last executing test programs: 6.055178432s ago: executing program 4 (id=1927): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r0, 0x0, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = fanotify_init(0x4000, 0x0) fanotify_mark(r3, 0x80, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x20000040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\t\x00', @ANYBLOB="8b3300000000fffff0000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c000700000000000000000006001d800c0000800500050000000000"], 0x38}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x400c0091}, 0x8000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xc080}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c014}, 0x80) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x5, 0xffffffffffffffff, 'id0\x00'}) 4.947094483s ago: executing program 0 (id=1936): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = eventfd2(0x3, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000000c0)=r0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880), 0x0, 0x1) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x3a, 0xe9, &(0x7f0000000340)=""/233, 0x41000, 0x27, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0xf, 0x4, 0xc000000}, 0x10, 0x13957, 0xffffffffffffffff, 0x5, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x0, 0x3, 0xb, 0x5}, {0x3, 0x5, 0x5, 0xb}, {0x5, 0x5, 0x1, 0x4}, {0x1, 0x2, 0xb, 0x2}, {0x0, 0x1, 0x1, 0xa}], 0x10, 0x7cd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000deffffffffffffff0000000000b0e589a8b261e99961652f5efbcc1b99569f0a300680a18d9839b1cf58e5b26bd6c68436ed969f5618c3e34db7632be8ee7327f28fba8df2146ffd615e22b36ee7665b65f3b8e0aa4c16ab4728d0e99b3f9e235e712e051e60543f8b8f9efbb97b9f20e6789f617dee24036956881b18843acecf05b1fa9b4a66a8d116a64e44f793a79c27510785d233784261854dc118d80dad", @ANYBLOB="38648e3d2b78a4fed3f1796c813991bca703a894abd04ed96580c56e441a40168a1bf7cea6bbcea04cbcc0b6", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) write(r4, &(0x7f0000000000)="f9", 0x1) read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00004000000000000080000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffe00}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2bd}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8008890}, 0x40000) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2004) getpid() 4.589728641s ago: executing program 0 (id=1939): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000000)=0x8000020000000000, 0x8) 4.580854591s ago: executing program 1 (id=1940): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a81400810000000800471800300064000004069078e00000017f00000186060000000200004e204e23a1c8fcf65d5c7faed61dde35645e3f4f224049b8ff8e27258e84480ea140664eebeccf1ff866e322e91451b0ba2ea22d589e8ab26f9baf4aa92b5faca748", @ANYRES32=0x41424344, @ANYBLOB="518009"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x50) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000000200009ad672000400001900000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') exit(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xfffffff7}]}}}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000095) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x70, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x3a}}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_FAMILY={0x5, 0xd, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x4) r3 = open$dir(0x0, 0x1, 0x19d) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900, 0x3}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x8, 0x0) syz_pidfd_open(r5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x32, &(0x7f0000000480), 0x111, 0x6}}, 0x20) r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) ppoll(&(0x7f0000000200)=[{r3, 0x1}, {r6, 0x1008}, {r4, 0x12bc}, {r7, 0x4000}, {r1, 0x4400}, {r6, 0x30a9}, {r7, 0x120}], 0x7, &(0x7f00000004c0)={0x77359400}, &(0x7f00000002c0)={[0xe12e]}, 0x8) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0xfffffff2, @name="82bf06255c32514ef266824307509e39f5e892343710c37e48a72f12e53542fb"}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x20000044) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) 4.516026044s ago: executing program 3 (id=1941): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xac0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r3 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 4.357295232s ago: executing program 3 (id=1942): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x200840, 0x20) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009b40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a2f6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5dc0701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d90a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df980000000022e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6379cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e82888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6f767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c207949122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bb0800993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76d456bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f00000003c0)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0xc, 0x1010001, 0xdcf, 0x4005, 0xb, 0x32a, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fchmodat(r1, &(0x7f0000000000)='./file0\x00', 0x131) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x4, 0xffffffffffffff2e, &(0x7f00000002c0)="5b2d9de2", 0x0, 0x6ff, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, 0xe, 0x9, 0x5}, 0x50) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0x10000, &(0x7f0000000240)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fadvise64(r3, 0x1000, 0x7d93, 0x3) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x202) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000018001101ffffffff001d00000a600000ff00ff06"], 0x24}}, 0x40054) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000004000000040000000200000000220000", @ANYRES32=0x1, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001b000000000000000000000000000000545a32d6b3294ce889e42a577c5535cb0e530609c5b9ad5a366e5866baf53d8aea2c3435605d9221cdb8a4232fe4d34fa7a7672d07bd5b4f9732343d917b679f2ec6b90f8a4f3ebae22a80c2da84"], 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x27e1, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace(0x10, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x2, 0x2003) mq_notify(r1, &(0x7f0000000100)={0x0, 0x2, 0x1}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000000, 0x204031, 0xffffffffffffffff, 0x6c304000) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) 3.780822579s ago: executing program 4 (id=1943): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40a21, 0x23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x6, 0x8b}, 0x0) keyctl$setperm(0x5, 0x0, 0x200000) keyctl$describe(0x6, 0x0, 0x0, 0xffffffffffffff87) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x100, 0xfffffffe, 0x400000, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8, 0xfffffffffffffff9, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bbb}, [@mark={0xc, 0x15, {0x35075a, 0x80000001}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x85, 0xe}}}}}}, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a000001090001007379"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r0, 0xe, 0x8, 0x3ff}) 3.66372505s ago: executing program 0 (id=1944): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = getpid() r2 = fanotify_init(0x200, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='ntfs3\x00', 0x0, &(0x7f00000001c0)='discard') r3 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x80881) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x4, 0x0, 0x0, {[@fastopen={0x22, 0x5, "d9deea"}]}}}}}}}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getownex(r4, 0x10, &(0x7f0000000080)) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/rt_acct\x00') pread64(r5, 0x0, 0x0, 0x100008) syz_open_dev$ttys(0xc, 0x2, 0x1) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc4c85513, &(0x7f0000000000)={0x2, 0x1, 0x1, 0x0, 'syz1\x00', 0x109a7}) fanotify_mark(r2, 0x441, 0x10001003, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r1], 0x1}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket(0x10, 0x803, 0x0) 3.51462226s ago: executing program 1 (id=1946): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x90, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0xc9a}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff}, {0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8090}, 0x40050) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)=0x2) ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) write$ppp(r4, &(0x7f0000000380)='\nr', 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fe\xdc\x8b\x18rBl{\x82=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00\x00', 0x0) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.042123527s ago: executing program 1 (id=1949): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = eventfd2(0x3, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000000c0)=r0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880), 0x0, 0x1) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x3a, 0xe9, &(0x7f0000000340)=""/233, 0x41000, 0x27, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0xf, 0x4, 0xc000000}, 0x10, 0x13957, 0xffffffffffffffff, 0x5, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x0, 0x3, 0xb, 0x5}, {0x3, 0x5, 0x5, 0xb}, {0x5, 0x5, 0x1, 0x4}, {0x1, 0x2, 0xb, 0x2}, {0x0, 0x1, 0x1, 0xa}], 0x10, 0x7cd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000deffffffffffffff0000000000b0e589a8b261e99961652f5efbcc1b99569f0a300680a18d9839b1cf58e5b26bd6c68436ed969f5618c3e34db7632be8ee7327f28fba8df2146ffd615e22b36ee7665b65f3b8e0aa4c16ab4728d0e99b3f9e235e712e051e60543f8b8f9efbb97b9f20e6789f617dee24036956881b18843acecf05b1fa9b4a66a8d116a64e44f793a79c27510785d233784261854dc118d80dad", @ANYBLOB="38648e3d2b78a4fed3f1796c813991bca703a894abd04ed96580c56e441a40168a1bf7cea6bbcea04cbcc0b6", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) write(r4, &(0x7f0000000000)="f9", 0x1) read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00004000000000000080000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffe00}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2bd}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8008890}, 0x40000) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2004) getpid() 3.036014682s ago: executing program 1 (id=1950): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe00000009"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0xfffd, 0x0, 0x3, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r3, @ANYBLOB="c000820408000100c51414bb08000f0001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mount$9p_unix(0x0, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000380), 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d756e69782c6d73697a653d3078303030303030303030300500000000000000fe2d0c42064fb21fc85e280f62ad72eea08dcf3a07b637"]) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0xfffffffffffffdee}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'batadv0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0xea05}], 0x3e8, 0x0) 2.797491054s ago: executing program 0 (id=1951): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="3400000043000701fefffffffcdbdf25027c00001800458014000400070000000000000003000000000000aa080001"], 0x34}}, 0x2004c000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_mark(0xffffffffffffffff, 0x241, 0x40000019, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5412, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.52993474s ago: executing program 4 (id=1953): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x60, {0xd34b, 0x114}, 0x10, 0x4}) r1 = socket(0x2, 0x80805, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000000c0)={{0xf}, 0x0, 0x5, 0x7000, {0x2, 0x1}, 0x2, 0x40}) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x5, 0x2, 0x0, &(0x7f0000004000)=0x1, 0xb2024000) sendmmsg$inet_sctp(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000040008400000005000000000000000300000020000000000000008400000002000000070000000400005429c3209a49621e46c3fdc14e002e000000", @ANYRES32=0x0], 0x38, 0x800}], 0x1, 0x4008080) 2.499743636s ago: executing program 2 (id=1954): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000192c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x808, 0x400000000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f00000002c0)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x40044) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) epoll_create1(0x80000) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.320365419s ago: executing program 1 (id=1955): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x3}, {0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000500)="c2c2ced1806347", 0x7}], 0x1) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='overlay\x00', 0x8000, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x100005, 0x0, 0x80000}, 0x20) bind$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mount$overlay(0x0, 0x0, &(0x7f0000000200), 0x2403002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000019400), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102384, 0x18ff0) socket$nl_route(0x10, 0x3, 0x0) r6 = geteuid() msgsnd(0x0, &(0x7f0000000440)=ANY=[], 0x401, 0x0) getresgid(0x0, 0x0, &(0x7f0000000240)=0x0) r8 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000019300)={{0x3, r6, 0xee00, r6, r7, 0x84, 0xd}, 0x0, 0x0, 0x4, 0xa000000000000000, 0x2, 0x9, 0x7, 0x101, 0x9, 0xa, r8, 0xffffffffffffffff}) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000019440)=ANY=[@ANYBLOB="020200020c00000000000000ff25ffff0200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff10000000000000000300050000000000020000000000000000000000000000003ecf5dea53c3095957e51c99e3b8582cc69129cd6a5df7ac3a7407758fed2efa2c9c46ae36a3fadc1553e103d1f8b2c6d42cba1be0b1a9d0d5e9927d0fa2884735a0e124bba94a91bcf3aa3084cc946ed166445eac261bc3f37523de3f9187764f47162f1784052b4c014ad1361667426505551bba93"], 0x60}, 0x1, 0x7}, 0x0) write(r3, &(0x7f0000000040), 0x0) 2.272833552s ago: executing program 2 (id=1956): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a81400810000000800471800300064000004069078e00000017f00000186060000000200004e204e23a1c8fcf65d5c7faed61dde35645e3f4f224049b8ff8e27258e84480ea140664eebeccf1ff866e322e91451b0ba2ea22d589e8ab26f9baf4aa92b5faca748", @ANYRES32=0x41424344, @ANYBLOB="518009"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x50) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000000200009ad672000400001900000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') exit(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xfffffff7}]}}}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000095) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x70, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x3a}}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_FAMILY={0x5, 0xd, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x4) r3 = open$dir(0x0, 0x1, 0x19d) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900, 0x3}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) wait4(0x0, 0x0, 0x8, 0x0) syz_pidfd_open(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x32, &(0x7f0000000480), 0x111, 0x6}}, 0x20) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1) ppoll(&(0x7f0000000200)=[{r3, 0x1}, {r5, 0x1008}, {r4, 0x12bc}, {r6, 0x4000}, {r1, 0x4400}, {r5, 0x30a9}, {r6, 0x120}], 0x7, &(0x7f00000004c0)={0x77359400}, &(0x7f00000002c0)={[0xe12e]}, 0x8) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0xfffffff2, @name="82bf06255c32514ef266824307509e39f5e892343710c37e48a72f12e53542fb"}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x20000044) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) 2.103585797s ago: executing program 1 (id=1957): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0xbae, 0xfffffe0000000001, 0xfa11, 0x66fa}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r7) socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r10, 0x4000, r9}, 0x18) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.930279666s ago: executing program 3 (id=1958): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TCFLSH(r4, 0x541b, 0x7ffffffffffffffe) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f00000001c0)=0x7) 1.108884897s ago: executing program 2 (id=1959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x3}, {0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000500)="c2c2ced1806347", 0x7}], 0x1) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='overlay\x00', 0x8000, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x100005, 0x0, 0x80000}, 0x20) bind$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mount$overlay(0x0, 0x0, &(0x7f0000000200), 0x2403002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000019400), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102384, 0x18ff0) socket$nl_route(0x10, 0x3, 0x0) r6 = geteuid() msgsnd(0x0, &(0x7f0000000440)=ANY=[], 0x401, 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r8 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000019300)={{0x3, r6, 0xee00, r6, r7, 0x84, 0xd}, 0x0, 0x0, 0x4, 0xa000000000000000, 0x2, 0x9, 0x7, 0x101, 0x9, 0xa, r8, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000019440)=ANY=[@ANYBLOB="020200020c00000000000000ff25ffff0200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff10000000000000000300050000000000020000000000000000000000000000003ecf5dea53c3095957e51c99e3b8582cc69129cd6a5df7ac3a7407758fed2efa2c9c46ae36a3fadc1553e103d1f8b2c6d42cba1be0b1a9d0d5e9927d0fa2884735a0e124bba94a91bcf3aa3084cc946ed166445eac261bc3f37523de3f9187764f47162f1784052b4c"], 0x60}, 0x1, 0x7}, 0x0) write(r3, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a) 837.621017ms ago: executing program 2 (id=1960): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = eventfd2(0x3, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000000c0)=r0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880), 0x0, 0x1) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x3a, 0xe9, &(0x7f0000000340)=""/233, 0x41000, 0x27, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0xf, 0x4, 0xc000000}, 0x10, 0x13957, 0xffffffffffffffff, 0x5, &(0x7f0000000480)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x0, 0x3, 0xb, 0x5}, {0x3, 0x5, 0x5, 0xb}, {0x5, 0x5, 0x1, 0x4}, {0x1, 0x2, 0xb, 0x2}, {0x0, 0x1, 0x1, 0xa}], 0x10, 0x7cd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r3, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000680)=""/6, 0x7, 0x0, 0xcb, 0x5c, &(0x7f00000006c0)="c9781cf7d3638d022e013c6648e034a8df537f97821717c5afde6244f4349133d690c61e5d05b1fd2c267808dc2fb91277a96e25d86aa55248d56a87f43d3df173051795ea29bb039265caff07e4944d8c71e891e73da9652e9ffaed894b2ee1af11efb368bfa0b17a612df92cbe79eae972d42a2630ccb1d53357f9890caa535021e24160ef04bd8fd48abf7940c1f66948b318fa8e764ddbde92cd128693e13ce9a1e84ece737acf67f5c453c8b11eb5a6570e174c5361ab33f5e9aaf6cf8222f9ce80a245273206308c", &(0x7f00000007c0)="80530ff41036736256052f08fb90b6ba50c16ce51291792ebc2f2e057efadb93de656d96f060bc965ea5c6a9a839677e1b9f981421bdbf78e8427a2d66d3f8b1c159631b6b71c00845a49a195fa518aca8c942a79a3358c54c3febe6", 0x2, 0x0, 0xffffffff}, 0x50) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000deffffffffffffff0000000000b0e589a8b261e99961652f5efbcc1b99569f0a300680a18d9839b1cf58e5b26bd6c68436ed969f5618c3e34db7632be8ee7327f28fba8df2146ffd615e22b36ee7665b65f3b8e0aa4c16ab4728d0e99b3f9e235e712e051e60543f8b8f9efbb97b9f20e6789f617dee24036956881b18843acecf05b1fa9b4a66a8d116a64e44f793a79c27510785d233784261854dc118d80dad", @ANYBLOB="38648e3d2b78a4fed3f1796c813991bca703a894abd04ed96580c56e441a40168a1bf7cea6bbcea04cbcc0b6", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) write(r5, &(0x7f0000000000)="f9", 0x1) read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00004000000000000080000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffe00}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2bd}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8008890}, 0x40000) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2004) getpid() 686.527134ms ago: executing program 0 (id=1961): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x3, 0x0, [0x40, 0x8, 0x1, 0x5, 0xfff7, 0x3, 0x8000, 0x2, 0x5, 0x1, 0x4d, 0x5, 0x5, 0x7, 0x8, 0x30b0], 0xa}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, r1, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0x613, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x58}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x680, &(0x7f0000000040)={0x0, 0xa0c89f, 0x1c881, 0x1, 0xd1}) syz_io_uring_setup(0x4ce4, &(0x7f00000000c0)={0x0, 0x7c98, 0x40, 0x2, 0x243}, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b040000000000000000020000005800048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e0800034000000004180001800e000100627974656f72646572000000040002800900010073797a30000000000900020073797a32"], 0xac}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x40044) fcntl$addseals(r6, 0x409, 0x9) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = socket(0x26, 0x8080f, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, 0x0, 0x0) 683.854545ms ago: executing program 4 (id=1962): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x0, 0x2, 0x1b}, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet(0x2, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d00040000000e0000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0) 582.578567ms ago: executing program 2 (id=1963): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a00) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6c", 0x51}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e6", 0xae}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x85, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 530.946934ms ago: executing program 0 (id=1964): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xac0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r3 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 488.750597ms ago: executing program 3 (id=1965): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x10000200, 0x7fffffff, 0x8, 0x2d, 0x2006, 0xf1, 0x8, 0xde, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x100f0, 0xffffffaa, 0x7ffffffd, 0x1ff, 0x9ea, 0x10, 0x0, 0x8, 0x5, 0x746f, 0x8, 0x2, 0x40, 0x7ffffffe, 0x4, 0x7ffd]}) 378.754781ms ago: executing program 3 (id=1966): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f00000192c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x808, 0x400000000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f00000002c0)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x40044) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) epoll_create1(0x80000) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 182.8604ms ago: executing program 4 (id=1967): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x3}, {0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000500)="c2c2ced1806347", 0x7}], 0x1) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='overlay\x00', 0x8000, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x100005, 0x0, 0x80000}, 0x20) bind$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mount$overlay(0x0, 0x0, &(0x7f0000000200), 0x2403002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000019400), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102384, 0x18ff0) socket$nl_route(0x10, 0x3, 0x0) r6 = geteuid() msgsnd(0x0, &(0x7f0000000440)=ANY=[], 0x401, 0x0) getresgid(0x0, 0x0, &(0x7f0000000240)=0x0) r8 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000019300)={{0x3, r6, 0xee00, r6, r7, 0x84, 0xd}, 0x0, 0x0, 0x4, 0xa000000000000000, 0x2, 0x9, 0x7, 0x101, 0x9, 0xa, r8, 0xffffffffffffffff}) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000019440)=ANY=[@ANYBLOB="020200020c00000000000000ff25ffff0200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff10000000000000000300050000000000020000000000000000000000000000003ecf5dea53c3095957e51c99e3b8582cc69129cd6a5df7ac3a7407758fed2efa2c9c46ae36a3fadc1553e103d1f8b2c6d42cba1be0b1a9d0d5e9927d0fa2884735a0e124bba94a91bcf3aa3084cc946ed166445eac261bc3f37523de3f9187764f47162f1784052b4c014ad1361667426505551bba93"], 0x60}, 0x1, 0x7}, 0x0) write(r3, &(0x7f0000000040), 0x0) 108.781953ms ago: executing program 3 (id=1968): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0xe, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="10020000130a00000000000000000000060000040c00064080000000000000010c00064000000000000000030c0006400000000000000001bc000800aa72deb088aa8538dbd4cc4b2c72939ac304000000d63fd5bd54af10f5df014ead8c59406671c398ea61e2ecb11bd57b4e133962b18d681da72779926eb6990c5ca0645b3fd0b0b8cb188485e823df560fb2688081a7ab5cbacf66689a31bd509b3be5349eaeb68865c8fb6ec5d65bb6b8145fcfd31c7512890b50876aef1c88fdd3d64d5b3c8fa7707b57a6ce80d9a8e1c41581653a082f44e94b19c9d80fe99b4bb14ca1d12e4117862a0000000000000002326eeb12bf0900020073797a32000000000900020073797a3000000000eb0008008a693cceb07c88e81e60ee1895921ae4cc8a3b06b800701bf630392d04f2f2abdc346da11542c9a48a22e4a8ea8475fa03315f7526dd244d77ecde3e358dd7de3e0438421e1aaead30e4202ad22b3dcd7f212c85dce5b2d1a17d4c0f4897cedde92123641e177e974722ec6d3f807b35bbf1a6e478f23e205d18dfb460383bc86c74c19a57bf9f108d70726379e7668ba30727b44ab2d6be535848affad9bb4c57f49ea1d69962e1bbf166788ff4698d9ebe7d45f02e2a09f960556b13aabf05fcaa6a6ee24b40c4e858831a88e1fd73d0095d8838c65b1ebcf1e7c0841f3334c74878952abd4e000900020073797a32000000000900020073797a3200000000"], 0x210}, 0x1, 0x0, 0x0, 0x408c0}, 0x4008800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x8140, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x15000820) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0) r6 = timerfd_create(0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0x4, 0x8, 0x8, 0x1, 0x0, 0x7, 0x800, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x6, 0x413, 0x69, 0x6, 0x6, 0x100000006, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) 57.488503ms ago: executing program 2 (id=1969): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a81400810000000800471800300064000004069078e00000017f00000186060000000200004e204e23a1c8fcf65d5c7faed61dde35645e3f4f224049b8ff8e27258e84480ea140664eebeccf1ff866e322e91451b0ba2ea22d589e8ab26f9baf4aa92b5faca748", @ANYRES32=0x41424344, @ANYBLOB="518009"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r0], 0x50) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000000200009ad672000400001900000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') exit(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0xfffffff7}]}}}, @IFLA_MASTER={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000095) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x70, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x3a}}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_FAMILY={0x5, 0xd, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x4) r3 = open$dir(0x0, 0x1, 0x19d) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900, 0x3}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) wait4(0x0, 0x0, 0x8, 0x0) syz_pidfd_open(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x32, &(0x7f0000000480), 0x111, 0x6}}, 0x20) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000140)=0x1) ppoll(&(0x7f0000000200)=[{r3, 0x1}, {r5, 0x1008}, {r4, 0x12bc}, {r6, 0x4000}, {r1, 0x4400}, {r5, 0x30a9}, {r6, 0x120}], 0x7, &(0x7f00000004c0)={0x77359400}, &(0x7f00000002c0)={[0xe12e]}, 0x8) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0xfffffff2, @name="82bf06255c32514ef266824307509e39f5e892343710c37e48a72f12e53542fb"}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x20000044) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) 0s ago: executing program 4 (id=1970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x3}, {0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000500)="c2c2ced1806347", 0x7}], 0x1) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='overlay\x00', 0x8000, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x100005, 0x0, 0x80000}, 0x20) bind$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) mount$overlay(0x0, 0x0, &(0x7f0000000200), 0x2403002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000019400), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102384, 0x18ff0) socket$nl_route(0x10, 0x3, 0x0) r6 = geteuid() msgsnd(0x0, &(0x7f0000000440)=ANY=[], 0x401, 0x0) getresgid(0x0, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r8 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000019300)={{0x3, r6, 0xee00, r6, r7, 0x84, 0xd}, 0x0, 0x0, 0x4, 0xa000000000000000, 0x2, 0x9, 0x7, 0x101, 0x9, 0xa, r8, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000019440)=ANY=[@ANYBLOB="020200020c00000000000000ff25ffff0200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff10000000000000000300050000000000020000000000000000000000000000003ecf5dea53c3095957e51c99e3b8582cc69129cd6a5df7ac3a7407758fed2efa2c9c46ae36a3fadc1553e103d1f8b2c6d42cba1be0b1a9d0d5e9927d0fa2884735a0e124bba94a91bcf3aa3084cc946ed166445eac261bc3f37523de3f9187764f47162f1784052b4c014ad136166742"], 0x60}, 0x1, 0x7}, 0x0) write(r3, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a) kernel console output (not intermixed with test programs): '. [ 374.815319][ T30] audit: type=1400 audit(1784506864.157:657): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 374.849432][ T30] audit: type=1400 audit(1784506864.187:658): avc: denied { connect } for pid=9300 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 374.870320][ T30] audit: type=1400 audit(1784506864.187:659): avc: denied { write } for pid=9300 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 374.928734][ T9305] netlink: 60 bytes leftover after parsing attributes in process `syz.4.880'. [ 374.970315][ T9305] unsupported nlmsg_type 40 [ 375.032722][ T30] audit: type=1400 audit(1784506864.367:660): avc: denied { name_bind } for pid=9300 comm="syz.4.880" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 375.112679][ T9306] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 375.133392][ T9308] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 375.156225][ T9306] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 375.177396][ T9308] qnx6: wrong signature (magic) in superblock #1. [ 375.232962][ T9308] qnx6: unable to read the first superblock [ 375.239157][ T30] audit: type=1400 audit(1784506864.367:661): avc: denied { node_bind } for pid=9300 comm="syz.4.880" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 375.290852][ T9316] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 375.301888][ T9316] qnx6: wrong signature (magic) in superblock #1. [ 375.308427][ T9316] qnx6: unable to read the first superblock [ 375.593056][ T8707] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 375.774157][ T8707] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.788779][ T8707] usb 2-1: config 0 interface 0 has no altsetting 0 [ 375.806520][ T8707] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 375.826109][ T8707] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.841403][ T8707] usb 2-1: Product: syz [ 375.849838][ T8707] usb 2-1: Manufacturer: syz [ 375.854586][ T8707] usb 2-1: SerialNumber: syz [ 375.864110][ T8707] usb 2-1: config 0 descriptor?? [ 375.876089][ T8707] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 375.887572][ T8707] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.898842][ T8707] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 375.902647][ T5704] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 375.907659][ T8707] usb 2-1: media controller created [ 375.928404][ T8707] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.064183][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.084652][ T5704] usb 3-1: config 0 interface 0 has no altsetting 0 [ 376.103842][ T5704] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 376.127699][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.146288][ T5704] usb 3-1: Product: syz [ 376.179526][ T9319] syz.3.882 (9319): drop_caches: 2 [ 376.208329][ T5704] usb 3-1: Manufacturer: syz [ 376.222477][ T5704] usb 3-1: SerialNumber: syz [ 376.251917][ T5704] usb 3-1: config 0 descriptor?? [ 376.270006][ T8707] DVB: Unable to find symbol tda10046_attach() [ 376.274309][ T5704] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 376.277263][ T8707] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 376.294564][ T8707] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 376.306754][ T5704] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 376.529569][ T8707] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 376.541464][ T5704] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 376.577345][ T5704] usb 3-1: media controller created [ 376.592917][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.633817][ T8707] usb 2-1: USB disconnect, device number 15 [ 376.726134][ T30] audit: type=1400 audit(1784506866.068:662): avc: denied { write } for pid=9327 comm="syz.4.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 376.732337][ T5704] DVB: Unable to find symbol tda10046_attach() [ 376.811793][ T5704] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 376.831034][ T5704] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 376.854426][ T5704] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 376.883746][ T5704] usb 3-1: USB disconnect, device number 12 [ 376.886762][ T9333] vxcan0: tx address claim with different name [ 376.896672][ T30] audit: type=1400 audit(1784506866.228:663): avc: denied { bind } for pid=9331 comm="syz.4.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 377.232523][ T30] audit: type=1400 audit(1784506866.568:664): avc: denied { search } for pid=9335 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.600925][ T9341] netlink: 'syz.4.888': attribute type 1 has an invalid length. [ 377.608806][ T9341] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.888'. [ 378.125754][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.132202][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.139227][ T9341] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.888'. [ 379.486617][ T9333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 379.515737][ T9333] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 379.786800][ T9333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.245043][ T9333] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 380.325675][ T9333] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.340416][ T9333] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 380.438146][ T9401] tmpfs: Bad value for 'mpol' [ 380.571019][ T8707] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 381.013269][ T8707] usb 4-1: device descriptor read/64, error -71 [ 381.068982][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 381.068995][ T30] audit: type=1800 audit(1784506870.400:687): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.905" name="bus" dev="tmpfs" ino=953 res=0 errno=0 [ 381.305650][ T8707] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 381.488294][ T30] audit: type=1400 audit(1784506870.820:688): avc: denied { write } for pid=9400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.607693][ T9430] netlink: 64 bytes leftover after parsing attributes in process `syz.1.908'. [ 381.619804][ T8707] usb 4-1: device descriptor read/64, error -71 [ 381.945529][ T30] audit: type=1400 audit(1784506871.281:689): avc: denied { write } for pid=9434 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.990026][ T8707] usb usb4-port1: attempt power cycle [ 382.339599][ T8707] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 382.450059][ T8707] usb 4-1: device descriptor read/8, error -71 [ 382.734698][ T9453] capability: warning: `syz.1.912' uses 32-bit capabilities (legacy support in use) [ 382.834092][ T30] audit: type=1400 audit(1784506872.171:690): avc: denied { ioctl } for pid=9448 comm="syz.0.911" path="socket:[27126]" dev="sockfs" ino=27126 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 383.354327][ T9469] CIFS: VFS: UNC: missing share name [ 383.360786][ T9469] CIFS: VFS: Malformed UNC in devname [ 383.404610][ T30] audit: type=1400 audit(1784506872.741:691): avc: denied { write } for pid=9440 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.584269][ T30] audit: type=1400 audit(1784506872.922:692): avc: denied { write } for pid=9475 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.930705][ T8707] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 385.302121][ T8707] usb 4-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 385.330720][ T8707] usb 4-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.385924][ T8707] usb 4-1: config 0 interface 0 has no altsetting 0 [ 385.395079][ T30] audit: type=1400 audit(1784506874.742:693): avc: denied { mount } for pid=9500 comm="syz.4.920" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 385.427301][ T8707] usb 4-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 385.446967][ T8707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.574279][ T8707] usb 4-1: config 0 descriptor?? [ 385.590298][ T9488] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 385.597861][ T30] audit: type=1400 audit(1784506874.933:694): avc: denied { write } for pid=9481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.119990][ T9488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.157872][ T9488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.301991][ T30] audit: type=1400 audit(1784506875.643:695): avc: denied { write } for pid=9516 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.380199][ T30] audit: type=1400 audit(1784506875.713:696): avc: denied { mounton } for pid=9487 comm="syz.3.917" path="/proc/661/task" dev="proc" ino=27270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 386.493083][ T30] audit: type=1400 audit(1784506875.803:697): avc: denied { associate } for pid=9523 comm="syz.3.917" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 386.590297][ T30] audit: type=1400 audit(1784506875.813:698): avc: denied { create } for pid=9522 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 386.650482][ T30] audit: type=1400 audit(1784506875.883:699): avc: denied { write } for pid=9522 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 386.694040][ T30] audit: type=1400 audit(1784506875.903:700): avc: denied { setopt } for pid=9522 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 386.716628][ T9532] netlink: 44 bytes leftover after parsing attributes in process `syz.2.926'. [ 386.839813][ T30] audit: type=1400 audit(1784506876.173:701): avc: denied { read } for pid=9487 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 386.963599][ T30] audit: type=1400 audit(1784506876.303:702): avc: denied { bind } for pid=9487 comm="syz.3.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 387.163297][ T30] audit: type=1400 audit(1784506876.503:703): avc: denied { mount } for pid=9512 comm="syz.1.923" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 387.238077][ T8707] usbhid 4-1:0.0: can't add hid device: -71 [ 387.256528][ T30] audit: type=1400 audit(1784506876.543:704): avc: denied { firmware_load } for pid=9522 comm="syz.4.925" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 387.297763][ T8707] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 387.346028][ T8707] usb 4-1: USB disconnect, device number 23 [ 387.849053][ T9526] syz.4.925 (9526) used greatest stack depth: 18216 bytes left [ 388.504600][ T9580] SET target dimension over the limit! [ 388.652132][ T9563] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 389.139422][ T9585] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 389.202466][ T9518] Process accounting resumed [ 389.606672][ T9600] netlink: 76 bytes leftover after parsing attributes in process `syz.1.934'. [ 390.029207][ T9605] CIFS: VFS: UNC: missing share name [ 390.035527][ T9605] CIFS: VFS: Malformed UNC in devname [ 390.220371][ T77] Bluetooth: hci5: Frame reassembly failed (-84) [ 390.245571][ T4926] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 392.285797][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 392.286386][ T9634] CIFS: VFS: UNC: missing share name [ 392.299517][ T9634] CIFS: VFS: Malformed UNC in devname [ 392.341023][ T4926] Bluetooth: hci5: command 0x1003 tx timeout [ 392.430848][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 392.430864][ T30] audit: type=1400 audit(1784506881.776:713): avc: denied { ioctl } for pid=9632 comm="syz.0.942" path="mnt:[4026532786]" dev="nsfs" ino=4026532786 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 393.620077][ T30] audit: type=1400 audit(1784506882.516:714): avc: denied { bind } for pid=9644 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 393.888091][ T30] audit: type=1400 audit(1784506882.516:715): avc: denied { setopt } for pid=9644 comm="syz.3.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 395.577950][ T9657] FAULT_INJECTION: forcing a failure. [ 395.577950][ T9657] name failslab, interval 1, probability 0, space 0, times 0 [ 395.591338][ T9657] CPU: 0 UID: 0 PID: 9657 Comm: syz.4.946 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.591363][ T9657] Tainted: [L]=SOFTLOCKUP [ 395.591368][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 395.591374][ T9657] Call Trace: [ 395.591378][ T9657] [ 395.591382][ T9657] dump_stack_lvl+0x100/0x190 [ 395.591400][ T9657] should_fail_ex.cold+0x5/0xa [ 395.591414][ T9657] should_failslab+0xc2/0x120 [ 395.591429][ T9657] __kmalloc_noprof+0xfc/0x820 [ 395.591439][ T9657] ? rcu_is_watching+0x12/0xc0 [ 395.591455][ T9657] ? tomoyo_realpath_from_path+0xb6/0x690 [ 395.591475][ T9657] tomoyo_realpath_from_path+0xb6/0x690 [ 395.591494][ T9657] tomoyo_path_number_perm+0x23c/0x580 [ 395.591507][ T9657] ? tomoyo_path_number_perm+0x22e/0x580 [ 395.591522][ T9657] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 395.591536][ T9657] ? __pfx___schedule+0x10/0x10 [ 395.591564][ T9657] ? find_held_lock+0x2b/0x80 [ 395.591579][ T9657] ? __fget_files+0x215/0x3d0 [ 395.591588][ T9657] ? hook_file_ioctl_common+0x140/0x440 [ 395.591598][ T9657] ? __fget_files+0x215/0x3d0 [ 395.591610][ T9657] ? __fget_files+0x21f/0x3d0 [ 395.591622][ T9657] security_file_ioctl+0xd3/0x230 [ 395.591637][ T9657] __x64_sys_ioctl+0xb7/0x210 [ 395.591652][ T9657] do_syscall_64+0x115/0x870 [ 395.591662][ T9657] ? clear_bhb_loop+0x40/0x90 [ 395.591676][ T9657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.591687][ T9657] RIP: 0033:0x7f2fbed9de99 [ 395.591697][ T9657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.591707][ T9657] RSP: 002b:00007f2fbcff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.591718][ T9657] RAX: ffffffffffffffda RBX: 00007f2fbf026090 RCX: 00007f2fbed9de99 [ 395.591725][ T9657] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000004 [ 395.591731][ T9657] RBP: 00007f2fbcff6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.591737][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.591743][ T9657] R13: 00007f2fbf026128 R14: 00007f2fbf026090 R15: 00007ffc1bfe7c78 [ 395.591757][ T9657] [ 395.591776][ T9657] ERROR: Out of memory at tomoyo_realpath_from_path. [ 396.515795][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 396.767856][ T9662] netlink: 'syz.0.949': attribute type 2 has an invalid length. [ 396.775564][ T9662] netlink: 'syz.0.949': attribute type 1 has an invalid length. [ 398.104676][ T9673] tipc: Started in network mode [ 398.141379][ T9673] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 398.260763][ T9673] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 398.324045][ T9673] tipc: Enabled bearer , priority 10 [ 398.405646][ T5725] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 399.080246][ T5725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.161535][ T5725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.191211][ T5725] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 399.212683][ T5725] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.241008][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.306783][ T5725] usb 1-1: config 0 descriptor?? [ 399.424019][ T187] tipc: Node number set to 1 [ 399.609365][ T30] audit: type=1400 audit(1784506888.950:716): avc: denied { getopt } for pid=9674 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 399.675739][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 399.815784][ T9686] xfrm1: entered promiscuous mode [ 399.830203][ T9686] xfrm1: entered allmulticast mode [ 399.875045][ T30] audit: type=1400 audit(1784506889.220:717): avc: denied { name_connect } for pid=9688 comm="syz.3.958" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 399.913727][ T9686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 400.210672][ T5711] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 400.631605][ T5711] usb 2-1: config 2 has an invalid interface number: 36 but max is 0 [ 400.640144][ T5711] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 400.672151][ T9704] syz.4.950 (9704): drop_caches: 2 [ 400.701730][ T5711] usb 2-1: config 2 has no interface number 0 [ 400.730356][ T5711] usb 2-1: config 2 interface 36 has no altsetting 0 [ 400.740489][ T5711] usb 2-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a [ 400.750086][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.760390][ T5711] usb 2-1: Product: syz [ 400.766837][ T5711] usb 2-1: Manufacturer: syz [ 400.773141][ T5711] usb 2-1: SerialNumber: syz [ 400.869411][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 400.883368][ T9706] IPv6: NLM_F_REPLACE set, but no existing node found! [ 400.940989][ T5725] usbhid 1-1:0.0: can't add hid device: -71 [ 400.947086][ T5725] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 401.000487][ T5725] usb 1-1: USB disconnect, device number 15 [ 401.015599][ T5711] usb 2-1: USB disconnect, device number 16 [ 402.071710][ T187] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 402.533988][ T9722] hfsplus: unable to find HFS+ superblock [ 403.369894][ T187] usb 3-1: Using ep0 maxpacket: 32 [ 403.549609][ T187] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 403.676456][ T9729] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 404.206796][ T187] usb 3-1: config 0 has no interface number 0 [ 404.242466][ T187] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 404.260327][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.285154][ T187] usb 3-1: Product: syz [ 404.297889][ T187] usb 3-1: Manufacturer: syz [ 404.343360][ T187] usb 3-1: SerialNumber: syz [ 404.473418][ T187] usb 3-1: config 0 descriptor?? [ 404.884261][ T187] usb 3-1: can't set config #0, error -71 [ 404.996292][ T187] usb 3-1: USB disconnect, device number 13 [ 405.927964][ T9747] netlink: 'syz.3.971': attribute type 15 has an invalid length. [ 405.935812][ T9747] netlink: 666 bytes leftover after parsing attributes in process `syz.3.971'. [ 406.189215][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.973'. [ 407.017209][ T29] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 407.429114][ T29] usb 4-1: unable to get BOS descriptor or descriptor too short [ 407.450506][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.533626][ T29] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.683730][ T29] usb 4-1: config 1 has no interface number 0 [ 407.705339][ T9770] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 407.714409][ T9770] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 407.886792][ T29] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 407.926689][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.936846][ T29] usb 4-1: Product: syz [ 407.941120][ T29] usb 4-1: Manufacturer: syz [ 407.946471][ T29] usb 4-1: SerialNumber: syz [ 408.014430][ T9778] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 408.132733][ T30] audit: type=1400 audit(1784506897.484:718): avc: denied { read } for pid=9771 comm="syz.2.981" lport=53358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 408.218712][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.240646][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.509285][ T30] audit: type=1400 audit(1784506897.854:719): avc: denied { mounton } for pid=9780 comm="syz.0.983" path="/190/file0" dev="tmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 408.574721][ T30] audit: type=1400 audit(1784506897.864:720): avc: denied { mount } for pid=9780 comm="syz.0.983" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 408.633236][ T30] audit: type=1400 audit(1784506897.964:721): avc: denied { audit_write } for pid=9756 comm="syz.3.976" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 408.770324][ T30] audit: type=1400 audit(1784506898.124:722): avc: denied { unmount } for pid=9756 comm="syz.3.976" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 409.240004][ T30] audit: type=1400 audit(1784506898.594:723): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 410.097992][ T29] usb 4-1: us122l: couldn't allocate write buffer [ 410.104861][ T29] snd-usb-us122l 4-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 410.159347][ T9] usb 4-1: USB disconnect, device number 24 [ 410.423597][ T30] audit: type=1400 audit(1784506899.775:724): avc: denied { set_context_mgr } for pid=9804 comm="syz.0.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 410.459853][ T9807] fuse: Bad value for 'fd' [ 410.464714][ T30] audit: type=1400 audit(1784506899.775:725): avc: denied { map } for pid=9804 comm="syz.0.990" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 410.570036][ T30] audit: type=1400 audit(1784506899.905:726): avc: denied { call } for pid=9804 comm="syz.0.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 410.681651][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 410.703869][ T9805] netlink: 'syz.0.990': attribute type 5 has an invalid length. [ 411.982536][ T30] audit: type=1400 audit(1784506901.336:727): avc: denied { append } for pid=9827 comm="syz.1.996" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 412.193155][ T9831] netlink: 'syz.3.997': attribute type 2 has an invalid length. [ 412.200892][ T9831] netlink: 'syz.3.997': attribute type 1 has an invalid length. [ 412.977165][ T9823] syzkaller0: entered promiscuous mode [ 412.995565][ T9823] syzkaller0: entered allmulticast mode [ 413.454305][ T30] audit: type=1400 audit(1784506902.776:728): avc: denied { ioctl } for pid=9844 comm="syz.2.1001" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 414.303925][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 414.491307][ T9] usb 2-1: config 4 has an invalid interface number: 4 but max is 1 [ 414.502251][ T9] usb 2-1: config 4 has an invalid interface number: 198 but max is 1 [ 414.620329][ T9] usb 2-1: config 4 has no interface number 0 [ 414.625905][ T30] audit: type=1400 audit(1784506903.857:729): avc: denied { write } for pid=9862 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 414.629409][ T9] usb 2-1: config 4 has no interface number 1 [ 414.839212][ T9] usb 2-1: config 4 interface 4 altsetting 11 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 414.853413][ T9] usb 2-1: config 4 interface 4 altsetting 11 has a duplicate endpoint with address 0x8C, skipping [ 414.871412][ T9] usb 2-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 414.873579][ T30] audit: type=1400 audit(1784506903.937:730): avc: denied { bind } for pid=9862 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 414.936652][ T9] usb 2-1: config 4 interface 198 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 414.939573][ T30] audit: type=1400 audit(1784506903.947:731): avc: denied { name_bind } for pid=9862 comm="syz.2.1007" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 414.983448][ T30] audit: type=1400 audit(1784506903.947:732): avc: denied { node_bind } for pid=9862 comm="syz.2.1007" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 415.018441][ T9] usb 2-1: config 4 interface 198 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 415.030045][ T9] usb 2-1: config 4 interface 4 has no altsetting 0 [ 415.037148][ T9] usb 2-1: config 4 interface 198 has no altsetting 0 [ 415.050336][ T9] usb 2-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=8b.d1 [ 415.059833][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.072210][ T9] usb 2-1: Product: syz [ 415.078659][ T9] usb 2-1: Manufacturer: syz [ 415.087782][ T9] usb 2-1: SerialNumber: syz [ 415.107087][ T9] usb 2-1: Interface #198 referenced by multiple IADs [ 415.167725][ T9872] netlink: 'syz.4.1009': attribute type 2 has an invalid length. [ 415.175543][ T9872] netlink: 'syz.4.1009': attribute type 1 has an invalid length. [ 415.323891][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 415.331353][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 415.338707][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 415.387054][ T9] usb 2-1: USB disconnect, device number 17 [ 416.929429][ T9902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9902 comm=syz.0.1014 [ 418.318068][ T30] audit: type=1400 audit(1784506907.669:733): avc: denied { mounton } for pid=9907 comm="syz.1.1017" path="/211/file0" dev="tmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 419.025971][ T30] audit: type=1400 audit(1784506908.379:734): avc: denied { write } for pid=9924 comm="syz.0.1021" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 419.851036][ T9939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1023'. [ 419.933591][ T9933] Process accounting paused [ 420.031070][ T9944] IPv6: NLM_F_CREATE should be specified when creating new route [ 420.050394][ T9946] syzkaller0: entered promiscuous mode [ 420.069672][ T9946] syzkaller0: entered allmulticast mode [ 420.089593][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 420.585911][ T9958] Bluetooth: hci5: Frame reassembly failed (-84) [ 420.603515][ T486] Bluetooth: hci5: Frame reassembly failed (-84) [ 420.628246][ T9958] Bluetooth: hci5: Frame reassembly failed (-84) [ 420.643751][ T9961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1029'. [ 422.542977][ T30] audit: type=1400 audit(1784506911.871:735): avc: denied { mount } for pid=9978 comm="syz.4.1034" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 422.715182][ T4926] Bluetooth: hci5: command 0x1003 tx timeout [ 422.723355][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 423.536175][ T30] audit: type=1400 audit(1784506912.892:736): avc: denied { connect } for pid=9978 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 424.061278][ T9999] syzkaller0: entered promiscuous mode [ 424.061743][ T5704] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 424.066955][ T9999] syzkaller0: entered allmulticast mode [ 424.239343][ T5704] usb 3-1: device descriptor read/64, error -71 [ 424.341901][T10007] Bluetooth: hci5: Frame reassembly failed (-84) [ 424.361159][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 424.372973][T10007] Bluetooth: hci5: Frame reassembly failed (-84) [ 424.488392][ T5704] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 424.648263][ T5704] usb 3-1: device descriptor read/64, error -71 [ 424.769062][ T5704] usb usb3-port1: attempt power cycle [ 425.139905][ T5704] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 425.188715][ T5704] usb 3-1: device descriptor read/8, error -71 [ 425.199974][ T30] audit: type=1400 audit(1784506914.562:737): avc: denied { ioctl } for pid=10019 comm="syz.0.1043" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 425.590433][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'. [ 425.609899][ T5704] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 425.658344][ T5704] usb 3-1: device descriptor read/8, error -71 [ 425.679454][T10030] ipvlan2: entered allmulticast mode [ 425.701576][ T30] audit: type=1400 audit(1784506915.063:738): avc: denied { create } for pid=10029 comm="syz.4.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 425.709468][T10030] syz_tun: entered allmulticast mode [ 425.787770][ T30] audit: type=1400 audit(1784506915.063:739): avc: denied { bind } for pid=10029 comm="syz.4.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 425.788444][ T5704] usb usb3-port1: unable to enumerate USB device [ 426.098450][ T30] audit: type=1400 audit(1784506915.463:740): avc: denied { listen } for pid=10048 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 426.150376][ T30] audit: type=1400 audit(1784506915.483:741): avc: denied { cmd } for pid=10048 comm="syz.1.1051" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 426.201763][ T30] audit: type=1400 audit(1784506915.503:742): avc: denied { map } for pid=10048 comm="syz.1.1051" path="/dev/ublkc0" dev="devtmpfs" ino=2963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 426.247687][ T30] audit: type=1400 audit(1784506915.543:743): avc: denied { accept } for pid=10048 comm="syz.1.1051" lport=37568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 426.367652][ T4926] Bluetooth: hci5: command 0x1003 tx timeout [ 426.376694][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 428.053617][T10089] netlink: 'syz.0.1062': attribute type 15 has an invalid length. [ 428.061614][T10089] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1062'. [ 428.260548][T10094] fuse: Bad value for 'user_id' [ 428.273132][T10094] fuse: Bad value for 'user_id' [ 428.786667][T10078] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 428.852847][T10078] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 429.225395][T10107] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1070'. [ 429.226499][ T30] audit: type=1400 audit(1784506918.584:744): avc: denied { read write } for pid=10106 comm="syz.4.1070" name="file2" dev="tmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 429.234710][T10107] netlink: 'syz.4.1070': attribute type 1 has an invalid length. [ 429.268021][ T30] audit: type=1400 audit(1784506918.584:745): avc: denied { ioctl open } for pid=10106 comm="syz.4.1070" path="/188/file2" dev="tmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 430.023846][T10120] netlink: 'syz.0.1075': attribute type 15 has an invalid length. [ 430.031748][T10120] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1075'. [ 430.630656][ T30] audit: type=1400 audit(1784506919.975:746): avc: denied { mount } for pid=10124 comm="syz.3.1077" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 430.800560][T10128] syzkaller0: entered promiscuous mode [ 430.822085][T10128] syzkaller0: entered allmulticast mode [ 430.883644][T10134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10134 comm=syz.1.1080 [ 431.126951][T10139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.499995][ T30] audit: type=1400 audit(1784506920.866:747): avc: denied { create } for pid=10131 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 431.523310][T10135] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 431.544123][ T5725] IPVS: starting estimator thread 0... [ 431.571576][ T30] audit: type=1400 audit(1784506920.896:748): avc: denied { setopt } for pid=10131 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 431.654762][T10149] IPVS: using max 43 ests per chain, 103200 per kthread [ 431.681619][ T30] audit: type=1400 audit(1784506920.896:749): avc: denied { connect } for pid=10131 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 431.738171][ T30] audit: type=1400 audit(1784506920.906:750): avc: denied { write } for pid=10131 comm="syz.1.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 432.302580][T10155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1086'. [ 432.829552][T10165] netlink: 'syz.0.1089': attribute type 23 has an invalid length. [ 432.866814][T10165] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 432.867629][ T30] audit: type=1400 audit(1784506922.236:751): avc: denied { ioctl } for pid=10164 comm="syz.0.1089" path="socket:[30611]" dev="sockfs" ino=30611 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 433.558376][T10173] netlink: 'syz.2.1092': attribute type 15 has an invalid length. [ 433.566449][T10173] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1092'. [ 433.738097][T10178] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1094'. [ 434.097672][T10190] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1095'. [ 434.298802][ T30] audit: type=1400 audit(1784506923.667:752): avc: denied { mounton } for pid=10169 comm="syz.0.1091" path="/210/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 434.528653][ T30] audit: type=1400 audit(1784506923.897:753): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 434.607123][ T30] audit: type=1400 audit(1784506923.977:754): avc: denied { create } for pid=10195 comm="syz.0.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 434.662790][ T30] audit: type=1400 audit(1784506924.027:755): avc: denied { bind } for pid=10195 comm="syz.0.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 436.507660][ T30] audit: type=1400 audit(1784506925.878:756): avc: denied { read write } for pid=10223 comm="syz.0.1104" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 437.231142][ T30] audit: type=1400 audit(1784506925.878:757): avc: denied { open } for pid=10223 comm="syz.0.1104" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 437.315752][ T30] audit: type=1400 audit(1784506926.128:758): avc: denied { read append } for pid=10223 comm="syz.0.1104" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 437.427563][ T30] audit: type=1400 audit(1784506926.128:759): avc: denied { open } for pid=10223 comm="syz.0.1104" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 437.875500][ T30] audit: type=1326 audit(1784506927.239:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbed9de99 code=0x7ffc0000 [ 437.916084][ T30] audit: type=1326 audit(1784506927.279:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbed9de99 code=0x7ffc0000 [ 438.349118][ T30] audit: type=1326 audit(1784506927.709:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbed9de99 code=0x7ffc0000 [ 438.685492][ T30] audit: type=1326 audit(1784506927.709:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbed9de99 code=0x7ffc0000 [ 438.779588][ T30] audit: type=1326 audit(1784506927.709:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f2fbed9de99 code=0x7ffc0000 [ 438.874666][ T30] audit: type=1326 audit(1784506927.709:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.4.1107" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fbed9de99 code=0x7ffc0000 [ 439.073820][T10253] Invalid logical block size (6) [ 439.360693][T10257] syz.4.1111 (10257): drop_caches: 2 [ 439.526689][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.533093][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.611450][ T5704] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 440.792288][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 440.852670][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.876010][ T5704] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 440.955902][T10288] Bluetooth: MGMT ver 1.23 [ 441.318906][ T5704] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 441.361137][ T5704] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 441.396566][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.419056][ T5704] usb 2-1: Product: syz [ 441.431168][ T5704] usb 2-1: Manufacturer: syz [ 441.445055][ T5704] usb 2-1: SerialNumber: syz [ 442.216478][ T5704] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 442.272801][ T5704] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 442.316622][ T5704] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 442.618943][ T5704] usb 2-1: invalid uac2 rates [ 442.663813][ T5704] usb 2-1: invalid uac2 rates [ 442.712194][ T5704] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 442.733160][ T5704] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 442.758718][ T5704] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 442.809072][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 442.815570][T10260] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1115'. [ 442.844609][ T30] audit: type=1400 audit(1784506932.171:792): avc: denied { getopt } for pid=10259 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 442.907139][ T30] audit: type=1400 audit(1784506932.171:793): avc: denied { ioctl } for pid=10259 comm="syz.1.1115" path="socket:[32287]" dev="sockfs" ino=32287 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 442.941019][ T30] audit: type=1400 audit(1784506932.171:794): avc: denied { bind } for pid=10259 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 442.976591][ T30] audit: type=1400 audit(1784506932.261:795): avc: denied { map } for pid=10259 comm="syz.1.1115" path="socket:[32027]" dev="sockfs" ino=32027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 443.078044][ T30] audit: type=1400 audit(1784506932.261:796): avc: denied { read } for pid=10259 comm="syz.1.1115" path="socket:[32027]" dev="sockfs" ino=32027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 443.202025][ T5704] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 443.313113][ T5704] usb 2-1: USB disconnect, device number 18 [ 443.384139][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.042261][T10328] bad cache= option: noner_mlock 0 [ 444.042261][T10328] nr_zspages 0 [ 444.042261][T10328] nr_free_cma 0 [ 444.042261][T10328] numa_hit 2464942 [ 444.042261][T10328] numa_miss 1 [ 444.042261][T10328] numa_foreign 1 [ 444.042261][T10328] numa_interleave 6632 [ 444.042261][T10328] numa_local 2461382 [ 444.042261][T10328] numa_other 3561 [ 444.042261][T10328] nr_inactive_anon 0 [ 444.042261][T10328] nr_active_anon 34022 [ 444.042261][T10328] nr_inactive_file 64628 [ 444.042261][T10328] nr_active_file 0 [ 444.042261][T10328] nr_unevictable 768 [ 444.042261][T10328] nr_slab_reclaimable 7425 [ 444.042261][T10328] nr_slab_unreclaimable 97565 [ 444.042261][T10328] nr_isolated_anon 0 [ 444.042261][T10328] nr_isolated_file 0 [ 444.042261][T10328] workingset_nodes 0 [ 444.042261][T10328] workingset_refault_anon 644 [ 444.042261][T10328] workingset_refault_file 0 [ 444.042261][T10328] workingset_activate_anon 0 [ 444.042261][T10328] workingset_activate_file 0 [ 444.042261][T10328] workingset_restore_anon 0 [ 444.042261][T10328] workingset_restore_file 0 [ 444.042261][T10328] workingset_nodereclaim 0 [ 444.042261][T10328] nr_anon_pages 12082 [ 444.042261][T10328] nr_mapped 47992 [ 444.042261][T10328] nr_file_pages 87341 [ 444.042261][T10328] nr_dirty 342 [ 444.042261][T10328] nr_writeback 0 [ 444.042261][T10328] nr_shmem 22717 [ 444.042261][T10328] nr_shmem_hugepages 0 [ 444.042261][T10328] nr_shmem_pmdmapped 0 [ 444.042261][T10328] nr_file_hugepages 0 [ 444.042261][T10328] nr_file_pmdmapped 0 [ 444.042261][T10328] nr_anon_transparent_hugepages 0 [ 444.042261][T10328] nr_vmscan_write 8540 [ 444.042261][T10328] nr_vmscan_immediate_reclaim 386 [ 444.042261][T10328] nr_dirtied 10998 [ 444.042261][T10328] nr_written 10656 [ 444.042261][T10328] nr_throttled_written 0 [ 444.042261][T10328] nr_kernel_misc_reclaimable 0 [ 444.042261][T10328] nr_foll_pin_acquired 5896 [ 444.042261][T10328] nr_foll_pin_released 5889 [ 444.042261][T10328] nr_vmalloc 100585 [ 444.042614][T10328] CIFS: VFS: bad cache= option: noner_mlock 0 [ 444.042614][T10328] nr_zspages 0 [ 444.042614][T10328] nr_free_cma 0 [ 444.042614][T10328] numa_hit 2464942 [ 444.042614][T10328] numa_miss 1 [ 444.042614][T10328] numa_foreign 1 [ 444.042614][T10328] numa_interleave 6632 [ 444.042614][T10328] numa_local 2461382 [ 444.042614][T10328] numa_other 3561 [ 444.042614][T10328] nr_inactive_anon 0 [ 444.042614][T10328] nr_active_anon 34022 [ 444.042614][T10328] nr_inactive_file 64628 [ 444.042614][T10328] nr_active_file 0 [ 444.042614][T10328] nr_unevictable 768 [ 444.042614][T10328] nr_slab_reclaimable 7425 [ 444.042614][T10328] nr_slab_unreclaimable 97565 [ 444.042614][T10328] nr_isolated_anon 0 [ 444.042614][T10328] nr_isolated_file 0 [ 444.042614][T10328] workingset_nodes 0 [ 444.042614][T10328] workingset_refault_anon 644 [ 444.042614][T10328] workingset_refault_file 0 [ 444.042614][T10328] workingset_activate_anon 0 [ 444.042614][T10328] workingset_activate_file 0 [ 444.042614][T10328] workingset_restore_anon 0 [ 444.042614][T10328] workingset_restore_file 0 [ 444.042614][T10328] workingset_nodereclaim 0 [ 444.042614][T10328] nr_anon_pages 12082 [ 444.042614][T10328] nr_mapped 47992 [ 444.042614][T10328] nr_file_pages 87341 [ 444.042614][T10328] nr_dirty 342 [ 444.042614][T10328] nr_writeback 0 [ 444.042614][T10328] nr_shmem 22717 [ 444.042614][T10328] nr_shmem_hugepages 0 [ 444.042614][T10328] nr_shmem_pmdmapped 0 [ 444.042614][T10328] nr_file_hugepages 0 [ 444.042614][T10328] nr_file_pmdmapped 0 [ 444.042614][T10328] nr_anon_transparent_hugepages 0 [ 444.042614][T10328] nr_vmscan_write 8540 [ 444.042614][T10328] nr_vmscan_immediate_reclaim 386 [ 444.042614][T10328] nr_dirtied 10998 [ 444.042614][T10328] nr_written 10656 [ 444.042614][T10328] nr_throttled_written 0 [ 444.042614][T10328] nr_kernel_misc_reclaimable 0 [ 444.042614][T10328] nr_foll_pin_acquired 5896 [ 444.042614][T10328] nr_foll_pin_released 5889 [ 444.042614][T10328] nr_vmalloc 100585 [ 444.589152][ T30] audit: type=1400 audit(1784506933.732:797): avc: denied { write } for pid=10322 comm="syz.0.1128" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 444.838200][ T187] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 444.838529][ T30] audit: type=1400 audit(1784506933.752:798): avc: denied { open } for pid=10322 comm="syz.0.1128" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 444.869771][ T30] audit: type=1400 audit(1784506933.772:799): avc: denied { ioctl } for pid=10322 comm="syz.0.1128" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x6e86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 445.021258][ T187] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.037937][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'. [ 445.070089][ T187] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.273010][ T187] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 445.295792][ T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.317019][ T187] usb 1-1: config 0 descriptor?? [ 445.552240][ T30] audit: type=1400 audit(1784506934.923:800): avc: denied { ioctl } for pid=10343 comm="syz.2.1135" path="socket:[32334]" dev="sockfs" ino=32334 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 445.631135][ T30] audit: type=1400 audit(1784506934.953:801): avc: denied { read } for pid=10343 comm="syz.2.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 445.758539][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'. [ 446.670607][ T187] usb 1-1: USB disconnect, device number 16 [ 446.770038][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 446.810848][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 446.870112][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 446.939056][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 446.983628][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 447.048347][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 447.097252][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 447.809193][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 447.809210][ T30] audit: type=1400 audit(1784506937.184:883): avc: denied { module_request } for pid=10388 comm="syz.0.1150" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 447.845286][T10393] __nla_validate_parse: 31 callbacks suppressed [ 447.845304][T10393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1150'. [ 447.921572][ T30] audit: type=1400 audit(1784506937.214:884): avc: denied { sys_module } for pid=10388 comm="syz.0.1150" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 447.983167][ T30] audit: type=1400 audit(1784506937.254:885): avc: denied { read write } for pid=5610 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 448.018693][T10395] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 448.094658][ T30] audit: type=1400 audit(1784506937.264:886): avc: denied { execmem } for pid=10394 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 448.132999][ T30] audit: type=1400 audit(1784506937.324:887): avc: denied { read write } for pid=10397 comm="syz.2.1152" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 448.226306][ T30] audit: type=1400 audit(1784506937.344:888): avc: denied { read write } for pid=10397 comm="syz.2.1152" name="video8" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 448.305994][ T30] audit: type=1400 audit(1784506937.344:889): avc: denied { create } for pid=10397 comm="syz.2.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 448.358370][ T30] audit: type=1400 audit(1784506937.344:890): avc: denied { mounton } for pid=10397 comm="syz.2.1152" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=0 [ 448.426817][ T30] audit: type=1400 audit(1784506937.384:891): avc: denied { mount } for pid=10397 comm="syz.2.1152" name="/" dev="rpc_pipefs" ino=33115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=0 [ 448.509138][ T30] audit: type=1400 audit(1784506937.394:892): avc: denied { read } for pid=10394 comm="syz.1.1151" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 448.960252][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 448.978281][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 449.011306][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 449.037472][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 449.136135][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 449.229491][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 449.269260][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 449.315671][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 449.362728][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 450.528008][T10432] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 450.920167][T10426] Process accounting resumed [ 450.972369][T10442] veth1_macvtap: left promiscuous mode [ 451.365415][T10448] FAULT_INJECTION: forcing a failure. [ 451.365415][T10448] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 451.438817][T10448] CPU: 0 UID: 0 PID: 10448 Comm: syz.4.1166 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.438847][T10448] Tainted: [L]=SOFTLOCKUP [ 451.438853][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 451.438863][T10448] Call Trace: [ 451.438869][T10448] [ 451.438875][T10448] dump_stack_lvl+0x100/0x190 [ 451.438902][T10448] should_fail_ex.cold+0x5/0xa [ 451.438925][T10448] _copy_to_user+0x32/0xd0 [ 451.438948][T10448] simple_read_from_buffer+0xcb/0x170 [ 451.438976][T10448] proc_fail_nth_read+0x1af/0x230 [ 451.439000][T10448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 451.439025][T10448] ? rw_verify_area+0xce/0x6d0 [ 451.439045][T10448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 451.439067][T10448] vfs_read+0x1e4/0xb40 [ 451.439093][T10448] ? __pfx_vfs_read+0x10/0x10 [ 451.439113][T10448] ? __fget_files+0x215/0x3d0 [ 451.439133][T10448] ? __fget_files+0x21f/0x3d0 [ 451.439156][T10448] ksys_read+0x12a/0x250 [ 451.439178][T10448] ? __pfx_ksys_read+0x10/0x10 [ 451.439207][T10448] do_syscall_64+0x115/0x870 [ 451.439224][T10448] ? clear_bhb_loop+0x40/0x90 [ 451.439247][T10448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.439264][T10448] RIP: 0033:0x7f2fbed5e6ce [ 451.439280][T10448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 451.439297][T10448] RSP: 002b:00007f2fbfb96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 451.439364][T10448] RAX: ffffffffffffffda RBX: 00007f2fbfb976c0 RCX: 00007f2fbed5e6ce [ 451.439376][T10448] RDX: 000000000000000f RSI: 00007f2fbfb970a0 RDI: 0000000000000004 [ 451.439384][T10448] RBP: 00007f2fbfb97090 R08: 0000000000000000 R09: 0000000000000000 [ 451.439393][T10448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.439402][T10448] R13: 00007f2fbf026038 R14: 00007f2fbf025fa0 R15: 00007ffc1bfe7c78 [ 451.439426][T10448] [ 452.347677][T10465] trusted_key: encrypted_key: insufficient parameters specified [ 452.460232][T10465] bond0: entered promiscuous mode [ 452.488614][T10465] bond_slave_0: entered promiscuous mode [ 452.505513][T10465] bond_slave_1: entered promiscuous mode [ 452.814260][ T30] kauditd_printk_skb: 6259 callbacks suppressed [ 452.814276][ T30] audit: type=1400 audit(1784506942.196:3228): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 452.866943][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 452.867169][ T5609] audit: audit_backlog=65 > audit_backlog_limit=64 [ 452.903394][T10470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 452.911019][ T5271] audit: audit_lost=1309 audit_rate_limit=0 audit_backlog_limit=64 [ 452.923370][T10470] audit: audit_lost=1310 audit_rate_limit=0 audit_backlog_limit=64 [ 452.932666][ T5271] audit: backlog limit exceeded [ 452.938847][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 452.948071][T10470] audit: backlog limit exceeded [ 452.955616][ T5271] audit: audit_lost=1311 audit_rate_limit=0 audit_backlog_limit=64 [ 453.193449][T10474] __nla_validate_parse: 28 callbacks suppressed [ 453.193461][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 453.668058][T10478] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 455.422299][T10514] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 455.519462][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 455.585246][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 455.614979][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 455.657858][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 455.678528][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 455.705444][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 455.758903][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 455.800872][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 455.856212][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 456.370822][T10539] netlink: 'syz.2.1196': attribute type 15 has an invalid length. [ 456.926653][ T1115] Bluetooth: hci5: Frame reassembly failed (-84) [ 457.214851][T10551] syz.2.1199 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 457.504703][T10553] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 457.726333][T10559] geneve2: entered promiscuous mode [ 457.746283][T10559] geneve2: entered allmulticast mode [ 457.809971][T10559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=10559 comm=syz.2.1203 [ 457.837366][ T30] kauditd_printk_skb: 8378 callbacks suppressed [ 457.837387][ T30] audit: type=1400 audit(1784506947.209:9339): avc: denied { mounton } for pid=10543 comm="syz.1.1198" path="/249/file0" dev="tmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 457.921286][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.928219][T10563] audit: audit_backlog=65 > audit_backlog_limit=64 [ 457.952979][ T30] audit: type=1400 audit(1784506947.249:9340): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 457.974684][ T5271] audit: audit_lost=2068 audit_rate_limit=0 audit_backlog_limit=64 [ 457.991835][ T5271] audit: backlog limit exceeded [ 458.007475][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 458.030403][ T5271] audit: audit_lost=2069 audit_rate_limit=0 audit_backlog_limit=64 [ 458.030639][T10563] audit: audit_lost=2070 audit_rate_limit=0 audit_backlog_limit=64 [ 458.046520][ T30] audit: type=1400 audit(1784506947.249:9341): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 458.994154][ T4926] Bluetooth: hci5: command 0x1003 tx timeout [ 459.001201][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 459.195229][T10579] netlink: 'syz.1.1209': attribute type 15 has an invalid length. [ 459.221495][T10579] __nla_validate_parse: 33 callbacks suppressed [ 459.221513][T10579] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1209'. [ 459.397591][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 459.656048][T10591] netlink: 'syz.0.1214': attribute type 3 has an invalid length. [ 459.728384][T10591] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1214'. [ 460.067985][T10597] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 460.748349][T10623] CIFS: VFS: UNC: missing share name [ 460.775637][T10623] CIFS: VFS: Malformed UNC in devname [ 461.203380][T10629] CIFS: VFS: UNC: missing share name [ 461.237560][T10629] CIFS: VFS: Malformed UNC in devname [ 461.562665][T10637] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 462.344892][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 462.839339][ T30] kauditd_printk_skb: 8439 callbacks suppressed [ 462.839355][ T30] audit: type=1400 audit(1784506952.221:16573): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 462.897486][ T30] audit: type=1400 audit(1784506952.221:16574): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 462.954244][ T30] audit: type=1400 audit(1784506952.221:16575): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 462.956388][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.011471][ T30] audit: type=1400 audit(1784506952.221:16576): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 463.057437][ T30] audit: type=1400 audit(1784506952.221:16577): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 463.102558][ T5271] audit: audit_lost=2473 audit_rate_limit=0 audit_backlog_limit=64 [ 463.104756][ T30] audit: type=1400 audit(1784506952.221:16578): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 463.155197][ T30] audit: type=1400 audit(1784506952.221:16579): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 463.176754][ T30] audit: type=1400 audit(1784506952.221:16580): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 463.794066][T10687] netlink: 'syz.2.1250': attribute type 15 has an invalid length. [ 463.833709][T10687] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1250'. [ 463.923741][T10690] CIFS: VFS: UNC: missing share name [ 463.964298][T10690] CIFS: VFS: Malformed UNC in devname [ 464.073114][T10698] netlink: 'syz.3.1252': attribute type 10 has an invalid length. [ 464.116743][T10698] syz_tun: entered promiscuous mode [ 464.443538][T10698] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 464.513834][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 464.774708][T10714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.883538][T10714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.015331][T10715] erspan0: entered promiscuous mode [ 465.084143][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 465.535128][T10728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1261'. [ 465.561476][T10730] netlink: 'syz.3.1263': attribute type 15 has an invalid length. [ 465.590605][T10730] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1263'. [ 465.798175][T10742] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1267'. [ 465.829246][T10742] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1267'. [ 466.025969][T10750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1268'. [ 467.022964][T10772] netlink: 'syz.0.1277': attribute type 15 has an invalid length. [ 467.056662][T10772] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1277'. [ 467.846822][ T30] kauditd_printk_skb: 10446 callbacks suppressed [ 467.846837][ T30] audit: type=1400 audit(1784506957.234:27023): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 467.882820][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 467.893322][ T5271] audit: audit_lost=2475 audit_rate_limit=0 audit_backlog_limit=64 [ 467.913926][ T5606] audit: audit_backlog=65 > audit_backlog_limit=64 [ 467.921799][ T5609] audit: audit_backlog=65 > audit_backlog_limit=64 [ 467.929978][ T30] audit: type=1400 audit(1784506957.254:27024): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 467.952022][ T5271] audit: backlog limit exceeded [ 467.960538][ T5606] audit: audit_lost=2476 audit_rate_limit=0 audit_backlog_limit=64 [ 467.967388][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 467.968882][ T5609] audit: audit_lost=2477 audit_rate_limit=0 audit_backlog_limit=64 [ 468.116822][T10799] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 468.258266][T10802] netlink: 'syz.4.1289': attribute type 15 has an invalid length. [ 468.312422][T10802] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1289'. [ 468.837573][T10813] CIFS: VFS: UNC: missing share name [ 468.858293][T10813] CIFS: VFS: Malformed UNC in devname [ 468.973943][T10816] ipt_REJECT: ECHOREPLY no longer supported. [ 469.572090][T10834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1295'. [ 471.976378][T10877] netlink: 'syz.3.1317': attribute type 15 has an invalid length. [ 472.026377][T10877] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1317'. [ 472.172704][T10879] netlink: 'syz.0.1318': attribute type 15 has an invalid length. [ 472.219173][T10879] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1318'. [ 472.855995][ T30] kauditd_printk_skb: 8348 callbacks suppressed [ 472.856124][ T30] audit: type=1400 audit(1784506962.236:34856): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 472.914302][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 472.921005][ T5271] audit: audit_lost=2650 audit_rate_limit=0 audit_backlog_limit=64 [ 472.929072][ T5271] audit: backlog limit exceeded [ 472.935236][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 472.941827][ T5271] audit: audit_lost=2651 audit_rate_limit=0 audit_backlog_limit=64 [ 472.955563][ T5271] audit: backlog limit exceeded [ 472.955599][ T30] audit: type=1400 audit(1784506962.246:34857): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 472.995344][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 473.001964][ T5271] audit: audit_lost=2652 audit_rate_limit=0 audit_backlog_limit=64 [ 473.674046][T10902] vlan2: entered promiscuous mode [ 473.700018][T10902] batadv0: entered promiscuous mode [ 473.862971][T10911] FAULT_INJECTION: forcing a failure. [ 473.862971][T10911] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 473.946095][T10911] CPU: 0 UID: 0 PID: 10911 Comm: syz.4.1330 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.946127][T10911] Tainted: [L]=SOFTLOCKUP [ 473.946133][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 473.946143][T10911] Call Trace: [ 473.946149][T10911] [ 473.946156][T10911] dump_stack_lvl+0x100/0x190 [ 473.946183][T10911] should_fail_ex.cold+0x5/0xa [ 473.946201][T10911] ? prepare_alloc_pages+0x16d/0x5f0 [ 473.946224][T10911] should_fail_alloc_page+0xeb/0x140 [ 473.946248][T10911] prepare_alloc_pages+0x1f0/0x5f0 [ 473.946269][T10911] ? rcu_is_watching+0x12/0xc0 [ 473.946296][T10911] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 473.946327][T10911] ? kernel_text_address+0x8d/0x100 [ 473.946345][T10911] ? __kernel_text_address+0xd/0x30 [ 473.946362][T10911] ? unwind_get_return_address+0x59/0xa0 [ 473.946394][T10911] ? __lock_acquire+0x49f/0x1a40 [ 473.946415][T10911] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 473.946442][T10911] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 473.946476][T10911] ? __lock_acquire+0x49f/0x1a40 [ 473.946502][T10911] ? __lock_acquire+0x49f/0x1a40 [ 473.946520][T10911] ? __css_rstat_updated+0x1ce/0x5a0 [ 473.946544][T10911] ? __lock_acquire+0x49f/0x1a40 [ 473.946562][T10911] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 473.946582][T10911] ? policy_nodemask+0xed/0x4f0 [ 473.946606][T10911] alloc_pages_mpol+0x1fb/0x540 [ 473.946628][T10911] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 473.946649][T10911] ? find_held_lock+0x2b/0x80 [ 473.946673][T10911] ? __pud_alloc+0x4f6/0x690 [ 473.946694][T10911] ? __pud_alloc+0x4f6/0x690 [ 473.946717][T10911] alloc_pages_noprof+0x1a/0x160 [ 473.946749][T10911] __pmd_alloc+0x3b/0x950 [ 473.946769][T10911] ? __pud_alloc+0x4fb/0x690 [ 473.946792][T10911] __handle_mm_fault+0xa9c/0x2a00 [ 473.946821][T10911] ? mt_find+0x45e/0x8e0 [ 473.946841][T10911] ? __pfx___handle_mm_fault+0x10/0x10 [ 473.946864][T10911] ? __pfx_mt_find+0x10/0x10 [ 473.946896][T10911] ? find_vma+0xbf/0x140 [ 473.946914][T10911] ? __pfx_find_vma+0x10/0x10 [ 473.946936][T10911] handle_mm_fault+0x37b/0xa30 [ 473.946966][T10911] do_user_addr_fault+0x74c/0x12f0 [ 473.946998][T10911] exc_page_fault+0x6f/0xd0 [ 473.947025][T10911] asm_exc_page_fault+0x26/0x30 [ 473.947042][T10911] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 473.947064][T10911] Code: 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 9d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 473.947081][T10911] RSP: 0018:ffffc9000d637a58 EFLAGS: 00050202 [ 473.947096][T10911] RAX: 0000000000000001 RBX: 000000000000040e RCX: 000000000000040e [ 473.947106][T10911] RDX: 0000000000000001 RSI: ffff888043a1d000 RDI: 00002000000005c0 [ 473.947116][T10911] RBP: 00002000000005c0 R08: 0000000000000000 R09: ffffed1008743a81 [ 473.947126][T10911] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888043a1d000 [ 473.947136][T10911] R13: 00002000000009ce R14: 00007ffffffff000 R15: 0000000000000000 [ 473.947159][T10911] _copy_to_user+0xa4/0xd0 [ 473.947183][T10911] semctl_main+0xa5a/0x2b20 [ 473.947211][T10911] ? __pfx_semctl_main+0x10/0x10 [ 473.947281][T10911] ? __mutex_unlock_slowpath+0x35d/0x930 [ 473.947302][T10911] ksys_semctl.constprop.0+0x201/0x2e0 [ 473.947325][T10911] ? __pfx_ksys_semctl.constprop.0+0x10/0x10 [ 473.947363][T10911] do_syscall_64+0x115/0x870 [ 473.947379][T10911] ? clear_bhb_loop+0x40/0x90 [ 473.947399][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.947417][T10911] RIP: 0033:0x7f2fbed9de99 [ 473.947431][T10911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.947446][T10911] RSP: 002b:00007f2fbfb97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 473.947461][T10911] RAX: ffffffffffffffda RBX: 00007f2fbf025fa0 RCX: 00007f2fbed9de99 [ 473.947472][T10911] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000001 [ 473.947482][T10911] RBP: 00007f2fbfb97090 R08: 0000000000000000 R09: 0000000000000000 [ 473.947492][T10911] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 473.947502][T10911] R13: 00007f2fbf026038 R14: 00007f2fbf025fa0 R15: 00007ffc1bfe7c78 [ 473.947526][T10911] [ 474.263758][ T4926] Bluetooth: hci5: command 0x1003 tx timeout [ 474.273425][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 474.553231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 474.689188][T10921] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.1333'. [ 474.757025][T10923] CIFS: VFS: UNC: missing share name [ 474.779828][T10923] CIFS: VFS: Malformed UNC in devname [ 474.811058][T10907] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 476.061337][T10958] pim6reg1: entered promiscuous mode [ 476.082643][T10958] pim6reg1: entered allmulticast mode [ 476.547872][T10970] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1349'. [ 476.735671][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 477.865154][ T30] kauditd_printk_skb: 8092 callbacks suppressed [ 477.865170][ T30] audit: type=1400 audit(1784506967.239:41674): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 477.946074][ T30] audit: type=1400 audit(1784506967.249:41675): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 477.967421][ T30] audit: type=1400 audit(1784506967.249:41676): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 477.995512][ T30] audit: type=1400 audit(1784506967.249:41677): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 478.035103][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 478.047812][ T5271] audit: audit_lost=3078 audit_rate_limit=0 audit_backlog_limit=64 [ 478.056612][ T5271] audit: backlog limit exceeded [ 478.077061][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 478.085579][ T5271] audit: audit_lost=3079 audit_rate_limit=0 audit_backlog_limit=64 [ 478.110695][ T5271] audit: backlog limit exceeded [ 478.718714][T11009] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1362'. [ 478.868821][T11011] bond2: option xmit_hash_policy: invalid value (6) [ 478.908736][T11011] bond2 (unregistering): Released all slaves [ 478.918300][T11000] syz.1.1359 (11000): drop_caches: 2 [ 480.233989][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 480.260371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 480.341412][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 480.486992][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 480.602971][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 480.677565][T11055] sch_tbf: peakrate 9002274071266264692 is lower than or equals to rate 14180566848366662437 ! [ 480.729646][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 480.807468][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 480.906001][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 480.979582][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 482.103858][T11060] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.114001][T11060] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.585783][T11060] bond0: left promiscuous mode [ 482.611214][T11060] bond_slave_0: left promiscuous mode [ 482.633623][T11060] bond_slave_1: left promiscuous mode [ 482.871325][ T30] kauditd_printk_skb: 7047 callbacks suppressed [ 482.871356][ T30] audit: type=1400 audit(1784506972.261:48725): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 482.912867][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.922109][ T5271] audit: audit_lost=3080 audit_rate_limit=0 audit_backlog_limit=64 [ 482.933849][ T5271] audit: backlog limit exceeded [ 482.943474][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.954047][ T30] audit: type=1400 audit(1784506972.261:48726): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 482.954915][ T5271] audit: audit_lost=3081 audit_rate_limit=0 audit_backlog_limit=64 [ 482.989441][ T4926] Bluetooth: hci5: command 0x1003 tx timeout [ 482.996797][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 483.044645][ T30] audit: type=1400 audit(1784506972.261:48727): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 483.072512][ T30] audit: type=1400 audit(1784506972.261:48728): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 483.084450][T11060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.096159][ T30] audit: type=1400 audit(1784506972.261:48729): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 483.275115][T11060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.695830][T11060] geneve1: left promiscuous mode [ 483.958013][T11060] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 484.177491][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 484.208568][ T1115] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.232131][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 484.232194][ T1115] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.300121][ T1115] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.326254][ T1115] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.411104][T11060] Process accounting paused [ 485.952748][T11124] __nla_validate_parse: 27 callbacks suppressed [ 485.952780][T11124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1402'. [ 487.876848][ T30] kauditd_printk_skb: 5723 callbacks suppressed [ 487.876868][ T30] audit: type=1400 audit(1784506977.264:54449): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 487.911112][ T30] audit: type=1400 audit(1784506977.264:54450): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 487.958716][ T30] audit: type=1400 audit(1784506977.264:54451): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 488.000545][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 488.007563][ T30] audit: type=1400 audit(1784506977.304:54452): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 488.007746][ T5271] audit: audit_lost=3083 audit_rate_limit=0 audit_backlog_limit=64 [ 488.072561][ T30] audit: type=1400 audit(1784506977.304:54453): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 488.121289][ T5271] audit: backlog limit exceeded [ 488.129921][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 488.136869][ T30] audit: type=1400 audit(1784506977.304:54454): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 490.684518][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 490.691993][T11149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1410'. [ 490.736736][T11149] team0 (unregistering): Port device team_slave_0 removed [ 490.768246][T11149] team0 (unregistering): Port device team_slave_1 removed [ 490.926496][T11152] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1410'. [ 491.281707][T11172] gretap2: entered promiscuous mode [ 491.790068][T11181] macsec1: entered promiscuous mode [ 491.812116][T11181] virt_wifi0: entered promiscuous mode [ 491.841318][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1417'. [ 492.889820][ T30] kauditd_printk_skb: 8333 callbacks suppressed [ 492.889836][ T30] audit: type=1400 audit(1784506982.286:62682): avc: denied { read } for pid=11195 comm="syz.0.1421" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 492.947860][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 492.957685][T11196] audit: audit_backlog=65 > audit_backlog_limit=64 [ 492.965021][ T5271] audit: audit_lost=3120 audit_rate_limit=0 audit_backlog_limit=64 [ 492.965700][ T30] audit: type=1400 audit(1784506982.276:62681): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 492.995543][ T5271] audit: backlog limit exceeded [ 493.006029][T11196] audit: audit_lost=3121 audit_rate_limit=0 audit_backlog_limit=64 [ 493.014711][T11196] audit: backlog limit exceeded [ 493.015004][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.021752][ T30] audit: type=1400 audit(1784506982.286:62683): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 493.090611][T11198] netlink: 'syz.1.1422': attribute type 15 has an invalid length. [ 493.121434][T11198] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1422'. [ 494.433652][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 494.489485][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 494.526164][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 494.551390][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 494.591352][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 494.667853][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 494.761753][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 494.829385][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1430'. [ 495.870632][T11244] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 496.981435][T11275] CIFS: VFS: UNC: missing share name [ 496.998879][T11277] __nla_validate_parse: 31 callbacks suppressed [ 496.998897][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 497.027323][T11275] CIFS: VFS: Malformed UNC in devname [ 497.451991][ T4926] Bluetooth: hci5: command 0x1003 tx timeout [ 497.460837][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 497.650854][T11290] bridge_slave_1: left allmulticast mode [ 497.678578][T11290] bridge_slave_1: left promiscuous mode [ 497.702325][T11290] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.779847][T11290] bridge_slave_0: left allmulticast mode [ 497.801917][T11290] bridge_slave_0: left promiscuous mode [ 497.864276][T11290] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.892362][ T30] kauditd_printk_skb: 8263 callbacks suppressed [ 497.892384][ T30] audit: type=1400 audit(1784506987.279:70348): avc: denied { read write } for pid=5608 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 498.025909][ T30] audit: type=1400 audit(1784506987.289:70349): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 498.070762][ T30] audit: type=1400 audit(1784506987.289:70350): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 498.132112][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.134399][T11297] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.174117][ T30] audit: type=1400 audit(1784506987.289:70351): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 498.207293][T11299] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.224408][T11297] audit: audit_lost=3322 audit_rate_limit=0 audit_backlog_limit=64 [ 498.237799][T11299] audit: audit_lost=3323 audit_rate_limit=0 audit_backlog_limit=64 [ 498.257482][ T5608] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.557824][T11306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 498.564432][T11306] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 498.656465][T11307] netlink: 'syz.0.1460': attribute type 15 has an invalid length. [ 498.714571][T11307] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1460'. [ 498.775874][T11306] vhci_hcd vhci_hcd.0: Device attached [ 498.884873][T11309] vhci_hcd: connection closed [ 498.920322][ T6008] vhci_hcd vhci_hcd.2: stop threads [ 498.963336][ T6008] vhci_hcd vhci_hcd.2: release socket [ 498.993141][ T6008] vhci_hcd vhci_hcd.2: disconnect device [ 499.031520][ T5711] usb 38-1: enqueue for inactive port 0 [ 499.542333][ T5711] usb usb38-port1: attempt power cycle [ 500.137641][ T5711] usb usb38-port1: unable to enumerate USB device [ 500.293439][T11346] netlink: 'syz.3.1475': attribute type 15 has an invalid length. [ 500.303339][T11346] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1475'. [ 500.894449][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.900886][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.152248][T11370] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1485'. [ 501.323321][T11374] netlink: 'syz.2.1487': attribute type 15 has an invalid length. [ 501.364040][T11374] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1487'. [ 501.444806][T11379] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 501.783728][T11384] vlan2: entered promiscuous mode [ 501.790817][T11384] hsr0: entered promiscuous mode [ 501.806038][T11384] vlan2: entered allmulticast mode [ 501.816080][T11384] hsr0: entered allmulticast mode [ 501.832477][T11384] hsr_slave_0: entered allmulticast mode [ 501.842160][T11384] hsr_slave_1: entered allmulticast mode [ 502.198160][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1491'. [ 502.247633][T11390] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1491'. [ 502.677466][T11403] netlink: 'syz.0.1496': attribute type 15 has an invalid length. [ 502.726802][T11403] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1496'. [ 502.817139][T11409] netlink: 'syz.3.1499': attribute type 15 has an invalid length. [ 502.864395][T11409] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1499'. [ 502.900688][ T30] kauditd_printk_skb: 8802 callbacks suppressed [ 502.900703][ T30] audit: type=1400 audit(1784506992.291:78935): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 502.966981][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 502.988139][ T5271] audit: audit_lost=3397 audit_rate_limit=0 audit_backlog_limit=64 [ 503.000644][T11415] audit: audit_backlog=65 > audit_backlog_limit=64 [ 503.008371][T11413] audit: audit_backlog=65 > audit_backlog_limit=64 [ 503.023914][T11413] audit: audit_lost=3398 audit_rate_limit=0 audit_backlog_limit=64 [ 503.040701][T11413] audit: backlog limit exceeded [ 503.045835][ T30] audit: type=1400 audit(1784506992.301:78936): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 503.069331][T11413] audit: audit_backlog=65 > audit_backlog_limit=64 [ 503.079123][T11415] audit: audit_lost=3399 audit_rate_limit=0 audit_backlog_limit=64 [ 503.586610][T11429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1506'. [ 503.796182][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1508'. [ 503.840981][T11433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.983716][T11433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.525383][T11445] netlink: 'syz.1.1512': attribute type 15 has an invalid length. [ 504.568082][T11445] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1512'. [ 504.865609][T11453] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 504.890555][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 504.891944][ T4926] Bluetooth: hci5: command 0x1003 tx timeout [ 505.625930][T11463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1520'. [ 505.833575][T11467] netlink: 'syz.4.1521': attribute type 1 has an invalid length. [ 506.006517][T11467] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.175418][T11470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.211781][T11470] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 506.242205][T11470] bond1: (slave vti0): Error -95 calling set_mac_address [ 506.305680][T11483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 506.452348][T11473] gretap3: entered promiscuous mode [ 506.540654][T11467] macvlan2: entered promiscuous mode [ 506.579945][T11467] macvlan2: entered allmulticast mode [ 506.615116][T11467] bond1: entered promiscuous mode [ 506.663040][T11467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 506.708838][T11467] bond1: left promiscuous mode [ 506.778224][T11484] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1523'. [ 507.337052][T11490] netlink: 'syz.1.1526': attribute type 15 has an invalid length. [ 507.352099][T11490] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1526'. [ 507.916649][ T30] kauditd_printk_skb: 11184 callbacks suppressed [ 507.916665][ T30] audit: type=1400 audit(1784506997.314:88269): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 507.987383][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 508.031634][ T5271] audit: audit_lost=4017 audit_rate_limit=0 audit_backlog_limit=64 [ 508.050740][ T5271] audit: backlog limit exceeded [ 508.066878][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 508.078505][T11492] audit: audit_backlog=65 > audit_backlog_limit=64 [ 508.085113][ T30] audit: type=1400 audit(1784506997.314:88270): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 508.091361][ T5271] audit: audit_lost=4018 audit_rate_limit=0 audit_backlog_limit=64 [ 508.146142][T11492] audit: audit_lost=4019 audit_rate_limit=0 audit_backlog_limit=64 [ 508.178195][ T30] audit: type=1400 audit(1784506997.314:88271): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 508.285667][T11502] trusted_key: encrypted_key: insufficient parameters specified [ 508.365972][T11492] trusted_key: encrypted_key: insufficient parameters specified [ 509.726390][T11524] netlink: 'syz.0.1537': attribute type 15 has an invalid length. [ 509.772379][T11524] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1537'. [ 510.098564][T11538] syz.2.1542 (11538): drop_caches: 2 [ 510.248385][T11546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1543'. [ 510.358443][T11546] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1543'. [ 511.852009][T11573] netlink: 'syz.4.1551': attribute type 15 has an invalid length. [ 511.889419][T11573] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1551'. [ 512.925570][ T30] kauditd_printk_skb: 5817 callbacks suppressed [ 512.925587][ T30] audit: type=1400 audit(1784507002.326:93919): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 513.010826][ T30] audit: type=1400 audit(1784507002.336:93920): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 513.052956][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.084119][ T5271] audit: audit_lost=4076 audit_rate_limit=0 audit_backlog_limit=64 [ 513.086501][ T30] audit: type=1400 audit(1784507002.336:93921): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 513.104064][ T5271] audit: backlog limit exceeded [ 513.138071][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.161656][ T5271] audit: audit_lost=4077 audit_rate_limit=0 audit_backlog_limit=64 [ 513.186900][ T5271] audit: backlog limit exceeded [ 513.201805][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 514.440551][T11544] Process accounting resumed [ 514.543574][T11618] netlink: 'syz.4.1565': attribute type 15 has an invalid length. [ 514.593511][T11618] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1565'. [ 514.607755][T11620] CIFS: VFS: UNC: missing share name [ 514.627554][T11620] CIFS: VFS: Malformed UNC in devname [ 514.678607][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 515.062846][T11631] macsec1: entered promiscuous mode [ 515.083854][T11631] virt_wifi0: entered promiscuous mode [ 515.107946][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 516.027154][T11656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36162 sclass=netlink_route_socket pid=11656 comm=syz.1.1579 [ 516.111552][T11656] netlink: 'syz.1.1579': attribute type 10 has an invalid length. [ 516.129886][T11656] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1579'. [ 516.313865][T11658] netlink: 'syz.4.1580': attribute type 15 has an invalid length. [ 516.339171][T11658] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1580'. [ 516.631400][T11666] netlink: 'syz.1.1584': attribute type 5 has an invalid length. [ 516.678262][T11666] ip6erspan0: entered promiscuous mode [ 516.727227][ T5622] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 516.734290][ T4926] Bluetooth: hci5: command 0x1003 tx timeout [ 517.798379][T11699] netlink: 'syz.4.1595': attribute type 15 has an invalid length. [ 517.838002][T11699] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1595'. [ 517.939157][ T30] kauditd_printk_skb: 7795 callbacks suppressed [ 517.939177][ T30] audit: type=1400 audit(1784507007.309:101448): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 518.062695][ T30] audit: type=1400 audit(1784507007.339:101449): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 518.137204][ T30] audit: type=1400 audit(1784507007.339:101450): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 518.218256][ T30] audit: type=1400 audit(1784507007.339:101451): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 518.221103][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.297445][T11710] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.303287][ T5271] audit: audit_lost=4168 audit_rate_limit=0 audit_backlog_limit=64 [ 518.310886][ T5610] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.321856][ T30] audit: type=1400 audit(1784507007.339:101452): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 518.351540][T11710] audit: audit_lost=4169 audit_rate_limit=0 audit_backlog_limit=64 [ 519.000028][T11719] CIFS: VFS: UNC: missing share name [ 519.054332][T11719] CIFS: VFS: Malformed UNC in devname [ 519.109466][T11724] CIFS: VFS: UNC: missing share name [ 519.151129][T11724] CIFS: VFS: Malformed UNC in devname [ 519.620723][T11733] netlink: 'syz.4.1609': attribute type 15 has an invalid length. [ 519.671196][T11733] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1609'. [ 519.837200][T11737] CIFS: VFS: UNC: missing share name [ 519.888263][T11737] CIFS: VFS: Malformed UNC in devname [ 520.784687][T11757] IPv6: Can't replace route, no match found [ 522.342639][T11780] netlink: 'syz.0.1623': attribute type 15 has an invalid length. [ 522.369453][T11780] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1623'. [ 522.865114][T11790] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11790 comm=syz.0.1627 [ 522.941269][ T30] kauditd_printk_skb: 5579 callbacks suppressed [ 522.941284][ T30] audit: type=1400 audit(1784507012.351:106467): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.011060][ T5271] audit: audit_backlog=66 > audit_backlog_limit=64 [ 523.018105][ T30] audit: type=1400 audit(1784507012.351:106468): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.018151][ T30] audit: type=1400 audit(1784507012.351:106469): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.018188][ T30] audit: type=1400 audit(1784507012.351:106470): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.018225][ T30] audit: type=1400 audit(1784507012.351:106471): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.018257][ T30] audit: type=1400 audit(1784507012.351:106472): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 523.063655][ T5271] audit: audit_lost=4358 audit_rate_limit=0 audit_backlog_limit=64 [ 523.232042][ T5271] audit: backlog limit exceeded [ 523.244323][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.918800][ T5622] Bluetooth: hci5: command 0x1003 tx timeout [ 523.918828][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 524.595679][T11810] CIFS: VFS: UNC: missing share name [ 524.645729][T11810] CIFS: VFS: Malformed UNC in devname [ 526.805077][T11853] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5607] was attempted by "ss(pE{بD8HEV\x5c\x0cE0p2\x09'؛69\x076\x0c)\x0a!'Vv>y1lV35ФiAVDoU9)KbVDc\x07ojc9xNRH9p\x22L+Xp>iN0zR>:MLoHIG\x07B9r(dKf^7_N䀟\x5c-D}i;Zzd8:\x072hnk*d-l1N5Ky\x22b%l5.dsUkc$ audit_backlog_limit=64 [ 528.023641][T11872] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.030243][ T5271] audit: audit_lost=4395 audit_rate_limit=0 audit_backlog_limit=64 [ 528.041876][ T5271] audit: backlog limit exceeded [ 528.051132][ T30] audit: type=1400 audit(1784507017.384:112913): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 528.075779][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.091884][T11873] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.099354][ T5271] audit: audit_lost=4396 audit_rate_limit=0 audit_backlog_limit=64 [ 528.118404][ T5271] audit: backlog limit exceeded [ 528.142539][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1651'. [ 529.731687][ T1115] Bluetooth: hci5: Frame reassembly failed (-84) [ 531.247089][T11920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11920 comm=syz.3.1667 [ 531.757271][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 531.764713][ T5622] Bluetooth: hci5: command 0x1003 tx timeout [ 532.958617][ T30] kauditd_printk_skb: 8906 callbacks suppressed [ 532.958645][ T30] audit: type=1400 audit(1784507022.376:121816): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 533.029680][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.047572][ T5271] audit: audit_lost=4399 audit_rate_limit=0 audit_backlog_limit=64 [ 533.078782][ T30] audit: type=1400 audit(1784507022.376:121817): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 533.106946][ T5271] audit: backlog limit exceeded [ 533.124690][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.159322][ T5271] audit: audit_lost=4400 audit_rate_limit=0 audit_backlog_limit=64 [ 533.185508][ T5271] audit: backlog limit exceeded [ 533.197348][ T30] audit: type=1400 audit(1784507022.376:121818): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 533.229606][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.542654][T11950] syzkaller0: entered promiscuous mode [ 533.571134][T11950] syzkaller0: entered allmulticast mode [ 535.705702][T11988] bridge3: entered promiscuous mode [ 535.735180][T11988] bridge3: entered allmulticast mode [ 535.890294][T11988] team0: Port device bridge3 added [ 536.289479][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1701'. [ 537.005916][T12018] netlink: 'syz.1.1705': attribute type 13 has an invalid length. [ 537.193721][T12018] ipvlan1: Caught tx_queue_len zero misconfig [ 537.433277][ T5622] Bluetooth: hci5: command 0x1003 tx timeout [ 537.433360][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 537.962879][ T30] kauditd_printk_skb: 11650 callbacks suppressed [ 537.962908][ T30] audit: type=1400 audit(1784507027.379:132678): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 537.993395][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 537.999917][ T5271] audit: audit_lost=4665 audit_rate_limit=0 audit_backlog_limit=64 [ 538.018663][T12041] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.022397][T12042] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.037430][ T30] audit: type=1400 audit(1784507027.379:132679): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 538.041559][T12041] audit: audit_lost=4666 audit_rate_limit=0 audit_backlog_limit=64 [ 538.060638][T12042] audit: audit_lost=4667 audit_rate_limit=0 audit_backlog_limit=64 [ 538.071674][ T5271] audit: backlog limit exceeded [ 538.087483][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.527342][T12052] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 538.533891][T12052] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 538.548709][T12052] vhci_hcd vhci_hcd.0: Device attached [ 538.582671][T12055] vhci_hcd: connection closed [ 538.582939][ T13] vhci_hcd vhci_hcd.4: stop threads [ 538.611112][ T13] vhci_hcd vhci_hcd.4: release socket [ 538.621823][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 538.939213][T12068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1726'. [ 538.963789][T12068] ip6gre1: entered promiscuous mode [ 538.979207][T12068] ip6gre1: entered allmulticast mode [ 539.770550][T12087] netlink: 'syz.3.1734': attribute type 1 has an invalid length. [ 539.830692][T12087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 540.160513][T12102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1736'. [ 540.204339][T12103] IPv6: Can't replace route, no match found [ 541.354075][T12115] xfrm1: entered allmulticast mode [ 541.429161][T12115] ip6gretap0: entered promiscuous mode [ 542.525989][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 542.969185][ T30] kauditd_printk_skb: 10395 callbacks suppressed [ 542.969200][ T30] audit: type=1400 audit(1784507032.391:142651): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 543.002393][ T30] audit: type=1400 audit(1784507032.421:142652): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 543.028218][ T30] audit: type=1400 audit(1784507032.421:142653): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 543.053482][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 543.060696][ T5271] audit: audit_lost=4809 audit_rate_limit=0 audit_backlog_limit=64 [ 543.074630][ T5271] audit: backlog limit exceeded [ 543.089077][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 543.107474][ T5271] audit: audit_lost=4810 audit_rate_limit=0 audit_backlog_limit=64 [ 543.120493][ T30] audit: type=1400 audit(1784507032.421:142654): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 543.150294][ T5271] audit: backlog limit exceeded [ 544.468497][ T5614] Bluetooth: hci5: command 0x1003 tx timeout [ 544.479936][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 544.560213][ T5622] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 544.561411][ T5626] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 544.570325][ T5622] Bluetooth: hci7: command 0x1003 tx timeout [ 544.709765][T12133] Process accounting paused [ 544.854102][T12160] syz.0.1761 (12160): drop_caches: 2 [ 544.960460][T12165] lo: Caught tx_queue_len zero misconfig [ 545.013733][T12165] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 545.143197][T12168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1762'. [ 546.758828][T12200] futex_wake_op: syz.1.1774 tries to shift op by 36; fix this program [ 547.666723][ T5622] Bluetooth: hci5: command 0x1003 tx timeout [ 547.667282][ T5626] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 547.976898][ T30] kauditd_printk_skb: 8140 callbacks suppressed [ 547.976924][ T30] audit: type=1400 audit(1784507037.394:149928): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 548.027882][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.035950][ T5271] audit: audit_lost=5100 audit_rate_limit=0 audit_backlog_limit=64 [ 548.046274][ T5271] audit: backlog limit exceeded [ 548.047211][ T5610] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.067170][ T30] audit: type=1400 audit(1784507037.394:149929): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 548.090835][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.098143][ T5271] audit: audit_lost=5101 audit_rate_limit=0 audit_backlog_limit=64 [ 548.113132][ T5271] audit: backlog limit exceeded [ 548.124433][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 548.330363][T12218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1779'. [ 548.886578][T12235] netlink: 'syz.2.1787': attribute type 15 has an invalid length. [ 548.916894][T12235] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1787'. [ 548.928994][T12236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1786'. [ 549.143597][T12238] EXT4-fs: Conflicting test_dummy_encryption options [ 550.110434][T12264] netlink: 'syz.2.1799': attribute type 10 has an invalid length. [ 550.160451][T12264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1799'. [ 550.252803][T12268] netlink: 'syz.3.1800': attribute type 15 has an invalid length. [ 550.302901][T12268] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1800'. [ 550.413487][T12264] team0: Port device geneve1 added [ 550.664499][T12272] syz.1.1802 (12272): drop_caches: 2 [ 552.185978][T12299] netlink: 'syz.2.1813': attribute type 15 has an invalid length. [ 552.212683][T12299] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1813'. [ 552.500644][T12303] FAULT_INJECTION: forcing a failure. [ 552.500644][T12303] name failslab, interval 1, probability 0, space 0, times 0 [ 552.538973][T12303] CPU: 1 UID: 0 PID: 12303 Comm: syz.2.1815 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.538993][T12303] Tainted: [L]=SOFTLOCKUP [ 552.538997][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 552.539004][T12303] Call Trace: [ 552.539007][T12303] [ 552.539012][T12303] dump_stack_lvl+0x100/0x190 [ 552.539030][T12303] should_fail_ex.cold+0x5/0xa [ 552.539042][T12303] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 552.539058][T12303] should_failslab+0xc2/0x120 [ 552.539071][T12303] kmem_cache_alloc_noprof+0x91/0x6a0 [ 552.539083][T12303] ? skb_clone+0x190/0x400 [ 552.539098][T12303] skb_clone+0x190/0x400 [ 552.539110][T12303] netlink_deliver_tap+0xaed/0xcc0 [ 552.539129][T12303] netlink_dump+0x909/0xd00 [ 552.539145][T12303] ? __pfx_netlink_dump+0x10/0x10 [ 552.539158][T12303] ? __netlink_lookup+0x65c/0x900 [ 552.539181][T12303] __netlink_dump_start+0x6d6/0x990 [ 552.539198][T12303] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 552.539213][T12303] rtnetlink_rcv_msg+0xb3e/0xe90 [ 552.539226][T12303] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 552.539240][T12303] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 552.539253][T12303] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 552.539272][T12303] ? ref_tracker_free+0x37e/0x6c0 [ 552.539287][T12303] netlink_rcv_skb+0x159/0x420 [ 552.539303][T12303] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 552.539316][T12303] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.539337][T12303] ? netlink_deliver_tap+0x1ae/0xcc0 [ 552.539355][T12303] netlink_unicast+0x585/0x850 [ 552.539373][T12303] ? __pfx_netlink_unicast+0x10/0x10 [ 552.539393][T12303] netlink_sendmsg+0x8b0/0xda0 [ 552.539411][T12303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.539428][T12303] ? selinux_socket_sendmsg+0x198/0x2f0 [ 552.539446][T12303] ____sys_sendmsg+0xa4d/0xbe0 [ 552.539459][T12303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.539476][T12303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.539497][T12303] ___sys_sendmsg+0x190/0x1e0 [ 552.539513][T12303] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.539527][T12303] ? __lock_acquire+0x49f/0x1a40 [ 552.539539][T12303] ? get_pid_task+0x106/0x250 [ 552.539570][T12303] __sys_sendmsg+0x160/0x210 [ 552.539582][T12303] ? __pfx___sys_sendmsg+0x10/0x10 [ 552.539601][T12303] do_syscall_64+0x115/0x870 [ 552.539612][T12303] ? clear_bhb_loop+0x40/0x90 [ 552.539625][T12303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.539636][T12303] RIP: 0033:0x7f914619de99 [ 552.539646][T12303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.539657][T12303] RSP: 002b:00007f9147054028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.539667][T12303] RAX: ffffffffffffffda RBX: 00007f9146425fa0 RCX: 00007f914619de99 [ 552.539674][T12303] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 552.539681][T12303] RBP: 00007f9147054090 R08: 0000000000000000 R09: 0000000000000000 [ 552.539687][T12303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.539693][T12303] R13: 00007f9146426038 R14: 00007f9146425fa0 R15: 00007ffe2b7edc68 [ 552.539707][T12303] [ 553.235843][ T30] kauditd_printk_skb: 6318 callbacks suppressed [ 553.235857][ T30] audit: type=1400 audit(1784507041.974:156240): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 553.344146][ T30] audit: type=1400 audit(1784507042.654:156242): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 553.406062][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 553.429846][T12307] audit: audit_backlog=65 > audit_backlog_limit=64 [ 553.437132][ T5271] audit: audit_lost=5105 audit_rate_limit=0 audit_backlog_limit=64 [ 553.439059][T12307] audit: audit_lost=5106 audit_rate_limit=0 audit_backlog_limit=64 [ 553.472761][ T30] audit: type=1400 audit(1784507042.654:156243): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 553.501519][ T5271] audit: backlog limit exceeded [ 553.513542][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 553.530743][ T5271] audit: audit_lost=5107 audit_rate_limit=0 audit_backlog_limit=64 [ 553.906479][ T5622] Bluetooth: hci5: command 0x1003 tx timeout [ 553.911620][ T5626] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 557.630625][T12384] netlink: 'syz.2.1847': attribute type 15 has an invalid length. [ 557.645446][T12384] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1847'. [ 558.238628][ T30] kauditd_printk_skb: 6133 callbacks suppressed [ 558.238658][ T30] audit: type=1400 audit(1784507047.654:162372): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 558.323222][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.342192][ T5271] audit: audit_lost=5109 audit_rate_limit=0 audit_backlog_limit=64 [ 558.354043][T12390] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.368745][ T5271] audit: backlog limit exceeded [ 558.374782][T12390] audit: audit_lost=5110 audit_rate_limit=0 audit_backlog_limit=64 [ 558.388689][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.405624][T12390] audit: backlog limit exceeded [ 558.410718][ T5271] audit: audit_lost=5111 audit_rate_limit=0 audit_backlog_limit=64 [ 558.422504][T12390] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.590540][T12397] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 559.428308][ T5626] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 559.436285][ T5622] Bluetooth: hci5: command 0x1003 tx timeout [ 560.362745][T12429] netlink: 'syz.2.1862': attribute type 15 has an invalid length. [ 560.422356][T12429] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1862'. [ 561.869706][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 561.899319][T12440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1869'. [ 562.309938][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.317439][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.552678][T12450] netlink: 'syz.1.1873': attribute type 15 has an invalid length. [ 562.602680][T12450] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1873'. [ 563.248313][ T30] kauditd_printk_skb: 6264 callbacks suppressed [ 563.248328][ T30] audit: type=1400 audit(1784507052.674:168295): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 563.312196][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.314740][T12459] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.322355][T12461] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.338852][ T5271] audit: audit_lost=5226 audit_rate_limit=0 audit_backlog_limit=64 [ 563.344458][T12459] audit: audit_lost=5227 audit_rate_limit=0 audit_backlog_limit=64 [ 563.362688][T12461] audit: audit_lost=5228 audit_rate_limit=0 audit_backlog_limit=64 [ 563.370736][ T30] audit: type=1400 audit(1784507052.694:168296): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 563.376385][T12459] audit: backlog limit exceeded [ 563.396531][ T5271] audit: backlog limit exceeded [ 563.496436][T12465] netlink: 'syz.0.1875': attribute type 15 has an invalid length. [ 563.508733][T12465] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1875'. [ 563.864082][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 563.896386][ T490] Bluetooth: hci7: Frame reassembly failed (-84) [ 563.964697][T12480] netlink: 'syz.4.1884': attribute type 15 has an invalid length. [ 563.993537][T12480] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1884'. [ 564.309615][ T5614] Bluetooth: hci5: command 0x1003 tx timeout [ 564.317772][ T5626] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 565.908746][ T5622] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 565.908892][ T4926] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 565.918831][ T5622] Bluetooth: hci7: command 0x1003 tx timeout [ 566.224237][T12512] netlink: 'syz.3.1896': attribute type 15 has an invalid length. [ 566.274742][T12512] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1896'. [ 567.416491][T12550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1911'. [ 567.484283][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1911'. [ 567.779327][T12556] syz.4.1915 (12556): drop_caches: 2 [ 567.903696][T12561] trusted_key: encrypted_key: master key parameter 'ecryptz$fs' is invalid [ 568.256456][ T30] kauditd_printk_skb: 11160 callbacks suppressed [ 568.256472][ T30] audit: type=1400 audit(1784507057.684:178172): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 568.296903][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 568.307171][T12574] audit: audit_backlog=65 > audit_backlog_limit=64 [ 568.324033][T12574] audit: audit_lost=5657 audit_rate_limit=0 audit_backlog_limit=64 [ 568.342016][T12574] audit: backlog limit exceeded [ 568.354263][T12577] audit: audit_backlog=65 > audit_backlog_limit=64 [ 568.364908][T12577] audit: audit_lost=5658 audit_rate_limit=0 audit_backlog_limit=64 [ 568.388869][T12577] audit: backlog limit exceeded [ 568.397179][T12577] audit: audit_backlog=65 > audit_backlog_limit=64 [ 568.403685][T12577] audit: audit_lost=5659 audit_rate_limit=0 audit_backlog_limit=64 [ 568.937795][ T1115] Bluetooth: hci5: Frame reassembly failed (-84) [ 569.669655][T12599] CIFS: VFS: UNC: missing share name [ 569.688933][T12603] CIFS: VFS: UNC: missing share name [ 569.695542][T12599] CIFS: VFS: Malformed UNC in devname [ 569.702364][T12603] CIFS: VFS: Malformed UNC in devname [ 570.121440][T12607] SET target dimension over the limit! [ 570.948648][ T5622] Bluetooth: hci5: command 0x1003 tx timeout [ 570.948648][ T4926] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 571.465907][T12644] CIFS: VFS: UNC: missing share name [ 571.515970][T12644] CIFS: VFS: Malformed UNC in devname [ 573.266485][ T30] kauditd_printk_skb: 8697 callbacks suppressed [ 573.266516][ T30] audit: type=1400 audit(1784507062.684:186654): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 573.352636][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 573.384755][ T5271] audit: audit_lost=5732 audit_rate_limit=0 audit_backlog_limit=64 [ 573.420116][ T5271] audit: backlog limit exceeded [ 573.449602][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 573.481090][ T5271] audit: audit_lost=5733 audit_rate_limit=0 audit_backlog_limit=64 [ 573.513363][ T5271] audit: backlog limit exceeded [ 573.525428][ T5271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 573.536776][ T30] audit: type=1400 audit(1784507062.684:186655): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 573.579782][ T5271] audit: audit_lost=5734 audit_rate_limit=0 audit_backlog_limit=64 [ 573.681738][T12663] futex_wake_op: syz.4.1953 tries to shift op by 36; fix this program [ 573.921057][T12678] netlink: 'syz.2.1959': attribute type 15 has an invalid length. [ 573.928888][T12678] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1959'. [ 574.862563][T12701] xt_l2tp: missing protocol rule (udp|l2tpip) [ 679.726122][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 679.733091][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12674/1:b..l [ 679.741545][ C0] rcu: (detected by 0, t=10503 jiffies, g=66717, q=507 ncpus=2) [ 679.749249][ C0] task:syz.1.1957 state:R running task stack:26888 pid:12674 tgid:12670 ppid:5609 task_flags:0x400140 flags:0x00080002 [ 679.763237][ C0] Call Trace: [ 679.766512][ C0] [ 679.769436][ C0] __schedule+0x125c/0x6730 [ 679.773947][ C0] ? irqentry_exit+0x24d/0xa00 [ 679.778704][ C0] ? __pfx___schedule+0x10/0x10 [ 679.783562][ C0] preempt_schedule_irq+0x50/0x90 [ 679.788585][ C0] irqentry_exit+0x205/0xa00 [ 679.793176][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 679.798647][ C0] RIP: 0010:unwind_next_frame+0xd42/0x2090 [ 679.804466][ C0] Code: df 48 c1 ee 03 4c 8b 44 24 18 80 3c 16 00 0f 85 b2 0f 00 00 48 8b 14 24 49 89 45 48 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 e8 0d 00 00 4c 89 e2 4d 89 75 38 48 b8 00 00 00 [ 679.824069][ C0] RSP: 0018:ffffc90004ae7008 EFLAGS: 00000a02 [ 679.830126][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91d23eb8 [ 679.838086][ C0] RDX: 1ffff9200095ce16 RSI: 1ffff9200095ce18 RDI: ffffc90004ae77e8 [ 679.846053][ C0] RBP: ffffc90004ae70c0 R08: ffffffff91d23ebc R09: 0000000000000007 [ 679.854021][ C0] R10: 0000000000000200 R11: 0000000000016c63 R12: ffffc90004ae70c8 [ 679.861978][ C0] R13: ffffc90004ae7078 R14: ffffc90004ae77f0 R15: ffffc90004ae70ac [ 679.869997][ C0] ? unwind_next_frame+0xd07/0x2090 [ 679.875194][ C0] ? __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 679.881266][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 679.887419][ C0] arch_stack_walk+0x94/0xf0 [ 679.892015][ C0] ? alloc_pages_mpol+0x1fb/0x540 [ 679.897036][ C0] stack_trace_save+0x8e/0xc0 [ 679.901705][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 679.907074][ C0] save_stack+0x162/0x1e0 [ 679.911394][ C0] ? __pfx_save_stack+0x10/0x10 [ 679.916235][ C0] ? post_alloc_hook+0xfd/0x120 [ 679.921081][ C0] ? get_page_from_freelist+0xf48/0x3530 [ 679.926708][ C0] ? __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 679.932777][ C0] ? __lock_acquire+0x49f/0x1a40 [ 679.937717][ C0] __set_page_owner+0x8c/0x540 [ 679.942473][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 679.947837][ C0] ? bad_range+0x257/0x3f0 [ 679.952255][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 679.957456][ C0] ? get_page_from_freelist+0xf25/0x3530 [ 679.963088][ C0] post_alloc_hook+0xfd/0x120 [ 679.967763][ C0] get_page_from_freelist+0xf48/0x3530 [ 679.973248][ C0] ? __next_zones_zonelist+0x63/0x160 [ 679.978618][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 679.984509][ C0] ? prepare_alloc_pages+0x45f/0x5f0 [ 679.989783][ C0] ? page_table_check_set+0x48f/0x930 [ 679.995247][ C0] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 680.001143][ C0] ? __page_table_check_ptes_set+0x1b5/0x4e0 [ 680.007117][ C0] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 680.013450][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 680.019780][ C0] ? set_ptes+0x14c/0x1d0 [ 680.024108][ C0] ? find_held_lock+0x2b/0x80 [ 680.028778][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 680.033538][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 680.038314][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 680.044199][ C0] ? policy_nodemask+0xed/0x4f0 [ 680.049044][ C0] alloc_pages_mpol+0x1fb/0x540 [ 680.053892][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 680.059258][ C0] ? __pfx___css_rstat_updated+0x10/0x10 [ 680.064892][ C0] folio_alloc_mpol_noprof+0x36/0x260 [ 680.070260][ C0] shmem_alloc_folio+0x135/0x160 [ 680.075195][ C0] shmem_alloc_and_add_folio+0x371/0xd40 [ 680.080833][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 680.086985][ C0] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 680.093220][ C0] ? __bpf_trace_sched_exit_tp+0x80/0xc0 [ 680.098852][ C0] shmem_get_folio_gfp+0x6ad/0x1910 [ 680.104053][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 680.109690][ C0] shmem_write_begin+0x1a4/0x420 [ 680.114628][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 680.120086][ C0] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 680.126930][ C0] generic_perform_write+0x292/0xa40 [ 680.132213][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 680.138011][ C0] ? __mark_inode_dirty+0x55c/0x16e0 [ 680.143300][ C0] ? mnt_put_write_access_file+0x4e/0x100 [ 680.149018][ C0] ? file_update_time_flags+0x373/0x500 [ 680.154646][ C0] shmem_file_write_iter+0x10e/0x140 [ 680.159924][ C0] vfs_write+0x6ac/0x1050 [ 680.164249][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 680.170066][ C0] ? __pfx_vfs_write+0x10/0x10 [ 680.174840][ C0] ksys_write+0x12a/0x250 [ 680.179165][ C0] ? __pfx_ksys_write+0x10/0x10 [ 680.184016][ C0] do_syscall_64+0x115/0x870 [ 680.188595][ C0] ? clear_bhb_loop+0x40/0x90 [ 680.193264][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.199158][ C0] RIP: 0033:0x7f0c5399de99 [ 680.203559][ C0] RSP: 002b:00007f0c5488f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 680.211960][ C0] RAX: ffffffffffffffda RBX: 00007f0c53c26180 RCX: 00007f0c5399de99 [ 680.219921][ C0] RDX: 00000000fffffdab RSI: 0000200000000040 RDI: 0000000000000005 [ 680.227900][ C0] RBP: 00007f0c53a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 680.235880][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.243853][ C0] R13: 00007f0c53c26218 R14: 00007f0c53c26180 R15: 00007ffedc7c0128 [ 680.251827][ C0] [ 680.254843][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10480 jiffies! g66717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 680.267152][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=41551 [ 680.275042][ C0] rcu: rcu_preempt kthread starved for 10481 jiffies! g66717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 680.286391][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 680.296342][ C0] rcu: RCU grace-period kthread stack dump: [ 680.302215][ C0] task:rcu_preempt state:I stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 680.314126][ C0] Call Trace: [ 680.317400][ C0] [ 680.320323][ C0] __schedule+0x125c/0x6730 [ 680.324848][ C0] ? __pfx___schedule+0x10/0x10 [ 680.329694][ C0] ? find_held_lock+0x2b/0x80 [ 680.334369][ C0] ? schedule+0x225/0x2c0 [ 680.338700][ C0] schedule+0xdd/0x2c0 [ 680.342764][ C0] schedule_timeout+0x127/0x280 [ 680.347610][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 680.352975][ C0] ? __pfx_process_timeout+0x10/0x10 [ 680.358260][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 680.364061][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 680.369514][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 680.374271][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 680.379550][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 680.384479][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 680.389666][ C0] ? rcu_is_watching+0x12/0xc0 [ 680.394427][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 680.400232][ C0] rcu_gp_kthread+0x179/0x230 [ 680.404902][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 680.410087][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 680.415892][ C0] ? __kthread_parkme+0x18c/0x230 [ 680.420915][ C0] ? kthread+0x13a/0x450 [ 680.425153][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 680.430337][ C0] kthread+0x370/0x450 [ 680.434405][ C0] ? __pfx_kthread+0x10/0x10 [ 680.438993][ C0] ret_from_fork+0x72b/0xd50 [ 680.443578][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 680.448683][ C0] ? __switch_to+0x800/0x10f0 [ 680.453349][ C0] ? __pfx_kthread+0x10/0x10 [ 680.457940][ C0] ret_from_fork_asm+0x1a/0x30 [ 680.462713][ C0] [ 680.465718][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 680.472035][ C0] Sending NMI from CPU 0 to CPUs 1: [ 680.477227][ C1] NMI backtrace for cpu 1 [ 680.477241][ C1] CPU: 1 UID: 0 PID: 12702 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 680.477260][ C1] Tainted: [L]=SOFTLOCKUP [ 680.477265][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 680.477273][ C1] RIP: 0010:__remove_hrtimer+0x24e/0x440 [ 680.477294][ C1] Code: 47 28 48 89 44 24 08 e8 80 68 14 00 48 8d 7d 48 48 8b 44 24 08 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 11 00 <0f> 85 b9 01 00 00 48 89 45 48 0f b6 74 24 07 31 ff e8 5c 62 14 00 [ 680.477307][ C1] RSP: 0018:ffffc90000a08e50 EFLAGS: 00000046 [ 680.477320][ C1] RAX: 7fffffffffffffff RBX: ffff88807849a300 RCX: 1ffff110170a50b1 [ 680.477329][ C1] RDX: dffffc0000000000 RSI: ffffffff81f57420 RDI: ffff8880b8528588 [ 680.477342][ C1] RBP: ffff8880b8528540 R08: 0000000000000005 R09: 000000000000001f [ 680.477351][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 680.477358][ C1] R13: ffff8880b8528400 R14: 0000000000000000 R15: 0000000000000000 [ 680.477367][ C1] FS: 0000555564600500(0000) GS:ffff888123ee7000(0000) knlGS:0000000000000000 [ 680.477381][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 680.477390][ C1] CR2: 00007f2fbed2d0c0 CR3: 0000000059338000 CR4: 00000000003526f0 [ 680.477399][ C1] Call Trace: [ 680.477403][ C1] [ 680.477410][ C1] __hrtimer_run_queues+0x352/0x9c0 [ 680.477432][ C1] hrtimer_interrupt+0x3e5/0x940 [ 680.477455][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 680.477475][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 680.477495][ C1] [ 680.477500][ C1] [ 680.477504][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 680.477531][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 680.477550][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 a0 28 f6 48 89 df e8 de ef 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 ff 17 f6 65 8b 05 ee b8 a6 08 85 c0 74 16 5b [ 680.477561][ C1] RSP: 0018:ffffc900053cf8f8 EFLAGS: 00000246 [ 680.477571][ C1] RAX: 0000000000000002 RBX: ffffffff9b947e68 RCX: 0000000000000080 [ 680.477579][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a4788 RDI: ffffffff8c401280 [ 680.477588][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: 0000000000000000 [ 680.477595][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: dffffc0000000000 [ 680.477604][ C1] R13: 000000000000000b R14: 000000000000000b R15: ffff88802ab02000 [ 680.477618][ C1] debug_check_no_obj_freed+0x31f/0x630 [ 680.477639][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 680.477654][ C1] ? trace_kmalloc+0xeb/0x110 [ 680.477670][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 680.477685][ C1] ? tomoyo_encode2+0xfb/0x3c0 [ 680.477705][ C1] ? tomoyo_realpath_from_path+0x19c/0x690 [ 680.477724][ C1] ? tomoyo_realpath_from_path+0xa0/0x690 [ 680.477743][ C1] kfree+0x3d8/0x6c0 [ 680.477762][ C1] tomoyo_realpath_from_path+0x19c/0x690 [ 680.477784][ C1] tomoyo_path_perm+0x276/0x460 [ 680.477799][ C1] ? tomoyo_path_perm+0x262/0x460 [ 680.477816][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 680.477833][ C1] ? find_held_lock+0x2b/0x80 [ 680.477854][ C1] ? _raw_spin_unlock+0x28/0x50 [ 680.477877][ C1] ? simple_lookup+0xfc/0x1d0 [ 680.477890][ C1] ? lookup_one_qstr_excl+0xaf/0x250 [ 680.477907][ C1] tomoyo_path_symlink+0x97/0xe0 [ 680.477921][ C1] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 680.477936][ C1] security_path_symlink+0x152/0x2d0 [ 680.477955][ C1] filename_symlinkat+0x122/0x560 [ 680.477971][ C1] ? __pfx_filename_symlinkat+0x10/0x10 [ 680.477985][ C1] ? strncpy_from_user+0x19d/0x2d0 [ 680.478002][ C1] ? do_getname+0x191/0x390 [ 680.478018][ C1] __x64_sys_symlinkat+0x9c/0xe0 [ 680.478032][ C1] do_syscall_64+0x115/0x870 [ 680.478045][ C1] ? clear_bhb_loop+0x40/0x90 [ 680.478060][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.478075][ C1] RIP: 0033:0x7f2fbed9cf57 [ 680.478087][ C1] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.478099][ C1] RSP: 002b:00007ffc1bfe7fd8 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 680.478112][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2fbed9cf57 [ 680.478121][ C1] RDX: 00007f2fbee34e5d RSI: 00000000ffffff9c RDI: 00007f2fbee338de [ 680.478130][ C1] RBP: 00007ffc1bfe801c R08: 0000000000000000 R09: 0000000000000000 [ 680.478138][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000175 [ 680.478146][ C1] R13: 00000000000927c0 R14: 000000000008c598 R15: 00007ffc1bfe8070 [ 680.478160][ C1]