last executing test programs: 5m29.571507246s ago: executing program 0 (id=405): socket$kcm(0xa, 0x922000000003, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000940)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x5) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5m26.448398343s ago: executing program 0 (id=408): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 5m24.920102315s ago: executing program 0 (id=412): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getrlimit(0xd, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd2b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x5, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0x11, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 5m23.668311439s ago: executing program 0 (id=415): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f00000009c0)="0000fc00607bef8eb2bafd0e6083d21ef8b1c6e9ed7ad8f2dd5889e21bd50ef4ae3fdaf23bae3824f4022d14adcb8e43b7fdefe2bb594551881d793d650d0b404ec21499a841e08e2137ddff0c58efc9", 0x50, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 5m22.173583697s ago: executing program 0 (id=418): getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000002240)={0x0, 0xd}, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b34, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x54, 0x1, 0x1, {0x0, 0x1}, {0x60, 0x2}, @period={0x59, 0x0, 0x8, 0x5, 0x448, {0x2, 0x8, 0x5, 0x401}, 0x0, 0x0}}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) openat$6lowpan_enable(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCADDDLCI(r3, 0x5452, &(0x7f0000000100)={'lo\x00', 0x8}) bind$tipc(r5, 0x0, 0x0) unshare(0x62040200) 5m21.362448693s ago: executing program 0 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x4) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {0x0}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x4, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000240)=0x4, 0x0, 0x4) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x2, &(0x7f0000000280)="935a") 5m21.181619075s ago: executing program 32 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x4) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/225, 0xe1}, {0x0}, {0x0}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x4, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000240)=0x4, 0x0, 0x4) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x2, &(0x7f0000000280)="935a") 4m12.708045877s ago: executing program 5 (id=569): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r4, &(0x7f0000001600)=""/4103, 0x1007, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) fallocate(r7, 0x3, 0x100000000, 0x80000000) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_SRC={0x4}]}, 0x60}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000580)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000180)=ANY=[]) 4m11.165736927s ago: executing program 5 (id=583): socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x80108907, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80602, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(0xffffffffffffffff) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @mcast1}, 0x1c) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 4m7.296993332s ago: executing program 5 (id=579): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write$proc_mixer(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x3}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000040)={0x7, 0x2, 0x7, 0x4d942c23, 0x4, 0x3}) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r4, r4, 0x0, 0x9) 4m5.217230569s ago: executing program 5 (id=582): r0 = socket(0x10, 0x80003, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r7}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r7, 0x121500) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000280)=0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setreuid(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee01) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='afs_cm_no_server_u\x00', r11, 0x0, 0x7}, 0xffffffffffffff79) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) close_range(r0, 0xffffffffffffffff, 0x0) 4m2.975794186s ago: executing program 5 (id=592): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) read(r4, &(0x7f0000000b80)=""/215, 0xd7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000000)={0x32f, @tick=0xfffffffc, 0x0, {0x6}, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f00000006c0)={0x400, 0x2, 0xe}) tkill(r3, 0x7) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000180)={0x0, r5, 0x0, 0x0, 0x7fffffff, 0x1000, 0x1, 0xfffffffc, 0x5, 0xffff, 0x200400, 0x31e}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) 4m0.694200344s ago: executing program 5 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap$IORING_OFF_SQ_RING(&(0x7f00006fc000/0xc000)=nil, 0xc000, 0x1, 0x2010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 3m45.16916899s ago: executing program 33 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap$IORING_OFF_SQ_RING(&(0x7f00006fc000/0xc000)=nil, 0xc000, 0x1, 0x2010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 17.491919716s ago: executing program 1 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @empty}}}], 0x20}}], 0x1, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2}}) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r6}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r10, &(0x7f0000000040)={0x2020}, 0x2084) writev(r10, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r10, 0x0, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000001c0)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_route(r8, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001e00100029bd7000fddbdf2507000000", @ANYRES32=r9, @ANYBLOB="00400000800400000c001980080b01000d000000", @ANYRES32=r11, @ANYBLOB="14003500626f6e645f736c6176655f300000000008001b00001000000500210007000000"], 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0xc5) setsockopt$inet_tcp_int(r7, 0x6, 0x3, 0x0, 0x0) 16.940450801s ago: executing program 3 (id=1011): syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @private1, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[], 0x0, 0x56, 0x0, 0xfffffffd, 0x0, 0x0, @void, @value}, 0x28) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r5, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x100, 0x0, 0xfffffffd, 0x6, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0xfffffffe, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3ff, 0x40000000, 0x7fffe, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x3, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x1, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) sendmsg$netlink(r4, &(0x7f0000000480), 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x1c8, 0x1c8, 0x410, 0x130, 0x328, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f0000000300), {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffff00, 0x0, 'ip_vti0\x00', 'vlan0\x00', {}, {}, 0x21, 0x0, 0x44}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x9]}}, @common=@addrtype={{0x30}, {0xf28, 0x10, 0x1, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x2, 0x0, 0x2], 0x3}, {0x2, [0x6, 0x2, 0x4, 0x0, 0x2]}}}}, {{@ip={@loopback, @empty, 0xffffffff, 0xff000000, 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x73, 0x1, 0x2c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x130, 0x160, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0x0, 0x0, 0xffffffff], @ipv4=@empty, [0xffff00, 0xff000000, 0xff000000], @ipv6=@empty, [0xff000000, 0xffffff00, 0xff], @ipv4=@local, [0x0, 0xffffff00, 0xff, 0xffffffff], 0x0, 0x5, 0x16, 0x4e21, 0x4e20, 0x4e20, 0x4e20, 0x205a, 0x88}, 0x1, 0x880}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x40000000, 0xccb, @remote, 0x4e21}}}, {{@ip={@private=0xa010102, @multicast1, 0x5aabe60e4f786391, 0xffffff00, 'caif0\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x10}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3d, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) 15.359156809s ago: executing program 3 (id=1012): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140), 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000002300)) r4 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @empty, 0x7}}, 0x24) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x2d, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000200)={r8, 0x0, 0x3, 0x0, 0x0, [], [], [0x0, 0x0, 0x0, 0xffffffff], [0x6, 0x930e]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x20000000000000, {0x2, 0xff, 0x6}, 0x102}, 0x18) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) io_uring_setup(0x2ef1, &(0x7f0000000180)={0x0, 0x5712, 0x80, 0x1, 0x1}) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e26, @dev}}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c90000000000000ee00000000040500002b24ec10064b6f2f000000fb718aef3889d1fdda5b5700000086edc5230f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f6189c8ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d700000010"], 0x10b8}, 0xff00) 15.358714661s ago: executing program 4 (id=1013): io_uring_setup(0x7fdb, &(0x7f0000000080)={0x0, 0x80000004, 0x20, 0xffffffff, 0x38b}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$sg(0x0, 0x0, 0x5) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000840) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x10, 0x2}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0xfffffffffffffc1b) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000380)=@tipc=@id, 0x80, &(0x7f00000018c0)}, 0x3}], 0x1, 0x10000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x810, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000140)=0xfffffdfb) 14.301436498s ago: executing program 1 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYBLOB="f6cfe7b363f14363415d3926ff8c7eefefe77a0cd98866ad9fc52886d46a21861306a571fe0405b49c65f97c059270794c4f1016bd7659e9be9c64667b60cdf73969bfd6f0a6e893837ec36fc5ff9db6fc38bf8de1ec5de22d0cddb5de20ba0598b8cae0922a6247ffd4fba6cafd6247ecf7d7e27abaf0b4b1997ed001bc5948da0c482d178103ddbfa29da0691c1989544d3cd06c97df1dbe82136da50907a443a4c0cd91b7e58acfadc2bd613581a261bc1a8b6417ce608d97f3666dbd091d7d51191a0d5b93ebf0", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB="7b9fbab879a6358c066dda4b5bd2dbc2f019e21748faa2f688ff8c3b8a6b93376fa0063c7b4ebc15124c5a20077123c6411820a6954cef4d0f92d7347f2d884adaab1fe43be3ddc57b1e9d6a6d4562e6d1ab81c564f945507a6c29b35ca14717118773099f9d4fda16132f8ddc80393607948eddbd4feb5e24b363c6c09de45dbd997e602717f694abe898ce8912f3a24adac6c475bc4cb97ca3b1f95cc40dfc427d78f4827d6e4f9585cde8ec0401f20969276db6cca5e79881f98f678ad1e06e0b4313b569488000487f5fa270aff77f63636907a63b5a"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x13) socket$inet(0x2, 0x3, 0x4) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'batadv0\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "42cdac1073dc0bab06f328a43c7e0a8c057c2488f51800a74a7c45e7d129d8be", "92894f4127ab3ddc35719b2fa7200000020000000000000000000800", "90c0fd72671bae4986ce4f4a90c00e11e056bf8395739dcf7d7bb8d46ae76146", "5bc0bc251e987ada9d74fc5f355e14a964111fb8db3bc84e79cbedc1b82d5a4b", "4e8ae4b3fb5e04c2b5d17d1957b4f8c71399c13f8576c257134428b61d26b7be", "00000010836d00", 0x4, 0x2, 0x7, 0xffc00000, 0x9}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendto(r7, 0x0, 0x0, 0x4004, 0x0, 0x0) 13.379616041s ago: executing program 4 (id=1015): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_procfs$userns(r1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_INPUT(r5, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x14, 0x8001, 0x3, 0x0, 0x3, 0xb}}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000081, &(0x7f0000001480)={[{@userxattr}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@appraise_type}, {@uid_gt}]}) 13.102262161s ago: executing program 1 (id=1016): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24000090) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030005a8a4400001c3c7c7a9020301090224000101094008090400000201010100090501020004ee070b09052f02ff00000000"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x207e) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f0000000180)={0x0, 0x5, 0x1}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000240)) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x200}) 12.756734917s ago: executing program 3 (id=1018): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) fanotify_mark(0xffffffffffffffff, 0x201, 0x48001003, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f00000051c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESOCT=r2, @ANYRESHEX=r5, @ANYRES16=r6], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kfree\x00', r7, 0x0, 0x1000}, 0x18) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r8, &(0x7f0000001940)=""/4086, 0xff6) keyctl$setperm(0x5, r8, 0x10502) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x401}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0xfc, 0x0, 0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xf705, 0x1000000, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x1000008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 11.935845641s ago: executing program 2 (id=1019): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a31000000002c000000030401020000000000000000010000000900030073797a32000000000900010073797a310000000028000000000a050000000000000000000100000809"], 0x9c}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000840)={0xffffffffffffffff}) accept$alg(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) setpgid(0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x202, &(0x7f0000002300)={&(0x7f0000002200)=""/248, 0xf8}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x0, 0xa2a, 0x4) epoll_create(0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002340)={0x30, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x34008001}, 0x40010) 11.689250636s ago: executing program 6 (id=1020): socket$netlink(0x10, 0x3, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x45c3, &(0x7f0000000240)={0x0, 0x8e28, 0x800, 0x0, 0x2e1}, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x80, 0x0, 0x33a, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000340)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x38}}, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x3, 0x348}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 10.291721672s ago: executing program 2 (id=1021): socket$kcm(0xa, 0x922000000003, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000940)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x5) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 9.214047147s ago: executing program 4 (id=1022): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08060001080006040001aaaaaaaaaa37ac104f7157aaaaaaaa38ac1414"], 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x40000080806, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000940), 0x40000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x77, @time={0x20000040, 0x5}, 0x0, {}, 0x0, 0x2}) close(r2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000100)=0x8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x2004e080) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) 9.042167962s ago: executing program 6 (id=1023): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xa32d}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0227009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) userfaultfd(0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r3}, 0x38) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) memfd_create(0x0, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) io_uring_setup(0x3f92, &(0x7f0000000140)={0x0, 0x1b9e, 0x0, 0x3, 0x34f}) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x24, 0x3, 0x4}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084522, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8000) 9.026941376s ago: executing program 3 (id=1024): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, 0x0, 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x1010410, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d7720c474459bab272506a0df4fe3ff2355259f05ebc8905bee7479a3910c61c3f54c8c67361a3486860787def89ab2cc215c1a120602d66041e242e118519bdf691d304e96657ecbd84f3bae9372731b6eeb52921e843c6d88b834353d8c76fdda41bc08bcf29b78eea2bd182b3afeba383c0b8835ce965ba30730bd355893dc722a3cce8e60569f7eb746d07ab640ef19cbe99a88ef5ddd6287a5b089dc9f35df0fd18cd2e711876c307d3118732ea0e3fe489af7ef769ef37240d12060687e0f", @ANYRESHEX=r2, @ANYBLOB=',access=any,directio,access=', @ANYRESDEC=0x0, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',noxattr,directio,access=', @ANYRESDEC=0x0, @ANYBLOB=',pcr=00000000000000000040,euid>', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=/dev/nullb0\x00,rootcontext=unconfined_u,smackfsroot=),\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000100)=[{0x0}, {&(0x7f00000002c0)="92ce91f8209ada94a9900d99cd879dd3c95c5236d5c04a7befbeef83c013fa0a4ed2f5e4925ddaa89a4fd6aeac5600e982db773cd2624637e62dcc17892c989150947011f95655e6cd58e3441b2976740dc2b1e23fbd3f97eeec9803528b4d346611a28f9dccb7918fd55fa9d4fce9f129ab906635494c91307f5e916bc9ba5267c13a5dbcead553c9678bc86073bfc4e8daceb83c51644c8f2b484bf10bfe0690d3232a6ea180e739d2cc6622705d2414ab7a091c887763894b31203d1e3804d409d185db62beef8a7981565ccb5fca6c", 0xd1}], 0x2) r4 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_mreqsrc(r4, 0x0, 0x40, 0x0, &(0x7f0000000040)=0x54) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 7.910304341s ago: executing program 6 (id=1025): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 7.865701885s ago: executing program 1 (id=1026): epoll_create1(0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) syz_emit_ethernet(0x7e, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@rand_addr, 0x1ff}, {@local}, {@loopback}, {@multicast2}, {}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)}, {&(0x7f0000000180)="4fdda9adaf4ebec88b7f1f54bafe77e2d93b07aed572b5a00d2fe5d781f2180e83edbf5fdf25f4493a9f93b66c1c74bb0fcc50b9a567da035bc48d49fb07ab8533303b49aeb78f6d7006430f576485071beb44c71dee97ba52e7a0cfa4f8ce2cb10e121c0cee6591176394a7320e47be9757e6cc466b9ddca28412ece32ee9c6dc4f0e619677cbfa2d81d4ec77ee1c7fff794f3594ec92ce9dd4d69d68f5d8b3c1c322c22736c5c741e5f33c5460a80ba12d3ad5d236ed7a5aada0eaaad0f6051bfdc590331fe0c31718c9c4756c540ca02fe943f2", 0xd5}, {&(0x7f0000000280)="242b2baa0b9eb852551bc5efc27686745d3355715e8b45edb88e2850ce3364480b12fba2441ca6aa0b1df69e960336c051abe67b7875a22156bb64664652aa97ddd80e6cc0c2552d6dd8c1798e9b12458f5ae457b5d6ffba1f7d2b00661ed073f9374f", 0x63}, {&(0x7f0000000300)="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", 0xfa}, {0x0}, {&(0x7f00000004c0)="3b905d24eed2adea1be18c92264c29b1ada767ba377d9a635a31f3b44b82fd1bcb9bec8e133da508775da6c29b04514d8ef66b16635e452d66e0a863cda092da6e70bdd6f12641e1258b1d5746e37929d9aae8f19c0d8e93d9d0d3a9d2a14ce4c4ff86edf94ec5f8e4", 0x69}, {&(0x7f0000000080)="18029810fe9d03de0b7e99eee7f43b2e121923b77f0bd93c28ce1bd8a49a4a712c27c065a410b6c100dd3908f4d7db8c5ae929077438a795c5aa8a6a4b75", 0x3e}, {&(0x7f0000000540)="598d6828982d669fc6264849fd259590fd0e64634e97ed0dba37f85abf731db8cfa044da37d0b5ef9b8f9ce962d9fca1d75a7e049364e62a09224a6e6c18c6", 0x3f}], 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0xf0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) cachestat(r4, &(0x7f0000000040)={0x5, 0xefc4}, &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x27, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000640)='net/ip_tables_names\x00') 6.88182156s ago: executing program 1 (id=1027): socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0xfffffeef) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x3, 0x8695c3813a9bd78d, 0x0, 0xfffc, 0xbad, 0x0, 0x0, 0x0, 0x0, 0x80000}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x4, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0xfffffe01, 0x8000, 0xfff, 0x0, 0xee00, 0x0, 0xc3fa}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.734558982s ago: executing program 6 (id=1028): r0 = fanotify_init(0x4, 0x101000) r1 = open$dir(0x0, 0x0, 0x0) fanotify_mark(r0, 0x641, 0x1019, r1, 0x0) fanotify_mark(r0, 0x1, 0x8001023, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r2, &(0x7f0000003680)=[{{&(0x7f0000000000)=@llc={0x1a, 0x207, 0x6, 0x10, 0xa, 0xf1, @broadcast}, 0x80, 0x0}}], 0x1, 0x8041) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xc, 0x7cb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x39}, "dba953e7ca38a158c9e326d52e05bac9f306ad278a61807cc99e8e881136b91e8515d0e581499d0ce8d4f5cc9ce59cfd0ea34abe927442d530"}, 0x3d) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000180)={r11}) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r12, &(0x7f00000009c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="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", 0xff0}], 0x2) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000001040)={'gre0\x00', 0x0}) 5.9464248s ago: executing program 2 (id=1029): socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x40004840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$video(0x0, 0xa3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r4, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x98b, &(0x7f00000000c0)={0x0, 0xbbee, 0x2000, 0xfffffffd, 0x25d}, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000140)=""/103, &(0x7f0000000400)=""/183, &(0x7f00000001c0)=""/54, 0x2}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) 5.783706541s ago: executing program 4 (id=1030): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000040)=0x3, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x3}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x3e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x800, 0x2) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x134, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x80, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in=@private=0xa010100, {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd29, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) listen(r2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000140)={[], [{@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '!%/'}}, {@euid_gt}]}) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@cswp={0x58, 0x114, 0x7, {{0x8, 0xc}, &(0x7f0000000440)=0x4, 0x0, 0x774e, 0x2, 0x5, 0xfffffffffffffffd, 0x6a, 0x6}}, @mask_fadd={0x58, 0x114, 0x8, {{0x2, 0x2}, 0x0, 0x0, 0x1, 0x7, 0xa, 0xffffffffffffffff, 0x10, 0x84}}], 0xb0, 0x24040800}, 0x0) 5.757607565s ago: executing program 6 (id=1031): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r0, 0x8001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r5, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) writev(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x700, 0x0, 0x0}, 0x58) 4.541921061s ago: executing program 2 (id=1032): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/142, 0x8e}], 0x1, &(0x7f0000000340)=""/21, 0x15}, 0x9}, {{&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000700)=""/125, 0x7d}, {&(0x7f0000000880)=""/241, 0xf1}], 0x5}, 0x2}], 0x2, 0x1, &(0x7f0000001480)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') pselect6(0x40, &(0x7f0000000000)={0x3, 0x203, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_POST(r2, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) close(r2) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 4.31331292s ago: executing program 4 (id=1033): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x4, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r3, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x20363159, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x7fffffff}, {0xd, 0x8}, {0x5, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) getpid() setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) r7 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) r8 = dup(r0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 4.017214943s ago: executing program 6 (id=1034): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) epoll_create1(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03000000000000000000020000000900020073797a31000000000900010073797a300000000014000380080002400000000008000140"], 0x68}}, 0x0) syz_io_uring_setup(0xc6d, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040), &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000300)='memory.swap.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000040}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x3f, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 3.01549426s ago: executing program 2 (id=1035): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000000)=0xffe, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'dvmrp0\x00', 0x100}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd2b, 0x10000, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {0x9}, {0xe, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team_slave_0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008004}, 0x48884) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x18d) r6 = fanotify_init(0x8, 0x80000) fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) read$FUSE(r6, 0x0, 0x6c) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x4, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) 1.413144759s ago: executing program 2 (id=1036): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @mlv2_report={0x8f, 0x0, 0x0, 0x26}}}}}}, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040), 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r4, 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000180)={0x2, {0x2, 0x3, 0x4c, 0x401}, {0x0, 0x82, 0x4, 0x1000}, {0x3, 0x5}}) 1.412547861s ago: executing program 3 (id=1037): r0 = fanotify_init(0x4, 0x101000) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x641, 0x1019, r1, 0x0) fanotify_mark(r0, 0x1, 0x8001023, r1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r2, &(0x7f0000003680)=[{{&(0x7f0000000000)=@llc={0x1a, 0x207, 0x6, 0x10, 0xa, 0xf1, @broadcast}, 0x80, 0x0}}], 0x1, 0x8041) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xc, 0x7cb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed}, 0x8) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="03c9003cdba953e7ca38a158c9e326d52e05bac9f306ad278a61807cc99e8e881136b91e337ca4a581499d0ce8d4f5cc9ce59cfd0ea34abe927442d53051ae54"], 0x40) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000180)={r11}) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r12, &(0x7f00000009c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000002600)="59a255d6cfe24001675916a4863da256d0166792a6458deda001fb301d82efd94dfe7e7f8cff1a2505d731e4a60a597503794c57a9bf09b1ae4bd0dafcf3cf50354fd834867738d6a12896cf2ef5b317b424cceff87aa1c42a7caf86a40f437854c1576f373dc0df9ead85d29d1182cc690092807bbe25659c9dbb40498542e831fccd28c79b3b052e5569fa376da558a7aa459ef0da97b2bd3116493756f11e8d61e5c626dc326a87dba55fdbd8d6a0e971dfa052b6b56192a21135c4639abd731820ca332cd904368c651b3d92e1c338379f8df3d0d63c8506e5e8cdfb709513ad650ea3e630e2302eba87af2c2ddc09f8967c2375a88458014e10c7eacd346df4906c793f8e8b480f1bf0428131eec8ed32d4555663ff692d6adfd1b27c7a0755b7d89ec63d75b31691cb67adc97e26b0837836678c12540d59617803cddb90d6d2db3d3c32c0253c5e0e7d07cb6472b15fd1507c960bb02aa2360c9e86c9654888d9993f671ef8e49caf8826f1354e85ab0e62255305cbca4ab5adc5814465d1b91abc52a991df8df0145d733fef5afd0faf039cc3fdde412db14ac94576c242383d763f9d11e3c5dbae374fad8383ba1a6c8d269663f2fe6b30387670f37e20f6ca82ae1997d91a3925980f27a54bb50a519d39de222ac38cb6e64590ecf33356056a004fd7fb6018c8430e59b75663a5a9face400f00c2cb099d9b5ddb124008c3434ff8531f034b171e058ea789904ed9be7154d2288301d4c2551682823f00fdf3aedf910df3f0d508ced2258390a148b4ccb69afbeafcbadf01fd2820749c455b60e0db3452ecce66c90d1ffdb5bdb071ccee320a85b4cf3363672406c8882eb3917efe65c7cf2974aff556dfcdda2e1f262d0720f314b93277003e33cd05370d7d4a58dcfcaef1c0063b85beb12962d9c60457ddb068ec082dc3753f333296273c73642674115ca6fde0f99a8f3131b71804c78e924b7fbd7ac80145da2952aa4e06341178d10941bb43d9f411a17289a713b535945b82abdbf758a118ded1edd93e0d7893bec4248b9e389639d147e001b20c0811aa4f1e342ce7193c2acb852d38c7eaa622a7e1743b474cf1e05b7af9b08af63139107ab8c201c0aa5b810697758b5e8d9f3f67a3184eb922ccf3cecaeb6598f2dbbed07963e5d2e99e452fe5aee6c9b571ace60dde0620b7f0bfba03e539dd8263b4b833fd7a138d2137f0ff5836422675f65164522f12399ddd851790e72bcfa7a0dcf129fcac97a679f55c9ce11db1bf7c67fbf627efb6453b9f9a909e66365e27f48de1cb5c908d669f0c8629933bbfe5f4d39136269e058213bd47238fc8ab1dfa2cc746422369cb711f37fcab2b42d3a5afaf1787f0e98c77fd53d1ff5b2e7ecfc3ffa8abad2c5dc43239f34325a9b8f6ebca5256b1c8e16eb0d61d4ea544088d6902617acf7648877d1396d2e3c0e19fcbb8afa133a8b7f21c902bc655d65a1e5268ba6843bb6209939089a52f57d120a25d0db6cbfcf9bbe5baa04feb448584f8900c81102836f31da1e6c6b0ba1ecc2930ba487892991370f4afa995be0f4743e9f046297b340eb257053d299981b946db870b6266e0a845d280ba44fb384c67e7d56e1236908c65a89dda1ba4af6fae16ac8d4de05b45abf697cb1a6b9e7e6524169b8cfca09c7f75c4f15204c4f101acdf811a41fe338d3e91ae470bf2495cf897feafcdb81391bbacea5ef21fccef83a7141d5288f19e2657efc0e5754aa5eee3e48c28f609c25530cdae4cee840a48bd5ad4100523c88a16a3ab12b1e5b96009868848f01de115fd916002ea066d639df0ac012e618b44a1291d627e5c67cdfe8acb855206f851a1a4975f1815612b5ccc09b5450a1c49c51e00b202ad18faff26959de9d2faf232330daf68112330274553580838a62aa9f870ffd953f81149f6724418c64c38df55cb3ca084838b35e12784f52dbf3c4e367639133a7c479b3266e46d781ed1310e598363dc64b5a1f73a06045b77ca4190b6d97529d393e9952c920f40f492c04c3dc651ac5c6c44ce8c4bb6a481b952475406bdf8ef7bc06ca35132fe8bc481b8243e5c579b8b0ad09b8d52cfa479e77c91ffce11f6ec2f3eba9647e58d7f4409af3d4c7140ccde9a2ac7c7909960bc662cd5407c66d6a54ee83bb011aaf21d526290078476f087a88b0b5bae6504a4c63d7dfd17cdb4a5c05a77724d9988f0cd6cf0072d0b7f54ee7357fd4f5aca50fdd2152edb150ad709f8667977430f8cebc7b8a8ed776a51b1ef770b99a91741d878163cd21384abf7bb9cdf864b3dfc8cb8529ea50ca8b27d9f2a37345778fe352c265bf2ec3ef3789d8a8d88be49e17e8d475ab59889fe662e5f9f5232bf201c52de085b6c7137b11f71fa22fc5e91f14bd4a69f5a8ddc6228c5a68035a33b550b4d0d95954cb36d49c15a69fc86f67be0d6c003d3768722d383fa77d00c7ec5b35d8bc33e70fa1d072c19b77842540221416f7d28a2797c1e15dcf3dc254b5f754dbbb29557686a96ca6447065d520e6bf0c642294658bf90e76f3d503ba0655d54d9637c0eef3675441fed6a11ef03b85d49ed9a74c8c312e2681174f078b1b2e13bad1cee64e1176a60bfa58a97fe4ac19a3823d365ac1afe8a420259b338fe799e624e81f1daf9e094ecafa6a9a1db621caa35b07557f8eafe6bcbed6619ee37af06720a337d02f1313086f91c9594443cbd1e480afc2ee294aad18467e23090f572b098b0940417329a4465f22dcbbbef2b8c94b68b0a28a9a04ca55702f025289fb0a4844fa6408cf2b814f90691acd19120cb2edaf13eef1aa64abc6cb5f4103c4b6ea8ee0740fb1948011ad8481639ef79df6835230c879182b9d30adc966a42101138a60e2e56d0859c728925c7fa181ed925f5b64c6fe50059a4a61528e8b5bee9b3fb11c2e5fb02d2f3c5a4baab75ef87df8bc3c814c466518d8103876e40d9c9b382595ac7f690b9fa27eeff527c7afa888ea9defbf92061f1c4d48b3d010fc9224de7ca1034341fac15c905fe1552d52a7de5558efaf1546ce61fd87aea5edb71cfce6a3897f3bbbad20af665ba85c7f8a7d5ff418bfad6f7eeabc21f51c7f5520363a85ad7ba5e6f2f9bd97e6cdd024aa00b0fb1dbb1863e6b43078d03af378b7228e9aff5dd49320f548fca344863212379dd75e46ab64a252ced9ebdcf1443cb647fc7ad6387c84ab40faaa9c64ad5d74da7922ed8691d6db65071a661b19188a61e2e84f013ab1ede8236c4cfec74616cb4af8b74c0f17ed6335c9065d1476fb611b56b6cf7d4857dd52cbb2c450c867f0b3ab6078097a7222f7ee9e6e9a4e6b7dd808d07ba54afc2720496e25346d298354da31cdc186f74aab1e7d3e2651f590d26025772705cb49acd66476788b23456086170d5850a69a3687b23420c9fc10542f90be157244468c5145f269e83b2377bac876b6d6cb345a481a9eaa80f1235bfe71692d541b045fb43242ca26c02edea5c316d976da9393bcceecfdc4480a0fc60815b2719cd60b2c3b4258e835d26547ae24462214703963d3e7be12315ab0dfbdd874cde6968aabc05da1072adf82a9931cb6af9dba9825b4276ded9ee8041d793cb97e929a67cfe3a173d9bb04fbf7b2947159c440622e768533c1ba1f8a767a06dc7832aa8c57d5b93ac38ada62b5bb629638a7a8e11772ad53313c77a2483b72258e0be5b1ff8c94e1ec8f33f6e0247dac431462db415a81bf95401ee06d3408e653d366fc2d0c1f9d81b6bc8f3275bfc1985849d508b50fa6399741a510a33649a29c41418570203cdd067d6caa84b99625aacb3a89ede13a9f8de792e0c6582925c6b06c21e7b327851ee0e2fdf490756a9cded460b0c467a893712221f7bdd826073a74e8ea2184cc2990f9aeeb4ed4246f1484b109e25f45dee95bd48369d166d17acbe1c043723b623563608d2d575f7a188ba71b258dd741a07d0e4f7a1fb05d259165f5d8c17e9e9a05bf35dd136dbf1b6a92c35c58a65855f459cc45b576a2b0e3b6a4a8a77b6f817dd121eeb92f370c86594919f5f10b874538fe37f7317992437d7c100ac81ba5aa9fdecd58f0f30300280a95bd6c4e722c35f16f2f9a3b47cf184021c7c6509b07a7a93310c3c7193ff28a208698f2c21345f1e2f82975bb0597cd15c81e2a5afd0598bca0bbd5943fefe41a7ea85ade763d1639f4824cdb1498bf224e5422e2b1d4ae97ef107061dee9601e151d15e15108652b9640a449b548e7394f9aee0407393f501e7ec04dc2372d0aeb80ec8db08a5cf0c1286afb65daa373ca9a6946a4245b3a30acab3bc2d6806ac4735ebe23e4d9aa716253d9dcbdf9e54c5e062046302528f0fa43e0e26052e3ad09789e501dd4e85ea043ba3795d51c449e78bdada27e1277d9e6ec14b79e52bae8c610612ba996acafb5c1a856b6fa2110c09e20d855a4d784fc11c80794ea0da9a01fc323dc883beb8b6ad2e3c98e7f68714a69deda62c8e3daad6635ad73e371e5eb1171be75bb436e436105bbb4e411635587dea8882bafc256c288451056f485dca32887be3aac918783bc84d5f70ddc41ceaaaac28d18e5181c6f2a7eb79e63034ff5dd84ebc2776c9eeaf8fd9fcbd9a523d6b836b3fe8a89427a488d62e6ec8324aa6f7902aac011c3326769e7e20e49284533e3167bf3958553bbee1358720c377a8c745ff76d175daa99b7efe35431bc28754f051e41383a8d82518defcf28424dfdfd4ef824c8d9dc81e7bfc69a623d3b6cb91ccdc4c87b318834621377c482210c5f894954a2dde4fb008e1d1e2980fe58f0f616b84168c38c34c162b14dac7052655534ba8d77cdd066689c33b5def900ffe5eb06f5fd96301224c7ce759436249fd97ba4ce540ade44ef430353bc336067a4e25fe49cba2fa1a5ff98b88e7616afc9a54215d44ea84fd862aa306c71e5d0bf3dbfa1bf9e523232457ff887b019da6cc850a4305c80f24518397abae928fe58a2dba76f190b7f96929deceb15c9b06029a990111f80009b8d31d998bd571034d84ef001b75cd60232c074864e7f38756347083e44860a32363b33e0d6026b84c0693bf0bdc8aec505d4b53a21441b8fb967f67121c6d1fc6be3c66171ae0c7c0f35e6f006e77d689c545afc9a3c2de187c93a932eb552cedb6a1be8dd5b4cfc348517895e4fcf73ecdb421e5a98ca6359e0950f52a8d892c783077dc199436fa925acfdcaa18d6fd13a93c3b3e16f9029a53e9bd2a284a09d756c181248ac69b057c975f26d992da553748f65da0d075aa3f84b53a440c2769dc990e42afe34b5b70a1d7938a5e988826d5438fa21cc4a989285791cc1aaa39fe9d75212d2be4765c6e9ddd064742af34afc696ee441b6e64cbd1addef90f9e815cb93ade55022807c28663fd7052159e4f2107b91ccd66fd2ac868d43e3de748f2f2100fc415a7b536758c34d98a5498b29ce6aee2e0c3d0816e9bb687a9eaaf88bf258081a1a42ba70c9af29b8d8ff1870c0faa0b74c2109295760cf6f66d57c90208d4299d51d4e8e4f0cc8ab30d791866551bb34594bd2c223063fb2d81e976a93a9ade8b4822b1281b426b851ffd5557bbed84b94620f898fa261440a4367df206d0e2d64e21070141704a82852079d1461c1f5be6335ae70f2fbb64bdee462d856c023cfac0cbbc79875a383b43a39f3498022ff433ec7fddf91322d3e61666528e01cc3309628c59b3189691934100bf1ec5e5305c9d1c822cfb78", 0xff0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_BT_VOICE(r6, 0x112, 0x13, 0x0, 0x2) 1.411991669s ago: executing program 4 (id=1038): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa0000381) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r1, 0x0, 0x78) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getrlimit(0x1, 0x0) bind$bt_hci(r2, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000300010000", 0x7) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x2, 0x3) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, 0x0, 0x840) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x19, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018670000100000000000000006000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500009309e8301fcd9657ff0c610001100000"], &(0x7f0000000180)='GPL\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x10, 0x7}, {0x3, 0x3, 0x11, 0x7}, {0x4, 0x5, 0xb}, {0x4, 0x2, 0x1, 0x2}, {0x7, 0x2, 0x10, 0x2}, {0x3, 0x1, 0x10, 0x5}], 0x10, 0x9, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xa8, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0xffe0, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0x64, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0x7, 0x2, 0x1, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x8}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000000c0), &(0x7f0000000640)=r6}, 0x20) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.385824723s ago: executing program 1 (id=1039): socket$kcm(0xa, 0x922000000003, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000940)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x5) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1040): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$unix(0x1, 0x5, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) r8 = dup2(r7, r6) close_range(r8, 0xffffffffffffffff, 0x0) socket(0x10, 0x5, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x9) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r9, 0x0, 0x0) ioctl$UI_DEV_CREATE(r9, 0x5501) kernel console output (not intermixed with test programs): [ 360.548292][ T8919] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.557263][ T8919] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.565949][ T8919] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.574609][ T8919] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.050185][ T8932] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 361.129799][ T30] audit: type=1400 audit(1746762118.343:820): avc: denied { setopt } for pid=8928 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 361.464721][ T30] audit: type=1400 audit(1746762118.343:821): avc: denied { ioctl } for pid=8928 comm="syz.2.578" path="socket:[18645]" dev="sockfs" ino=18645 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 363.833996][ T8959] netlink: 'syz.3.585': attribute type 10 has an invalid length. [ 364.156694][ T30] audit: type=1400 audit(1746762121.457:822): avc: denied { create } for pid=8951 comm="syz.5.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 364.455669][ T8959] veth0_macvtap: left promiscuous mode [ 364.517293][ T8959] batman_adv: batadv0: Adding interface: macvtap0 [ 364.524005][ T8959] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.562494][ T8959] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 364.871670][ T8960] tipc: Started in network mode [ 364.882751][ T8960] tipc: Node identity 5ae8ca29f76b, cluster identity 4711 [ 364.914735][ T8960] tipc: Enabled bearer , priority 0 [ 364.930565][ T30] audit: type=1400 audit(1746762122.227:823): avc: denied { setopt } for pid=8970 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.509228][ T8963] tipc: Disabling bearer [ 366.905328][ T30] audit: type=1400 audit(1746762124.067:824): avc: denied { read write } for pid=8991 comm="syz.5.592" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 367.353473][ T30] audit: type=1400 audit(1746762124.067:825): avc: denied { open } for pid=8991 comm="syz.5.592" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 367.516865][ T30] audit: type=1400 audit(1746762124.077:826): avc: denied { ioctl } for pid=8991 comm="syz.5.592" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 367.598558][ T30] audit: type=1400 audit(1746762124.887:827): avc: denied { recv } for pid=9005 comm="rm" saddr=10.128.0.169 src=38856 daddr=10.128.0.242 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 367.685631][ T30] audit: type=1400 audit(1746762124.977:828): avc: denied { read } for pid=9010 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 370.215513][ T30] audit: type=1400 audit(1746762127.247:829): avc: denied { read write } for pid=9035 comm="syz.1.598" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 370.483801][ T30] audit: type=1400 audit(1746762127.257:830): avc: denied { open } for pid=9035 comm="syz.1.598" path="/108/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 370.805201][ T30] audit: type=1400 audit(1746762128.097:831): avc: denied { create } for pid=9043 comm="syz.4.599" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 371.201337][ T9045] Invalid source name [ 371.205747][ T9045] UBIFS error (pid: 9045): cannot open "./file0", error -22 [ 371.207883][ T30] audit: type=1400 audit(1746762128.497:832): avc: denied { mounton } for pid=9043 comm="syz.4.599" path="/114/file0" dev="tmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 372.893229][ T30] audit: type=1400 audit(1746762130.077:833): avc: denied { audit_write } for pid=9050 comm="syz.1.601" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 373.599034][ T9069] netlink: 'syz.2.603': attribute type 1 has an invalid length. [ 373.607137][ T9069] netlink: 224 bytes leftover after parsing attributes in process `syz.2.603'. [ 373.949798][ T9073] loop9: detected capacity change from 0 to 7 [ 374.029196][ T9070] veth0_vlan: left promiscuous mode [ 374.036009][ T9070] veth0_vlan: entered promiscuous mode [ 374.385537][ T9073] Dev loop9: unable to read RDB block 7 [ 374.424656][ T9073] loop9: unable to read partition table [ 374.434263][ T9073] loop9: partition table beyond EOD, truncated [ 374.440605][ T9073] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 375.362930][ T54] Bluetooth: hci4: unknown advertising packet type: 0x64 [ 375.363434][ T54] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 375.383952][ T30] audit: type=1400 audit(1746762132.367:834): avc: denied { associate } for pid=9080 comm="syz.4.604" name="syz0" scontext=root:object_r:var_auth_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 376.106299][ T30] audit: type=1400 audit(1746762133.057:835): avc: denied { connect } for pid=9088 comm="syz.2.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 376.400690][ T30] audit: type=1400 audit(1746762133.567:836): avc: denied { read write } for pid=9095 comm="syz.1.606" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 378.348416][ T9113] could not allocate digest TFM handle cbcmac-aes-neon [ 378.416707][ T30] audit: type=1400 audit(1746762135.707:837): avc: denied { setopt } for pid=9115 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 378.521233][ T9123] netlink: 'syz.4.611': attribute type 10 has an invalid length. [ 378.573432][ T30] audit: type=1400 audit(1746762135.867:838): avc: denied { create } for pid=9122 comm="syz.4.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 378.579613][ T9123] team0: Device ipvlan1 failed to register rx_handler [ 378.738458][ T9129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9129 comm=syz.1.612 [ 378.769608][ T30] audit: type=1400 audit(1746762136.067:839): avc: denied { ioctl } for pid=9122 comm="syz.4.611" path="socket:[18961]" dev="sockfs" ino=18961 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 379.319012][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.020022][ T9136] syz.4.613 (9136): drop_caches: 2 [ 381.555184][ T9153] ceph: No mds server is up or the cluster is laggy [ 381.601522][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 381.610138][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 381.870992][ T9166] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.900357][ T9166] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 381.920356][ T9166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.503090][ T9167] veth0_vlan: left promiscuous mode [ 382.514248][ T9167] veth0_vlan: entered promiscuous mode [ 383.622525][ T30] audit: type=1400 audit(1746762140.917:840): avc: denied { recv } for pid=9021 comm="syz.5.596" saddr=10.128.0.169 src=30006 daddr=10.128.0.242 dest=55956 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 383.706989][ T30] audit: type=1400 audit(1746762140.937:841): avc: denied { execmem } for pid=9177 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 383.735394][ T30] audit: type=1400 audit(1746762140.997:842): avc: denied { sys_module } for pid=9160 comm="syz.2.618" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 383.783926][ T30] audit: type=1400 audit(1746762140.997:843): avc: denied { module_request } for pid=9160 comm="syz.2.618" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 384.058153][ T30] audit: type=1400 audit(1746762141.317:844): avc: denied { read write } for pid=5807 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.127238][ T9183] netlink: 'syz.1.621': attribute type 12 has an invalid length. [ 384.208866][ T30] audit: type=1400 audit(1746762141.317:845): avc: denied { open } for pid=5807 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.546847][ T30] audit: type=1400 audit(1746762141.317:846): avc: denied { ioctl } for pid=5807 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 384.684823][ T30] audit: type=1400 audit(1746762141.427:847): avc: denied { create } for pid=9174 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 385.191994][ T30] audit: type=1400 audit(1746762141.437:848): avc: denied { connect } for pid=9174 comm="syz.1.621" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 385.255751][ T9192] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.259823][ T30] audit: type=1400 audit(1746762141.437:849): avc: denied { write } for pid=9174 comm="syz.1.621" laddr=172.20.20.170 lport=256 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 385.395260][ T9192] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.410187][ T9192] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.419133][ T9192] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.426803][ T9192] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.013541][ T9207] could not allocate digest TFM handle cbcmac-aes-neon [ 387.485148][ T9192] Bluetooth: hci5: command tx timeout [ 388.358411][ T6429] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.645156][ T6429] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 388.699681][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 388.699699][ T30] audit: type=1400 audit(1746762145.997:903): avc: denied { read } for pid=9222 comm="syz.1.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 389.201774][ T6429] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.227090][ T6429] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 389.336035][ T30] audit: type=1400 audit(1746762146.607:904): avc: denied { map } for pid=9229 comm="syz.4.634" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 390.175198][ T9192] Bluetooth: hci5: command tx timeout [ 390.298821][ T30] audit: type=1400 audit(1746762146.607:905): avc: denied { read write } for pid=9229 comm="syz.4.634" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 390.399353][ T30] audit: type=1400 audit(1746762147.697:906): avc: denied { mounton } for pid=9244 comm="syz.1.635" path="/116/file0" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 390.471951][ T30] audit: type=1400 audit(1746762147.697:907): avc: denied { mount } for pid=9244 comm="syz.1.635" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 391.560436][ T30] audit: type=1400 audit(1746762147.727:908): avc: denied { create } for pid=9244 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 391.580328][ T30] audit: type=1400 audit(1746762147.817:909): avc: denied { create } for pid=9244 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 391.599945][ T30] audit: type=1400 audit(1746762147.827:910): avc: denied { bind } for pid=9244 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 391.619377][ T30] audit: type=1400 audit(1746762147.937:911): avc: denied { create } for pid=9244 comm="syz.1.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 391.638982][ T30] audit: type=1400 audit(1746762147.947:912): avc: denied { write } for pid=9244 comm="syz.1.635" name="igmp" dev="proc" ino=4026533244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 391.647466][ T6429] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.988805][ T6429] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 392.195333][ T9192] Bluetooth: hci5: command tx timeout [ 392.862464][ T9190] chnl_net:caif_netlink_parms(): no params data found [ 394.071190][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 394.071212][ T30] audit: type=1400 audit(1746762151.307:918): avc: denied { read write } for pid=9268 comm="syz.2.641" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 394.127949][ T9264] xt_connbytes: Forcing CT accounting to be enabled [ 394.134794][ T9264] set match dimension is over the limit! [ 394.745257][ T9192] Bluetooth: hci5: command tx timeout [ 394.746925][ T6429] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.894144][ T9275] netlink: 32 bytes leftover after parsing attributes in process `syz.2.641'. [ 394.929525][ T30] audit: type=1400 audit(1746762151.307:919): avc: denied { open } for pid=9268 comm="syz.2.641" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 395.054400][ T6429] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 395.094992][ T30] audit: type=1400 audit(1746762151.317:920): avc: denied { map } for pid=9268 comm="syz.2.641" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 395.566295][ T30] audit: type=1400 audit(1746762151.317:921): avc: denied { execute } for pid=9268 comm="syz.2.641" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 395.641890][ T30] audit: type=1400 audit(1746762151.317:922): avc: denied { write } for pid=9268 comm="syz.2.641" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 395.668618][ T30] audit: type=1400 audit(1746762151.317:923): avc: denied { open } for pid=9268 comm="syz.2.641" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 395.697506][ T30] audit: type=1400 audit(1746762151.427:924): avc: denied { create } for pid=9258 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 395.718510][ T30] audit: type=1400 audit(1746762151.427:925): avc: denied { setopt } for pid=9258 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 395.739251][ T30] audit: type=1400 audit(1746762151.427:926): avc: denied { setopt } for pid=9258 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 395.758916][ T30] audit: type=1400 audit(1746762151.527:927): avc: denied { mount } for pid=9266 comm="syz.4.640" name="/" dev="autofs" ino=19524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 395.853108][ T9284] netlink: 'syz.4.643': attribute type 16 has an invalid length. [ 395.861027][ T9284] netlink: 'syz.4.643': attribute type 17 has an invalid length. [ 395.955793][ T9285] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 396.589152][ T9190] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.606623][ T9293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.646'. [ 396.620851][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.630892][ T9293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 396.687973][ T9190] bridge_slave_0: entered allmulticast mode [ 396.719259][ T9190] bridge_slave_0: entered promiscuous mode [ 396.746169][ T9190] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.762235][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.770922][ T9190] bridge_slave_1: entered allmulticast mode [ 396.780592][ T9190] bridge_slave_1: entered promiscuous mode [ 397.603342][ T9190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.642675][ T9190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.755447][ T5862] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 397.853870][ T6429] bridge_slave_1: left allmulticast mode [ 397.862259][ T6429] bridge_slave_1: left promiscuous mode [ 397.876614][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.901318][ T6429] bridge_slave_0: left allmulticast mode [ 397.908172][ T6429] bridge_slave_0: left promiscuous mode [ 397.914066][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.290764][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 399.290784][ T30] audit: type=1400 audit(1746762155.977:962): avc: denied { create } for pid=9321 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 399.552679][ T30] audit: type=1400 audit(1746762156.857:963): avc: denied { read write } for pid=9314 comm="syz.4.651" name="vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 399.595136][ T30] audit: type=1400 audit(1746762156.857:964): avc: denied { open } for pid=9314 comm="syz.4.651" path="/dev/vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 399.703658][ T30] audit: type=1400 audit(1746762156.857:965): avc: denied { ioctl } for pid=9314 comm="syz.4.651" path="/dev/vbi6" dev="devtmpfs" ino=993 ioctlcmd=0x5627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 399.800011][ T30] audit: type=1400 audit(1746762156.987:966): avc: denied { write } for pid=9312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.866462][ T30] audit: type=1400 audit(1746762156.987:967): avc: denied { add_name } for pid=9312 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.901424][ T30] audit: type=1400 audit(1746762156.987:968): avc: denied { create } for pid=9312 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.944510][ T30] audit: type=1400 audit(1746762156.987:969): avc: denied { write } for pid=9312 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=4560 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.989548][ T30] audit: type=1400 audit(1746762156.987:970): avc: denied { append } for pid=9312 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=4560 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 400.031849][ T30] audit: type=1400 audit(1746762157.107:971): avc: denied { remove_name } for pid=9335 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=4560 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.134074][ T6429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.148344][ T6429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.160876][ T6429] bond0 (unregistering): Released all slaves [ 400.178178][ T9190] team0: Port device team_slave_0 added [ 400.186665][ T9190] team0: Port device team_slave_1 added [ 400.199422][ T9311] veth0_vlan: left promiscuous mode [ 400.206122][ T9311] veth0_vlan: entered promiscuous mode [ 400.764809][ T6429] tipc: Left network mode [ 400.812213][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.825198][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.854657][ T9190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.869057][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.876732][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.906328][ T9190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.239543][ T9190] hsr_slave_0: entered promiscuous mode [ 401.264713][ T9190] hsr_slave_1: entered promiscuous mode [ 401.292372][ T9190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.324662][ T9190] Cannot create hsr debugfs directory [ 401.348965][ T9346] syz.1.654 (9346): drop_caches: 2 [ 401.394033][ T9346] syz.1.654 (9346): drop_caches: 2 [ 401.777318][ T9351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.481624][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 404.490651][ T9374] netlink: 'syz.1.657': attribute type 5 has an invalid length. [ 404.498679][ T9374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.657'. [ 404.829283][ T9360] pim6reg: entered allmulticast mode [ 404.892078][ T9371] pim6reg: left allmulticast mode [ 405.121454][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 405.121487][ T30] audit: type=1400 audit(1746762162.407:976): avc: denied { map } for pid=9375 comm="syz.4.658" path="socket:[19895]" dev="sockfs" ino=19895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 405.495674][ T30] audit: type=1400 audit(1746762162.797:977): avc: denied { getopt } for pid=9379 comm="syz.3.659" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 405.566108][ T9374] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 405.574854][ T9374] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 405.583762][ T9374] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 405.592394][ T9374] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 405.601048][ T9374] geneve2: entered promiscuous mode [ 405.606433][ T9374] geneve2: entered allmulticast mode [ 405.725657][ T6429] hsr_slave_0: left promiscuous mode [ 405.799654][ T6429] hsr_slave_1: left promiscuous mode [ 405.805785][ T6429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.820399][ T6429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.336074][ T6429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.442000][ T6429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.786686][ T6429] veth1_macvtap: left promiscuous mode [ 406.818867][ T6429] veth0_macvtap: left promiscuous mode [ 406.953232][ T6429] veth1_vlan: left promiscuous mode [ 406.958780][ T6429] veth0_vlan: left promiscuous mode [ 407.325287][ T30] audit: type=1400 audit(1746762164.507:978): avc: denied { create } for pid=9396 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 407.599417][ T30] audit: type=1400 audit(1746762164.517:979): avc: denied { write } for pid=9396 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 407.619271][ T30] audit: type=1400 audit(1746762164.527:980): avc: denied { create } for pid=9396 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 407.639822][ T30] audit: type=1400 audit(1746762164.527:981): avc: denied { connect } for pid=9396 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 407.659544][ T30] audit: type=1400 audit(1746762164.527:982): avc: denied { write } for pid=9396 comm="syz.3.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 408.191821][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'. [ 408.317124][ T30] audit: type=1400 audit(1746762165.517:983): avc: denied { execute } for pid=9402 comm="syz.3.664" dev="hugetlbfs" ino=20571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 408.499324][ T30] audit: type=1400 audit(1746762165.527:984): avc: denied { execute_no_trans } for pid=9402 comm="syz.3.664" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=20571 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 408.545479][ T30] audit: type=1400 audit(1746762165.837:985): avc: denied { create } for pid=9388 comm="syz.4.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 408.739346][ T6429] team0 (unregistering): Port device team_slave_1 removed [ 408.789907][ T6429] team0 (unregistering): Port device team_slave_0 removed [ 410.366073][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 410.366120][ T30] audit: type=1400 audit(1746762167.627:987): avc: denied { read write } for pid=9420 comm="syz.4.669" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 410.463609][ T9424] syz.4.669 (9424): drop_caches: 2 [ 410.486317][ T9424] syz.4.669 (9424): drop_caches: 2 [ 410.753213][ T30] audit: type=1400 audit(1746762167.627:988): avc: denied { open } for pid=9420 comm="syz.4.669" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 411.094116][ T9434] netlink: 'syz.3.671': attribute type 10 has an invalid length. [ 411.103359][ T30] audit: type=1400 audit(1746762168.337:989): avc: denied { create } for pid=9422 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 411.202710][ T9190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 411.217292][ T30] audit: type=1400 audit(1746762168.347:990): avc: denied { write } for pid=9422 comm="syz.2.668" path="socket:[20615]" dev="sockfs" ino=20615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 411.285925][ T30] audit: type=1400 audit(1746762168.417:991): avc: denied { name_connect } for pid=9422 comm="syz.2.668" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 411.553921][ T9190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 411.565735][ T30] audit: type=1400 audit(1746762168.867:992): avc: denied { listen } for pid=9433 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 411.591453][ T9190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 411.609849][ T30] audit: type=1400 audit(1746762168.867:993): avc: denied { accept } for pid=9433 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 412.071034][ T30] audit: type=1400 audit(1746762168.997:994): avc: denied { write } for pid=9436 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 412.260690][ T9190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 412.615561][ T30] audit: type=1400 audit(1746762169.887:995): avc: denied { name_bind } for pid=9441 comm="syz.4.673" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 412.807315][ T9190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.831617][ T30] audit: type=1400 audit(1746762170.127:996): avc: denied { setopt } for pid=9456 comm="syz.3.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 412.869650][ T9458] syz.3.674: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 412.870748][ T9190] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.005339][ T9458] CPU: 0 UID: 0 PID: 9458 Comm: syz.3.674 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 413.005374][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 413.005392][ T9458] Call Trace: [ 413.005408][ T9458] [ 413.005424][ T9458] dump_stack_lvl+0x16c/0x1f0 [ 413.005466][ T9458] warn_alloc+0x248/0x3a0 [ 413.005505][ T9458] ? __pfx_warn_alloc+0x10/0x10 [ 413.005532][ T9458] ? stack_depot_save_flags+0x3e6/0xa50 [ 413.005566][ T9458] ? kasan_save_stack+0x42/0x60 [ 413.005598][ T9458] ? kasan_save_stack+0x33/0x60 [ 413.005622][ T9458] ? kasan_save_track+0x14/0x30 [ 413.005647][ T9458] ? __kasan_kmalloc+0xaa/0xb0 [ 413.005670][ T9458] ? xskq_create+0x52/0x1d0 [ 413.005690][ T9458] ? do_sock_setsockopt+0x221/0x470 [ 413.005719][ T9458] ? __sys_setsockopt+0x1a0/0x230 [ 413.005734][ T9458] ? __x64_sys_setsockopt+0xbd/0x160 [ 413.005758][ T9458] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 413.005794][ T9458] ? xskq_create+0xfb/0x1d0 [ 413.005819][ T9458] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 413.005852][ T9458] ? xskq_create+0xfb/0x1d0 [ 413.005872][ T9458] vmalloc_user_noprof+0x6b/0x90 [ 413.005896][ T9458] ? xskq_create+0xfb/0x1d0 [ 413.005913][ T9458] xskq_create+0xfb/0x1d0 [ 413.005935][ T9458] xsk_setsockopt+0x640/0x840 [ 413.005955][ T9458] ? __pfx_xsk_setsockopt+0x10/0x10 [ 413.005980][ T9458] ? selinux_socket_setsockopt+0x6a/0x80 [ 413.006005][ T9458] ? __pfx_xsk_setsockopt+0x10/0x10 [ 413.006023][ T9458] do_sock_setsockopt+0x221/0x470 [ 413.006045][ T9458] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 413.006064][ T9458] ? __pfx_do_futex+0x10/0x10 [ 413.006092][ T9458] ? fd_install+0x225/0x750 [ 413.006125][ T9458] ? __x64_sys_futex+0x1e0/0x4c0 [ 413.006146][ T9458] ? __x64_sys_futex+0x1e9/0x4c0 [ 413.006174][ T9458] __sys_setsockopt+0x1a0/0x230 [ 413.006195][ T9458] __x64_sys_setsockopt+0xbd/0x160 [ 413.006210][ T9458] ? do_syscall_64+0x91/0x260 [ 413.006233][ T9458] ? lockdep_hardirqs_on+0x7c/0x110 [ 413.006255][ T9458] do_syscall_64+0xcd/0x260 [ 413.006280][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.006300][ T9458] RIP: 0033:0x7ff90938e969 [ 413.006324][ T9458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.006343][ T9458] RSP: 002b:00007ff90a121038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 413.006373][ T9458] RAX: ffffffffffffffda RBX: 00007ff9095b5fa0 RCX: 00007ff90938e969 [ 413.006385][ T9458] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 413.006396][ T9458] RBP: 00007ff909410ab1 R08: 0000000000000004 R09: 0000000000000000 [ 413.006406][ T9458] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.006418][ T9458] R13: 0000000000000000 R14: 00007ff9095b5fa0 R15: 00007ffe627d3028 [ 413.006443][ T9458] [ 413.006451][ T9458] Mem-Info: [ 413.383934][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.392153][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.734460][ T9458] active_anon:16606 inactive_anon:0 isolated_anon:0 [ 413.734460][ T9458] active_file:12223 inactive_file:40952 isolated_file:0 [ 413.734460][ T9458] unevictable:768 dirty:621 writeback:0 [ 413.734460][ T9458] slab_reclaimable:6966 slab_unreclaimable:116199 [ 413.734460][ T9458] mapped:42386 shmem:7117 pagetables:1127 [ 413.734460][ T9458] sec_pagetables:0 bounce:0 [ 413.734460][ T9458] kernel_misc_reclaimable:0 [ 413.734460][ T9458] free:1303561 free_pcp:574 free_cma:0 [ 413.902367][ T9458] Node 0 active_anon:66848kB inactive_anon:0kB active_file:48832kB inactive_file:163604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:169528kB dirty:2484kB writeback:0kB shmem:26932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11600kB pagetables:4508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 413.949542][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.957516][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.957964][ T9458] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 414.136226][ T9458] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 414.248702][ T9467] openvswitch: netlink: Key type 8451 is out of range max 32 [ 414.359677][ T9458] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 414.374713][ T9479] netlink: 'syz.4.676': attribute type 12 has an invalid length. [ 414.546982][ T9458] Node 0 DMA32 free:1295800kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:55620kB inactive_anon:0kB active_file:48832kB inactive_file:161788kB unevictable:1536kB writepending:2484kB present:3129332kB managed:2543928kB mlocked:0kB bounce:0kB free_pcp:2116kB local_pcp:1064kB free_cma:0kB [ 415.706267][ T9458] lowmem_reserve[]: 0 0 1 1 1 [ 415.724221][ T9458] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 415.767757][ T9458] lowmem_reserve[]: 0 0 0 0 0 [ 415.813780][ T9458] Node 1 Normal free:3914788kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.903347][ T9190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.032838][ T9458] lowmem_reserve[]: 0 0 0 0 0 [ 416.074847][ T9458] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 416.185258][ T9458] Node 0 DMA32: 108*4kB (UE) 891*8kB (UME) 383*16kB (UME) 260*32kB (UME) 291*64kB (UME) 102*128kB (UME) 45*256kB (UME) 29*512kB (UME) 10*1024kB (UME) 4*2048kB (UME) 289*4096kB (UM) = 1282232kB [ 416.264170][ T9466] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 416.298990][ T9458] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 416.361464][ T9458] Node 1 Normal: 231*4kB (UME) 53*8kB (UME) 46*16kB (UME) 212*32kB (UE) 102*64kB (UME) 30*128kB (UME) 15*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 5*2048kB (UME) 946*4096kB (M) = 3914788kB [ 416.414214][ T9458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.439630][ T9458] Node 0 hugepages_total=5 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB [ 416.467936][ T9458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.484795][ T9458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 416.521880][ T9458] 54571 total pagecache pages [ 416.532323][ T9458] 1 pages in swap cache [ 416.542514][ T9458] Free swap = 120356kB [ 416.550227][ T9458] Total swap = 124996kB [ 416.558932][ T9458] 2097051 pages RAM [ 416.565681][ T9458] 0 pages HighMem/MovableOnly [ 416.573148][ T9458] 428963 pages reserved [ 416.583991][ T9458] 0 pages cma reserved [ 416.778237][ T9508] pim6reg: entered allmulticast mode [ 416.915338][ T9513] pim6reg: left allmulticast mode [ 417.378551][ T9190] veth0_vlan: entered promiscuous mode [ 417.405015][ T9190] veth1_vlan: entered promiscuous mode [ 417.556419][ T9524] pim6reg: entered allmulticast mode [ 417.595264][ T9190] veth0_macvtap: entered promiscuous mode [ 417.739062][ T9190] veth1_macvtap: entered promiscuous mode [ 417.754545][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 417.775671][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.801296][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.329178][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.354166][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.372061][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.425892][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 418.425914][ T30] audit: type=1400 audit(1746762175.727:1000): avc: denied { create } for pid=9494 comm="syz.1.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 418.443243][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.549853][ T30] audit: type=1400 audit(1746762176.027:1001): avc: denied { create } for pid=9542 comm="syz.3.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 419.841034][ T30] audit: type=1400 audit(1746762176.287:1002): avc: denied { read } for pid=9542 comm="syz.3.684" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 420.038668][ T30] audit: type=1400 audit(1746762176.287:1003): avc: denied { open } for pid=9542 comm="syz.3.684" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 420.063900][ T30] audit: type=1400 audit(1746762176.287:1004): avc: denied { ioctl } for pid=9542 comm="syz.3.684" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 420.261749][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.427156][ T9567] overlayfs: overlapping lowerdir path [ 420.521967][ T9569] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 420.634268][ T30] audit: type=1400 audit(1746762177.897:1005): avc: denied { create } for pid=9561 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 420.672903][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.682847][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.726355][ T30] audit: type=1400 audit(1746762177.907:1006): avc: denied { listen } for pid=9561 comm="syz.3.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 420.728115][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.836559][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.865425][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.030018][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.154234][ T9190] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.236861][ T9190] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.285666][ T9190] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.294482][ T9190] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.322978][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 421.335132][ T30] audit: type=1400 audit(1746762178.627:1007): avc: denied { ioctl } for pid=9574 comm="syz.3.689" path="socket:[20463]" dev="sockfs" ino=20463 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 421.380837][ T9575] syzkaller0: entered promiscuous mode [ 421.425801][ T9575] syzkaller0: entered allmulticast mode [ 421.627724][ T9583] loop6: detected capacity change from 0 to 524287999 [ 421.635578][ T30] audit: type=1400 audit(1746762178.927:1008): avc: denied { append } for pid=9571 comm="syz.2.688" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 421.701916][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.793855][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.984566][ T30] audit: type=1400 audit(1746762178.967:1009): avc: denied { mount } for pid=9574 comm="syz.3.689" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 422.164851][ T1241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.178739][ T1241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.413512][ T9592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 423.894085][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.693'. [ 423.907847][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 423.907875][ T30] audit: type=1400 audit(1746762181.177:1026): avc: denied { write } for pid=9598 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 424.236685][ T30] audit: type=1400 audit(1746762181.187:1027): avc: denied { connect } for pid=9598 comm="syz.3.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 424.256278][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.690741][ T30] audit: type=1400 audit(1746762181.987:1028): avc: denied { bind } for pid=9611 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 424.721882][ T5820] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 424.774198][ T30] audit: type=1400 audit(1746762182.067:1029): avc: denied { setopt } for pid=9611 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 424.823786][ T30] audit: type=1400 audit(1746762182.067:1030): avc: denied { accept } for pid=9611 comm="syz.3.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 424.976803][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.998876][ T5820] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.020329][ T5820] usb 7-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 425.106784][ T9622] lo speed is unknown, defaulting to 1000 [ 425.113140][ T9622] lo speed is unknown, defaulting to 1000 [ 425.123923][ T9622] lo speed is unknown, defaulting to 1000 [ 425.145689][ T9622] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 425.194128][ T9622] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 425.479721][ T9622] lo speed is unknown, defaulting to 1000 [ 425.486488][ T9622] lo speed is unknown, defaulting to 1000 [ 425.492899][ T9622] lo speed is unknown, defaulting to 1000 [ 425.499397][ T9622] lo speed is unknown, defaulting to 1000 [ 425.505998][ T9622] lo speed is unknown, defaulting to 1000 [ 425.537930][ T9624] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 425.540979][ T5820] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.552702][ T30] audit: type=1400 audit(1746762182.397:1031): avc: denied { setopt } for pid=9616 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 425.596552][ T5820] usb 7-1: config 0 descriptor?? [ 425.685534][ T30] audit: type=1400 audit(1746762182.407:1032): avc: denied { write } for pid=9616 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 425.705936][ T30] audit: type=1400 audit(1746762182.757:1033): avc: denied { connect } for pid=9616 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 427.257409][ T30] audit: type=1400 audit(1746762182.877:1034): avc: denied { write } for pid=9616 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 427.260108][ T5820] hid-led 0003:1D34:0004.0006: unknown main item tag 0x0 [ 427.482008][ T5820] hid-led 0003:1D34:0004.0006: probe with driver hid-led failed with error -71 [ 427.496752][ T5820] usb 7-1: USB disconnect, device number 2 [ 427.628361][ T30] audit: type=1400 audit(1746762184.917:1035): avc: denied { map } for pid=9635 comm="syz.2.699" path="socket:[21018]" dev="sockfs" ino=21018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 428.169812][ T9650] binder: 9640:9650 ioctl c018620b 0 returned -14 [ 428.657250][ T9643] lo speed is unknown, defaulting to 1000 [ 428.903570][ T9649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.085161][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 429.085193][ T30] audit: type=1400 audit(1746762186.357:1043): avc: denied { open } for pid=9641 comm="syz.3.701" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 429.275677][ T30] audit: type=1400 audit(1746762186.367:1044): avc: denied { mount } for pid=9641 comm="syz.3.701" name="/" dev="configfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 429.298621][ T30] audit: type=1400 audit(1746762186.367:1045): avc: denied { search } for pid=9641 comm="syz.3.701" name="/" dev="configfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 429.321340][ T30] audit: type=1400 audit(1746762186.367:1046): avc: denied { read } for pid=9641 comm="syz.3.701" name="/" dev="configfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 429.343658][ T30] audit: type=1400 audit(1746762186.367:1047): avc: denied { open } for pid=9641 comm="syz.3.701" path="/" dev="configfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 429.985252][ T30] audit: type=1400 audit(1746762186.447:1048): avc: denied { bind } for pid=9646 comm="syz.4.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 430.033590][ T30] audit: type=1400 audit(1746762186.447:1049): avc: denied { write } for pid=9646 comm="syz.4.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 430.104390][ T30] audit: type=1400 audit(1746762187.087:1050): avc: denied { create } for pid=9646 comm="syz.4.702" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 430.541072][ T30] audit: type=1400 audit(1746762187.107:1051): avc: denied { name_bind } for pid=9660 comm="syz.1.703" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 430.705437][ T30] audit: type=1400 audit(1746762187.107:1052): avc: denied { node_bind } for pid=9660 comm="syz.1.703" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 431.041698][ T9672] netlink: 68 bytes leftover after parsing attributes in process `syz.3.705'. [ 431.358812][ T9669] ceph: No mds server is up or the cluster is laggy [ 433.493862][ T9192] Bluetooth: hci5: command 0x0405 tx timeout [ 434.408989][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 434.409021][ T30] audit: type=1400 audit(1746762191.707:1060): avc: denied { wake_alarm } for pid=9686 comm="syz.3.709" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 434.710304][ T9705] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 435.682173][ T30] audit: type=1400 audit(1746762191.987:1061): avc: denied { ioctl } for pid=9695 comm="syz.1.711" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 436.195410][ T30] audit: type=1400 audit(1746762192.137:1062): avc: denied { create } for pid=9692 comm="syz.2.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 437.383522][ T30] audit: type=1400 audit(1746762194.627:1063): avc: denied { create } for pid=9716 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 437.429062][ T9724] syz.2.715 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 437.502448][ T30] audit: type=1400 audit(1746762194.697:1064): avc: denied { setopt } for pid=9716 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 437.838592][ T30] audit: type=1400 audit(1746762194.717:1065): avc: denied { connect } for pid=9716 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 437.959990][ T30] audit: type=1400 audit(1746762194.747:1066): avc: denied { ioctl } for pid=9716 comm="syz.2.715" path="socket:[21148]" dev="sockfs" ino=21148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 437.988750][ T30] audit: type=1400 audit(1746762194.937:1067): avc: denied { read } for pid=9713 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 438.091471][ T30] audit: type=1400 audit(1746762194.947:1068): avc: denied { read } for pid=9713 comm="syz.1.714" path="socket:[21146]" dev="sockfs" ino=21146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 439.366947][ T30] audit: type=1400 audit(1746762196.217:1069): avc: denied { mounton } for pid=9743 comm="syz.2.719" path="/proc/674/task" dev="proc" ino=21183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 439.483161][ T30] audit: type=1400 audit(1746762196.247:1070): avc: denied { associate } for pid=9743 comm="syz.2.719" name="blkio.bfq.group_wait_time" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 439.812219][ T30] audit: type=1400 audit(1746762197.107:1071): avc: denied { getopt } for pid=9757 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 440.757122][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.129762][ T9769] netlink: 'syz.6.723': attribute type 12 has an invalid length. [ 442.839346][ T30] audit: type=1400 audit(1746762200.137:1072): avc: denied { getopt } for pid=9786 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 443.404673][ T30] audit: type=1400 audit(1746762200.697:1073): avc: denied { read } for pid=9795 comm="syz.3.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 444.024891][ T30] audit: type=1400 audit(1746762200.697:1074): avc: denied { mounton } for pid=9794 comm="syz.1.730" path="/139/file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 444.882711][ T30] audit: type=1400 audit(1746762201.817:1075): avc: denied { write } for pid=9808 comm="syz.3.734" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 445.075199][ T30] audit: type=1400 audit(1746762201.817:1076): avc: denied { open } for pid=9808 comm="syz.3.734" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 445.619360][ T30] audit: type=1400 audit(1746762202.897:1077): avc: denied { read } for pid=9829 comm="syz.6.737" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 445.750275][ T30] audit: type=1400 audit(1746762202.897:1078): avc: denied { open } for pid=9829 comm="syz.6.737" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 445.750325][ T30] audit: type=1400 audit(1746762202.917:1079): avc: denied { ioctl } for pid=9829 comm="syz.6.737" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 446.344002][ T9843] netlink: 'syz.1.741': attribute type 10 has an invalid length. [ 446.788006][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 447.006208][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.014658][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.033380][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032dda000: rx timeout, send abort [ 447.063476][ T30] audit: type=1400 audit(1746762204.357:1080): avc: denied { read } for pid=5166 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 447.085500][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.094890][ T30] audit: type=1400 audit(1746762204.357:1081): avc: denied { search } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.120479][ T30] audit: type=1400 audit(1746762204.387:1082): avc: denied { write } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.150794][ T30] audit: type=1400 audit(1746762204.387:1083): avc: denied { add_name } for pid=5166 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 447.171893][ T30] audit: type=1400 audit(1746762204.387:1084): avc: denied { create } for pid=5166 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 447.207639][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.214805][ T9843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.223331][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.230532][ T9843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.534151][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032dd8000: rx timeout, send abort [ 447.542932][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032dda000: abort rx timeout. Force session deactivation [ 447.542930][ T9843] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 448.042473][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888032dd8000: abort rx timeout. Force session deactivation [ 449.890721][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 449.890738][ T30] audit: type=1400 audit(1746762207.147:1088): avc: denied { append } for pid=9866 comm="syz.3.746" name="qat_adf_ctl" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 449.935226][ T9884] netlink: 'syz.6.748': attribute type 15 has an invalid length. [ 449.998277][ T30] audit: type=1400 audit(1746762207.177:1089): avc: denied { relabelfrom } for pid=9866 comm="syz.3.746" name="" dev="pipefs" ino=22123 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 450.023430][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.6.748'. [ 450.577691][ T9886] netlink: 'syz.2.747': attribute type 12 has an invalid length. [ 451.756214][ T9909] Invalid ELF header type: 3 != 1 [ 452.215423][ T30] audit: type=1400 audit(1746762209.047:1090): avc: denied { module_load } for pid=9905 comm="syz.6.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 452.397470][ T30] audit: type=1400 audit(1746762209.697:1091): avc: denied { unmount } for pid=9190 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 452.469604][ T30] audit: type=1400 audit(1746762209.757:1092): avc: denied { read write } for pid=9915 comm="syz.6.753" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 452.604088][ T30] audit: type=1400 audit(1746762209.757:1093): avc: denied { open } for pid=9915 comm="syz.6.753" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 452.758987][ T30] audit: type=1400 audit(1746762209.757:1094): avc: denied { read write } for pid=9915 comm="syz.6.753" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 452.787832][ T30] audit: type=1400 audit(1746762209.757:1095): avc: denied { open } for pid=9915 comm="syz.6.753" path="/dev/sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 452.877274][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.754'. [ 453.307572][ T30] audit: type=1400 audit(1746762209.757:1096): avc: denied { ioctl } for pid=9915 comm="syz.6.753" path="/dev/sg0" dev="devtmpfs" ino=741 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 454.468740][ T30] audit: type=1400 audit(1746762211.757:1097): avc: denied { block_suspend } for pid=9925 comm="syz.2.756" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 455.469820][ T9954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.759'. [ 455.903014][ T9945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.756'. [ 456.887952][ T971] IPVS: starting estimator thread 0... [ 457.038149][ T9969] IPVS: using max 43 ests per chain, 103200 per kthread [ 457.567496][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.764'. [ 458.501038][ T9926] lo speed is unknown, defaulting to 1000 [ 458.740759][ T9998] xt_HMARK: proto mask must be zero with L3 mode [ 458.750119][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.765'. [ 458.760831][ T9998] nfs4: Unknown parameter 'w4]:"Áë' [ 459.005279][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 459.202838][T10012] netlink: 'syz.3.766': attribute type 12 has an invalid length. [ 459.655529][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 459.662830][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.733353][ T9] usb 2-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 459.773655][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 459.802380][ T9] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 459.827927][ T9] usb 2-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 459.841925][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 459.928593][ T9] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 459.938986][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.962909][ T9] usb 2-1: config 0 descriptor?? [ 461.455739][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 461.461777][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 462.280954][ T9] usb 2-1: USB disconnect, device number 9 [ 462.380860][ T30] audit: type=1400 audit(1746762219.677:1098): avc: denied { unmount } for pid=9190 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 462.611021][ T30] audit: type=1400 audit(1746762219.897:1099): avc: denied { open } for pid=10027 comm="syz.1.771" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 462.639960][ T30] audit: type=1400 audit(1746762219.907:1100): avc: denied { ioctl } for pid=10027 comm="syz.1.771" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 462.835340][ T9910] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 463.905208][ T9910] usb 7-1: Using ep0 maxpacket: 16 [ 464.030919][T10037] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 464.056651][ T9910] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 464.124443][T10058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.137569][T10058] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 464.157441][T10058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 464.486053][ T9910] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.736563][ T30] audit: type=1400 audit(1746762222.037:1101): avc: denied { ioctl } for pid=10027 comm="syz.1.771" path="socket:[22698]" dev="sockfs" ino=22698 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 464.831670][ T9910] usb 7-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.944842][ T9910] usb 7-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 464.972002][ T9910] usb 7-1: config 7 interface 0 has no altsetting 0 [ 464.980393][ T9910] usb 7-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 465.471775][ T9910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.712769][ T9910] usbhid 7-1:7.0: can't add hid device: -71 [ 465.917939][ T9910] usbhid 7-1:7.0: probe with driver usbhid failed with error -71 [ 466.533112][T10077] fuse: Unknown parameter 'fd0x0000000000000003' [ 466.607643][ T9910] usb 7-1: USB disconnect, device number 3 [ 466.780630][ T30] audit: type=1400 audit(1746762223.987:1102): avc: denied { shutdown } for pid=10081 comm="syz.3.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 467.458125][T10089] overlayfs: missing 'lowerdir' [ 467.662703][ T30] audit: type=1400 audit(1746762224.867:1103): avc: denied { connect } for pid=10071 comm="syz.2.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 467.917584][T10103] netlink: 'syz.4.782': attribute type 12 has an invalid length. [ 468.575318][ T30] audit: type=1400 audit(1746762225.507:1104): avc: denied { read } for pid=10107 comm="syz.2.786" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 468.599314][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.805161][ T30] audit: type=1400 audit(1746762225.657:1105): avc: denied { getopt } for pid=10100 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 468.879197][ T6427] Bluetooth: hci2: Frame reassembly failed (-84) [ 468.893753][ T6427] Bluetooth: hci2: Frame reassembly failed (-84) [ 469.491028][ T30] audit: type=1400 audit(1746762226.787:1106): avc: denied { write } for pid=10126 comm="syz.4.788" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 469.706884][ T30] audit: type=1400 audit(1746762226.827:1107): avc: denied { ioctl } for pid=10126 comm="syz.4.788" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 469.744354][T10129] hub 2-0:1.0: USB hub found [ 469.754566][T10129] hub 2-0:1.0: 1 port detected [ 469.841837][T10117] ceph: No mds server is up or the cluster is laggy [ 470.905113][ T9192] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 472.785571][ T30] audit: type=1400 audit(1746762230.037:1108): avc: denied { mount } for pid=10150 comm="syz.1.791" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 473.249345][ T30] audit: type=1400 audit(1746762230.047:1109): avc: denied { remount } for pid=10150 comm="syz.1.791" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 473.278010][ T30] audit: type=1400 audit(1746762230.577:1110): avc: denied { create } for pid=10144 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 473.410305][ T30] audit: type=1400 audit(1746762230.607:1111): avc: denied { getopt } for pid=10144 comm="syz.3.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 473.503098][ T30] audit: type=1400 audit(1746762230.687:1112): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 474.600581][T10180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.793'. [ 474.610017][T10180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.793'. [ 474.630746][ T30] audit: type=1400 audit(1746762231.887:1113): avc: denied { bind } for pid=10157 comm="syz.4.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 474.881083][T10180] netlink: 'syz.4.793': attribute type 11 has an invalid length. [ 474.889976][T10180] netlink: 224 bytes leftover after parsing attributes in process `syz.4.793'. [ 475.681543][ T30] audit: type=1400 audit(1746762232.537:1114): avc: denied { create } for pid=10185 comm="syz.6.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 476.228902][T10194] syz.1.797: attempt to access beyond end of device [ 476.228902][T10194] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 476.293133][T10194] XFS (nbd1): SB validate failed with error -5. [ 478.559700][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.6.801'. [ 478.621578][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'. [ 479.074359][T10238] overlay: Unknown parameter '/dev/cpu/#/msr' [ 479.074407][ T30] audit: type=1400 audit(1746762236.367:1115): avc: denied { mounton } for pid=10235 comm="syz.4.803" path="/158/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 479.601485][T10248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 479.608008][T10248] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 479.623307][T10248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 479.629697][T10248] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 479.654664][T10248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 479.660786][T10248] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 479.675972][T10248] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 479.682015][T10248] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 479.697993][T10248] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 479.704013][T10248] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 479.773764][T10221] input: syz0 as /devices/virtual/input/input11 [ 479.852916][ T30] audit: type=1400 audit(1746762237.097:1116): avc: denied { read } for pid=5169 comm="acpid" name="js0" dev="devtmpfs" ino=2953 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 480.008705][ T30] audit: type=1400 audit(1746762237.097:1117): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2953 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 480.257203][ T30] audit: type=1400 audit(1746762237.107:1118): avc: denied { ioctl } for pid=5169 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2953 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 480.300169][T10261] netlink: 44 bytes leftover after parsing attributes in process `syz.4.806'. [ 480.490932][ T30] audit: type=1400 audit(1746762237.617:1119): avc: denied { bind } for pid=10255 comm="syz.4.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 481.001116][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.807'. [ 481.785273][ T971] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 481.972882][ T971] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 481.981282][ T971] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 482.180977][ T30] audit: type=1400 audit(1746762239.347:1120): avc: denied { set_context_mgr } for pid=10285 comm="syz.4.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 482.201141][ T971] usb 4-1: config 8 has no interface number 0 [ 482.292941][T10292] binder: BINDER_SET_CONTEXT_MGR already set [ 482.299352][T10292] binder: 10285:10292 ioctl 4018620d 200000000040 returned -16 [ 482.667686][ T971] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 483.783456][ T30] audit: type=1400 audit(1746762239.587:1121): avc: denied { write } for pid=10285 comm="syz.4.810" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 483.919326][ T971] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 483.940366][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.965751][ T971] usb 4-1: Product: syz [ 483.988843][ T971] usb 4-1: Manufacturer: syz [ 484.009069][ T971] usb 4-1: SerialNumber: syz [ 484.065369][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 485.115122][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 485.196652][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 485.206514][ T9] usb 2-1: config 0 has no interface number 0 [ 485.212629][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.266851][ T971] usb 4-1: USB disconnect, device number 7 [ 485.347328][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.380237][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 485.415088][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.575585][ T30] audit: type=1400 audit(1746762242.867:1122): avc: denied { write } for pid=10318 comm="syz.4.813" path="socket:[23176]" dev="sockfs" ino=23176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 485.626219][ T9] usb 2-1: config 0 descriptor?? [ 485.887658][T10331] fuse: Bad value for 'fd' [ 485.956806][ T9] usbhid 2-1:0.1: can't add hid device: -71 [ 485.962851][ T9] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 486.075090][T10333] usb usb8: usbfs: process 10333 (syz.2.815) did not claim interface 0 before use [ 486.094859][T10333] netlink: 'syz.2.815': attribute type 11 has an invalid length. [ 486.102714][T10333] netlink: 32 bytes leftover after parsing attributes in process `syz.2.815'. [ 486.410761][ T30] audit: type=1400 audit(1746762243.347:1123): avc: denied { read } for pid=10327 comm="syz.2.815" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 486.899133][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.814'. [ 486.908343][T10335] netlink: 'syz.3.814': attribute type 5 has an invalid length. [ 486.916225][T10335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.814'. [ 487.089909][ T9] usb 2-1: USB disconnect, device number 10 [ 487.608076][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 488.618554][T10360] bridge0: port 3(batadv0) entered blocking state [ 488.625515][T10360] bridge0: port 3(batadv0) entered disabled state [ 488.632733][T10360] batadv0: entered allmulticast mode [ 488.644694][T10360] batadv0: entered promiscuous mode [ 488.652219][T10360] bridge0: port 3(batadv0) entered blocking state [ 488.658752][T10360] bridge0: port 3(batadv0) entered forwarding state [ 488.695230][ T30] audit: type=1400 audit(1746762245.907:1124): avc: granted { setsecparam } for pid=10355 comm="syz.6.820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 489.127348][ T1241] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 489.137147][ T1241] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 489.301655][T10365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.680600][ T30] audit: type=1400 audit(1746762246.587:1125): avc: denied { read } for pid=10362 comm="syz.2.822" path="socket:[23800]" dev="sockfs" ino=23800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 490.641945][ T30] audit: type=1400 audit(1746762247.937:1126): avc: denied { create } for pid=10375 comm="syz.1.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 490.663586][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.825'. [ 490.748658][T10376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.825'. [ 491.234063][T10376] netlink: 204 bytes leftover after parsing attributes in process `syz.1.825'. [ 492.173736][ T30] audit: type=1400 audit(1746762249.467:1127): avc: denied { ioctl } for pid=10375 comm="syz.1.825" path="socket:[23825]" dev="sockfs" ino=23825 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 492.205388][ T30] audit: type=1400 audit(1746762249.467:1128): avc: denied { write } for pid=10375 comm="syz.1.825" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 492.478314][ T30] audit: type=1400 audit(1746762249.667:1129): avc: denied { connect } for pid=10371 comm="syz.6.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 492.638491][ T30] audit: type=1400 audit(1746762249.667:1130): avc: denied { write } for pid=10371 comm="syz.6.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 492.663404][ T30] audit: type=1400 audit(1746762249.727:1131): avc: denied { setopt } for pid=10371 comm="syz.6.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 493.704590][ T30] audit: type=1400 audit(1746762250.997:1132): avc: denied { bind } for pid=10375 comm="syz.1.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 493.928648][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.828'. [ 496.013360][T10410] netlink: 'syz.4.831': attribute type 12 has an invalid length. [ 496.045356][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 496.155120][T10414] netlink: 16 bytes leftover after parsing attributes in process `syz.1.832'. [ 496.255163][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 496.260870][ T30] audit: type=1400 audit(1746762253.447:1133): avc: denied { nlmsg_read } for pid=10411 comm="syz.1.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 496.264069][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 496.281400][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.296482][ T9] usb 4-1: config 0 has no interface number 0 [ 496.302649][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.313601][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.323502][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 496.333081][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.344818][ T9] usb 4-1: config 0 descriptor?? [ 498.069472][ T9] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0007/input/input12 [ 498.089410][T10425] lo speed is unknown, defaulting to 1000 [ 498.136177][ T9910] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 498.632418][ T9910] usb 5-1: device descriptor read/64, error -71 [ 499.125375][ T9] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0007/input/input13 [ 499.158764][ T9910] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 499.258459][ T9] uclogic 0003:28BD:0071.0007: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 499.299275][ T9] usb 4-1: USB disconnect, device number 8 [ 499.378830][ T9910] usb 5-1: device descriptor read/64, error -71 [ 499.474472][T10444] fido_id[10444]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 499.506368][ T9910] usb usb5-port1: attempt power cycle [ 499.776058][T10452] netlink: 16 bytes leftover after parsing attributes in process `syz.6.837'. [ 502.560085][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.992874][ T30] audit: type=1400 audit(1746762260.287:1134): avc: denied { getopt } for pid=10459 comm="syz.1.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 503.156231][T10481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.273290][T10483] netlink: 'syz.1.845': attribute type 12 has an invalid length. [ 503.799701][T10438] lo speed is unknown, defaulting to 1000 [ 505.365140][ T30] audit: type=1400 audit(1746762262.657:1135): avc: denied { watch } for pid=10505 comm="syz.3.850" path="/177" dev="tmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 505.516443][T10518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.849'. [ 505.605077][T10523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 505.617228][T10523] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 505.635945][T10523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.086135][T10518] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10518 comm=syz.2.849 [ 506.175862][ T30] audit: type=1400 audit(1746762263.377:1136): avc: denied { listen } for pid=10500 comm="syz.2.849" laddr=::ffff:172.20.20.187 lport=44967 faddr=::ffff:172.20.255.187 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 506.202236][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.270019][T10532] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 506.875221][ T9910] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 507.685188][ T9910] usb 4-1: Using ep0 maxpacket: 16 [ 507.835598][ T9910] usb 4-1: device descriptor read/all, error -71 [ 508.818966][ T30] audit: type=1400 audit(1746762265.217:1137): avc: denied { sqpoll } for pid=10524 comm="syz.6.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 509.332758][ T30] audit: type=1400 audit(1746762266.627:1138): avc: denied { read } for pid=10558 comm="syz.6.858" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 509.355934][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.396008][T10562] fuse: Bad value for 'rootmode' [ 509.467835][ T30] audit: type=1400 audit(1746762266.627:1139): avc: denied { open } for pid=10558 comm="syz.6.858" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 509.583266][T10561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.200580][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.856'. [ 510.285099][ T30] audit: type=1400 audit(1746762267.577:1140): avc: denied { ioctl } for pid=10558 comm="syz.6.858" path="/dev/usbmon8" dev="devtmpfs" ino=740 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 510.922637][ T30] audit: type=1400 audit(1746762267.797:1141): avc: denied { write } for pid=10568 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 512.362345][ T30] audit: type=1400 audit(1746762269.657:1142): avc: denied { bind } for pid=10587 comm="syz.1.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 512.959625][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.6.866'. [ 513.614868][T10600] input: syz1 as /devices/virtual/input/input15 [ 515.736073][ T30] audit: type=1326 audit(1746762272.647:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10607 comm="syz.2.869" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f010358e969 code=0x0 [ 516.296661][ T30] audit: type=1400 audit(1746762273.587:1144): avc: denied { create } for pid=10617 comm="syz.4.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 516.465897][T10619] bpq0: entered promiscuous mode [ 516.503495][T10606] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 516.509989][T10619] bpq0: entered allmulticast mode [ 516.552567][ T30] audit: type=1400 audit(1746762273.597:1145): avc: denied { ioctl } for pid=10617 comm="syz.4.871" path="socket:[24196]" dev="sockfs" ino=24196 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 516.709974][ T30] audit: type=1400 audit(1746762273.837:1146): avc: denied { ioctl } for pid=10617 comm="syz.4.871" path="socket:[24783]" dev="sockfs" ino=24783 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 518.097361][ T30] audit: type=1400 audit(1746762275.387:1147): avc: denied { setopt } for pid=10639 comm="syz.3.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 518.465444][ T5825] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 518.905445][ T30] audit: type=1400 audit(1746762276.027:1148): avc: denied { associate } for pid=10645 comm="syz.4.879" name="syz0" scontext=root:object_r:var_auth_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 519.837013][ T5900] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 520.942767][ T30] audit: type=1400 audit(1746762276.307:1149): avc: denied { map } for pid=10643 comm="syz.6.877" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 521.101197][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 521.302786][ T30] audit: type=1326 audit(1746762278.597:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.6.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7edb8e969 code=0x7fc00000 [ 521.333815][ T5900] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 521.376981][T10657] Invalid ELF header magic: != ELF [ 521.395260][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.597098][ T5900] usb 5-1: config 0 descriptor?? [ 521.611077][ T30] audit: type=1400 audit(1746762278.677:1151): avc: denied { module_load } for pid=10641 comm="syz.1.878" path="/sys/kernel/notes" dev="sysfs" ino=1401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 521.639959][ T5900] usb 5-1: can't set config #0, error -71 [ 521.661480][ T5900] usb 5-1: USB disconnect, device number 11 [ 522.035753][T10666] syz.3.883 (10666): drop_caches: 2 [ 522.686118][T10673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.170746][T10675] ceph: No mds server is up or the cluster is laggy [ 524.130690][T10690] batman_adv: batadv0: Adding interface: dummy0 [ 524.146846][T10690] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.493375][T10690] batman_adv: batadv0: Interface activated: dummy0 [ 524.825134][ T5900] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 525.057385][ T5900] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 525.066615][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.135853][ T5900] usb 5-1: config 0 descriptor?? [ 525.146493][ T5900] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 525.154345][ T5900] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 526.299248][ T5825] usb 5-1: USB disconnect, device number 12 [ 527.855352][ T30] audit: type=1400 audit(1746762285.127:1152): avc: denied { bind } for pid=10729 comm="syz.6.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 527.874602][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.157711][T10738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.358174][T10755] netlink: 'syz.3.898': attribute type 10 has an invalid length. [ 530.449749][T10755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.457951][T10755] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 530.686134][ T30] audit: type=1400 audit(1746762287.987:1153): avc: denied { create } for pid=10767 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 530.800189][ T30] audit: type=1400 audit(1746762288.007:1154): avc: denied { create } for pid=10766 comm="syz.6.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 531.481856][T10785] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 532.176586][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'. [ 532.670281][T10800] netlink: 'syz.6.906': attribute type 1 has an invalid length. [ 532.694036][T10800] netlink: 'syz.6.906': attribute type 2 has an invalid length. [ 532.862468][ T9910] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 533.455484][ T30] audit: type=1400 audit(1746762290.717:1155): avc: denied { read write } for pid=10801 comm="syz.3.907" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 533.725712][ T30] audit: type=1400 audit(1746762290.717:1156): avc: denied { ioctl open } for pid=10801 comm="syz.3.907" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 533.806129][ T9910] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 533.835899][ T9910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.701858][ T9910] usb 5-1: config 0 descriptor?? [ 534.709861][ T9910] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 535.156436][T10816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.165219][T10816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.474608][T10817] lo speed is unknown, defaulting to 1000 [ 535.644040][ T30] audit: type=1400 audit(1746762292.447:1157): avc: denied { mounton } for pid=10790 comm="syz.4.905" path="/proc/791/cgroup" dev="proc" ino=25615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 535.863617][ T9910] gspca_cpia1: usb_control_msg 05, error -110 [ 535.884821][ T9910] gspca_cpia1: usb_control_msg 01, error -32 [ 535.894228][ T9910] gspca_cpia1: usb_control_msg 01, error -32 [ 535.904130][ T9910] gspca_cpia1: usb_control_msg 01, error -32 [ 535.912516][ T9910] gspca_cpia1: usb_control_msg 01, error -32 [ 535.949749][ T9910] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 535.977387][T10827] rdma_rxe: rxe_newlink: failed to add lo [ 536.813075][ T5900] usb 5-1: USB disconnect, device number 13 [ 537.394655][T10835] syz.3.914: attempt to access beyond end of device [ 537.394655][T10835] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 537.409241][T10835] syz.3.914: attempt to access beyond end of device [ 537.409241][T10835] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 537.422448][T10835] Mount JFS Failure: -5 [ 537.426751][T10835] jfs_mount failed w/return code = -5 [ 538.791702][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.916'. [ 541.073088][T10863] bond0: (slave batadv0): Releasing backup interface [ 541.883564][ T30] audit: type=1400 audit(1746762298.527:1158): avc: denied { create } for pid=10872 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 542.020035][T10876] netlink: 'syz.3.918': attribute type 10 has an invalid length. [ 542.034853][ T30] audit: type=1400 audit(1746762299.337:1159): avc: denied { bind } for pid=10872 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 542.064114][T10863] batman_adv: batadv0: Removing interface: macvtap0 [ 542.196227][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.923'. [ 542.468024][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.918'. [ 542.499533][T10867] team0: Mode changed to "loadbalance" [ 542.881078][T10876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.910283][T10876] team0: Port device bond0 added [ 543.141970][T10888] syz.4.924: attempt to access beyond end of device [ 543.141970][T10888] mtdblock0: rw=2048, sector=521328, nr_sectors = 8 limit=256 [ 543.931791][T10863] team0 (unregistering): Port device bond0 removed [ 544.235548][ T30] audit: type=1400 audit(1746762301.437:1160): avc: denied { ioctl } for pid=10890 comm="syz.1.925" path="socket:[25151]" dev="sockfs" ino=25151 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 544.260399][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.325066][ T30] audit: type=1326 audit(1746762301.517:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.1.925" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb528d8e969 code=0x0 [ 544.875882][T10900] syz.2.926 (10900): drop_caches: 2 [ 544.893140][T10900] syz.2.926 (10900): drop_caches: 2 [ 544.928545][T10900] netlink: 'syz.2.926': attribute type 2 has an invalid length. [ 546.560696][ T30] audit: type=1400 audit(1746762303.477:1162): avc: denied { setcurrent } for pid=10907 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 546.627422][ T30] audit: type=1400 audit(1746762303.487:1163): avc: denied { write } for pid=10907 comm="syz.1.928" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 547.936189][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.930'. [ 548.318500][ T971] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 549.435181][ T971] usb 5-1: Using ep0 maxpacket: 16 [ 549.481852][ T971] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 549.932717][ T971] usb 5-1: config 0 has no interface number 0 [ 549.969816][ T30] audit: type=1400 audit(1746762306.857:1164): avc: denied { accept } for pid=10922 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 550.348608][ T971] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.363523][ T971] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.373549][ T971] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 550.386636][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.414365][ T971] usb 5-1: config 0 descriptor?? [ 550.431141][ T971] usb 5-1: can't set config #0, error -71 [ 550.455713][ T971] usb 5-1: USB disconnect, device number 14 [ 551.198902][ T30] audit: type=1400 audit(1746762308.457:1165): avc: denied { execute } for pid=10940 comm="syz.1.935" name="file1" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 551.302595][ T30] audit: type=1400 audit(1746762308.457:1166): avc: denied { execute_no_trans } for pid=10940 comm="syz.1.935" path="/183/file1" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 551.327765][ T30] audit: type=1400 audit(1746762308.467:1167): avc: denied { name_bind } for pid=10940 comm="syz.1.935" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 553.934388][ T30] audit: type=1400 audit(1746762310.917:1168): avc: denied { ioctl } for pid=10963 comm="syz.2.940" path="socket:[25248]" dev="sockfs" ino=25248 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 555.060126][ T30] audit: type=1400 audit(1746762312.317:1169): avc: denied { setopt } for pid=10976 comm="syz.1.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 556.841378][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.944'. [ 558.450611][T11005] netlink: 'syz.4.946': attribute type 10 has an invalid length. [ 558.451585][T10999] batman_adv: batadv0: Interface deactivated: dummy0 [ 558.480739][T10999] batman_adv: batadv0: Removing interface: dummy0 [ 558.585039][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 559.463455][T10999] bridge_slave_0: left allmulticast mode [ 559.555816][T10999] bridge_slave_0: left promiscuous mode [ 559.616306][T10999] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.772347][T10928] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 559.981111][T10999] bridge_slave_1: left allmulticast mode [ 559.989250][T10999] bridge_slave_1: left promiscuous mode [ 560.013802][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.060855][T10928] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 560.135769][T10999] bond0: (slave bond_slave_0): Releasing backup interface [ 560.157002][ T30] audit: type=1400 audit(1746762317.457:1170): avc: denied { create } for pid=11015 comm="syz.3.949" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 560.236103][T10999] bond0: (slave bond_slave_1): Releasing backup interface [ 560.342743][T10999] team0: Port device team_slave_0 removed [ 560.356924][T10999] team0: Port device team_slave_1 removed [ 560.373436][T10999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.390729][T10999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.429518][T10999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.437209][T10928] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 560.446259][T10999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.496015][T11003] team0: Mode changed to "loadbalance" [ 560.605721][T11005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.617886][T10928] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 560.639737][T10928] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.641061][T11005] team0: Port device bond0 added [ 560.691614][T10928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 560.707232][T10928] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 560.732986][T10928] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 560.760889][ T30] audit: type=1400 audit(1746762318.057:1171): avc: denied { view } for pid=11033 comm="syz.3.952" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 560.780527][T10928] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 560.847441][T11035] trusted_key: syz.3.952 sent an empty control message without MSG_MORE. [ 560.906291][T10928] usb 2-1: Product: syz [ 560.956352][T10928] usb 2-1: Manufacturer: syz [ 561.125340][ T30] audit: type=1400 audit(1746762318.237:1172): avc: denied { write } for pid=11033 comm="syz.3.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 561.210480][T10928] cdc_wdm 2-1:1.0: skipping garbage [ 561.250038][T10928] cdc_wdm 2-1:1.0: skipping garbage [ 561.274807][T10928] cdc_wdm 2-1:1.0: skipping garbage [ 561.784509][T10928] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 561.934640][ T30] audit: type=1400 audit(1746762319.187:1173): avc: denied { ioctl } for pid=11024 comm="syz.6.950" path="socket:[26200]" dev="sockfs" ino=26200 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 562.889372][T11049] netlink: 'syz.1.951': attribute type 13 has an invalid length. [ 562.915180][ T30] audit: type=1400 audit(1746762320.187:1174): avc: denied { bind } for pid=11028 comm="syz.1.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 563.012400][T11009] team0 (unregistering): Port device bond0 removed [ 563.071586][T11049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.495232][T11057] ceph: No mds server is up or the cluster is laggy [ 563.695538][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.015193][ T971] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 564.061610][T11071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.958'. [ 565.037880][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 565.191571][ T30] audit: type=1400 audit(1746762322.477:1175): avc: denied { name_bind } for pid=11055 comm="syz.3.966" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 565.201648][ T5825] usb 2-1: USB disconnect, device number 11 [ 565.247712][T11075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.959'. [ 567.466882][T11101] netlink: 96 bytes leftover after parsing attributes in process `syz.1.964'. [ 568.205036][ T5900] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 568.507810][ T971] usb 4-1: unable to get BOS descriptor or descriptor too short [ 568.579789][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.968'. [ 568.924626][ T971] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 568.936022][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 568.961722][ T971] usb 4-1: can't read configurations, error -71 [ 568.969879][T11113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.967'. [ 569.015757][ T5900] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 569.030075][T11113] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 569.048714][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.073735][ T5900] usb 3-1: Product: syz [ 569.100474][ T5900] usb 3-1: Manufacturer: syz [ 569.119237][ T5900] usb 3-1: SerialNumber: syz [ 569.245599][ T5900] usb 3-1: config 0 descriptor?? [ 569.259543][ T5900] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 569.485375][ T5825] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 569.903958][ T5900] gspca_ov534_9: reg_w failed -110 [ 570.088141][ T5825] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 570.197959][ T5825] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 570.217956][ T5825] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 570.376322][T11129] netlink: 'syz.6.971': attribute type 16 has an invalid length. [ 570.384136][T11129] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.971'. [ 570.616933][ T5900] gspca_ov534_9: Unknown sensor 0000 [ 570.616989][ T5900] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 570.635083][ T30] audit: type=1400 audit(1746762327.917:1176): avc: denied { setopt } for pid=11099 comm="syz.2.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 570.739949][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.798723][T11116] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 570.810587][ T5825] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 571.002779][ T30] audit: type=1400 audit(1746762328.267:1177): avc: denied { write } for pid=11125 comm="syz.1.972" path="socket:[26322]" dev="sockfs" ino=26322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 571.641340][T11140] netlink: 'syz.3.973': attribute type 12 has an invalid length. [ 571.835311][ T5900] usb 3-1: USB disconnect, device number 7 [ 573.233910][T11157] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 574.657544][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.978'. [ 575.175755][ T5900] usb 5-1: USB disconnect, device number 15 [ 576.241674][ T30] audit: type=1400 audit(1746762333.517:1178): avc: denied { bind } for pid=11175 comm="syz.4.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 576.293725][T11188] xt_CT: You must specify a L4 protocol and not use inversions on it [ 576.379276][T11188] hub 8-0:1.0: USB hub found [ 576.395533][T11188] hub 8-0:1.0: 1 port detected [ 577.840707][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 578.230698][T11205] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11205 comm=syz.1.986 [ 578.230763][T11205] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11205 comm=syz.1.986 [ 578.272311][ T30] audit: type=1400 audit(1746762335.527:1179): avc: denied { audit_write } for pid=11202 comm="syz.1.986" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 578.505093][ T5937] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 578.707318][ T5937] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 578.707345][ T5937] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 578.707365][ T5937] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 578.707385][ T5937] usb 2-1: config 1 has no interface number 1 [ 578.707418][ T5937] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 578.710103][ T5937] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 578.793041][ T5937] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.793472][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.793560][ T5937] usb 2-1: Product: syz [ 578.793576][ T5937] usb 2-1: Manufacturer: syz [ 578.793592][ T5937] usb 2-1: SerialNumber: syz [ 579.236575][ T30] audit: type=1326 audit(1746762336.537:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11187 comm="syz.6.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7edb8e969 code=0x7fc00000 [ 579.570899][T11212] netlink: 'syz.3.989': attribute type 10 has an invalid length. [ 579.642399][T11217] syz.3.989 (11217): drop_caches: 2 [ 579.663345][T11217] syz.3.989 (11217): drop_caches: 2 [ 579.724917][T11212] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 580.272805][T11225] vlan0: entered promiscuous mode [ 580.278066][T11225] veth0_virt_wifi: entered promiscuous mode [ 580.288957][T11225] vlan0: entered allmulticast mode [ 580.294183][T11225] veth0_virt_wifi: entered allmulticast mode [ 580.778875][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.992'. [ 581.641531][ T5937] usb 2-1: USB disconnect, device number 12 [ 581.755178][T11231] sp0: Synchronizing with TNC [ 581.805708][T11231] netlink: 76 bytes leftover after parsing attributes in process `syz.6.990'. [ 582.233526][T11239] bridge0: port 3(batadv0) entered blocking state [ 582.240415][T11239] bridge0: port 3(batadv0) entered disabled state [ 582.310865][T11240] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 582.496737][ T30] audit: type=1400 audit(1746762339.527:1181): avc: granted { setsecparam } for pid=11233 comm="syz.1.994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 582.550280][T11239] batadv0: entered allmulticast mode [ 582.557231][T11239] batadv0: entered promiscuous mode [ 582.564982][T11239] bridge0: port 3(batadv0) entered blocking state [ 582.571495][T11239] bridge0: port 3(batadv0) entered forwarding state [ 582.600497][ T9910] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 582.601164][ T62] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 582.617464][ T62] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 583.502034][T11027] udevd[11027]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.486415][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'. [ 585.500879][T11264] Lens B: ================= START STATUS ================= [ 585.509475][T11264] Lens B: Focus, Absolute: 0 [ 585.514381][T11264] Lens B: ================== END STATUS ================== [ 585.605528][T11265] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 588.040934][T11218] [U] è`è [ 588.145270][ T30] audit: type=1400 audit(1746762345.407:1182): avc: denied { read } for pid=11272 comm="syz.4.1002" path="socket:[26553]" dev="sockfs" ino=26553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 589.959035][ T5900] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 590.131637][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 590.153971][ T5900] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 590.163269][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.192121][T11298] fuse: Unknown parameter '0x0000000000000005' [ 590.194811][T11297] usb usb8: usbfs: process 11297 (syz.2.1005) did not claim interface 0 before use [ 590.222482][ T5900] usb 2-1: Product: syz [ 590.228195][ T5900] usb 2-1: Manufacturer: syz [ 590.237134][ T5900] usb 2-1: SerialNumber: syz [ 591.228242][ T5900] usb 2-1: config 0 descriptor?? [ 591.233702][ T5900] usb 2-1: can't set config #0, error -71 [ 591.245170][ T5900] usb 2-1: USB disconnect, device number 13 [ 591.588036][T11307] bpq0: left promiscuous mode [ 591.590496][ T30] audit: type=1400 audit(1746762348.887:1183): avc: denied { ioctl } for pid=11305 comm="syz.4.1009" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 591.592746][T11307] bpq0: left allmulticast mode [ 591.736874][ T30] audit: type=1400 audit(1746762349.037:1184): avc: denied { connect } for pid=11305 comm="syz.4.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 591.965160][T11314] input: syz1 as /devices/virtual/input/input17 [ 593.091685][T11312] batman_adv: batadv0: Adding interface: dummy0 [ 593.113540][T11312] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.283957][T11312] batman_adv: batadv0: Interface activated: dummy0 [ 594.103297][ T30] audit: type=1326 audit(1746762351.017:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb528d8e969 code=0x7ffc0000 [ 594.104626][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 594.172453][ T30] audit: type=1326 audit(1746762351.017:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb528d8e969 code=0x7ffc0000 [ 594.204888][ T30] audit: type=1326 audit(1746762351.017:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fb528d8e969 code=0x7ffc0000 [ 594.546336][ T9] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 594.555495][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.578640][ T9] usb 3-1: config 0 descriptor?? [ 594.614758][ T9] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 594.628982][ T9] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 594.663416][ T30] audit: type=1326 audit(1746762351.017:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb528d8e969 code=0x7ffc0000 [ 594.788876][ T30] audit: type=1326 audit(1746762351.027:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb528d8e969 code=0x7ffc0000 [ 594.813245][ T30] audit: type=1326 audit(1746762351.027:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb528d8e969 code=0x7ffc0000 [ 594.842413][ T30] audit: type=1326 audit(1746762351.027:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb528d8e969 code=0x7ffc0000 [ 595.410526][ T30] audit: type=1326 audit(1746762351.027:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb528d8e969 code=0x7ffc0000 [ 595.439168][ T30] audit: type=1326 audit(1746762351.037:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb528d8e969 code=0x7ffc0000 [ 595.544703][ T30] audit: type=1326 audit(1746762351.037:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11317 comm="syz.1.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb528d8e969 code=0x7ffc0000 [ 595.557359][ T5861] usb 3-1: USB disconnect, device number 8 [ 595.899165][T11347] netlink: 'syz.1.1016': attribute type 12 has an invalid length. [ 595.955051][ T5820] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 596.073763][T11312] syz.2.1010 (11312) used greatest stack depth: 20664 bytes left [ 596.108358][ T5820] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 596.118077][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.715897][ T5820] usb 5-1: Product: syz [ 596.720344][ T5820] usb 5-1: Manufacturer: syz [ 596.727670][ T5820] usb 5-1: SerialNumber: syz [ 596.799487][ T5820] usb 5-1: config 0 descriptor?? [ 598.002648][T11359] bridge0: port 1(batadv0) entered blocking state [ 598.010428][T11359] bridge0: port 1(batadv0) entered disabled state [ 598.018844][T11359] batadv0: entered allmulticast mode [ 598.040821][T11359] batadv0: entered promiscuous mode [ 598.054028][T11359] bridge0: port 1(batadv0) entered blocking state [ 598.060579][T11359] bridge0: port 1(batadv0) entered forwarding state [ 598.090936][T11356] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 598.100221][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 598.496785][ T1144] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 598.506220][ T1144] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 598.745793][T11367] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 598.756712][T11367] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 599.587956][ T5820] usb 5-1: USB disconnect, device number 16 [ 600.269670][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 600.269686][ T30] audit: type=1400 audit(1746762357.547:1225): avc: denied { read } for pid=11371 comm="syz.4.1022" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 600.298825][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.505184][ T5825] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 600.667145][ T5825] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 600.688718][ T5825] usb 5-1: config 0 has no interface number 0 [ 600.709072][ T5825] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 600.715025][ T30] audit: type=1400 audit(1746762357.547:1226): avc: denied { open } for pid=11371 comm="syz.4.1022" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 600.730308][ T5825] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 600.743942][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.824500][ T5825] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 600.865235][ T5825] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 600.894623][ T5825] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 600.935629][ T5825] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 600.975123][ T5825] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 600.990117][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.059116][ T5825] usb 5-1: config 0 descriptor?? [ 601.071037][T11372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 601.078262][T11372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 601.093856][ T5825] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 601.110144][T11391] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 601.157423][ T5913] Bluetooth: hci2: Frame reassembly failed (-84) [ 601.214655][T11394] netlink: 'syz.6.1025': attribute type 12 has an invalid length. [ 601.820422][ T9] usb 5-1: USB disconnect, device number 17 [ 601.833086][ T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 602.039881][T11398] fuse: Unknown parameter '0x0000000000000005' [ 602.155216][ T30] audit: type=1400 audit(1746762359.457:1227): avc: denied { write } for pid=11400 comm="syz.6.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 602.802457][ T30] audit: type=1400 audit(1746762360.097:1228): avc: denied { recv } for pid=11374 comm="syz.3.1024" saddr=10.128.0.169 src=30006 daddr=10.128.0.242 dest=55956 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 602.827987][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.867634][ T30] audit: type=1400 audit(1746762360.147:1229): avc: denied { read } for pid=11407 comm="syz.2.1029" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 602.903287][ T30] audit: type=1400 audit(1746762360.147:1230): avc: denied { open } for pid=11407 comm="syz.2.1029" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 602.927094][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.109975][ T30] audit: type=1400 audit(1746762360.327:1231): avc: denied { read write } for pid=9190 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 603.134216][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.225808][ T54] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 603.226573][ T9192] Bluetooth: hci2: command 0x1003 tx timeout [ 603.264383][ T30] audit: type=1400 audit(1746762360.327:1232): avc: denied { open } for pid=9190 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 603.417092][ T30] audit: type=1400 audit(1746762360.327:1233): avc: denied { ioctl } for pid=9190 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 603.458270][ T30] audit: type=1400 audit(1746762360.337:1234): avc: denied { read write } for pid=11407 comm="syz.2.1029" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 603.481463][ C0] vkms_vblank_simulate: vblank timer overrun [ 603.820865][T11418] tmpfs: Unknown parameter 'smackfstransmute' [ 605.741479][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 605.741497][ T30] audit: type=1400 audit(1746762363.007:1292): avc: denied { read write } for pid=11428 comm="syz.6.1034" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 605.795764][ T30] audit: type=1400 audit(1746762363.007:1293): avc: denied { open } for pid=11428 comm="syz.6.1034" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 605.819737][ T30] audit: type=1400 audit(1746762363.017:1294): avc: denied { execute } for pid=11428 comm="syz.6.1034" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 605.972339][ T30] audit: type=1400 audit(1746762363.267:1295): avc: denied { create } for pid=11428 comm="syz.6.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 605.973669][T11431] lo speed is unknown, defaulting to 1000 [ 605.992991][ T30] audit: type=1400 audit(1746762363.267:1296): avc: denied { write } for pid=11428 comm="syz.6.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 606.069398][ T30] audit: type=1400 audit(1746762363.367:1297): avc: denied { module_request } for pid=11432 comm="syz.2.1035" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 606.108667][T11431] lo speed is unknown, defaulting to 1000 [ 606.119430][T11431] lo speed is unknown, defaulting to 1000 [ 607.193412][ T30] audit: type=1400 audit(1746762363.517:1298): avc: denied { watch } for pid=11432 comm="syz.2.1035" path="/224" dev="tmpfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 607.216579][ T30] audit: type=1400 audit(1746762363.517:1299): avc: denied { watch_sb watch_reads } for pid=11432 comm="syz.2.1035" path="/224" dev="tmpfs" ino=1194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 607.243415][ T30] audit: type=1400 audit(1746762363.647:1300): avc: denied { mounton } for pid=11432 comm="syz.2.1035" path="/224/bus" dev="tmpfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 607.251796][T11431] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 607.266375][ T30] audit: type=1400 audit(1746762363.667:1301): avc: denied { unlink } for pid=11432 comm="syz.2.1035" name="#17" dev="tmpfs" ino=1205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 607.352364][T11431] lo speed is unknown, defaulting to 1000 [ 607.741339][T11431] lo speed is unknown, defaulting to 1000 [ 607.769993][T11431] lo speed is unknown, defaulting to 1000 [ 607.781604][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 607.787941][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 607.798721][T11442] Bluetooth: MGMT ver 1.23 [ 607.823358][T11431] lo speed is unknown, defaulting to 1000 [ 608.066866][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 608.355256][T11448] ceph: No mds server is up or the cluster is laggy [ 608.570521][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 608.794454][T11431] lo speed is unknown, defaulting to 1000 [ 608.811474][T11429] smc: removing ib device syz! [ 609.248869][T11429] ------------[ cut here ]------------ [ 609.254349][T11429] WARNING: CPU: 1 PID: 11429 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 609.265333][T11429] Modules linked in: [ 609.269419][T11429] CPU: 1 UID: 0 PID: 11429 Comm: syz.6.1034 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 609.281580][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 609.291807][T11429] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 609.297448][T11429] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 15 00 1a f9 e8 10 00 1a f9 90 <0f> 0b 90 5b e9 06 00 1a f9 e8 c1 7a 7f f9 eb da 66 66 2e 0f 1f 84 [ 609.317160][T11429] RSP: 0000:ffffc90004e771b0 EFLAGS: 00010246 [ 609.323211][T11429] RAX: 0000000000080000 RBX: ffff88801ebd5320 RCX: ffffc90011cf9000 [ 609.331356][T11429] RDX: 0000000000080000 RSI: ffffffff88a122e0 RDI: ffff88801ebd53a0 [ 609.339331][T11429] RBP: ffffffff889f8910 R08: 0000000000000005 R09: 0000000000000001 [ 609.347358][T11429] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88801ebd4668 [ 609.355506][T11429] R13: ffff88801ebd3fe0 R14: ffff88801ebd3fe0 R15: ffff88801ebd5080 [ 609.363461][T11429] FS: 00007fd7ee9e36c0(0000) GS:ffff888124ae1000(0000) knlGS:0000000000000000 [ 609.372407][T11429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.378989][T11429] CR2: 00007ff90a0ed680 CR3: 00000000774dc000 CR4: 00000000003526f0 [ 609.387230][T11429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 609.395202][T11429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 609.403150][T11429] Call Trace: [ 609.406438][T11429] [ 609.409349][T11429] rxe_dealloc+0x25/0xc0 [ 609.413594][T11429] ib_dealloc_device+0x46/0x230 [ 609.418649][T11429] __ib_unregister_device+0x396/0x480 [ 609.424020][T11429] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 609.429934][T11429] ib_unregister_device_and_put+0x5a/0x80 [ 609.435654][T11429] nldev_dellink+0x21f/0x320 [ 609.440227][T11429] ? __pfx_nldev_dellink+0x10/0x10 [ 609.445558][T11429] ? cap_capable+0xb3/0x250 [ 609.450063][T11429] ? bpf_lsm_capable+0x9/0x10 [ 609.454731][T11429] ? security_capable+0x7e/0x260 [ 609.459667][T11429] ? ns_capable+0xd7/0x110 [ 609.464075][T11429] ? __pfx_nldev_dellink+0x10/0x10 [ 609.469596][T11429] rdma_nl_rcv_msg+0x387/0x6e0 [ 609.474368][T11429] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 609.479863][T11429] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 609.486289][T11429] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 609.493230][T11429] ? netlink_deliver_tap+0x1ae/0xd30 [ 609.498532][T11429] netlink_unicast+0x53a/0x7f0 [ 609.503292][T11429] ? __pfx_netlink_unicast+0x10/0x10 [ 609.508750][T11429] netlink_sendmsg+0x8d1/0xdd0 [ 609.513498][T11429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.518790][T11429] ____sys_sendmsg+0xa95/0xc70 [ 609.523539][T11429] ? copy_msghdr_from_user+0x10a/0x160 [ 609.529015][T11429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.534284][T11429] ___sys_sendmsg+0x134/0x1d0 [ 609.539129][T11429] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.544333][T11429] __sys_sendmsg+0x16d/0x220 [ 609.548990][T11429] ? __pfx___sys_sendmsg+0x10/0x10 [ 609.554077][T11429] ? __x64_sys_futex+0x1e0/0x4c0 [ 609.559017][T11429] ? rcu_is_watching+0x12/0xc0 [ 609.563763][T11429] do_syscall_64+0xcd/0x260 [ 609.568445][T11429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.574329][T11429] RIP: 0033:0x7fd7edb8e969 [ 609.578754][T11429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.598520][T11429] RSP: 002b:00007fd7ee9e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.606922][T11429] RAX: ffffffffffffffda RBX: 00007fd7eddb5fa0 RCX: 00007fd7edb8e969 [ 609.614882][T11429] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 609.622853][T11429] RBP: 00007fd7edc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 609.630985][T11429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.638956][T11429] R13: 0000000000000000 R14: 00007fd7eddb5fa0 R15: 00007fffb6d3bee8 [ 609.646932][T11429] [ 609.649944][T11429] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 609.657200][T11429] CPU: 1 UID: 0 PID: 11429 Comm: syz.6.1034 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 609.669251][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 609.679282][T11429] Call Trace: [ 609.682539][T11429] [ 609.685450][T11429] dump_stack_lvl+0x3d/0x1f0 [ 609.690047][T11429] panic+0x71c/0x800 [ 609.693927][T11429] ? __pfx_panic+0x10/0x10 [ 609.698324][T11429] ? show_trace_log_lvl+0x29b/0x3e0 [ 609.703501][T11429] ? rxe_pool_cleanup+0x41/0x60 [ 609.708362][T11429] check_panic_on_warn+0xab/0xb0 [ 609.713289][T11429] __warn+0xf6/0x3c0 [ 609.717178][T11429] ? rxe_pool_cleanup+0x41/0x60 [ 609.722006][T11429] report_bug+0x3c3/0x580 [ 609.726317][T11429] ? rxe_pool_cleanup+0x41/0x60 [ 609.731146][T11429] handle_bug+0x184/0x210 [ 609.735470][T11429] exc_invalid_op+0x17/0x50 [ 609.739963][T11429] asm_exc_invalid_op+0x1a/0x20 [ 609.744801][T11429] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 609.750236][T11429] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 15 00 1a f9 e8 10 00 1a f9 90 <0f> 0b 90 5b e9 06 00 1a f9 e8 c1 7a 7f f9 eb da 66 66 2e 0f 1f 84 [ 609.769819][T11429] RSP: 0000:ffffc90004e771b0 EFLAGS: 00010246 [ 609.775867][T11429] RAX: 0000000000080000 RBX: ffff88801ebd5320 RCX: ffffc90011cf9000 [ 609.783815][T11429] RDX: 0000000000080000 RSI: ffffffff88a122e0 RDI: ffff88801ebd53a0 [ 609.791770][T11429] RBP: ffffffff889f8910 R08: 0000000000000005 R09: 0000000000000001 [ 609.799716][T11429] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88801ebd4668 [ 609.807661][T11429] R13: ffff88801ebd3fe0 R14: ffff88801ebd3fe0 R15: ffff88801ebd5080 [ 609.815620][T11429] ? __pfx_rxe_dealloc+0x10/0x10 [ 609.820572][T11429] ? rxe_pool_cleanup+0x40/0x60 [ 609.825443][T11429] rxe_dealloc+0x25/0xc0 [ 609.829694][T11429] ib_dealloc_device+0x46/0x230 [ 609.834560][T11429] __ib_unregister_device+0x396/0x480 [ 609.839936][T11429] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 609.845830][T11429] ib_unregister_device_and_put+0x5a/0x80 [ 609.851532][T11429] nldev_dellink+0x21f/0x320 [ 609.856103][T11429] ? __pfx_nldev_dellink+0x10/0x10 [ 609.861241][T11429] ? cap_capable+0xb3/0x250 [ 609.865723][T11429] ? bpf_lsm_capable+0x9/0x10 [ 609.870402][T11429] ? security_capable+0x7e/0x260 [ 609.875324][T11429] ? ns_capable+0xd7/0x110 [ 609.879724][T11429] ? __pfx_nldev_dellink+0x10/0x10 [ 609.884815][T11429] rdma_nl_rcv_msg+0x387/0x6e0 [ 609.889571][T11429] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 609.894841][T11429] rdma_nl_rcv_skb.constprop.0.isra.0+0x2e5/0x450 [ 609.901245][T11429] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 609.908167][T11429] ? netlink_deliver_tap+0x1ae/0xd30 [ 609.913449][T11429] netlink_unicast+0x53a/0x7f0 [ 609.918192][T11429] ? __pfx_netlink_unicast+0x10/0x10 [ 609.923472][T11429] netlink_sendmsg+0x8d1/0xdd0 [ 609.928235][T11429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.933515][T11429] ____sys_sendmsg+0xa95/0xc70 [ 609.938291][T11429] ? copy_msghdr_from_user+0x10a/0x160 [ 609.943739][T11429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 609.949021][T11429] ___sys_sendmsg+0x134/0x1d0 [ 609.953683][T11429] ? __pfx____sys_sendmsg+0x10/0x10 [ 609.958894][T11429] __sys_sendmsg+0x16d/0x220 [ 609.963479][T11429] ? __pfx___sys_sendmsg+0x10/0x10 [ 609.968574][T11429] ? __x64_sys_futex+0x1e0/0x4c0 [ 609.973525][T11429] ? rcu_is_watching+0x12/0xc0 [ 609.978284][T11429] do_syscall_64+0xcd/0x260 [ 609.982786][T11429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.988676][T11429] RIP: 0033:0x7fd7edb8e969 [ 609.993111][T11429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.012716][T11429] RSP: 002b:00007fd7ee9e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.021223][T11429] RAX: ffffffffffffffda RBX: 00007fd7eddb5fa0 RCX: 00007fd7edb8e969 [ 610.029179][T11429] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 610.037135][T11429] RBP: 00007fd7edc10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 610.045092][T11429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.053048][T11429] R13: 0000000000000000 R14: 00007fd7eddb5fa0 R15: 00007fffb6d3bee8 [ 610.061015][T11429] [ 610.064247][T11429] Kernel Offset: disabled [ 610.068548][T11429] Rebooting in 86400 seconds..