7, 0x80, 0x80, 0x9e, 0x5, 0x3, 0x4, 0x4, 0x6, 0x6, 0x7fff, 0x3ff, 0x4, 0xa1c, 0x4, 0x7a, 0x1, 0x2ac, 0x7ff, 0x0, 0x1], [0x6, 0x400, 0x0, 0x1, 0xfffffff8, 0x10000, 0xb60, 0x4, 0x6, 0x9, 0xffffffff, 0xffff, 0x2, 0x1d7, 0x8, 0x8, 0x5cea000, 0x100, 0x1ff, 0xffffff8a, 0x6, 0x8, 0x40, 0x1, 0xc5, 0x4, 0x2, 0x7, 0xf, 0x745, 0x8, 0x40, 0x5, 0x7, 0x3, 0x6, 0x4, 0x8, 0xfffffffd, 0x9, 0x6, 0x6, 0x9, 0x4, 0x6, 0xfffffe51, 0x1, 0x0, 0x4, 0x7, 0x0, 0x5, 0x7ee2, 0xee, 0x1fe4e78, 0x2, 0x4, 0x401, 0x2, 0x8001, 0x0, 0x480c, 0xab, 0x6f]}, 0x45c) 13.349545507s ago: executing program 3 (id=1244): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0x400) write$nbd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="67446698000000000400030003000000756132806120daf7ab849aaeb12ba36dbb059cae458fe0553885c14e110343294a30a673d0119248b0bd5a"], 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r2 = syz_clone3(&(0x7f0000000440)={0xa0004000, &(0x7f0000000140), 0x0, &(0x7f0000000300), {0x3c}, &(0x7f0000000340)=""/59, 0x3b, &(0x7f0000000380)=""/38, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) getpgid(r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) fchdir(r5) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peekuser(0x3, r6, 0x128) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="17090000000000000600010000000800090000000000050013000b000000"], 0x24}}, 0x41084) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0xe, 0x800, 0x4e, 0x3}, 0x33, [0x0, 0xfffffff8, 0x800, 0x3, 0xfffffff8, 0x19, 0x5, 0x47a, 0x1, 0x1, 0x5, 0x9, 0x4, 0x6, 0x10000, 0x1b0, 0x1, 0x20, 0x7, 0x100, 0xfffffeff, 0x4, 0x10, 0x37d, 0x6, 0xe, 0x6, 0x8, 0x3, 0x42e, 0xfffffff9, 0xe, 0x7, 0x9, 0x401, 0xba, 0xa7, 0xfffffffe, 0x3, 0xfffffff6, 0x600, 0x7, 0x5, 0x200, 0x10001, 0x0, 0x81, 0x6, 0x7268, 0x7, 0x1ff, 0x5, 0x5, 0x3, 0x4, 0xf70, 0x9, 0xffffff00, 0xdfcf, 0x9, 0x3, 0xdb24, 0x7], [0x6beba7ac, 0x0, 0x5, 0x4, 0x0, 0x8, 0xff, 0x232, 0x5, 0x6, 0x8001, 0x100, 0x8f, 0xc220, 0x0, 0x4, 0x3, 0x12, 0x6, 0x2, 0x5, 0xc, 0x0, 0x2518, 0x80000000, 0xfefc, 0x8, 0x8, 0x6, 0x6, 0xffff, 0x57, 0x38a, 0x7, 0x9, 0x78, 0x2, 0x9, 0x4, 0x7f, 0x0, 0x6, 0x6, 0x80000000, 0xfffff5f6, 0xfffffff0, 0x8, 0x3, 0x7f, 0x5, 0x5, 0x8, 0x5, 0x1, 0xfffff801, 0x6, 0x2, 0x1000, 0x7, 0x7, 0xe, 0x1, 0xda09c73, 0x2], [0x6, 0xfffffff9, 0x0, 0x4, 0x5, 0x1, 0x9, 0x9, 0x0, 0x2, 0x8, 0x0, 0x3, 0x5, 0x2, 0x7, 0x401, 0x7, 0x3, 0x9, 0xdd9, 0x46, 0xfffffffd, 0x80000000, 0x5, 0x7, 0x80, 0x7, 0xaeee, 0x6, 0x401, 0x1, 0x2, 0xffffffff, 0x1, 0x6, 0xa98f, 0x2, 0xff, 0x6, 0x0, 0x87, 0xcb2f, 0x7, 0x80, 0x80, 0x9e, 0x5, 0x3, 0x4, 0x4, 0x6, 0x6, 0x7fff, 0x3ff, 0x4, 0xa1c, 0x4, 0x7a, 0x1, 0x2ac, 0x7ff, 0x0, 0x1], [0x6, 0x400, 0x0, 0x1, 0xfffffff8, 0x10000, 0xb60, 0x4, 0x6, 0x9, 0xffffffff, 0xffff, 0x2, 0x1d7, 0x8, 0x8, 0x5cea000, 0x100, 0x1ff, 0xffffff8a, 0x6, 0x8, 0x40, 0x1, 0xc5, 0x4, 0x2, 0x7, 0xf, 0x745, 0x8, 0x40, 0x5, 0x7, 0x3, 0x6, 0x4, 0x8, 0xfffffffd, 0x9, 0x6, 0x6, 0x9, 0x4, 0x6, 0xfffffe51, 0x1, 0x0, 0x4, 0x7, 0x0, 0x5, 0x7ee2, 0xee, 0x1fe4e78, 0x2, 0x4, 0x401, 0x2, 0x8001, 0x0, 0x480c, 0xab, 0x6f]}, 0x45c) 11.863183566s ago: executing program 5 (id=1245): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000100)=0x103, 0x3) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0/file0\x00') ioctl$FS_IOC_GETVERSION(r3, 0x40045b0a, &(0x7f0000000040)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x1, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-neon\x00'}, 0x58) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x1, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x7, 0xe, 0x7ff, 0x4, 0x9, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x736, 0x9be, 0x3, 0x7, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x4, 0x4, 0xfffffffb, 0x8, 0x80000004, 0x5, 0x2000100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0xfffffff4, 0x5, 0x48e3, 0x0, 0x0, 0x4, 0x4, 0xc, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x80000083, 0xe39, 0xcf, 0x10, 0x401, 0xb00f, 0x7, 0x2a, 0x71c9, 0x2004, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0xb, 0xceaac57, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x9, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[], 0xfe44, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) r8 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x6000880}, 0x4000051) socket$nl_netfilter(0x10, 0x3, 0xc) 11.820751207s ago: executing program 3 (id=1246): ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x300}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r3}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xfffffd63, &(0x7f00000002c0)={0x0, 0x41, 0x0, &(0x7f00000003c0)=""/166, 0xab}}, 0x10) r4 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0x8101, 0x0, 0x0, 0x250}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xc7, 0x3, 0x0, 0x9276, 0x0, 0x1, {0x1}}) io_uring_enter(r4, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xc}, {0x2, 0x0, 0x0, 0x4}, {0x0, 0x4, 0xb0009}], 0x10, 0xfffffff6}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 11.746620642s ago: executing program 1 (id=1248): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) sendfile(r2, r2, 0x0, 0x200000) ioctl$sock_proto_private(r0, 0x89e1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f3ffc00e2c84759d7d9fd9283c99837740684c16abb86b2d1fa8f4317d06a89834cca941105bebe30e047af0f8ba7f462e9b3147e04e849971bc8f40294507f1a4e84d01959ffcbf780f5aea14d6ccd746ffb08b7424954c36d0731ea8e6fc1000614ad19db3a898fdf6974a48966c92e84b7a1352b6e078492e25e00"/140, @ANYRES16=r4], 0x98}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x9, 0x0, {0x0, 0x1003d, 0x0, 0xc, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x2000, 0xfffffffc, r7, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1) 9.971309325s ago: executing program 4 (id=1249): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) 9.108489899s ago: executing program 4 (id=1250): openat$autofs(0xffffffffffffff9c, 0x0, 0x204000, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setpriority(0x0, 0x0, 0x2a14b58) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008080}, 0x4810) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) munlockall() setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x6, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000ac0)={{0xa, 0x4, 0x2, 0x1, '\x00', 0x1}, 0x0, [0x5, 0x400, 0x4, 0x0, 0x3, 0x1000, 0xb8, 0x3, 0x4, 0x4, 0x0, 0x4c, 0xffffffffffff6a3f, 0xab10, 0x8, 0x2, 0x2, 0x12, 0x3, 0x1, 0x4, 0x9, 0x1, 0x8, 0x0, 0x7, 0x7f, 0xd, 0x9, 0x9, 0x7, 0x9, 0x9db, 0x6, 0xffffffff, 0xb1d7, 0x7f, 0x86, 0x0, 0x3000000, 0x0, 0x6, 0x9, 0x3, 0x8, 0x400, 0xfffffffffffffff8, 0x4, 0x4, 0x4, 0x6, 0x9, 0x37, 0x271, 0x8, 0x4, 0x2, 0xffffffff, 0x4, 0x8000000000000001, 0x7f, 0x8c5, 0x563, 0x0, 0xfffffffffffffffd, 0x6, 0x4, 0x5, 0x91, 0x1, 0xc, 0x80, 0x4, 0xb, 0x1, 0x8, 0x4, 0xe9b8, 0x10001, 0xd97, 0x5, 0x200, 0x9, 0x4, 0xbe5, 0x2, 0x9, 0x8, 0xf281, 0x9, 0x7, 0xa, 0x2, 0xfffffffffffffff7, 0xfffffffffffffffd, 0x0, 0x8, 0x6, 0x600, 0x5fd9, 0xffffffffffffff00, 0x7, 0x2, 0x5, 0x5, 0x4, 0x8000000000000001, 0xfffffffffffffe00, 0xb952, 0x3, 0x4, 0x3, 0x9f75, 0xe7ef, 0x6, 0x800, 0x0, 0xd765, 0x0, 0xef, 0x1, 0x8, 0xffffffffffff0000, 0x8, 0x1, 0x4, 0xa, 0x4]}) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000640)=0x2, 0x4) setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f0000000080), 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 8.622390632s ago: executing program 2 (id=1251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0xffff, 0x3}, {0x7, 0xb}]}) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a80)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x44}}, 0x0) writev(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r8, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000380001002cbd7000ffdbdf250e000000b2b62f72029451da5c52a411bb76b3352f6fd5169c97f8dfe23b06e08d31ba7046daecf70410b5e6eb2c567b4e70cd2839283dde38deb81636874e1714fca8fce6a907dfa90530799259cc0e8ccd2e5b0e03c5a6c006179c691cf17ecdb2f51154ad72ce501521a6af83fda0a2003b304ff05424c23ec8b89e040b021361e34f2058adc3ad5f836ce057"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) 8.306252155s ago: executing program 1 (id=1252): sched_setscheduler(0x0, 0x1, 0x0) unshare(0x8000000) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/121) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000f, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0xa, 0x3, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000540)=0x1) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r8, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r8, &(0x7f000000e280), 0x58a, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d00000018010000202064250000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) 7.612056807s ago: executing program 4 (id=1253): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, &(0x7f0000000380)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000000000000000000005546a0001000000"], 0x1c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r6 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b20, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x400000000000000, 0x0, 0x8001}, 0x4000) recvmmsg(r8, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40010022, 0x0) 7.264859138s ago: executing program 2 (id=1254): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0x400) write$nbd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r2 = syz_clone3(&(0x7f0000000440)={0xa0004000, &(0x7f0000000140), 0x0, &(0x7f0000000300), {0x3c}, &(0x7f0000000340)=""/59, 0x3b, &(0x7f0000000380)=""/38, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) getpgid(r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) fchdir(r5) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peekuser(0x3, r6, 0x128) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="17090000000000000600010000000800090000000000050013000b000000"], 0x24}}, 0x41084) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0xe, 0x800, 0x4e, 0x3}, 0x33, [0x0, 0xfffffff8, 0x800, 0x3, 0xfffffff8, 0x19, 0x5, 0x47a, 0x1, 0x1, 0x5, 0x9, 0x4, 0x6, 0x10000, 0x1b0, 0x1, 0x20, 0x7, 0x100, 0xfffffeff, 0x4, 0x10, 0x37d, 0x6, 0xe, 0x6, 0x8, 0x3, 0x42e, 0xfffffff9, 0xe, 0x7, 0x9, 0x401, 0xba, 0xa7, 0xfffffffe, 0x3, 0xfffffff6, 0x600, 0x7, 0x5, 0x200, 0x10001, 0x0, 0x81, 0x6, 0x7268, 0x7, 0x1ff, 0x5, 0x5, 0x3, 0x4, 0xf70, 0x9, 0xffffff00, 0xdfcf, 0x9, 0x3, 0xdb24, 0x7], [0x6beba7ac, 0x0, 0x5, 0x4, 0x0, 0x8, 0xff, 0x232, 0x5, 0x6, 0x8001, 0x100, 0x8f, 0xc220, 0x0, 0x4, 0x3, 0x12, 0x6, 0x2, 0x5, 0xc, 0x0, 0x2518, 0x80000000, 0xfefc, 0x8, 0x8, 0x6, 0x6, 0xffff, 0x57, 0x38a, 0x7, 0x9, 0x78, 0x2, 0x9, 0x4, 0x7f, 0x0, 0x6, 0x6, 0x80000000, 0xfffff5f6, 0xfffffff0, 0x8, 0x3, 0x7f, 0x5, 0x5, 0x8, 0x5, 0x1, 0xfffff801, 0x6, 0x2, 0x1000, 0x7, 0x7, 0xe, 0x1, 0xda09c73, 0x2], [0x6, 0xfffffff9, 0x0, 0x4, 0x5, 0x1, 0x9, 0x9, 0x0, 0x2, 0x8, 0x0, 0x3, 0x5, 0x2, 0x7, 0x401, 0x7, 0x3, 0x9, 0xdd9, 0x46, 0xfffffffd, 0x80000000, 0x5, 0x7, 0x80, 0x7, 0xaeee, 0x6, 0x401, 0x1, 0x2, 0xffffffff, 0x1, 0x6, 0xa98f, 0x2, 0xff, 0x6, 0x0, 0x87, 0xcb2f, 0x7, 0x80, 0x80, 0x9e, 0x5, 0x3, 0x4, 0x4, 0x6, 0x6, 0x7fff, 0x3ff, 0x4, 0xa1c, 0x4, 0x7a, 0x1, 0x2ac, 0x7ff, 0x0, 0x1], [0x6, 0x400, 0x0, 0x1, 0xfffffff8, 0x10000, 0xb60, 0x4, 0x6, 0x9, 0xffffffff, 0xffff, 0x2, 0x1d7, 0x8, 0x8, 0x5cea000, 0x100, 0x1ff, 0xffffff8a, 0x6, 0x8, 0x40, 0x1, 0xc5, 0x4, 0x2, 0x7, 0xf, 0x745, 0x8, 0x40, 0x5, 0x7, 0x3, 0x6, 0x4, 0x8, 0xfffffffd, 0x9, 0x6, 0x6, 0x9, 0x4, 0x6, 0xfffffe51, 0x1, 0x0, 0x4, 0x7, 0x0, 0x5, 0x7ee2, 0xee, 0x1fe4e78, 0x2, 0x4, 0x401, 0x2, 0x8001, 0x0, 0x480c, 0xab, 0x6f]}, 0x45c) 6.715921803s ago: executing program 5 (id=1255): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0x400) write$nbd(r0, 0x0, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r2 = syz_clone3(&(0x7f0000000440)={0xa0004000, &(0x7f0000000140), 0x0, &(0x7f0000000300), {0x3c}, &(0x7f0000000340)=""/59, 0x3b, &(0x7f0000000380)=""/38, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) getpgid(r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) fchdir(r5) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peekuser(0x3, r6, 0x128) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="17090000000000000600010000000800090000000000050013000b000000"], 0x24}}, 0x41084) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0xe, 0x800, 0x4e, 0x3}, 0x33, [0x0, 0xfffffff8, 0x800, 0x3, 0xfffffff8, 0x19, 0x5, 0x47a, 0x1, 0x1, 0x5, 0x9, 0x4, 0x6, 0x10000, 0x1b0, 0x1, 0x20, 0x7, 0x100, 0xfffffeff, 0x4, 0x10, 0x37d, 0x6, 0xe, 0x6, 0x8, 0x3, 0x42e, 0xfffffff9, 0xe, 0x7, 0x9, 0x401, 0xba, 0xa7, 0xfffffffe, 0x3, 0xfffffff6, 0x600, 0x7, 0x5, 0x200, 0x10001, 0x0, 0x81, 0x6, 0x7268, 0x7, 0x1ff, 0x5, 0x5, 0x3, 0x4, 0xf70, 0x9, 0xffffff00, 0xdfcf, 0x9, 0x3, 0xdb24, 0x7], [0x6beba7ac, 0x0, 0x5, 0x4, 0x0, 0x8, 0xff, 0x232, 0x5, 0x6, 0x8001, 0x100, 0x8f, 0xc220, 0x0, 0x4, 0x3, 0x12, 0x6, 0x2, 0x5, 0xc, 0x0, 0x2518, 0x80000000, 0xfefc, 0x8, 0x8, 0x6, 0x6, 0xffff, 0x57, 0x38a, 0x7, 0x9, 0x78, 0x2, 0x9, 0x4, 0x7f, 0x0, 0x6, 0x6, 0x80000000, 0xfffff5f6, 0xfffffff0, 0x8, 0x3, 0x7f, 0x5, 0x5, 0x8, 0x5, 0x1, 0xfffff801, 0x6, 0x2, 0x1000, 0x7, 0x7, 0xe, 0x1, 0xda09c73, 0x2], [0x6, 0xfffffff9, 0x0, 0x4, 0x5, 0x1, 0x9, 0x9, 0x0, 0x2, 0x8, 0x0, 0x3, 0x5, 0x2, 0x7, 0x401, 0x7, 0x3, 0x9, 0xdd9, 0x46, 0xfffffffd, 0x80000000, 0x5, 0x7, 0x80, 0x7, 0xaeee, 0x6, 0x401, 0x1, 0x2, 0xffffffff, 0x1, 0x6, 0xa98f, 0x2, 0xff, 0x6, 0x0, 0x87, 0xcb2f, 0x7, 0x80, 0x80, 0x9e, 0x5, 0x3, 0x4, 0x4, 0x6, 0x6, 0x7fff, 0x3ff, 0x4, 0xa1c, 0x4, 0x7a, 0x1, 0x2ac, 0x7ff, 0x0, 0x1], [0x6, 0x400, 0x0, 0x1, 0xfffffff8, 0x10000, 0xb60, 0x4, 0x6, 0x9, 0xffffffff, 0xffff, 0x2, 0x1d7, 0x8, 0x8, 0x5cea000, 0x100, 0x1ff, 0xffffff8a, 0x6, 0x8, 0x40, 0x1, 0xc5, 0x4, 0x2, 0x7, 0xf, 0x745, 0x8, 0x40, 0x5, 0x7, 0x3, 0x6, 0x4, 0x8, 0xfffffffd, 0x9, 0x6, 0x6, 0x9, 0x4, 0x6, 0xfffffe51, 0x1, 0x0, 0x4, 0x7, 0x0, 0x5, 0x7ee2, 0xee, 0x1fe4e78, 0x2, 0x4, 0x401, 0x2, 0x8001, 0x0, 0x480c, 0xab, 0x6f]}, 0x45c) 6.665982412s ago: executing program 3 (id=1256): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0x400) write$nbd(r0, &(0x7f00000000c0)=ANY=[], 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r2 = syz_clone3(&(0x7f0000000440)={0xa0004000, &(0x7f0000000140), 0x0, &(0x7f0000000300), {0x3c}, &(0x7f0000000340)=""/59, 0x3b, &(0x7f0000000380)=""/38, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) getpgid(r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) fchdir(r5) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peekuser(0x3, r6, 0x128) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="17090000000000000600010000000800090000000000050013000b000000"], 0x24}}, 0x41084) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0xe, 0x800, 0x4e, 0x3}, 0x33, [0x0, 0xfffffff8, 0x800, 0x3, 0xfffffff8, 0x19, 0x5, 0x47a, 0x1, 0x1, 0x5, 0x9, 0x4, 0x6, 0x10000, 0x1b0, 0x1, 0x20, 0x7, 0x100, 0xfffffeff, 0x4, 0x10, 0x37d, 0x6, 0xe, 0x6, 0x8, 0x3, 0x42e, 0xfffffff9, 0xe, 0x7, 0x9, 0x401, 0xba, 0xa7, 0xfffffffe, 0x3, 0xfffffff6, 0x600, 0x7, 0x5, 0x200, 0x10001, 0x0, 0x81, 0x6, 0x7268, 0x7, 0x1ff, 0x5, 0x5, 0x3, 0x4, 0xf70, 0x9, 0xffffff00, 0xdfcf, 0x9, 0x3, 0xdb24, 0x7], [0x6beba7ac, 0x0, 0x5, 0x4, 0x0, 0x8, 0xff, 0x232, 0x5, 0x6, 0x8001, 0x100, 0x8f, 0xc220, 0x0, 0x4, 0x3, 0x12, 0x6, 0x2, 0x5, 0xc, 0x0, 0x2518, 0x80000000, 0xfefc, 0x8, 0x8, 0x6, 0x6, 0xffff, 0x57, 0x38a, 0x7, 0x9, 0x78, 0x2, 0x9, 0x4, 0x7f, 0x0, 0x6, 0x6, 0x80000000, 0xfffff5f6, 0xfffffff0, 0x8, 0x3, 0x7f, 0x5, 0x5, 0x8, 0x5, 0x1, 0xfffff801, 0x6, 0x2, 0x1000, 0x7, 0x7, 0xe, 0x1, 0xda09c73, 0x2], [0x6, 0xfffffff9, 0x0, 0x4, 0x5, 0x1, 0x9, 0x9, 0x0, 0x2, 0x8, 0x0, 0x3, 0x5, 0x2, 0x7, 0x401, 0x7, 0x3, 0x9, 0xdd9, 0x46, 0xfffffffd, 0x80000000, 0x5, 0x7, 0x80, 0x7, 0xaeee, 0x6, 0x401, 0x1, 0x2, 0xffffffff, 0x1, 0x6, 0xa98f, 0x2, 0xff, 0x6, 0x0, 0x87, 0xcb2f, 0x7, 0x80, 0x80, 0x9e, 0x5, 0x3, 0x4, 0x4, 0x6, 0x6, 0x7fff, 0x3ff, 0x4, 0xa1c, 0x4, 0x7a, 0x1, 0x2ac, 0x7ff, 0x0, 0x1], [0x6, 0x400, 0x0, 0x1, 0xfffffff8, 0x10000, 0xb60, 0x4, 0x6, 0x9, 0xffffffff, 0xffff, 0x2, 0x1d7, 0x8, 0x8, 0x5cea000, 0x100, 0x1ff, 0xffffff8a, 0x6, 0x8, 0x40, 0x1, 0xc5, 0x4, 0x2, 0x7, 0xf, 0x745, 0x8, 0x40, 0x5, 0x7, 0x3, 0x6, 0x4, 0x8, 0xfffffffd, 0x9, 0x6, 0x6, 0x9, 0x4, 0x6, 0xfffffe51, 0x1, 0x0, 0x4, 0x7, 0x0, 0x5, 0x7ee2, 0xee, 0x1fe4e78, 0x2, 0x4, 0x401, 0x2, 0x8001, 0x0, 0x480c, 0xab, 0x6f]}, 0x45c) 5.689457549s ago: executing program 1 (id=1257): r0 = syz_open_dev$audion(&(0x7f0000000040), 0x7, 0x400) write$nbd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="67446698000000000400030003000000756132806120daf7ab849aaeb12ba36dbb059cae458fe0553885c14e110343294a30a673d0119248b0bd5a"], 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r2 = syz_clone3(&(0x7f0000000440)={0xa0004000, &(0x7f0000000140), 0x0, &(0x7f0000000300), {0x3c}, &(0x7f0000000340)=""/59, 0x3b, &(0x7f0000000380)=""/38, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) getpgid(r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) fchdir(r5) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peekuser(0x3, r6, 0x128) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="17090000000000000600010000000800090000000000050013000b000000"], 0x24}}, 0x41084) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0xe, 0x800, 0x4e, 0x3}, 0x33, [0x0, 0xfffffff8, 0x800, 0x3, 0xfffffff8, 0x19, 0x5, 0x47a, 0x1, 0x1, 0x5, 0x9, 0x4, 0x6, 0x10000, 0x1b0, 0x1, 0x20, 0x7, 0x100, 0xfffffeff, 0x4, 0x10, 0x37d, 0x6, 0xe, 0x6, 0x8, 0x3, 0x42e, 0xfffffff9, 0xe, 0x7, 0x9, 0x401, 0xba, 0xa7, 0xfffffffe, 0x3, 0xfffffff6, 0x600, 0x7, 0x5, 0x200, 0x10001, 0x0, 0x81, 0x6, 0x7268, 0x7, 0x1ff, 0x5, 0x5, 0x3, 0x4, 0xf70, 0x9, 0xffffff00, 0xdfcf, 0x9, 0x3, 0xdb24, 0x7], [0x6beba7ac, 0x0, 0x5, 0x4, 0x0, 0x8, 0xff, 0x232, 0x5, 0x6, 0x8001, 0x100, 0x8f, 0xc220, 0x0, 0x4, 0x3, 0x12, 0x6, 0x2, 0x5, 0xc, 0x0, 0x2518, 0x80000000, 0xfefc, 0x8, 0x8, 0x6, 0x6, 0xffff, 0x57, 0x38a, 0x7, 0x9, 0x78, 0x2, 0x9, 0x4, 0x7f, 0x0, 0x6, 0x6, 0x80000000, 0xfffff5f6, 0xfffffff0, 0x8, 0x3, 0x7f, 0x5, 0x5, 0x8, 0x5, 0x1, 0xfffff801, 0x6, 0x2, 0x1000, 0x7, 0x7, 0xe, 0x1, 0xda09c73, 0x2], [0x6, 0xfffffff9, 0x0, 0x4, 0x5, 0x1, 0x9, 0x9, 0x0, 0x2, 0x8, 0x0, 0x3, 0x5, 0x2, 0x7, 0x401, 0x7, 0x3, 0x9, 0xdd9, 0x46, 0xfffffffd, 0x80000000, 0x5, 0x7, 0x80, 0x7, 0xaeee, 0x6, 0x401, 0x1, 0x2, 0xffffffff, 0x1, 0x6, 0xa98f, 0x2, 0xff, 0x6, 0x0, 0x87, 0xcb2f, 0x7, 0x80, 0x80, 0x9e, 0x5, 0x3, 0x4, 0x4, 0x6, 0x6, 0x7fff, 0x3ff, 0x4, 0xa1c, 0x4, 0x7a, 0x1, 0x2ac, 0x7ff, 0x0, 0x1], [0x6, 0x400, 0x0, 0x1, 0xfffffff8, 0x10000, 0xb60, 0x4, 0x6, 0x9, 0xffffffff, 0xffff, 0x2, 0x1d7, 0x8, 0x8, 0x5cea000, 0x100, 0x1ff, 0xffffff8a, 0x6, 0x8, 0x40, 0x1, 0xc5, 0x4, 0x2, 0x7, 0xf, 0x745, 0x8, 0x40, 0x5, 0x7, 0x3, 0x6, 0x4, 0x8, 0xfffffffd, 0x9, 0x6, 0x6, 0x9, 0x4, 0x6, 0xfffffe51, 0x1, 0x0, 0x4, 0x7, 0x0, 0x5, 0x7ee2, 0xee, 0x1fe4e78, 0x2, 0x4, 0x401, 0x2, 0x8001, 0x0, 0x480c, 0xab, 0x6f]}, 0x45c) 5.678090888s ago: executing program 5 (id=1258): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) mq_unlink(0x0) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) 5.635892497s ago: executing program 2 (id=1259): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, &(0x7f0000000bc0)) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x80c0) sendmsg$nl_route_sched(r2, 0x0, 0x400c084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r3, 0x0) r6 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r6) syz_io_uring_setup(0xa39, 0x0, 0x0, &(0x7f0000000340)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0xc0000000, 0x1, 0x32315559, 0x3, 0x1, 0x8, 0x9, 0x6, 0x0, 0x1, 0x1, 0x3}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 5.568877752s ago: executing program 3 (id=1260): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0xa, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) listen(r5, 0x80) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000240)=r8, 0x4) 4.425906695s ago: executing program 1 (id=1261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000000c0)=0x8001, 0x4) sendmmsg(r2, &(0x7f0000003f00)=[{{&(0x7f0000000ac0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x4000000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000150021042abd7000fedbdf250a3f30c8", @ANYRES32=0x0, @ANYBLOB="14000100ff020000740000000000000000000001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040051}, 0x2004c010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="0bb97820edd4"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) close(r4) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req={0x5, 0x2, 0x9, 0x4008}, 0x10) recvmmsg$unix(r7, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001dc0)}}], 0x3, 0x400000a0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.397224832s ago: executing program 4 (id=1262): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, 0x0, &(0x7f00000004c0)=[{{0x80000000, 0x0}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000400)={r4, &(0x7f00000007c0)=[{0x80000000, 0x0}], &(0x7f0000000100)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f00000003c0)={r4, 0x0, &(0x7f0000000080)}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f000000a300)={{r6, r5, 0x6, [0xffffffff, 0x200009]}, {0x80000000, r3, 0x2, [0xc1d, 0x2]}, 0x2000000, [0x7e, 0x8]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r7 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r7, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file1\x00', 0xe8142, 0x40) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0xb}, {0x15, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xff}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x2, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) listen(0xffffffffffffffff, 0x80) r9 = socket$netlink(0x10, 0x3, 0x9) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 4.146815845s ago: executing program 2 (id=1263): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'trusted:'}, 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 2.742017108s ago: executing program 3 (id=1264): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fanotify_init(0x10, 0x1) setreuid(0xee01, 0xee01) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r7 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r7}) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) write$eventfd(r7, &(0x7f00000000c0)=0x33482a89, 0x8) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.684397863s ago: executing program 2 (id=1265): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000100)=0x103, 0x3) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0/file0\x00') ioctl$FS_IOC_GETVERSION(r3, 0x40045b0a, &(0x7f0000000040)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x1, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-neon\x00'}, 0x58) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x1, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x7, 0xe, 0x7ff, 0x4, 0x9, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x736, 0x9be, 0x3, 0x7, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x4, 0x4, 0xfffffffb, 0x8, 0x80000004, 0x5, 0x2000100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0xfffffff4, 0x5, 0x48e3, 0x0, 0x0, 0x4, 0x4, 0xc, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x80000083, 0xe39, 0xcf, 0x10, 0x401, 0xb00f, 0x7, 0x2a, 0x71c9, 0x2004, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0xb, 0xceaac57, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x9, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[], 0xfe44, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) r8 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x6000880}, 0x4000051) socket$nl_netfilter(0x10, 0x3, 0xc) 2.372356303s ago: executing program 4 (id=1266): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x1) prctl$PR_SET_THP_DISABLE(0x41, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)='ufs\x00', 0x48011, 0x0) r5 = timerfd_create(0x0, 0x80800) readv(r5, &(0x7f00000001c0)=[{0x0}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve1\x00'}) sendmsg$nl_route(r6, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000080), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x12c02, 0x0) 1.016410943s ago: executing program 5 (id=1267): ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0xe, 0x1}, 'port0\x00', 0x10, 0x20801, 0x1b4bd464, 0x8, 0x401, 0x7, 0x10001, 0x0, 0x6, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102400, 0x19000) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x8040, 0x20, 0x1}, 0x18) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0xfd, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x5, 0xef, 0x8d, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0xfc, 0x2, '\x00', 0x5}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x5}, {0x9, 0xdb, 0x1, '\x00', 0xff}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x3, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x3}, {0x6e, 0x4, 0x1, '\x00', 0x6}, {0x7, 0x2, 0x8, '\x00', 0x9}, {0x13, 0x7}, {0x1, 0x6, 0x9, '\x00', 0x2}, {0x6, 0x6, 0x1, '\x00', 0x49}, {0xae, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x3, 0x2, '\x00', 0xc3}, {0xbd, 0x9, 0x54, '\x00', 0x9}]}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0xfffffffb, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x12}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20040000", @ANYRES16=r6, @ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x20000840}, 0x4005c) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 2 (id=1268): socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x800) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)=""/127, 0x7f}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000001300)='gfs2\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): audit: type=1400 audit(1757019454.737:1476): avc: denied { write } for pid=10943 comm="syz.2.899" path="socket:[26037]" dev="sockfs" ino=26037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 600.703988][ T30] audit: type=1400 audit(1757019454.747:1477): avc: denied { lock } for pid=10938 comm="syz.3.898" path="/dev/video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 600.781237][ T30] audit: type=1400 audit(1757019454.837:1478): avc: denied { write } for pid=10943 comm="syz.2.899" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 600.812667][ T30] audit: type=1400 audit(1757019454.957:1479): avc: denied { wake_alarm } for pid=10943 comm="syz.2.899" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 600.877504][T10954] block nbd5: Attempted send on invalid socket [ 600.892871][T10954] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 600.903456][T10954] isofs_fill_super: bread failed, dev=nbd5, iso_blknum=16, block=32 [ 601.056063][ T5855] Bluetooth: hci5: command 0x0419 tx timeout [ 601.233930][ T30] audit: type=1400 audit(1757019456.817:1480): avc: denied { ioctl } for pid=10956 comm="syz.2.902" path="socket:[26054]" dev="sockfs" ino=26054 ioctlcmd=0x42d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 601.311586][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 601.571308][T10954] netlink: 24 bytes leftover after parsing attributes in process `syz.5.900'. [ 601.738832][T10958] netlink: 'syz.3.901': attribute type 10 has an invalid length. [ 601.748640][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 602.143464][T10965] ubi: mtd0 is already attached to ubi31 [ 604.146801][T10987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.907'. [ 604.975054][T10998] ptrace attach of "./syz-executor exec"[8330] was attempted by "./syz-executor exec"[10998] [ 606.068888][ T30] audit: type=1326 audit(1757019461.697:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 606.169739][ T30] audit: type=1326 audit(1757019461.707:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 606.276222][ T30] audit: type=1326 audit(1757019461.707:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 606.364604][ T30] audit: type=1326 audit(1757019461.707:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8f0b8d550 code=0x7ffc0000 [ 606.593933][ T30] audit: type=1326 audit(1757019461.707:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 606.664073][ T30] audit: type=1326 audit(1757019461.707:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 606.693093][T10091] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 606.854384][ T30] audit: type=1326 audit(1757019461.707:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 606.947760][ T30] audit: type=1326 audit(1757019461.717:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 607.063675][ T30] audit: type=1326 audit(1757019461.717:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 607.394373][ T30] audit: type=1326 audit(1757019461.717:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 607.688306][T11010] syz.1.913 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 608.396319][T11025] netlink: 'syz.2.917': attribute type 10 has an invalid length. [ 608.528772][ T5929] hid-generic 0002:10008:0003.0003: unknown main item tag 0x0 [ 608.560624][T11029] netlink: 'syz.5.916': attribute type 10 has an invalid length. [ 608.729785][T11031] hfsplus: unable to find HFS+ superblock [ 608.938750][ T5929] hid-generic 0002:10008:0003.0003: unknown main item tag 0x0 [ 608.946594][ T5929] hid-generic 0002:10008:0003.0003: unknown main item tag 0x0 [ 608.964139][ T5929] hid-generic 0002:10008:0003.0003: unknown main item tag 0x0 [ 608.971995][ T5929] hid-generic 0002:10008:0003.0003: unknown main item tag 0x0 [ 608.985247][ T5929] hid-generic 0002:10008:0003.0003: unknown main item tag 0x0 [ 608.995609][ T5929] hid-generic 0002:10008:0003.0003: unknown main item tag 0x0 [ 609.006023][ T5929] hid-generic 0002:10008:0003.0003: unknown main item tag 0x0 [ 609.016268][ T5929] hid-generic 0002:10008:0003.0003: unknown main item tag 0x0 [ 609.026567][ T5929] hid-generic 0002:10008:0003.0003: unknown main item tag 0x0 [ 609.486548][ T5929] hid-generic 0002:10008:0003.0003: hidraw0: HID v200.05 Device [sy] on syz0 [ 610.514037][T11048] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 610.540507][T11037] fido_id[11037]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 610.561633][T11047] netlink: 'syz.3.919': attribute type 10 has an invalid length. [ 610.580692][T11048] Error validating options; rc = [-22] [ 611.076809][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.919'. [ 611.432103][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 611.432114][ T30] audit: type=1326 audit(1757019467.087:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 611.461670][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.888973][ T6008] Bluetooth: hci0: Frame reassembly failed (-84) [ 612.118869][ T30] audit: type=1326 audit(1757019467.087:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 612.142285][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.446799][ T30] audit: type=1326 audit(1757019467.457:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 612.760957][ T30] audit: type=1326 audit(1757019467.457:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 612.906358][ T30] audit: type=1326 audit(1757019467.457:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 612.929747][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.117724][T11069] syz.5.934 (11069): drop_caches: 2 [ 613.168422][T11078] block nbd1: Attempted send on invalid socket [ 613.198960][T11079] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.925'. [ 613.204430][T11059] ceph: No mds server is up or the cluster is laggy [ 613.212923][ T30] audit: type=1326 audit(1757019467.457:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 613.279942][ T30] audit: type=1326 audit(1757019467.457:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 613.700767][T11078] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 613.713560][T11078] hfsplus: unable to find HFS+ superblock [ 613.739056][ T30] audit: type=1326 audit(1757019467.457:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 613.762528][ C1] vkms_vblank_simulate: vblank timer overrun [ 613.959463][ T5855] Bluetooth: hci0: command 0x1003 tx timeout [ 613.967178][T10091] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 614.231180][ T30] audit: type=1326 audit(1757019467.457:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 614.709760][ T30] audit: type=1326 audit(1757019467.457:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11053 comm="syz.2.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0b8ebe9 code=0x7ffc0000 [ 614.863709][T11083] netlink: 'syz.2.926': attribute type 4 has an invalid length. [ 614.875557][T11083] fuse: Bad value for 'fd' [ 615.060153][T11094] netlink: 'syz.5.927': attribute type 10 has an invalid length. [ 615.070828][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.927'. [ 615.299003][T11099] netlink: 'syz.2.929': attribute type 10 has an invalid length. [ 615.316332][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 615.648807][T11096] netlink: 40 bytes leftover after parsing attributes in process `syz.4.928'. [ 615.674498][T11096] mkiss: ax0: crc mode is auto. [ 616.801826][T11110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3600 sclass=netlink_route_socket pid=11110 comm=syz.1.930 [ 616.814659][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 616.814677][ T30] audit: type=1400 audit(1757019472.457:1553): avc: denied { ioctl } for pid=11102 comm="syz.1.930" path="socket:[26301]" dev="sockfs" ino=26301 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 616.856600][T11108] netlink: 'syz.3.931': attribute type 10 has an invalid length. [ 617.295516][T11116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.757755][ T30] audit: type=1400 audit(1757019473.417:1554): avc: denied { write } for pid=11102 comm="syz.1.930" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 618.891993][ T30] audit: type=1400 audit(1757019474.537:1555): avc: denied { getattr } for pid=11120 comm="syz.3.935" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 619.075501][ T30] audit: type=1400 audit(1757019474.657:1556): avc: denied { write } for pid=11120 comm="syz.3.935" path="socket:[26317]" dev="sockfs" ino=26317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 619.314412][T11133] netlink: 'syz.2.936': attribute type 10 has an invalid length. [ 619.402197][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 619.703231][ T30] audit: type=1400 audit(1757019475.167:1557): avc: denied { mount } for pid=11131 comm="syz.4.937" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 619.725133][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.183217][ T30] audit: type=1400 audit(1757019475.237:1558): avc: denied { bind } for pid=11131 comm="syz.4.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 620.370946][ T30] audit: type=1400 audit(1757019476.027:1559): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 620.390982][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.781479][T11155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.146141][ T913] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 621.345191][ T30] audit: type=1400 audit(1757019476.987:1560): avc: denied { create } for pid=11141 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 621.701355][ T913] usb 4-1: config 3 has an invalid interface number: 61 but max is 0 [ 621.799103][ T913] usb 4-1: config 3 has no interface number 0 [ 621.859674][ T913] usb 4-1: config 3 interface 61 has no altsetting 0 [ 621.935186][ T913] usb 4-1: string descriptor 0 read error: -22 [ 621.941522][ T913] usb 4-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 621.954110][ T913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.020023][ T913] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 622.162430][ T913] snd-usb-audio 4-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 622.180828][ T8766] udevd[8766]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.61/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.098769][ T30] audit: type=1400 audit(1757019478.517:1561): avc: denied { mount } for pid=11165 comm="syz.1.944" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 623.256737][T11174] netlink: 'syz.4.945': attribute type 10 has an invalid length. [ 624.204504][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.324595][T11180] gfs2: not a GFS2 filesystem [ 625.055947][ T913] usb 4-1: USB disconnect, device number 11 [ 625.125379][T11184] netlink: 'syz.5.947': attribute type 1 has an invalid length. [ 625.326968][T11191] netlink: 'syz.3.949': attribute type 10 has an invalid length. [ 625.568102][T11194] netlink: 'syz.2.948': attribute type 10 has an invalid length. [ 625.576761][ T30] audit: type=1400 audit(1757019481.237:1562): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 625.599540][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 625.977040][T11198] netlink: 'syz.1.950': attribute type 10 has an invalid length. [ 627.033522][ T30] audit: type=1400 audit(1757019482.657:1563): avc: denied { execute } for pid=11203 comm="syz.3.952" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 627.334363][ T30] audit: type=1400 audit(1757019482.837:1564): avc: denied { set_context_mgr } for pid=11201 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 627.357621][ T30] audit: type=1400 audit(1757019482.837:1565): avc: denied { setopt } for pid=11201 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 627.890956][T11219] netlink: 'syz.4.953': attribute type 1 has an invalid length. [ 628.578239][ T30] audit: type=1400 audit(1757019484.227:1566): avc: denied { ioctl } for pid=11224 comm="syz.3.955" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 629.381697][ T30] audit: type=1400 audit(1757019484.987:1567): avc: denied { watch } for pid=11229 comm="syz.1.956" path="/196/control" dev="tmpfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 629.428136][T11238] sctp: [Deprecated]: syz.1.956 (pid 11238) Use of struct sctp_assoc_value in delayed_ack socket option. [ 629.428136][T11238] Use struct sctp_sack_info instead [ 630.349144][T11232] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 631.475262][T10091] Bluetooth: hci5: command 0x0419 tx timeout [ 633.096559][T11260] netlink: 52 bytes leftover after parsing attributes in process `syz.2.960'. [ 633.479073][ T30] audit: type=1400 audit(1757019488.887:1568): avc: denied { connect } for pid=11258 comm="syz.2.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 634.470784][T11267] netlink: 'syz.2.962': attribute type 10 has an invalid length. [ 634.904278][T11271] netlink: 'syz.3.963': attribute type 10 has an invalid length. [ 634.996203][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'. [ 635.189172][ T30] audit: type=1400 audit(1757019490.837:1569): avc: denied { ioctl } for pid=11273 comm="syz.2.964" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27658 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 636.109505][ T30] audit: type=1326 audit(1757019491.757:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b138ebe9 code=0x7ffc0000 [ 636.295729][T11283] lo speed is unknown, defaulting to 1000 [ 636.324126][T11283] lo speed is unknown, defaulting to 1000 [ 636.340284][ T30] audit: type=1326 audit(1757019491.757:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b138ebe9 code=0x7ffc0000 [ 636.516605][ T30] audit: type=1326 audit(1757019491.757:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f63b138ebe9 code=0x7ffc0000 [ 637.055468][ T30] audit: type=1326 audit(1757019491.757:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b138ebe9 code=0x7ffc0000 [ 637.089498][ T30] audit: type=1326 audit(1757019491.757:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b138ebe9 code=0x7ffc0000 [ 637.195839][ T30] audit: type=1326 audit(1757019491.757:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f63b138ebe9 code=0x7ffc0000 [ 637.220828][ T30] audit: type=1326 audit(1757019491.757:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b138ebe9 code=0x7ffc0000 [ 637.314774][T11297] netlink: 'syz.2.969': attribute type 10 has an invalid length. [ 637.358589][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 637.438171][ T30] audit: type=1326 audit(1757019491.767:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b138ebe9 code=0x7ffc0000 [ 637.521996][ T30] audit: type=1326 audit(1757019491.767:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f63b138ebe9 code=0x7ffc0000 [ 638.506564][T11315] netlink: 'syz.3.970': attribute type 10 has an invalid length. [ 638.614766][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 638.775689][T11322] program syz.4.973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.965953][T11327] netlink: 'syz.2.974': attribute type 10 has an invalid length. [ 639.174058][ T5909] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 640.628187][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 641.329994][ T5909] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 641.340132][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.350141][ T5909] usb 5-1: Product: syz [ 641.358796][ T5909] usb 5-1: Manufacturer: syz [ 641.364405][ T5909] usb 5-1: SerialNumber: syz [ 641.379630][ T5909] usb 5-1: config 0 descriptor?? [ 641.933125][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 641.933142][ T30] audit: type=1400 audit(1757019497.587:1620): avc: denied { ioctl } for pid=11342 comm="syz.3.979" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 642.382676][T11347] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 642.443885][T11347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 642.542001][ T30] audit: type=1400 audit(1757019498.197:1621): avc: denied { create } for pid=11343 comm="syz.2.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 642.774752][T11362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.016456][ T913] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 643.150368][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.982'. [ 643.214808][T11369] netlink: 20 bytes leftover after parsing attributes in process `syz.5.982'. [ 643.335982][ T913] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 643.346606][ T913] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 643.368639][ T913] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 643.369022][T11366] ip6tnl0: Master is either lo or non-ether device [ 644.208002][ T913] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 644.214561][ T5909] usb 5-1: USB disconnect, device number 9 [ 644.321918][ T913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.357267][ T913] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 644.623268][T11354] delete_channel: no stack [ 644.721496][ T913] usb 3-1: invalid MIDI out EP 0 [ 644.727907][ T30] audit: type=1400 audit(1757019500.337:1622): avc: denied { read } for pid=11373 comm="syz.1.984" name="usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 645.396318][ T30] audit: type=1400 audit(1757019500.337:1623): avc: denied { open } for pid=11373 comm="syz.1.984" path="/dev/usbmon3" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 646.150153][T11329] udevd[11329]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 646.171608][ T30] audit: type=1400 audit(1757019500.357:1624): avc: denied { ioctl } for pid=11373 comm="syz.1.984" path="/dev/usbmon3" dev="devtmpfs" ino=725 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 646.457180][ T913] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 646.507339][ T913] usb 3-1: USB disconnect, device number 7 [ 647.571690][T11413] netlink: 'syz.3.989': attribute type 10 has an invalid length. [ 647.600492][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 647.967020][ T30] audit: type=1400 audit(1757019503.577:1625): avc: denied { name_bind } for pid=11397 comm="syz.4.988" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 647.988253][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.391514][T11421] netlink: 'syz.2.990': attribute type 10 has an invalid length. [ 648.477291][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'. [ 648.916538][T11431] netlink: 'syz.3.993': attribute type 10 has an invalid length. [ 648.926398][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 650.139571][T11436] netlink: 'syz.3.994': attribute type 10 has an invalid length. [ 650.230174][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 650.357415][ T30] audit: type=1400 audit(1757019505.837:1626): avc: denied { create } for pid=11437 comm="syz.2.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 650.997612][ T30] audit: type=1400 audit(1757019505.847:1627): avc: denied { write } for pid=11437 comm="syz.2.995" path="socket:[27970]" dev="sockfs" ino=27970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 651.023301][ T30] audit: type=1400 audit(1757019505.907:1628): avc: denied { setopt } for pid=11439 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 651.146659][ T30] audit: type=1400 audit(1757019505.907:1629): avc: denied { connect } for pid=11439 comm="syz.4.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 651.448030][T11450] netlink: 'syz.5.997': attribute type 10 has an invalid length. [ 651.711122][ T30] audit: type=1400 audit(1757019507.367:1630): avc: denied { ioctl } for pid=11448 comm="syz.4.998" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 652.223559][ T30] audit: type=1400 audit(1757019507.837:1631): avc: denied { read } for pid=11452 comm="syz.2.999" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 652.289747][T11462] netlink: 'syz.3.1000': attribute type 10 has an invalid length. [ 652.608425][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 653.384810][T11479] sctp: [Deprecated]: syz.5.1001 (pid 11479) Use of struct sctp_assoc_value in delayed_ack socket option. [ 653.384810][T11479] Use struct sctp_sack_info instead [ 653.553527][ T30] audit: type=1400 audit(1757019509.217:1632): avc: denied { setopt } for pid=11476 comm="syz.1.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 653.693450][ T30] audit: type=1400 audit(1757019509.347:1633): avc: denied { ioctl } for pid=11476 comm="syz.1.1003" path="socket:[28866]" dev="sockfs" ino=28866 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 653.837337][T11483] bridge3: entered promiscuous mode [ 653.902911][T11473] mkiss: ax0: crc mode is auto. [ 655.697952][ T30] audit: type=1400 audit(1757019510.907:1634): avc: denied { remount } for pid=11490 comm="syz.4.1005" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 656.220489][ T5855] Bluetooth: hci5: command 0x0419 tx timeout [ 656.271317][T11470] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 656.379596][T11507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1008'. [ 657.246948][ T30] audit: type=1400 audit(1757019512.837:1635): avc: denied { shutdown } for pid=11497 comm="syz.3.1007" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 657.806334][ T30] audit: type=1400 audit(1757019513.467:1636): avc: denied { create } for pid=11497 comm="syz.3.1007" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 658.456894][T10091] Bluetooth: hci5: command 0x0419 tx timeout [ 659.155647][ T30] audit: type=1400 audit(1757019513.497:1637): avc: denied { write } for pid=11497 comm="syz.3.1007" name="file0" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 659.180072][ T30] audit: type=1400 audit(1757019513.497:1638): avc: denied { open } for pid=11497 comm="syz.3.1007" path="/200/file0" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 659.218365][ T30] audit: type=1400 audit(1757019513.497:1639): avc: denied { ioctl } for pid=11497 comm="syz.3.1007" path="/200/file0" dev="tmpfs" ino=1075 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 659.243144][ T30] audit: type=1400 audit(1757019513.967:1640): avc: denied { create } for pid=11514 comm="syz.5.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 659.263199][ T30] audit: type=1400 audit(1757019513.977:1641): avc: denied { write } for pid=11514 comm="syz.5.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 659.732743][T11519] tun0: tun_chr_ioctl cmd 2147767520 [ 659.762721][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 659.854655][ T30] audit: type=1400 audit(1757019515.507:1642): avc: denied { bind } for pid=11521 comm="syz.4.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 660.047361][ T30] audit: type=1400 audit(1757019515.597:1643): avc: denied { bind } for pid=11518 comm="syz.5.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 660.188371][ T30] audit: type=1400 audit(1757019515.597:1644): avc: denied { ioctl } for pid=11518 comm="syz.5.1012" path="socket:[28982]" dev="sockfs" ino=28982 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 660.371123][ T30] audit: type=1400 audit(1757019515.697:1645): avc: denied { setopt } for pid=11521 comm="syz.4.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 660.570594][ T30] audit: type=1400 audit(1757019516.137:1646): avc: denied { read } for pid=11531 comm="syz.1.1013" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 663.357240][T11563] netlink: 'syz.2.1018': attribute type 10 has an invalid length. [ 663.468337][T11564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 664.198612][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 664.198630][ T30] audit: type=1400 audit(1757019519.827:1651): avc: denied { read write } for pid=11566 comm="syz.1.1019" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 664.424438][ T30] audit: type=1400 audit(1757019519.827:1652): avc: denied { open } for pid=11566 comm="syz.1.1019" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 664.465977][T11573] netlink: 'syz.3.1020': attribute type 10 has an invalid length. [ 664.527351][T11574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1020'. [ 666.823910][ T30] audit: type=1400 audit(1757019522.477:1653): avc: denied { read write } for pid=11582 comm="syz.5.1025" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 666.847639][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.887301][ T30] audit: type=1400 audit(1757019522.477:1654): avc: denied { open } for pid=11582 comm="syz.5.1025" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 666.918037][ T30] audit: type=1400 audit(1757019522.477:1655): avc: denied { ioctl } for pid=11582 comm="syz.5.1025" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 667.224010][T11595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11595 comm=syz.3.1022 [ 667.912418][T11597] sctp: [Deprecated]: syz.1.1023 (pid 11597) Use of int in maxseg socket option. [ 667.912418][T11597] Use struct sctp_assoc_value instead [ 667.953395][ T30] audit: type=1400 audit(1757019523.597:1656): avc: denied { ioctl } for pid=11588 comm="syz.1.1023" path="socket:[29174]" dev="sockfs" ino=29174 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 668.154017][ T30] audit: type=1400 audit(1757019523.647:1657): avc: denied { create } for pid=11582 comm="syz.5.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 668.278627][ T30] audit: type=1400 audit(1757019523.647:1658): avc: denied { ioctl } for pid=11582 comm="syz.5.1025" path="socket:[28238]" dev="sockfs" ino=28238 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 668.303409][ C0] vkms_vblank_simulate: vblank timer overrun [ 668.313832][T11597] netlink: 'syz.1.1023': attribute type 10 has an invalid length. [ 668.322040][T11597] veth0_vlan: left promiscuous mode [ 668.329158][T11597] veth0_vlan: entered promiscuous mode [ 668.338481][T11597] team0: Device veth0_vlan failed to register rx_handler [ 669.023805][T11607] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 669.030332][T11607] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 669.038501][T11607] vhci_hcd vhci_hcd.0: Device attached [ 669.059433][ T30] audit: type=1326 audit(1757019524.657:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11602 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fc78ebe9 code=0x7ffc0000 [ 669.082912][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.125067][ T5909] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 669.162676][ T30] audit: type=1326 audit(1757019524.657:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11602 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fc78ebe9 code=0x7ffc0000 [ 669.222938][ T840] vhci_hcd: vhci_device speed not set [ 669.283412][ T840] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 669.305016][ T5909] usb 5-1: config 0 has no interfaces? [ 669.310615][ T5909] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 669.321494][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.354780][ T5909] usb 5-1: config 0 descriptor?? [ 669.577697][T11608] vhci_hcd: unknown pdu 2 [ 670.060043][ T2989] vhci_hcd: stop threads [ 670.070091][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 670.070103][ T30] audit: type=1400 audit(1757019525.477:1688): avc: denied { bind } for pid=11604 comm="syz.4.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 670.082799][ T2989] vhci_hcd: release socket [ 670.113214][T11610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 670.132910][ T2989] vhci_hcd: disconnect device [ 670.144614][ T840] vhci_hcd: vhci_device speed not set [ 670.225030][ T30] audit: type=1400 audit(1757019525.487:1689): avc: denied { setopt } for pid=11604 comm="syz.4.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 670.566209][T11619] capability: warning: `syz.2.1028' uses 32-bit capabilities (legacy support in use) [ 670.579114][ T30] audit: type=1400 audit(1757019526.237:1690): avc: denied { connect } for pid=11616 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 670.889232][ T30] audit: type=1400 audit(1757019526.287:1691): avc: denied { write } for pid=11616 comm="syz.2.1028" path="socket:[28281]" dev="sockfs" ino=28281 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 671.119372][ T30] audit: type=1400 audit(1757019526.777:1692): avc: denied { create } for pid=11622 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 671.178644][ T30] audit: type=1400 audit(1757019526.777:1693): avc: denied { setopt } for pid=11622 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 671.319783][ T30] audit: type=1400 audit(1757019526.777:1694): avc: denied { connect } for pid=11622 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 671.638999][ T5909] usb 5-1: USB disconnect, device number 10 [ 672.034677][T11640] netlink: 'syz.4.1032': attribute type 10 has an invalid length. [ 672.064487][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 672.790280][T11654] block nbd0: Unsupported socket: shutdown callout must be supported. [ 672.918733][T11656] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 672.928587][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 673.070663][ T30] audit: type=1400 audit(1757019528.687:1695): avc: denied { read } for pid=11653 comm="syz.4.1036" path="socket:[29244]" dev="sockfs" ino=29244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 673.093899][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.787860][T11682] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11682 comm=syz.3.1040 [ 676.844663][T11682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.885568][ T30] audit: type=1400 audit(1757019532.547:1696): avc: denied { create } for pid=11685 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 676.936841][T11682] syz.3.1040 (11682): drop_caches: 2 [ 676.957734][T11682] syz.3.1040 (11682): drop_caches: 2 [ 677.067555][ T30] audit: type=1400 audit(1757019532.567:1697): avc: denied { getopt } for pid=11677 comm="syz.3.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 677.316219][T11697] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 677.336679][ T30] audit: type=1400 audit(1757019532.987:1698): avc: denied { connect } for pid=11685 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 677.362156][T11697] ip6erspan0: entered promiscuous mode [ 677.379699][ T30] audit: type=1400 audit(1757019532.987:1699): avc: denied { bind } for pid=11685 comm="syz.1.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 677.417188][ T8431] Bluetooth: hci0: Frame reassembly failed (-84) [ 677.668063][T11691] mkiss: ax0: crc mode is auto. [ 679.497389][T10091] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 679.719596][T11700] Bluetooth: hci5: command 0x0419 tx timeout [ 679.747583][ T30] audit: type=1400 audit(1757019535.407:1700): avc: denied { accept } for pid=11706 comm="syz.2.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 681.269327][T10873] libceph: connect (1)[c::]:6789 error -101 [ 681.276879][T10873] libceph: mon0 (1)[c::]:6789 connect error [ 681.540090][T11731] ceph: No mds server is up or the cluster is laggy [ 681.547236][T10873] libceph: connect (1)[c::]:6789 error -101 [ 681.584168][T10873] libceph: mon0 (1)[c::]:6789 connect error [ 682.065066][T11742] netlink: 'syz.5.1050': attribute type 10 has an invalid length. [ 682.076736][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1050'. [ 682.645766][T11747] netlink: 'syz.3.1051': attribute type 10 has an invalid length. [ 682.694352][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 685.021059][ T30] audit: type=1400 audit(1757019540.647:1701): avc: denied { read } for pid=11763 comm="syz.5.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 685.161258][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 685.198257][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1057'. [ 685.277784][ T30] audit: type=1400 audit(1757019540.933:1702): avc: denied { ioctl } for pid=11768 comm="syz.2.1056" path="socket:[29535]" dev="sockfs" ino=29535 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 685.280061][T11771] geneve2: entered promiscuous mode [ 685.396548][T11771] geneve2: entered allmulticast mode [ 685.759578][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.828383][T11786] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 687.887485][T11771] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1057'. [ 688.308175][T11798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1060'. [ 688.986234][T11802] lo speed is unknown, defaulting to 1000 [ 689.002227][T11802] lo speed is unknown, defaulting to 1000 [ 690.687333][ T30] audit: type=1400 audit(1757019546.353:1703): avc: denied { read } for pid=11822 comm="syz.3.1064" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 690.804300][T11824] bridge2: entered promiscuous mode [ 690.975765][ T30] audit: type=1400 audit(1757019546.353:1704): avc: denied { open } for pid=11822 comm="syz.3.1064" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 691.323365][ T840] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 691.379531][T11829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.397368][ T30] audit: type=1400 audit(1757019547.063:1705): avc: denied { ioctl } for pid=11822 comm="syz.3.1064" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 691.424635][T11829] random: crng reseeded on system resumption [ 691.913399][ T840] usb 6-1: Using ep0 maxpacket: 16 [ 691.928743][ T840] usb 6-1: config 0 has no interfaces? [ 691.943432][ T840] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 691.983949][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.018821][ T840] usb 6-1: Product: syz [ 692.043870][ T840] usb 6-1: Manufacturer: syz [ 692.054750][ T840] usb 6-1: SerialNumber: syz [ 692.094613][ T840] usb 6-1: config 0 descriptor?? [ 692.347935][T11820] tipc: Started in network mode [ 692.364045][T11820] tipc: Node identity 7f000001, cluster identity 4711 [ 692.375898][T11820] tipc: New replicast peer: 0.0.0.0 [ 692.385071][T11820] tipc: Enabled bearer , priority 10 [ 692.710459][T11833] 9pnet_virtio: no channels available for device syz [ 693.503465][ T5909] tipc: Node number set to 2130706433 [ 694.310984][T11845] netlink: 'syz.4.1068': attribute type 10 has an invalid length. [ 694.324246][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 694.582978][ T840] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 694.740881][ T840] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.887332][T11850] netlink: 'syz.3.1071': attribute type 10 has an invalid length. [ 694.931249][ T840] usb 3-1: config 0 interface 0 has no altsetting 0 [ 694.945352][ T5847] usb 6-1: USB disconnect, device number 5 [ 694.966101][ T840] usb 3-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 695.003894][ T840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.306598][ T840] usb 3-1: config 0 descriptor?? [ 695.669816][T11863] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 695.742980][ T840] hid-alps 0003:044E:1215.0004: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.2-1/input0 [ 696.888652][ T6009] usb 3-1: USB disconnect, device number 8 [ 698.722101][T11886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1076'. [ 698.874657][T11887] ubi: mtd0 is already attached to ubi31 [ 699.498719][ T30] audit: type=1326 audit(1757019554.603:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b138ebe9 code=0x7ffc0000 [ 699.719873][ T30] audit: type=1326 audit(1757019554.603:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b138ebe9 code=0x7ffc0000 [ 700.333629][T11900] delete_channel: no stack [ 700.566743][T11902] netlink: 'syz.5.1077': attribute type 10 has an invalid length. [ 700.849166][T11910] netlink: 'syz.2.1080': attribute type 10 has an invalid length. [ 700.980580][T11912] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1081'. [ 701.353963][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 701.479845][ T5929] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 701.747890][ T5929] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 701.759087][ T5929] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 701.953483][ T5929] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 701.982853][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.079798][T11920] ubi: mtd0 is already attached to ubi31 [ 702.902993][T11909] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 703.044841][ T5929] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 703.210155][ T30] audit: type=1400 audit(1757019558.873:1708): avc: denied { mount } for pid=11922 comm="syz.3.1084" name="/" dev="autofs" ino=29997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 703.688916][ T840] usb 2-1: USB disconnect, device number 15 [ 704.168540][T11934] netlink: 'syz.1.1087': attribute type 10 has an invalid length. [ 704.628164][ T30] audit: type=1400 audit(1757019560.293:1709): avc: denied { write } for pid=11937 comm="syz.2.1089" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 705.395267][ T30] audit: type=1400 audit(1757019561.026:1710): avc: denied { mount } for pid=11942 comm="syz.1.1090" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 705.522371][ T30] audit: type=1400 audit(1757019561.176:1711): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 705.921951][T11958] netlink: 'syz.2.1091': attribute type 2 has an invalid length. [ 705.931220][T11958] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1091'. [ 706.414400][ T30] audit: type=1400 audit(1757019562.046:1712): avc: denied { mount } for pid=11953 comm="syz.4.1093" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 706.436742][ T30] audit: type=1400 audit(1757019562.046:1713): avc: denied { read write } for pid=11953 comm="syz.4.1093" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 706.461546][ T30] audit: type=1400 audit(1757019562.046:1714): avc: denied { open } for pid=11953 comm="syz.4.1093" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 706.682795][ T30] audit: type=1400 audit(1757019562.046:1715): avc: denied { ioctl } for pid=11953 comm="syz.4.1093" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 707.939065][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1096'. [ 708.070835][T11980] netlink: 'syz.1.1097': attribute type 10 has an invalid length. [ 708.079201][T11980] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1097'. [ 708.094375][T11980] dummy0: entered promiscuous mode [ 708.113573][T11980] bridge0: port 1(dummy0) entered blocking state [ 708.141155][T11980] bridge0: port 1(dummy0) entered disabled state [ 708.179954][T11980] dummy0: entered allmulticast mode [ 708.383950][T11980] bridge0: port 1(dummy0) entered blocking state [ 708.390413][T11980] bridge0: port 1(dummy0) entered forwarding state [ 709.200075][T11986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1098'. [ 709.217190][T11986] geneve2: entered allmulticast mode [ 709.259338][ T30] audit: type=1400 audit(1757019564.916:1716): avc: denied { ioctl } for pid=11985 comm="syz.1.1098" path="socket:[30071]" dev="sockfs" ino=30071 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 709.480691][T11991] netlink: 'syz.4.1099': attribute type 10 has an invalid length. [ 710.116976][T12003] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 710.160311][T12003] team0: Port device batadv11 added [ 710.597810][T12009] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 710.674397][ T30] audit: type=1326 audit(1757019566.246:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fc78ebe9 code=0x7ffc0000 [ 710.698171][T12009] CPU: 0 UID: 0 PID: 12009 Comm: syz.3.1102 Not tainted syzkaller #0 PREEMPT(full) [ 710.698202][T12009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 710.698220][T12009] Call Trace: [ 710.698229][T12009] [ 710.698237][T12009] dump_stack_lvl+0x16c/0x1f0 [ 710.698267][T12009] sysfs_warn_dup+0x7f/0xa0 [ 710.698296][T12009] sysfs_do_create_link_sd+0x124/0x140 [ 710.698328][T12009] sysfs_create_link+0x61/0xc0 [ 710.698357][T12009] device_add+0x62c/0x1aa0 [ 710.698388][T12009] ? __pfx_device_add+0x10/0x10 [ 710.698413][T12009] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 710.698441][T12009] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 710.698482][T12009] wiphy_register+0x1df4/0x29f0 [ 710.698507][T12009] ? netdev_run_todo+0x864/0x1320 [ 710.698532][T12009] ? __dev_printk+0x270/0x270 [ 710.698560][T12009] ? __pfx_wiphy_register+0x10/0x10 [ 710.698598][T12009] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 710.698629][T12009] ieee80211_register_hw+0x2546/0x4120 [ 710.698669][T12009] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 710.698700][T12009] ? find_held_lock+0x2b/0x80 [ 710.698727][T12009] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 710.698752][T12009] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 710.698775][T12009] ? __hrtimer_setup+0x176/0x280 [ 710.698809][T12009] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 710.698858][T12009] ? trace_kmalloc+0x2b/0xd0 [ 710.698885][T12009] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 710.698910][T12009] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 710.698937][T12009] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 710.698967][T12009] ? __asan_memcpy+0x3c/0x60 [ 710.699003][T12009] hwsim_new_radio_nl+0xb51/0x12c0 [ 710.699035][T12009] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 710.699075][T12009] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 710.699105][T12009] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 710.699142][T12009] genl_family_rcv_msg_doit+0x206/0x2f0 [ 710.699173][T12009] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 710.699212][T12009] ? bpf_lsm_capable+0x9/0x10 [ 710.699241][T12009] ? security_capable+0x7e/0x260 [ 710.699267][T12009] ? ns_capable+0xd7/0x110 [ 710.699295][T12009] genl_rcv_msg+0x55c/0x800 [ 710.699327][T12009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 710.699357][T12009] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 710.699398][T12009] netlink_rcv_skb+0x155/0x420 [ 710.699423][T12009] ? __pfx_genl_rcv_msg+0x10/0x10 [ 710.699452][T12009] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 710.699491][T12009] ? netlink_deliver_tap+0x1ae/0xd30 [ 710.699520][T12009] genl_rcv+0x28/0x40 [ 710.699543][T12009] netlink_unicast+0x5aa/0x870 [ 710.699573][T12009] ? __pfx_netlink_unicast+0x10/0x10 [ 710.699611][T12009] netlink_sendmsg+0x8d1/0xdd0 [ 710.699641][T12009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.699680][T12009] ____sys_sendmsg+0xa95/0xc70 [ 710.699710][T12009] ? copy_msghdr_from_user+0x10a/0x160 [ 710.699733][T12009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 710.699777][T12009] ___sys_sendmsg+0x134/0x1d0 [ 710.699811][T12009] ? __pfx____sys_sendmsg+0x10/0x10 [ 710.699869][T12009] __sys_sendmsg+0x16d/0x220 [ 710.699891][T12009] ? __pfx___sys_sendmsg+0x10/0x10 [ 710.699925][T12009] ? __secure_computing+0x28e/0x3b0 [ 710.699961][T12009] do_syscall_64+0xcd/0x4c0 [ 710.699988][T12009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.700010][T12009] RIP: 0033:0x7ff9fc78ebe9 [ 710.700028][T12009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.700050][T12009] RSP: 002b:00007ff9fa9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 710.700070][T12009] RAX: ffffffffffffffda RBX: 00007ff9fc9c6180 RCX: 00007ff9fc78ebe9 [ 710.700085][T12009] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000006 [ 710.700098][T12009] RBP: 00007ff9fc811e19 R08: 0000000000000000 R09: 0000000000000000 [ 710.700111][T12009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.700125][T12009] R13: 00007ff9fc9c6218 R14: 00007ff9fc9c6180 R15: 00007ffe7479d7f8 [ 710.700155][T12009] [ 710.700998][ T30] audit: type=1326 audit(1757019566.246:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fc78ebe9 code=0x7ffc0000 [ 711.522161][T12012] loop6: detected capacity change from 0 to 63 [ 711.637577][T11329] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.829130][T11329] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.884006][T11329] Buffer I/O error on dev loop6, logical block 0, async page read [ 711.969148][ T30] audit: type=1326 audit(1757019566.246:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff9fc78ebe9 code=0x7ffc0000 [ 712.072832][ T5929] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 712.198046][ T30] audit: type=1326 audit(1757019566.246:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fc78ebe9 code=0x7ffc0000 [ 712.228869][ T30] audit: type=1326 audit(1757019566.246:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fc78ebe9 code=0x7ffc0000 [ 712.254607][T11329] Buffer I/O error on dev loop6, logical block 0, async page read [ 712.273808][T11329] Buffer I/O error on dev loop6, logical block 0, async page read [ 712.282983][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 712.446037][T10883] syz_tun (unregistering): left allmulticast mode [ 712.448193][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1106'. [ 712.469286][ T5929] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 712.513161][ T30] audit: type=1326 audit(1757019566.246:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9fc78ebe9 code=0x7ffc0000 [ 712.542784][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.632803][ T5929] usb 4-1: Product: syz [ 712.650187][ T5929] usb 4-1: Manufacturer: syz [ 712.658959][ T5929] usb 4-1: SerialNumber: syz [ 712.694235][ T30] audit: type=1326 audit(1757019566.246:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fc78ebe9 code=0x7ffc0000 [ 712.734189][ T5929] usb 4-1: config 0 descriptor?? [ 712.744642][ T5929] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 712.827799][T12023] hugetlbfs: syz.5.1106 (12023): Using mlock ulimits for SHM_HUGETLB is obsolete [ 712.986460][ T5929] usb 4-1: Detected FT232H [ 713.115839][ T30] audit: type=1326 audit(1757019566.246:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fc78ebe9 code=0x7ffc0000 [ 713.174340][ T30] audit: type=1326 audit(1757019566.246:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff9fc78ebe9 code=0x7ffc0000 [ 713.402125][ T30] audit: type=1326 audit(1757019566.786:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11998 comm="syz.3.1102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9fc78ebe9 code=0x7ffc0000 [ 713.951788][ T5929] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 713.960974][ T5929] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 714.014557][ T5929] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 714.056086][ T5929] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 714.099940][ T5929] usb 4-1: USB disconnect, device number 12 [ 714.188545][ T5929] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 714.258692][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1108'. [ 714.290464][ T5929] ftdi_sio 4-1:0.0: device disconnected [ 714.384402][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 714.624263][ T60] bridge_slave_1: left allmulticast mode [ 714.675304][ T5909] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 714.791481][ T60] bridge_slave_1: left promiscuous mode [ 714.814985][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.826444][ T5909] usb 2-1: device descriptor read/64, error -71 [ 714.907309][ T60] : left allmulticast mode [ 714.915673][ T60] : left promiscuous mode [ 714.932313][ T60] bridge0: port 1() entered disabled state [ 715.073776][ T5909] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 715.214867][ T5909] usb 2-1: device descriptor read/64, error -71 [ 715.397032][ T5909] usb usb2-port1: attempt power cycle [ 715.577399][T12051] netlink: 'syz.4.1111': attribute type 10 has an invalid length. [ 715.850201][T11700] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 715.867602][T11700] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 715.878024][T11700] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 715.886422][T11700] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 715.894840][T11700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 715.908888][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 715.908900][ T30] audit: type=1400 audit(1757019571.566:1741): avc: denied { mounton } for pid=12058 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 715.938011][ T5909] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 715.965024][T12049] netlink: 'syz.3.1110': attribute type 10 has an invalid length. [ 715.974380][ T5909] usb 2-1: device descriptor read/8, error -71 [ 716.016788][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 716.265296][ T5909] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 716.314340][ T5909] usb 2-1: device descriptor read/8, error -71 [ 716.370170][ T30] audit: type=1400 audit(1757019572.026:1742): avc: denied { add_name } for pid=12040 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.415007][ T30] audit: type=1400 audit(1757019572.026:1743): avc: denied { create } for pid=12040 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 716.462561][ T5909] usb usb2-port1: unable to enumerate USB device [ 716.493913][ T30] audit: type=1400 audit(1757019572.026:1744): avc: denied { write } for pid=12040 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=5595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 716.584319][ T30] audit: type=1400 audit(1757019572.026:1745): avc: denied { append } for pid=12040 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=5595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 716.645622][ T30] audit: type=1400 audit(1757019572.276:1746): avc: denied { remove_name } for pid=12065 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=5595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.710612][ T30] audit: type=1400 audit(1757019572.276:1747): avc: denied { unlink } for pid=12065 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=5595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 716.902208][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 716.925453][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 716.947611][ T60] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 716.961340][ T60] bond0 (unregistering): Released all slaves [ 717.120133][ T60] bond1 (unregistering): Released all slaves [ 717.324746][T12058] lo speed is unknown, defaulting to 1000 [ 717.369582][T12058] lo speed is unknown, defaulting to 1000 [ 718.056359][ T5853] Bluetooth: hci0: command tx timeout [ 718.090489][T12084] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 719.485708][ T60] hsr_slave_0: left promiscuous mode [ 719.561271][ T60] hsr_slave_1: left promiscuous mode [ 719.613981][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.653068][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.670946][ T60] batman_adv: batadv0: Removing interface: team0 [ 720.113969][ T5853] Bluetooth: hci0: command tx timeout [ 720.184000][T12117] usb usb8: usbfs: process 12117 (syz.5.1115) did not claim interface 0 before use [ 720.195258][ T30] audit: type=1326 audit(1757019575.836:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7fc00000 [ 721.066253][ T30] audit: type=1326 audit(1757019576.126:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9ccd8ebe9 code=0x7fc00000 [ 721.101507][ T30] audit: type=1326 audit(1757019576.126:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7fc00000 [ 721.415189][ T30] audit: type=1326 audit(1757019576.126:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7fc00000 [ 721.825592][ T30] audit: type=1326 audit(1757019576.126:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7fc00000 [ 721.853430][ T30] audit: type=1326 audit(1757019576.126:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7fc00000 [ 721.878575][ T60] pim6reg (unregistering): left allmulticast mode [ 721.965134][T12133] program syz.1.1131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 722.120689][ T30] audit: type=1326 audit(1757019576.126:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7fc00000 [ 722.231340][ T5853] Bluetooth: hci0: command tx timeout [ 722.238145][ T30] audit: type=1326 audit(1757019576.126:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7fc00000 [ 722.262253][ T30] audit: type=1326 audit(1757019576.126:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7fc00000 [ 722.286541][ T840] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 722.294931][ T30] audit: type=1326 audit(1757019576.126:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7fc00000 [ 722.319144][ T30] audit: type=1326 audit(1757019576.126:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12109 comm="syz.5.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7fc00000 [ 722.450506][ T60] team0 (unregistering): Port device batadv7 removed [ 722.584903][ T840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 722.600370][ T840] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 722.611248][ T840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.628416][ T840] usb 2-1: Product: syz [ 722.646675][ T60] team0 (unregistering): Port device batadv6 removed [ 722.660200][ T840] usb 2-1: Manufacturer: syz [ 722.998871][ T840] usb 2-1: SerialNumber: syz [ 723.085955][ T840] usb 2-1: config 0 descriptor?? [ 723.337691][ T60] team0 (unregistering): Port device batadv5 removed [ 723.785916][ T60] team0 (unregistering): Port device batadv2 removed [ 724.234802][T12149] netlink: 'syz.3.1124': attribute type 10 has an invalid length. [ 724.392851][ T5853] Bluetooth: hci0: command tx timeout [ 725.086107][T12156] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1125'. [ 725.256271][ T60] team0 (unregistering): Port device team_slave_1 removed [ 725.370589][ T60] team0 (unregistering): Port device team_slave_0 removed [ 726.502415][T12058] chnl_net:caif_netlink_parms(): no params data found [ 726.554411][ T5929] usb 2-1: USB disconnect, device number 20 [ 726.738679][T12164] netlink: 'syz.3.1126': attribute type 10 has an invalid length. [ 726.829956][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 726.938734][T12173] netlink: 'syz.1.1128': attribute type 10 has an invalid length. [ 727.185179][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 727.199556][T12175] netlink: 'syz.4.1127': attribute type 10 has an invalid length. [ 727.294446][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 728.590122][T12058] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.612933][T12058] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.655080][T12058] bridge_slave_0: entered allmulticast mode [ 728.704683][T12058] bridge_slave_0: entered promiscuous mode [ 728.722118][T12058] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.766171][T12058] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.997632][T12058] bridge_slave_1: entered allmulticast mode [ 729.102993][T12058] bridge_slave_1: entered promiscuous mode [ 729.155496][T12192] 9pnet: p9_errstr2errno: server reported unknown error n [ 729.352206][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 729.352223][ T30] audit: type=1400 audit(1757019585.006:1773): avc: denied { getopt } for pid=12188 comm="syz.3.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 729.394580][T12058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.446936][T12058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.726166][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1142'. [ 729.758273][T12200] netlink: 'syz.5.1142': attribute type 5 has an invalid length. [ 729.990703][T12058] team0: Port device team_slave_0 added [ 730.024689][T12058] team0: Port device team_slave_1 added [ 731.179347][T12222] dvmrp0: entered allmulticast mode [ 731.228652][T12225] lo speed is unknown, defaulting to 1000 [ 731.235551][T12225] lo speed is unknown, defaulting to 1000 [ 731.296535][T12058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.320638][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.346591][ C0] vkms_vblank_simulate: vblank timer overrun [ 731.401182][T12058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.460478][T12058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.470059][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.509072][T12236] netlink: 'syz.5.1135': attribute type 27 has an invalid length. [ 731.605471][T12058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.639151][T12236] 0ªX¹¦D: left allmulticast mode [ 731.657790][T12236] geneve2: left promiscuous mode [ 731.668876][T12236] geneve2: left allmulticast mode [ 732.026048][T12240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.038043][T12240] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.051740][T12240] batman_adv: batadv0: Interface activated: team0 [ 732.079194][ T5909] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 732.098119][T12240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 732.191385][ T5847] lo speed is unknown, defaulting to 1000 [ 732.201244][ T5847] syz2: Port: 1 Link ACTIVE [ 732.381940][ T5909] usb 6-1: Using ep0 maxpacket: 16 [ 732.395377][ T5909] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 732.483848][ T5909] usb 6-1: config 0 has no interface number 0 [ 732.730554][ T5909] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 732.844021][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.870937][ T5909] usb 6-1: Product: syz [ 732.882615][ T5909] usb 6-1: Manufacturer: syz [ 733.051438][ T5909] usb 6-1: SerialNumber: syz [ 733.067958][T12058] hsr_slave_0: entered promiscuous mode [ 733.195751][ T5909] usb 6-1: config 0 descriptor?? [ 733.205645][T12058] hsr_slave_1: entered promiscuous mode [ 733.234110][T12257] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1138'. [ 733.245799][T12058] debugfs: 'hsr0' already exists in 'hsr' [ 733.270246][ T5909] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 733.287445][T12058] Cannot create hsr debugfs directory [ 733.347647][ T30] audit: type=1400 audit(1757019589.006:1774): avc: denied { setopt } for pid=12256 comm="syz.4.1138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 733.368638][T12261] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 733.589038][ T60] IPVS: stop unused estimator thread 0... [ 733.912043][T12267] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1139'. [ 734.363912][ T30] audit: type=1400 audit(1757019590.026:1775): avc: denied { search } for pid=12270 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.456054][ T30] audit: type=1400 audit(1757019590.026:1776): avc: denied { search } for pid=12270 comm="rm" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.501984][ T30] audit: type=1400 audit(1757019590.026:1777): avc: denied { search } for pid=12270 comm="rm" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 734.571759][ T30] audit: type=1400 audit(1757019590.226:1778): avc: denied { read write } for pid=5846 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 734.596007][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.629505][ T30] audit: type=1400 audit(1757019590.266:1779): avc: denied { open } for pid=5846 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 734.705391][ T5909] gspca_spca1528: reg_w err -110 [ 734.724422][ T5909] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 734.805967][ T30] audit: type=1400 audit(1757019590.266:1780): avc: denied { ioctl } for pid=5846 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 734.868020][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 734.953440][ T30] audit: type=1400 audit(1757019590.406:1781): avc: denied { create } for pid=12274 comm="syz.1.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 735.038256][ T30] audit: type=1400 audit(1757019590.506:1782): avc: denied { read write } for pid=12274 comm="syz.1.1141" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 735.097166][ T30] audit: type=1400 audit(1757019590.506:1783): avc: denied { open } for pid=12274 comm="syz.1.1141" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 735.127528][ T30] audit: type=1400 audit(1757019590.516:1784): avc: denied { ioctl } for pid=12274 comm="syz.1.1141" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 735.674831][T12290] netlink: 'syz.4.1143': attribute type 9 has an invalid length. [ 736.227986][ T5929] usb 6-1: USB disconnect, device number 6 [ 739.097334][T12058] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 739.463470][ T840] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 739.508232][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 739.508249][ T30] audit: type=1400 audit(1757019595.166:1833): avc: denied { remove_name } for pid=12333 comm="rm" name="resolv.conf.eth8.link" dev="tmpfs" ino=5750 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.599328][T12058] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 739.626458][ T840] usb 2-1: Using ep0 maxpacket: 8 [ 739.631844][T12058] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 739.642141][ T840] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 739.653819][ T840] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 739.676017][T12058] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 739.715333][ T30] audit: type=1400 audit(1757019595.166:1834): avc: denied { unlink } for pid=12333 comm="rm" name="resolv.conf.eth8.link" dev="tmpfs" ino=5750 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 739.769954][ T840] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 739.849791][ T840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.036344][ T840] usb 2-1: config 0 descriptor?? [ 740.414295][T12344] lo speed is unknown, defaulting to 1000 [ 740.427483][T12344] lo speed is unknown, defaulting to 1000 [ 740.971368][ T840] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 740.972493][ T30] audit: type=1400 audit(1757019596.046:1835): avc: denied { create } for pid=12339 comm="syz.3.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 741.011579][ T30] audit: type=1400 audit(1757019596.046:1836): avc: denied { connect } for pid=12339 comm="syz.3.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 741.152130][T12058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.324711][T12058] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.359327][ T3498] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.366510][ T3498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.408268][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.415505][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.555293][T12360] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1150'. [ 741.762545][ T30] audit: type=1400 audit(1757019597.406:1837): avc: denied { create } for pid=12328 comm="syz.1.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 742.015613][ T30] audit: type=1400 audit(1757019597.416:1838): avc: denied { create } for pid=12356 comm="syz.3.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 742.044655][ T30] audit: type=1400 audit(1757019597.446:1839): avc: denied { execute } for pid=12352 comm="syz.5.1150" name="file0" dev="tmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 742.077025][ T30] audit: type=1400 audit(1757019597.446:1840): avc: denied { execute_no_trans } for pid=12352 comm="syz.5.1150" path="/127/file0" dev="tmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 742.977441][ T5909] usb 2-1: USB disconnect, device number 21 [ 743.318078][T12392] netlink: 'syz.1.1153': attribute type 10 has an invalid length. [ 743.334732][ T30] audit: type=1400 audit(1757019598.956:1841): avc: denied { create } for pid=12385 comm="syz.1.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 743.806974][ T30] audit: type=1400 audit(1757019598.956:1842): avc: denied { setopt } for pid=12385 comm="syz.1.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 743.975260][T10873] libceph: connect (1)[b::]:6789 error -101 [ 743.981391][T10873] libceph: mon0 (1)[b::]:6789 connect error [ 744.066486][T12058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.105648][T12394] ceph: No mds server is up or the cluster is laggy [ 744.318109][ T6009] libceph: connect (1)[b::]:6789 error -101 [ 744.364018][T12058] veth0_vlan: entered promiscuous mode [ 744.405824][ T6009] libceph: mon0 (1)[b::]:6789 connect error [ 744.555019][T12058] veth1_vlan: entered promiscuous mode [ 744.936826][T12058] veth0_macvtap: entered promiscuous mode [ 745.002276][T12058] veth1_macvtap: entered promiscuous mode [ 745.068947][T12410] netlink: 'syz.5.1157': attribute type 10 has an invalid length. [ 745.234913][T12058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.265921][T12058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.350307][ T993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.448514][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.453974][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 745.453990][ T30] audit: type=1400 audit(1757019601.107:1849): avc: denied { read write } for pid=12416 comm="syz.5.1160" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 746.348622][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.522611][ T5909] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 746.662044][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.671349][ T30] audit: type=1400 audit(1757019601.107:1850): avc: denied { open } for pid=12416 comm="syz.5.1160" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 746.735906][T12422] netlink: 'syz.3.1158': attribute type 10 has an invalid length. [ 746.798322][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'. [ 746.811843][ T30] audit: type=1400 audit(1757019601.277:1851): avc: denied { ioctl } for pid=12416 comm="syz.5.1160" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 746.904995][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 746.912551][ T5909] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 746.938132][ T5909] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 746.977948][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.995957][ T30] audit: type=1400 audit(1757019601.387:1852): avc: denied { create } for pid=12417 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 747.031989][ T5909] usb 5-1: Product: syz [ 747.071745][ T5909] usb 5-1: Manufacturer: syz [ 747.092832][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.128478][ T30] audit: type=1400 audit(1757019601.387:1853): avc: denied { write } for pid=12417 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 747.151090][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.160354][ T5909] usb 5-1: SerialNumber: syz [ 747.291904][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.295035][ T5909] usb 5-1: config 0 descriptor?? [ 747.413745][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.450560][ T30] audit: type=1400 audit(1757019601.397:1854): avc: denied { write } for pid=12417 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 747.513783][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.561680][ T30] audit: type=1400 audit(1757019601.397:1855): avc: denied { nlmsg_write } for pid=12417 comm="syz.4.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 747.807589][ T30] audit: type=1400 audit(1757019601.917:1856): avc: denied { create } for pid=12416 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 747.827063][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.927555][ T30] audit: type=1400 audit(1757019601.927:1857): avc: denied { connect } for pid=12416 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 747.995074][ T30] audit: type=1400 audit(1757019602.037:1858): avc: denied { write } for pid=12416 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 748.719276][ T5929] usb 5-1: USB disconnect, device number 11 [ 750.370844][T12474] sg_write: data in/out 44633/14 bytes for SCSI command 0x0-- guessing data in; [ 750.370844][T12474] program syz.3.1164 not setting count and/or reply_len properly [ 751.474032][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 751.474052][ T30] audit: type=1400 audit(1757019607.047:1891): avc: denied { create } for pid=12487 comm="syz.5.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 751.542289][T12491] block nbd5: Attempted send on invalid socket [ 751.555092][T12491] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 751.564827][T12491] isofs_fill_super: bread failed, dev=nbd5, iso_blknum=16, block=32 [ 752.121252][ T30] audit: type=1400 audit(1757019607.197:1892): avc: denied { mounton } for pid=12487 comm="syz.5.1166" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 752.145278][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.237098][T12496] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.258000][ T30] audit: type=1400 audit(1757019607.887:1893): avc: denied { prog_run } for pid=12484 comm="syz.2.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 752.363397][ T30] audit: type=1400 audit(1757019607.897:1894): avc: denied { create } for pid=12484 comm="syz.2.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 752.389889][T12498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1166'. [ 752.961467][ T30] audit: type=1400 audit(1757019607.897:1895): avc: denied { write } for pid=12484 comm="syz.2.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 753.254908][ T30] audit: type=1400 audit(1757019608.847:1896): avc: denied { ioctl } for pid=12484 comm="syz.2.1167" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33151 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 753.280996][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.324448][ T30] audit: type=1400 audit(1757019608.957:1897): avc: denied { read } for pid=12500 comm="syz.4.1169" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 753.347216][ C0] vkms_vblank_simulate: vblank timer overrun [ 753.445062][T12509] netlink: 'syz.3.1170': attribute type 10 has an invalid length. [ 753.715116][ T30] audit: type=1400 audit(1757019608.957:1898): avc: denied { open } for pid=12500 comm="syz.4.1169" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 753.746896][ T30] audit: type=1400 audit(1757019608.957:1899): avc: denied { ioctl } for pid=12500 comm="syz.4.1169" path="/dev/binderfs/binder1" dev="binder" ino=17 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 755.806196][ T30] audit: type=1326 audit(1757019611.467:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 755.829688][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.985678][T12535] netlink: 'syz.5.1174': attribute type 10 has an invalid length. [ 756.085604][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1174'. [ 756.156900][T12535] batman_adv: batadv0: Interface deactivated: team0 [ 756.509298][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 756.519379][ T30] audit: type=1400 audit(1757019612.147:1913): avc: denied { write } for pid=12537 comm="syz.3.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 756.617987][ T30] audit: type=1326 audit(1757019612.277:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 756.738774][T12533] loop6: detected capacity change from 0 to 63 [ 756.797193][T11364] Buffer I/O error on dev loop6, logical block 0, async page read [ 756.880203][T11364] Buffer I/O error on dev loop6, logical block 0, async page read [ 756.913668][ T30] audit: type=1326 audit(1757019612.277:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 757.032600][ T5909] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 757.260750][ T30] audit: type=1326 audit(1757019612.277:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 757.339406][T11364] Buffer I/O error on dev loop6, logical block 0, async page read [ 757.351117][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 757.481145][T11364] Buffer I/O error on dev loop6, logical block 0, async page read [ 757.643371][T11364] Buffer I/O error on dev loop6, logical block 0, async page read [ 757.643866][ T5909] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 757.763811][ T30] audit: type=1326 audit(1757019612.337:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 757.812271][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.244595][ T5909] usb 3-1: Product: syz [ 758.249370][ T5909] usb 3-1: Manufacturer: syz [ 758.255403][ T5909] usb 3-1: SerialNumber: syz [ 758.262052][ T30] audit: type=1326 audit(1757019612.337:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 758.338899][ T5909] usb 3-1: config 0 descriptor?? [ 758.366782][T12571] sch_fq: defrate 6 ignored. [ 758.454749][ T5909] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 758.677556][ T5909] usb 3-1: Detected FT232H [ 758.685573][ T30] audit: type=1326 audit(1757019612.337:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 758.709149][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.932785][ T30] audit: type=1326 audit(1757019612.337:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f320578d550 code=0x7ffc0000 [ 759.119411][ T30] audit: type=1400 audit(1757019612.337:1921): avc: denied { append } for pid=12526 comm="syz.2.1173" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 759.143179][ C0] vkms_vblank_simulate: vblank timer overrun [ 759.183890][ T30] audit: type=1326 audit(1757019612.337:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12526 comm="syz.2.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 759.243880][ T5909] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 759.251031][ T5909] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 759.259222][ T5909] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 759.279792][ T5909] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 759.465307][ T5909] usb 3-1: USB disconnect, device number 9 [ 759.639138][ T5909] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 759.694633][ T5909] ftdi_sio 3-1:0.0: device disconnected [ 761.360500][T12600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1191'. [ 761.543835][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 761.543852][ T30] audit: type=1326 audit(1757019617.167:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 762.633078][ T30] audit: type=1326 audit(1757019617.167:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 762.736804][T12600] netlink: 'syz.1.1191': attribute type 10 has an invalid length. [ 762.752089][ T30] audit: type=1326 audit(1757019617.167:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 762.857512][T12600] netlink: 'syz.1.1191': attribute type 10 has an invalid length. [ 762.865368][T12600] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1191'. [ 763.012799][ T30] audit: type=1326 audit(1757019617.167:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 763.721543][T12617] mkiss: ax0: crc mode is auto. [ 763.852630][ T30] audit: type=1326 audit(1757019617.167:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 764.121440][ T30] audit: type=1326 audit(1757019617.167:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 764.255199][ T30] audit: type=1326 audit(1757019617.167:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 764.424718][ T30] audit: type=1326 audit(1757019617.167:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 764.453928][ T30] audit: type=1326 audit(1757019617.167:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 764.497303][ T30] audit: type=1326 audit(1757019617.167:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12598 comm="syz.2.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320578ebe9 code=0x7ffc0000 [ 764.808921][T12628] netlink: 'syz.1.1186': attribute type 10 has an invalid length. [ 767.020188][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 767.031866][T12650] debugfs: '!' already exists in 'ieee80211' [ 767.039372][ T30] audit: type=1326 audit(1757019622.677:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 767.200920][ T30] audit: type=1326 audit(1757019622.677:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 767.359723][ T30] audit: type=1326 audit(1757019622.677:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 767.385181][T12641] ceph: No mds server is up or the cluster is laggy [ 767.570287][ T30] audit: type=1326 audit(1757019622.677:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 767.593979][ T30] audit: type=1326 audit(1757019622.677:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 767.618064][ T30] audit: type=1326 audit(1757019622.677:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 767.644734][ T30] audit: type=1326 audit(1757019622.677:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 767.679009][ T30] audit: type=1326 audit(1757019622.677:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 767.751882][ T30] audit: type=1400 audit(1757019622.887:2033): avc: denied { ioctl } for pid=12649 comm="syz.2.1192" path="/dev/sg0" dev="devtmpfs" ino=764 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 767.778275][ T30] audit: type=1326 audit(1757019623.077:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12646 comm="syz.5.1190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 768.503379][T12664] block nbd0: Attempted send on invalid socket [ 768.671624][ T5909] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 769.459728][T12664] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 769.569596][ T5909] usb 6-1: Using ep0 maxpacket: 16 [ 769.813940][T12680] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1196'. [ 771.040056][ T5909] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 771.094276][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.124226][ T5909] usb 6-1: Product: syz [ 771.163831][ T5909] usb 6-1: config 0 descriptor?? [ 771.171527][ T5909] usb 6-1: can't set config #0, error -71 [ 771.202503][ T5909] usb 6-1: USB disconnect, device number 7 [ 772.065096][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 772.065116][ T30] audit: type=1400 audit(1757019627.717:2054): avc: denied { write } for pid=12692 comm="syz.3.1200" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 772.353433][ T30] audit: type=1400 audit(1757019627.777:2055): avc: denied { create } for pid=12692 comm="syz.3.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 772.855732][ T30] audit: type=1400 audit(1757019628.517:2056): avc: denied { create } for pid=12701 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 773.073998][T12708] netlink: 'syz.4.1202': attribute type 10 has an invalid length. [ 773.087886][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 773.206183][ T30] audit: type=1400 audit(1757019628.837:2057): avc: denied { mount } for pid=12685 comm="syz.2.1198" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 773.234338][T12697] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 773.526601][ T30] audit: type=1400 audit(1757019628.907:2058): avc: denied { mounton } for pid=12685 comm="syz.2.1198" path="/6/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 773.690437][T12717] netlink: 'syz.3.1204': attribute type 10 has an invalid length. [ 773.805152][ T30] audit: type=1326 audit(1757019629.117:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.5.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 774.404568][ T30] audit: type=1326 audit(1757019629.117:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.5.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 774.602095][ T30] audit: type=1326 audit(1757019629.117:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.5.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 774.633493][ T30] audit: type=1326 audit(1757019629.117:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.5.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 774.665967][ T30] audit: type=1326 audit(1757019629.117:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12705 comm="syz.5.1203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ccd8ebe9 code=0x7ffc0000 [ 774.901176][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 774.975768][T12726] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1205'. [ 775.850690][T12707] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 775.861678][T12707] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 775.870357][T12707] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 775.884058][ T5853] Bluetooth: hci5: command 0x0419 tx timeout [ 775.964443][T12707] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 776.322942][ T5929] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 776.528876][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.614045][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.899248][ T5929] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 777.522509][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.720625][ T5929] usb 3-1: config 0 descriptor?? [ 777.949798][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 777.970948][T10091] Bluetooth: hci0: command 0x0405 tx timeout [ 777.978723][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 777.989455][ T5929] usb 3-1: USB disconnect, device number 10 [ 778.566479][T12762] lo speed is unknown, defaulting to 1000 [ 778.573455][T12762] lo speed is unknown, defaulting to 1000 [ 778.674343][ T5853] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 778.773888][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 778.773906][ T30] audit: type=1400 audit(1757019634.407:2119): avc: denied { create } for pid=12760 comm="syz.2.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 780.039622][ T5853] Bluetooth: hci0: command 0x0405 tx timeout [ 780.170940][ T30] audit: type=1400 audit(1757019635.437:2120): avc: denied { write } for pid=12776 comm="syz.1.1215" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 780.513257][ T30] audit: type=1400 audit(1757019636.167:2121): avc: denied { unmount } for pid=5856 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 780.533246][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.757273][ T30] audit: type=1400 audit(1757019636.407:2122): avc: denied { bind } for pid=12783 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 781.259708][ T30] audit: type=1400 audit(1757019636.407:2123): avc: denied { write } for pid=12783 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 781.303968][ T30] audit: type=1400 audit(1757019636.417:2124): avc: denied { create } for pid=12783 comm="syz.1.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 781.444524][ T30] audit: type=1400 audit(1757019636.537:2125): avc: denied { mount } for pid=12785 comm="syz.5.1216" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 781.582785][T10873] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 781.857157][T10873] usb 2-1: Using ep0 maxpacket: 32 [ 782.123308][ T5853] Bluetooth: hci0: command 0x0405 tx timeout [ 782.182774][T10873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.303430][T10873] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 782.317630][T10873] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 782.370235][T12804] netlink: 'syz.3.1220': attribute type 10 has an invalid length. [ 782.379959][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 782.498854][T10873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.743692][T10873] usb 2-1: config 0 descriptor?? [ 782.857845][ T30] audit: type=1400 audit(1757019638.507:2126): avc: denied { create } for pid=12809 comm="syz.2.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 783.326474][ T30] audit: type=1400 audit(1757019638.507:2127): avc: denied { connect } for pid=12809 comm="syz.2.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 783.433852][ T30] audit: type=1400 audit(1757019638.517:2128): avc: denied { write } for pid=12809 comm="syz.2.1222" laddr=172.20.20.10 lport=5 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 784.074328][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 784.446424][ T5929] usb 2-1: USB disconnect, device number 22 [ 784.667540][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 784.667557][ T30] audit: type=1400 audit(1757019639.787:2130): avc: denied { write } for pid=12821 comm="syz.4.1225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 784.712893][ T30] audit: type=1400 audit(1757019639.787:2131): avc: denied { bind } for pid=12821 comm="syz.4.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 785.170387][T12830] evm: overlay not supported [ 785.234856][ T30] audit: type=1400 audit(1757019639.787:2132): avc: denied { node_bind } for pid=12821 comm="syz.4.1225" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 785.745090][ T30] audit: type=1400 audit(1757019639.787:2133): avc: denied { connect } for pid=12821 comm="syz.4.1225" laddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 785.767416][T12834] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 785.797174][ T30] audit: type=1400 audit(1757019639.857:2134): avc: denied { read } for pid=12821 comm="syz.4.1225" path="socket:[34006]" dev="sockfs" ino=34006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 785.912109][ T30] audit: type=1400 audit(1757019640.247:2135): avc: denied { setopt } for pid=12813 comm="syz.2.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 786.055439][ T30] audit: type=1400 audit(1757019640.757:2136): avc: denied { unlink } for pid=12827 comm="syz.1.1226" name="#15" dev="tmpfs" ino=1399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 786.461264][T12843] netlink: 'syz.3.1228': attribute type 10 has an invalid length. [ 786.563837][ T30] audit: type=1400 audit(1757019640.957:2137): avc: denied { read } for pid=12832 comm="syz.3.1227" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 786.946427][ T30] audit: type=1400 audit(1757019640.957:2138): avc: denied { open } for pid=12832 comm="syz.3.1227" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 787.324359][ T30] audit: type=1400 audit(1757019641.127:2139): avc: denied { name_bind } for pid=12832 comm="syz.3.1227" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 787.721974][T12853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 789.298673][T12864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1233'. [ 789.308360][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 789.986734][T12880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1236'. [ 789.996937][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1236'. [ 790.007093][T12880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1236'. [ 790.017408][T12880] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1236'. [ 791.001436][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 791.001453][ T30] audit: type=1400 audit(1757019646.657:2177): avc: denied { unmount } for pid=12058 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 791.351286][ T5909] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 791.773862][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 791.891869][ T5909] usb 4-1: config 0 has no interfaces? [ 791.904058][ T5909] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 791.921173][ T5909] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 791.939677][ T5909] usb 4-1: Manufacturer: syz [ 791.958489][ T5909] usb 4-1: config 0 descriptor?? [ 792.189241][ T30] audit: type=1400 audit(1757019647.797:2178): avc: denied { shutdown } for pid=12870 comm="syz.5.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 793.023127][T12903] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1239'. [ 793.034091][ T30] audit: type=1400 audit(1757019648.677:2179): avc: denied { create } for pid=12897 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 793.090854][ T30] audit: type=1400 audit(1757019648.677:2180): avc: denied { bind } for pid=12897 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 793.337225][ T30] audit: type=1400 audit(1757019648.677:2181): avc: denied { setopt } for pid=12897 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 793.530365][ T30] audit: type=1400 audit(1757019648.677:2182): avc: denied { accept } for pid=12897 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 793.602830][ T5929] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 793.898039][ T30] audit: type=1400 audit(1757019648.677:2183): avc: denied { write } for pid=12897 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 793.923655][ T30] audit: type=1400 audit(1757019648.677:2184): avc: denied { read } for pid=12897 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 793.944619][ T30] audit: type=1400 audit(1757019649.127:2185): avc: denied { append } for pid=12901 comm="syz.5.1240" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 794.184955][ T5929] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 794.198677][ T5929] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 794.273119][ T5929] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 794.332721][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.480960][T12906] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 794.505782][ T5929] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 794.703934][ T30] audit: type=1400 audit(1757019650.267:2186): avc: denied { read } for pid=12912 comm="syz.2.1242" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 794.793923][ T5929] usb 2-1: USB disconnect, device number 23 [ 795.228098][T12920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12920 comm=syz.4.1241 [ 795.265755][ T5929] usb 4-1: USB disconnect, device number 13 [ 795.683795][T12927] netlink: 'syz.5.1243': attribute type 10 has an invalid length. [ 795.977397][T12930] netlink: 'syz.3.1244': attribute type 10 has an invalid length. [ 796.579839][T12903] bond0 (unregistering): Released all slaves [ 797.128982][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 797.129002][ T30] audit: type=1400 audit(1757019652.787:2191): avc: denied { ioctl } for pid=12941 comm="syz.1.1248" path="socket:[34329]" dev="sockfs" ino=34329 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 797.163385][ T840] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 797.189461][T12947] dummy0: left allmulticast mode [ 797.195156][T12947] bridge0: port 1(dummy0) entered disabled state [ 797.948929][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 798.633841][ T840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 798.648800][ T840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 798.659324][ T840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 798.677108][ T840] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.816891][ T30] audit: type=1400 audit(1757019654.437:2192): avc: denied { accept } for pid=12937 comm="syz.2.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 799.061071][ T840] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 799.071716][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.463841][ T840] usb 6-1: GET_CAPABILITIES returned 0 [ 799.469471][ T840] usbtmc 6-1:16.0: can't read capabilities [ 799.492927][T12947] team0: Port device batadv2 removed [ 799.510211][ T30] audit: type=1400 audit(1757019655.147:2193): avc: denied { create } for pid=12951 comm="syz.4.1249" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 799.603432][T12947] team0: Port device batadv3 removed [ 799.626078][ T30] audit: type=1400 audit(1757019655.217:2194): avc: denied { unlink } for pid=5856 comm="syz-executor" name="file0" dev="tmpfs" ino=1384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 799.651728][T12947] team0: Port device batadv4 removed [ 799.768869][T12947] team0: Port device batadv7 removed [ 799.890121][ T6009] lo speed is unknown, defaulting to 1000 [ 800.279943][T12945] lo speed is unknown, defaulting to 1000 [ 800.297952][T12945] lo speed is unknown, defaulting to 1000 [ 800.536323][T12957] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1250'. [ 800.551956][T12960] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1250'. [ 800.883847][ T913] usb 6-1: USB disconnect, device number 8 [ 801.175225][ T30] audit: type=1400 audit(1757019656.807:2195): avc: denied { write } for pid=12969 comm="syz.1.1252" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 801.214579][ T30] audit: type=1400 audit(1757019656.807:2196): avc: denied { read } for pid=12969 comm="syz.1.1252" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 801.420567][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1253'. [ 801.454152][ T30] audit: type=1400 audit(1757019657.077:2197): avc: denied { getopt } for pid=12973 comm="syz.4.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 801.735094][T12982] netlink: 'syz.2.1254': attribute type 10 has an invalid length. [ 801.806626][T12982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.050845][T12982] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 802.658034][T12985] netlink: 'syz.5.1255': attribute type 10 has an invalid length. [ 802.826964][T12996] netlink: 'syz.3.1256': attribute type 10 has an invalid length. [ 803.349789][T13005] netlink: 'syz.1.1257': attribute type 10 has an invalid length. [ 803.432166][T13007] netlink: 'syz.2.1259': attribute type 10 has an invalid length. [ 803.440756][T13007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1259'. [ 803.450543][T13007] team0: entered promiscuous mode [ 803.465464][T13007] team_slave_0: entered promiscuous mode [ 803.482936][T13007] team_slave_1: entered promiscuous mode [ 803.725355][T13007] team0: entered allmulticast mode [ 803.730509][T13007] team_slave_0: entered allmulticast mode [ 803.753456][T13007] team_slave_1: entered allmulticast mode [ 803.761653][T13007] bridge0: port 3(team0) entered blocking state [ 803.776553][T13007] bridge0: port 3(team0) entered disabled state [ 803.818238][T13007] bridge0: port 3(team0) entered blocking state [ 803.824879][T13007] bridge0: port 3(team0) entered forwarding state [ 804.626109][T13021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=13021 comm=syz.4.1262 [ 805.245614][T13024] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 805.256665][T13024] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 805.428410][T13018] syzkaller0: entered promiscuous mode [ 806.026977][T13026] block nbd5: Attempted send on invalid socket [ 806.036157][T13026] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 806.134787][T13026] block nbd5: Attempted send on invalid socket [ 806.146872][T13026] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 806.170142][ T30] audit: type=1400 audit(1757019661.817:2198): avc: denied { unmount } for pid=12058 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 806.334536][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 806.566185][T13026] block nbd5: Attempted send on invalid socket [ 806.594261][T13026] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 806.605050][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 806.633122][T12695] block nbd5: Attempted send on invalid socket [ 806.641138][T12695] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 806.656653][T13026] block nbd5: Attempted send on invalid socket [ 806.672021][T13026] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 806.672771][ T913] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 806.689871][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 806.709924][T13026] block nbd5: Attempted send on invalid socket [ 806.717371][T13026] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 806.727126][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 806.738927][T13026] block nbd5: Attempted send on invalid socket [ 806.745275][T13026] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 806.757708][T13026] block nbd5: Attempted send on invalid socket [ 806.765095][T13026] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 806.775636][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 806.790790][T13026] block nbd5: Attempted send on invalid socket [ 806.841749][T13026] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 806.862135][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 806.888784][ T913] usb 3-1: Using ep0 maxpacket: 8 [ 807.009113][ T913] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 807.019649][T13026] block nbd5: Attempted send on invalid socket [ 807.026174][ T913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 807.036257][T13026] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 807.053032][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 807.064325][T13026] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 807.103097][ T913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 807.113612][ T913] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.135905][ T913] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 807.180627][ T913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.240428][T13026] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 807.486769][ T913] usb 3-1: GET_CAPABILITIES returned 0 [ 807.493452][ T913] usbtmc 3-1:16.0: can't read capabilities [ 808.016884][T13050] netlink: 'syz.5.1267': attribute type 16 has an invalid length. [ 808.026090][T13050] netlink: 'syz.5.1267': attribute type 17 has an invalid length. [ 808.066337][ T913] usb 3-1: USB disconnect, device number 11 [ 808.397593][T13051] netlink: 408 bytes leftover after parsing attributes in process `syz.5.1267'. [ 808.406991][T13051] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1267'. [ 808.416271][ T30] audit: type=1400 audit(1757019664.057:2199): avc: denied { read write } for pid=13046 comm="syz.5.1267" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 808.503249][ T30] audit: type=1400 audit(1757019664.057:2200): avc: denied { open } for pid=13046 comm="syz.5.1267" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 808.518727][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 913.482588][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 913.489558][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13044/2:b..l [ 913.498134][ C0] rcu: (detected by 0, t=10502 jiffies, g=47965, q=1277 ncpus=2) [ 913.505937][ C0] task:syz.4.1266 state:R running task stack:25512 pid:13044 tgid:13039 ppid:5856 task_flags:0x2040044c flags:0x00004002 [ 913.520832][ C0] Call Trace: [ 913.524106][ C0] [ 913.527020][ C0] __schedule+0x1190/0x5de0 [ 913.531504][ C0] ? find_held_lock+0x2b/0x80 [ 913.536170][ C0] ? __pfx___schedule+0x10/0x10 [ 913.541002][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 913.545924][ C0] preempt_schedule_irq+0x51/0x90 [ 913.550921][ C0] irqentry_exit+0x36/0x90 [ 913.555308][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 913.561278][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 913.566473][ C0] Code: d6 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 98 13 0f 0f 82 74 02 00 00 8b 35 da c9 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 79 d6 3e 12 0f 85 c7 02 00 00 48 83 c4 [ 913.586069][ C0] RSP: 0018:ffffc9000c876c90 EFLAGS: 00000206 [ 913.592205][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c1260 RCX: 00000000c639c71c [ 913.600147][ C0] RDX: 0000000000000000 RSI: ffffffff8de2bfa8 RDI: ffffffff8c162b00 [ 913.608091][ C0] RBP: 0000000000000002 R08: f501fefe41178ce3 R09: 0000000000000000 [ 913.616036][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 913.623991][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 913.631949][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 913.637130][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 913.643264][ C0] unwind_next_frame+0xd1/0x20a0 [ 913.648179][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 913.653279][ C0] ? filemap_fdatawrite_wbc+0x104/0x160 [ 913.658818][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 913.664974][ C0] arch_stack_walk+0x94/0x100 [ 913.669641][ C0] ? filemap_fdatawrite_wbc+0x104/0x160 [ 913.675255][ C0] stack_trace_save+0x8e/0xc0 [ 913.679914][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 913.685267][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 913.690187][ C0] kasan_save_stack+0x33/0x60 [ 913.694851][ C0] ? kasan_save_stack+0x33/0x60 [ 913.699671][ C0] ? kasan_save_track+0x14/0x30 [ 913.704494][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 913.709226][ C0] ? kmem_cache_free+0x142/0x4d0 [ 913.714133][ C0] ? mempool_free+0xff/0x750 [ 913.718709][ C0] ? bio_put+0x355/0x5b0 [ 913.722940][ C0] ? bio_endio+0x710/0x860 [ 913.727335][ C0] ? blk_update_request+0x93e/0x15f0 [ 913.732614][ C0] ? blk_mq_end_request+0x4f/0x90 [ 913.737648][ C0] ? blk_mq_complete_request+0x8b/0xb0 [ 913.743089][ C0] ? null_queue_rq+0xb69/0xfd0 [ 913.747850][ C0] ? null_queue_rqs+0xe9/0x2f0 [ 913.752588][ C0] ? __blk_mq_flush_list+0x97/0xc0 [ 913.757805][ C0] ? blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 913.764030][ C0] ? blk_mq_flush_plug_list+0x1f2/0x600 [ 913.769581][ C0] ? __blk_flush_plug+0x2c4/0x4b0 [ 913.774608][ C0] ? blk_finish_plug+0x53/0xa0 [ 913.779351][ C0] ? blkdev_writepages+0xe9/0x140 [ 913.784360][ C0] ? do_writepages+0x27a/0x600 [ 913.789114][ C0] ? filemap_fdatawrite_wbc+0x104/0x160 [ 913.794656][ C0] kasan_save_track+0x14/0x30 [ 913.799307][ C0] __kasan_kmalloc+0xaa/0xb0 [ 913.803869][ C0] kmem_cache_free+0x142/0x4d0 [ 913.808609][ C0] ? mempool_free+0xff/0x750 [ 913.813179][ C0] ? __pfx_mempool_free_slab+0x10/0x10 [ 913.818617][ C0] mempool_free+0xff/0x750 [ 913.823029][ C0] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 913.828598][ C0] bio_put+0x355/0x5b0 [ 913.832662][ C0] ? __pfx_end_bio_bh_io_sync+0x10/0x10 [ 913.838284][ C0] bio_endio+0x710/0x860 [ 913.842506][ C0] blk_update_request+0x93e/0x15f0 [ 913.847602][ C0] blk_mq_end_request+0x4f/0x90 [ 913.852435][ C0] blk_mq_complete_request+0x8b/0xb0 [ 913.857717][ C0] null_queue_rq+0xb69/0xfd0 [ 913.862306][ C0] null_queue_rqs+0xe9/0x2f0 [ 913.866895][ C0] ? __pfx_null_queue_rqs+0x10/0x10 [ 913.872072][ C0] __blk_mq_flush_list+0x97/0xc0 [ 913.876988][ C0] blk_mq_dispatch_queue_requests+0x184/0x7b0 [ 913.883042][ C0] ? find_held_lock+0x2b/0x80 [ 913.887708][ C0] blk_mq_flush_plug_list+0x1f2/0x600 [ 913.893065][ C0] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 913.898954][ C0] ? folios_put_refs+0x5ce/0x740 [ 913.903885][ C0] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 913.909760][ C0] __blk_flush_plug+0x2c4/0x4b0 [ 913.914591][ C0] ? __pfx___might_resched+0x10/0x10 [ 913.919859][ C0] ? __block_write_full_folio+0x76d/0xe00 [ 913.925573][ C0] ? __pfx___blk_flush_plug+0x10/0x10 [ 913.930925][ C0] ? writeback_iter+0x8dd/0x11a0 [ 913.935853][ C0] blk_finish_plug+0x53/0xa0 [ 913.940423][ C0] blkdev_writepages+0xe9/0x140 [ 913.945254][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 913.950702][ C0] ? do_writepages+0x4b7/0x600 [ 913.955557][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 913.961005][ C0] do_writepages+0x27a/0x600 [ 913.965579][ C0] ? __pfx_do_writepages+0x10/0x10 [ 913.970685][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 913.975870][ C0] ? _raw_spin_unlock+0x28/0x50 [ 913.980701][ C0] filemap_fdatawrite_wbc+0x104/0x160 [ 913.986077][ C0] __filemap_fdatawrite_range+0xb9/0x100 [ 913.991692][ C0] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 913.997926][ C0] ? locks_remove_file+0x399/0x5c0 [ 914.003033][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 914.008249][ C0] filemap_write_and_wait_range+0xa3/0x130 [ 914.014072][ C0] bdev_release+0x4d3/0x6d0 [ 914.018572][ C0] ? __pfx_blkdev_release+0x10/0x10 [ 914.023751][ C0] blkdev_release+0x15/0x20 [ 914.028237][ C0] __fput+0x3ff/0xb70 [ 914.032200][ C0] task_work_run+0x150/0x240 [ 914.036765][ C0] ? __pfx_task_work_run+0x10/0x10 [ 914.041961][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 914.047140][ C0] do_exit+0x86f/0x2bf0 [ 914.051281][ C0] ? __pfx_do_exit+0x10/0x10 [ 914.055849][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 914.060849][ C0] ? find_held_lock+0x2b/0x80 [ 914.065603][ C0] do_group_exit+0xd3/0x2a0 [ 914.070107][ C0] get_signal+0x2673/0x26d0 [ 914.074605][ C0] ? __pfx_get_signal+0x10/0x10 [ 914.079437][ C0] ? do_futex+0x122/0x350 [ 914.083764][ C0] ? __pfx_do_futex+0x10/0x10 [ 914.088426][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 914.093962][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 914.100100][ C0] ? xfd_validate_state+0x61/0x180 [ 914.105196][ C0] exit_to_user_mode_loop+0x84/0x110 [ 914.110477][ C0] do_syscall_64+0x3f6/0x4c0 [ 914.115050][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.120938][ C0] RIP: 0033:0x7f5c1bd8ebe9 [ 914.125329][ C0] RSP: 002b:00007f5c1cb5a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 914.133731][ C0] RAX: fffffffffffffe00 RBX: 00007f5c1bfc6188 RCX: 00007f5c1bd8ebe9 [ 914.141767][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5c1bfc6188 [ 914.149717][ C0] RBP: 00007f5c1bfc6180 R08: 0000000000000000 R09: 0000000000000000 [ 914.157690][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.165647][ C0] R13: 00007f5c1bfc6218 R14: 00007ffc5b9bd6f0 R15: 00007ffc5b9bd7d8 [ 914.173952][ C0] [ 914.176969][ C0] rcu: rcu_preempt kthread starved for 9856 jiffies! g47965 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 914.188149][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 914.198281][ C0] rcu: RCU grace-period kthread stack dump: [ 914.204154][ C0] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 914.217607][ C0] Call Trace: [ 914.220861][ C0] [ 914.223781][ C0] __schedule+0x1190/0x5de0 [ 914.228269][ C0] ? __pfx___schedule+0x10/0x10 [ 914.233094][ C0] ? find_held_lock+0x2b/0x80 [ 914.237748][ C0] ? schedule+0x2d7/0x3a0 [ 914.242047][ C0] schedule+0xe7/0x3a0 [ 914.246106][ C0] schedule_timeout+0x123/0x290 [ 914.250942][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 914.256291][ C0] ? __pfx_process_timeout+0x10/0x10 [ 914.261555][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 914.267331][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 914.272776][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 914.277516][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 914.282774][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 914.287690][ C0] ? rcu_is_watching+0x12/0xc0 [ 914.292435][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 914.298213][ C0] rcu_gp_kthread+0x270/0x380 [ 914.302864][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 914.308032][ C0] ? rcu_is_watching+0x12/0xc0 [ 914.312796][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 914.317971][ C0] ? __kthread_parkme+0x19e/0x250 [ 914.322972][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 914.328173][ C0] kthread+0x3c2/0x780 [ 914.332216][ C0] ? __pfx_kthread+0x10/0x10 [ 914.336786][ C0] ? rcu_is_watching+0x12/0xc0 [ 914.341527][ C0] ? __pfx_kthread+0x10/0x10 [ 914.346097][ C0] ret_from_fork+0x5d4/0x6f0 [ 914.350660][ C0] ? __pfx_kthread+0x10/0x10 [ 914.355225][ C0] ret_from_fork_asm+0x1a/0x30 [ 914.359971][ C0] [ 914.362962][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 914.369262][ C0] Sending NMI from CPU 0 to CPUs 1: [ 914.374471][ C1] NMI backtrace for cpu 1 [ 914.374486][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 914.374505][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 914.374516][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 914.374537][ C1] Code: ec 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 e3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 914.374553][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 914.374568][ C1] RAX: 0000000002caf58f RBX: 0000000000000001 RCX: ffffffff8b942c29 [ 914.374579][ C1] RDX: 0000000000000000 RSI: ffffffff8de514d0 RDI: ffffffff8c162b00 [ 914.374590][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 914.374601][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 914.374612][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab6190 R15: 0000000000000000 [ 914.374623][ C1] FS: 0000000000000000(0000) GS:ffff8881247b6000(0000) knlGS:0000000000000000 [ 914.374639][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 914.374650][ C1] CR2: 00007f50d5199339 CR3: 000000002d235000 CR4: 00000000003526f0 [ 914.374661][ C1] Call Trace: [ 914.374667][ C1] [ 914.374672][ C1] default_idle+0x13/0x20 [ 914.374693][ C1] default_idle_call+0x6d/0xb0 [ 914.374713][ C1] do_idle+0x391/0x510 [ 914.374735][ C1] ? __pfx_do_idle+0x10/0x10 [ 914.374754][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 914.374776][ C1] cpu_startup_entry+0x4f/0x60 [ 914.374811][ C1] start_secondary+0x21d/0x2b0 [ 914.374836][ C1] ? __pfx_start_secondary+0x10/0x10 [ 914.374862][ C1] common_startup_64+0x13e/0x148 [ 914.374888][ C1]