last executing test programs: 15.519246448s ago: executing program 4 (id=1974): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r6 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, 0x0, 0x0, 0x208000, 0x0) 14.559084047s ago: executing program 4 (id=1977): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) syz_emit_ethernet(0xbf, &(0x7f00000001c0)={@random="856b934629fa", @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x89, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22eb, 0x0, 0x0, [0x4d98]}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c047c4b8d25dc7ce1030c1b7a5b9f80ac509cedbdbbbef820331f9c7c7cac5023e608bf41d578422a9a46756018189a801a443f8099cdb227f1bdf144b72d5b5de85e4"}, {0xdd86}}}}}}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c3, 0x6c7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000006, 0x150, 0x1, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) socket$inet6(0xa, 0x1, 0x0) 12.329539096s ago: executing program 4 (id=1983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x7c, 0xe7, 0xc8, 0x10, 0x4d8, 0xa30, 0xce47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xd, 0xe6, 0x7a, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x2, 0x3ff}}]}}]}}]}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_open_dev$video(0x0, 0x8, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000980)={@random, @dev, @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @dev, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x3, {0x7, 0x6, "266fa2", 0xfffc, 0x87, 0x0, @mcast1, @remote, [@srh={0xc, 0x0, 0x4, 0x0, 0x4, 0x60, 0x6}]}}}}}}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000200)={0x5, 0x5, 0x40, 0x5}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x70d5}]}]}, 0x58}}, 0x0) 12.212641061s ago: executing program 3 (id=1984): r0 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x1, 0xfffffffffffffffd, 0xdac}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r0, &(0x7f0000000240)="1800000016005f0214ffffedfffffff80700", 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x16}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r5, 0x0) r7 = accept4$unix(r6, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 11.064654824s ago: executing program 0 (id=1987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r6 = fsopen(&(0x7f0000000000)='msdos\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, 0x0, 0x0, 0x208000, 0x0) 10.999194412s ago: executing program 1 (id=1988): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000080), 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000002a00)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000500)=@can={{0x1, 0x1, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "e50dcee5d5f2b1d3"}, 0x10}}, 0x20000894) fsopen(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00007cf000/0x1000)=nil, 0x1000, 0x0, 0x810, r3, 0xd3b41000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f00000000c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002600)=[{0x0}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000002380)=""/171, 0xab}, {&(0x7f0000002440)=""/239, 0xef}, {&(0x7f0000002f40)=""/191, 0xbf}], 0x6, &(0x7f0000002680)=""/244, 0xf4}, 0xcd0000}, {{&(0x7f0000002780)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002800)=""/185, 0xb9}, {&(0x7f0000002d80)=""/103, 0x67}, {&(0x7f0000002e00)=""/218, 0xda}], 0x3, &(0x7f00000028c0)=""/131, 0x83}, 0x7}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000002540)=""/138, 0x8a}, {&(0x7f0000003000)=""/117, 0x75}, {&(0x7f0000003080)=""/208, 0xd0}, {&(0x7f0000003180)=""/134, 0x86}], 0x4, &(0x7f0000003280)=""/100, 0x64}, 0x3}, {{&(0x7f0000003300), 0x80, &(0x7f0000004440)=[{&(0x7f0000003380)=""/123, 0x7b}, {&(0x7f0000003400)=""/28, 0x1c}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x3, &(0x7f0000004480)=""/25, 0x19}}, {{&(0x7f00000044c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000005780)}, 0xb}], 0x5, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000002ac0)={@empty}, &(0x7f0000002b00)=0xc) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000002a40)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_io_uring_setup(0x81, &(0x7f0000002980)={0x0, 0xe4c6, 0x2000, 0x0, 0x82}, &(0x7f0000002c80), &(0x7f0000002cc0)) io_uring_setup(0x655c, &(0x7f0000002d00)={0x0, 0xb3b9, 0x8, 0x0, 0xd, 0x0, r8}) 9.99448315s ago: executing program 3 (id=1989): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x49844}}], 0x0, 0xc4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x81) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r6, &(0x7f0000001f40)=""/72, 0x48) r7 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 9.663167292s ago: executing program 0 (id=1991): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="68918281", 0x4}], 0x1}, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r4], &(0x7f0000000500)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r7, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20) truncate(&(0x7f0000000080)='./file1\x00', 0xb8) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 9.302025352s ago: executing program 1 (id=1992): mlock(&(0x7f0000ff8000/0x5000)=nil, 0x5000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000000008000600000000000500010006000000050005000200000005000400000000000900020073797a320000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, 0xfffffffffffffffc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB], 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="b3ce0000000000000c0000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x5607, 0x2c) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETVESABLANK(r9, 0x560e, &(0x7f0000000140)) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r10, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r10, 0x541c, &(0x7f0000000000)) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, 0x0, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) accept4(r11, 0x0, 0x0, 0x80800) 8.612872888s ago: executing program 2 (id=1993): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x93, 0x89, 0xfffffff6, 0x38, @mcast2, @empty, 0x7, 0x40, 0x4, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x88) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x520, 0x12, 0x8, 0x401, 0x70bd25, 0x25dfdbff, {0x1, 0x0, 0x9}, [@typed={0x4, 0x31}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0xb9, 0x0, 0x0, @uid}, @nested={0x82, 0x52, 0x0, 0x1, [@generic="6b402496e31b76b64f0a3e739d4bf514c90751b01de88f94da9606e7cef362134297b201fd90a8d953fe44748b7750133cb5e71dfb79e4c6f80d334edb4173", @generic="7d516cb416c61a5e7e2b78d5c6773510ecb5d7382cbe4f4dfad77e96d783dec735191c602b4caef981ad0ad63f1054ab30da5705cc1a8399a857c17bbcbc21"]}, @generic="f06518acf7db0de7452f618e496c896d2e6fdcab6f1cd63f11b066b98001b03f9d947e902806858cd914bf1734515c21115cba5df12209cf21a05c406da462dccc616ec0916b69b06f3bedc04247cbe2ebcda3d71c5df270bded31ea39048c9004f88ba0207834ee58ea5cfbfd7064e67ea291b7c6915b6ac986a8e5dbe9f41e37d49ddc7c2f5ca13f457a31d5d2da063fb1db47b9965bc77f9ede2a7eec1a29dd4fb58e216ea0a7020f13da7a0635", @generic="0d4653ddcc61f026c25e6430ee0c85ed769f5961cae10e414775ceddda42a20f492c8456186627ac0d8cd2fe4a8e7c2f48716442dc6770bb5505c8d19a845db761fc5b93305ed29da49137d2b7d86fb2073c3f2971c44e6282099641a006ad18ef584e78da24db01a1ea055abfdd7526b9fad1ac0c637481177f4accd159714ba3a9a4f60c519bf85aa495c941aad6ba1464a9cfa3f97b26345ab48bf279d8fe847dd166b992d34386", @nested={0x8, 0xee, 0x0, 0x1, [@typed={0x4, 0xee}]}, @nested={0x1c5, 0xc7, 0x0, 0x1, [@generic="f1d7c7e649a0b28aafae982f62e407c8bdaaff75bdfbcbd128fab7b99ab9c73bca85559547c6336a1ab02d7b4beec71246f71f92923e5a32000762d70fce06660b83a61e12e2d7f2cca12147f953a03133821ac072199a094c4f66de59e9549091ac4dbccacf4c2d302efdbdaabb8ede6912362f4058a4f0a9076d5603597973d75cfbd587d3e4449b8884c28cb1b77ed17ce55517819cb6648ddfd3754b5866200c971bd0243f525aeced56c13e867d2dc321", @generic="838f423cb6309babf81d086acc50b37a361da5472934fb9a955c2e6f636b26258b5f1a416e894aaf3be2def1aa7c59df4dfec134d2cf8c475d32949c56734191a7733d18583d48e6c08157937fd3f202612cb40710f818d425f610ac35b808526fd32a0cee06d4", @typed={0xc, 0xd, 0x0, 0x0, @u64=0x9}, @generic="b3096d5c72f23a36f1584c9b667fd87ecc0ad2983f0bc62db21c5c03604773b585099d3a6db06e4ca1797486fc30ee71d806d15e96efcebad94fc6813bb133f094426df407522597cbcc0e587baac4e46b2e1ea0589ee100a7ffbde2e85c3832b71de4a34fb25434d46b5ee6e9f27bbe3c6b471b3fb7e263aaf8ac02aeb1508dfa756a391b71e98a66fe6778c0550bcc02ad763485d255cff34a97"]}, @generic="d4696628e4e4d908ba4ad86107b373050e35aba39598e9dac29c4b05cbeab6e9fbcd49f9f533042900631fd8294c25d3594d97271f4df51cf45597a30a194031cdfb3d23c9ff54fd250eaba5c25a7efcb02410de87", @generic="fa5f67a392c63e99d2aeaa3cf79ab97f7f933679eb058b5b5d0d9318da55c7e8901592d2e7639b94bbb5be15155e6675abe1237a642c27a65cd083840e62f8fc4f12a3e8e138b62f8205461c92bba0e3d407801cf5786fba1a98033bcd8590b27bf98aa46971d62a634db13396f81300af6194f2b6639f3d3ac303b5318a4600758ca5e03c92acf2be85088e5851ecaff95f8b5c9706e11fa7c32603ebbd17ba94fc24227be3ea3515e4a675de774578fbb8ed45d77ba907b1cf3eeefcc82875903f0d6512be314581f48bc324314e4e67a26fc1502450d7f693e81a1d34855e16eebae016b0ca52967b"]}, 0x520}}, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x54}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0xfc}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000380)={@multicast2, @dev, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@RTM_DELMDB={0x58, 0x55, 0x100, 0x70bd28, 0x25dfdbfd, {0x7, r0}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x3, 0x2, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@loopback}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x10) 8.250111046s ago: executing program 4 (id=1994): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000300)="8932ed209b230932", 0x8, 0x64008004, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x807, 0x200020000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) process_mrelease(r6, 0x700000000000000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r7, 0x4004743c, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000ac0)={0x44, 0x0, &(0x7f0000000a40)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000027c0)='A'}) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62) listen(r9, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0xfffff21e, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x13, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x48, 0x4, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x7c9d, 0x9, 0x8, 0x8, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x1, 0xbb33, 0x7, 0xf, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10200, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x2000005, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7.518950251s ago: executing program 2 (id=1995): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) syz_emit_ethernet(0x26c, &(0x7f000001b240)={@random="856b934629fa", @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "14d61e", 0x236, 0x21, 0x1fe, @dev={0xfe, 0x80, '\x00', 0x1f}, @empty, {[@hopopts={0x2c, 0x7, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x18, {0x2, 0x4, 0x5d, 0x0, [0x9, 0x1]}}]}, @hopopts={0x33, 0x5, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0xb}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x84, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0x3e}, @generic={0x6, 0x55, "3b399c492a91f832a36a93815bf2903418b36e8ea699b5e37ca62f35a4236a54bae01b2c06a0e3e03905d2e472558b1fd1fd8849e349a2eba7a7e09ec0bdb78dbb521b859b4f6b5265e45194448f520a3a7a3a79e9"}, @padn={0x1, 0x1, [0x0]}, @generic={0x10, 0x60, "feeb3dae0907ee427b56fcc33dbc58a313c4f9641602876d7d7ad7d61e764856a8a0e45a0a14ef66db7a0b8ca64200b59b037382f6f1e035906b0617155ab1e1ed8af7b2df529e64744d652521b704a0a6a1beb7bcf608686990a6d63b832550"}]}], {{0x4e22, 0x4e21, 0x4, 0x1, 0xa, 0x0, 0x0, 0x4, 0x0, "ea8dce", 0x8, "944557"}, "29ca320e277892ffeebe39d493e386d20b41ba7dffc74010c68f8496a8966742e87c939ff6b308f9b64e7f28436c37599b8f8f63d88f8b2adc79ca4ad06e60b5ddaad1763014eed62da49ab87c831f7d42fdd9a4084c4c7bd07a44309e3c047ad3ebdc3cff19154646f4111590c6d6056f96956dd3d272bba70d1a3f83a89f81cc659a22b5bf5315772c2c6bb2b5c8c53a2d1acbb2840ad1789e84c437ed4716f38f50bc45eec09beaa62076d5e88b09bece51f6992ea789db1322efaa3afdf3ee803b9f7f835ed0f88be9fb67557e96ce020ecb7bd14b8eddf60d4b043a"}}}}}}, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x3, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c3, 0x6c7, 0x9, 0x0, 0x3, 0x7, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x9, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303e, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x40200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xf3, 0xa9, 0x20000005, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x7, 0x1c, 0x120000, 0x7ff, 0x2009, 0x2, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10001, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000006, 0x150, 0x1, 0x6, 0x6, 0xffffffff, 0x80000004, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6a, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x60c2}, {r0, 0x40}, {0xffffffffffffffff, 0x2}, {}, {0xffffffffffffffff, 0x230}], 0x20000000000003ca, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000080), 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r8 = shmat(r7, &(0x7f0000001000/0x3000)=nil, 0x1000) shmctl$IPC_RMID(r7, 0x0) shmdt(r8) rmdir(&(0x7f0000000200)='./cgroup/../file0\x00') 6.780184656s ago: executing program 1 (id=1996): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 6.766319723s ago: executing program 3 (id=1997): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c5008005000100000000f8e5543d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100340902630002040800070904880400f7f98a0607240600110e6876363fd63400d2cf0524001c620d240fe2b8000003080353ee97050a2401f90a0002010209240389025aad618964179074fab88705097a850809050810200009090c02010905"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x8400, 0x0) prlimit64(r2, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) write$P9_RSTATu(r5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r1, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x10000004}, 0x18) 6.63008922s ago: executing program 2 (id=1998): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) getpid() r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f00000001c0)=@generic={0x0, 0x610, 0x200}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtclass={0x9c, 0x28, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x3}, {0x2, 0x8}, {0x9}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x81, 0x4, 0x40}}, @TCA_HFSC_FSC={0x10, 0x2, {0x92, 0x80, 0x1}}]}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8}}}, @TCA_RATE={0x6, 0x5, {0x4, 0x95}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_RATE={0x6, 0x5, {0xf4, 0xb}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x9c}}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000004000000000000000080000000000000", @ANYRES32, @ANYBLOB="02da4f33000000000000816327d1e296c2f24fb625d5c7a619b49a1321df67a51766ecf6bf5ed4c9e4063236fdcf0dcf2a18ef16321e1f158c205fe3fa29ac0ed00fc6e108000000cc3ea575ee7ad9e197c10f06e7c5948e4b0185ae4529f9e78e27ec721fa58c78b3129f9c31ba857ca16503d5087976c0abf6bc61276629a5c871c8707a89b5d0e7", @ANYRES32, @ANYBLOB], 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 6.628969118s ago: executing program 4 (id=1999): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket$qrtr(0x2a, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f000012c000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x8006, 0x86, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, &(0x7f0000000bc0)) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x80c0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8}, {}, {0x7, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xd}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x34}}, 0x400c084) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fstat(r2, &(0x7f0000000300)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) connect$qrtr(r0, &(0x7f0000000040), 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) 5.723207027s ago: executing program 1 (id=2000): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 4.852409899s ago: executing program 2 (id=2001): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 4.790889595s ago: executing program 0 (id=2002): prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x4, 0x1b9bb5, 0x11af75}) chdir(0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010725bd700000000000fe000000"], 0x14}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x800) recvmmsg(r10, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0xffff}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}], 0x1}, 0x4}], 0x2, 0x10022, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x100000001]}, 0x8) 3.755592412s ago: executing program 0 (id=2003): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 2.920344431s ago: executing program 1 (id=2004): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) truncate(0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$netlink(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/102, 0x66}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000001c0)={0x5b, r3, 'id0\x00'}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_AIE_OFF(r6, 0x7002) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r7, r9}, 0x10) unshare(0x2040400) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 2.919349421s ago: executing program 3 (id=2005): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfffe}, {0xfff1, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xe, 0xe5}}]}, 0x38}}, 0x8004) r3 = getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) sendmsg$unix(r7, 0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r9, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r8, r7, 0x0) pwritev(r9, 0x0, 0x0, 0xf0be, 0x4) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) 2.872704988s ago: executing program 2 (id=2006): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x49844}}], 0x0, 0xc4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x81) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) flistxattr(r6, &(0x7f0000001f40)=""/72, 0x48) r7 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8}) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 1.725602124s ago: executing program 0 (id=2007): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x42031, 0xffffffffffffffff, 0x180000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r5, &(0x7f0000000000)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f360068090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x1000}}, 0x1006) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x4b00, &(0x7f00000005c0)='T'}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)) r6 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) 1.723284658s ago: executing program 3 (id=2008): syz_emit_ethernet(0x71, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607f00ef003b2c00fe8000000000000000000000000000bb0c03000000000000000000000000000100000000003b907802aadf0062df01e40d02434feee9d16d7d98ad6f435c3137cf56121fe36f6f5a0ecd9062a872bc17357e2f456d36281ef64ef6"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020028bd7000ffdbdf2503000000080002008d236106c76dfb6813c148ad15204ca0c509250bb39baf49b3aa0a5b2c16805e32200cc2e1c8ed9f23186c9c784b20f1ed419349110540197e2d3c20159d8b4ac5f15b8262f7ac86eaedacbff6dd273670bb154b3a4923972ba0ddc8068cc2d1511d5381c0489b4286c8e9e0355f2917ec6272ec59d93f81ba1ad5c1ec645d2fec460a3aaf46d3d5e10257583190a19e6c586e2aa6cb6624fc90cd"], 0x24}, 0x1, 0x0, 0x0, 0x40000001}, 0x240048c1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b000)=""/102400, 0x19000) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) sendfile(r4, r4, 0x0, 0xb) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) r6 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0xc0403d08, 0xffffffffffffffff) ioctl$SG_IO(r3, 0x2285, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001800)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000001a00)="00f4bcb66ade04ac39d0955b9112c0829f67cf2fc2298a0325d17c137eea601b08622e2620541f236159d69ed0a9d8fb959d9dde30cd9601b3115b8cf7812233cca61073540be7d5db6fc74cb06a1ba2e5055a95fc0b9986d1fa755ce65a7af45d765a217b1a17c60ade87a7a263c9b50cd51cd9c257c7418c3afc3a96dcadcb82618fec327d4d9dff17e795818e16acc77ddf7f6262e42bd84109d432d78971b582248e930ca6ca61945af075e5e68f97eeabaddb983078e95b8daf86895c883e09b3ce76b1e256eb0184d61fa61e476c7eef669ef439445643def8cc9381d9ad", 0xe1}], 0x2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 195.943181ms ago: executing program 2 (id=2009): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00130000017c0000040042800c00018006000600800a00000c00028006000a"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r2 = socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000003440)="172cd448287c5a6c51", 0x9, 0x20000000, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000080)={0x5, 0x40, 0xfa00, {{0xa, 0x0, 0x8001, @empty}, {0xa, 0x0, 0x0, @empty}}}, 0x48) r4 = dup(0xffffffffffffffff) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r5, &(0x7f0000000000)=[@t={0x81, 0x5, 0x0, 0x0, @generic}], 0x8) write$6lowpan_enable(r4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@acquire={0x168, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @in=@multicast2, {@in6=@dev, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x6}}}, [@tmpl={0x44, 0x8, [{{@in=@local}, 0x0, @in=@loopback}]}]}, 0x168}}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 123.099559ms ago: executing program 1 (id=2010): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 122.377323ms ago: executing program 4 (id=2011): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 0s ago: executing program 0 (id=2012): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) kernel console output (not intermixed with test programs): essage: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10517 comm=syz.4.1014 [ 555.568517][ T30] audit: type=1400 audit(2000000128.431:719): avc: denied { mount } for pid=10528 comm="syz.2.1018" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 556.207819][ T30] audit: type=1326 audit(2000000129.131:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7498e929 code=0x7ffc0000 [ 556.437799][T10529] overlay: Bad value for 'upperdir' [ 556.527041][ T30] audit: type=1326 audit(2000000129.131:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.0.1019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7498e929 code=0x7ffc0000 [ 557.507378][ T30] audit: type=1400 audit(2000000129.351:722): avc: denied { ioctl } for pid=10528 comm="syz.2.1018" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 557.731282][T10557] rdma_rxe: rxe_newlink: failed to add wg0 [ 557.842756][T10558] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1025'. [ 558.301526][ T30] audit: type=1400 audit(2000000129.361:723): avc: denied { read } for pid=10528 comm="syz.2.1018" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 558.617952][ T30] audit: type=1400 audit(2000000129.361:724): avc: denied { open } for pid=10528 comm="syz.2.1018" path="/193/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 558.967453][ T30] audit: type=1400 audit(2000000129.551:725): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 558.990223][ T30] audit: type=1400 audit(2000000130.771:726): avc: denied { nlmsg_read } for pid=10552 comm="syz.0.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 559.011458][ T30] audit: type=1400 audit(2000000131.591:727): avc: denied { create } for pid=10559 comm="syz.2.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 561.210048][T10576] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 561.256902][ T30] audit: type=1400 audit(2000000134.161:728): avc: denied { validate_trans } for pid=10575 comm="syz.2.1029" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 561.375086][ T30] audit: type=1400 audit(2000000134.301:729): avc: denied { write } for pid=10584 comm="syz.2.1031" name="ip6_flowlabel" dev="proc" ino=4026533246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 561.448322][ T30] audit: type=1400 audit(2000000134.351:730): avc: denied { append } for pid=10584 comm="syz.2.1031" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 562.581585][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.588499][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.434907][ T30] audit: type=1400 audit(2000000136.321:731): avc: denied { read write } for pid=10595 comm="syz.3.1034" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 563.499471][ T30] audit: type=1400 audit(2000000136.321:732): avc: denied { open } for pid=10595 comm="syz.3.1034" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 564.116408][ T9714] libceph: mon0 (1)[c::]:6789 connect error [ 564.147702][T10598] loop6: detected capacity change from 0 to 524287999 [ 564.338914][T10603] ceph: No mds server is up or the cluster is laggy [ 566.062862][T10626] Invalid source name [ 566.079946][T10626] UBIFS error (pid: 10626): cannot open "ubifs", error -22 [ 566.080727][ T5840] Bluetooth: hci1: Malformed LE Event: 0x0d [ 568.167626][T10655] rdma_rxe: rxe_newlink: failed to add wg0 [ 568.711719][T10653] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[10653] [ 569.784069][ T30] audit: type=1326 audit(2000000142.701:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 570.066506][ T30] audit: type=1326 audit(2000000142.701:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 570.090358][ T30] audit: type=1326 audit(2000000142.711:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 570.117841][ T30] audit: type=1326 audit(2000000142.711:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 570.142961][ T30] audit: type=1326 audit(2000000142.711:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 570.652684][ T30] audit: type=1326 audit(2000000142.711:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 570.676153][ T30] audit: type=1326 audit(2000000142.711:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 570.720006][ T30] audit: type=1326 audit(2000000142.711:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 570.973149][ T30] audit: type=1326 audit(2000000142.711:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 570.997340][ T30] audit: type=1326 audit(2000000142.711:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 571.152851][T10677] rdma_rxe: rxe_newlink: failed to add wg0 [ 572.630083][T10693] rdma_rxe: rxe_newlink: failed to add wg0 [ 578.954093][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 578.954104][ T30] audit: type=1400 audit(2000000151.881:776): avc: denied { setopt } for pid=10730 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 579.814523][T10744] ubi: mtd0 is already attached to ubi31 [ 580.044857][T10749] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1071'. [ 580.562893][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 580.603167][T10756] : entered promiscuous mode [ 580.622469][ T30] audit: type=1400 audit(2000000153.501:777): avc: denied { getopt } for pid=10750 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 581.450436][T10766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.952916][ T30] audit: type=1400 audit(2000000154.881:778): avc: denied { bind } for pid=10764 comm="syz.0.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 583.301894][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1075'. [ 583.856628][T10770] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 584.184845][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 584.217636][T10799] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 586.374444][T10820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32854 sclass=netlink_route_socket pid=10820 comm=syz.0.1081 [ 587.925234][T10830] Bluetooth: MGMT ver 1.23 [ 587.944743][ T30] audit: type=1400 audit(2000000160.851:779): avc: denied { bind } for pid=10825 comm="syz.4.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 588.430775][ T30] audit: type=1400 audit(2000000160.851:780): avc: denied { write } for pid=10825 comm="syz.4.1085" path="socket:[28314]" dev="sockfs" ino=28314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 588.736878][T10838] rdma_rxe: rxe_newlink: failed to add wg0 [ 590.027728][T10849] Failed to initialize the IGMP autojoin socket (err -2) [ 590.037796][ T30] audit: type=1400 audit(2000000162.961:781): avc: denied { write } for pid=10843 comm="syz.2.1089" name="file0" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 590.062654][ T30] audit: type=1400 audit(2000000162.991:782): avc: denied { open } for pid=10843 comm="syz.2.1089" path="/206/file0" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 590.981980][T10850] rdma_rxe: rxe_newlink: failed to add wg0 [ 591.081482][T10856] rdma_rxe: rxe_newlink: failed to add lo [ 591.591889][T10869] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 592.871233][T10887] vxfs: WRONG superblock magic 00000000 at 1 [ 592.878177][T10887] vxfs: WRONG superblock magic 00000000 at 8 [ 592.884218][T10887] vxfs: can't find superblock. [ 593.153584][T10885] ceph: No mds server is up or the cluster is laggy [ 593.178891][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 593.212376][T10873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.593735][ T30] audit: type=1400 audit(2000000166.521:783): avc: denied { create } for pid=10876 comm="syz.1.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 593.687865][ T30] audit: type=1400 audit(2000000166.551:784): avc: denied { write } for pid=10876 comm="syz.1.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 593.919706][T10896] siw: device registration error -23 [ 594.761161][T10905] rdma_rxe: rxe_newlink: failed to add wg0 [ 595.265197][T10911] Failed to initialize the IGMP autojoin socket (err -2) [ 596.095990][T10913] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1098'. [ 596.123916][T10913] Failed to initialize the IGMP autojoin socket (err -2) [ 596.542769][T10917] rdma_rxe: rxe_newlink: failed to add wg0 [ 597.417338][ T30] audit: type=1400 audit(2000000170.321:785): avc: denied { map } for pid=10920 comm="syz.0.1104" path="socket:[28476]" dev="sockfs" ino=28476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 597.530174][T10933] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 597.846630][ T30] audit: type=1400 audit(2000000170.321:786): avc: denied { accept } for pid=10920 comm="syz.0.1104" path="socket:[28476]" dev="sockfs" ino=28476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 598.307248][T10943] Bluetooth: (null): Invalid header checksum [ 598.390080][ T9543] Bluetooth: hci4: command 0x0405 tx timeout [ 598.508441][T10945] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 599.632774][ T30] audit: type=1326 audit(2000000172.561:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264818e929 code=0x7ffc0000 [ 599.731902][T10956] Failed to initialize the IGMP autojoin socket (err -2) [ 599.760054][ T30] audit: type=1326 audit(2000000172.561:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10946 comm="syz.1.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264818e929 code=0x7ffc0000 [ 599.814275][T10951] team0: left allmulticast mode [ 599.819423][T10951] team_slave_0: left allmulticast mode [ 599.842806][T10951] team_slave_1: left allmulticast mode [ 599.848417][T10951] team0: left promiscuous mode [ 599.853982][T10951] team_slave_0: left promiscuous mode [ 599.862019][T10951] team_slave_1: left promiscuous mode [ 599.867678][T10951] bridge0: port 3(team0) entered disabled state [ 599.910402][T10951] bridge_slave_0: left allmulticast mode [ 599.923188][T10951] bridge_slave_0: left promiscuous mode [ 599.945749][T10959] netlink: 'syz.0.1111': attribute type 10 has an invalid length. [ 599.953753][T10951] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.998691][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 600.110918][T10951] bridge_slave_1: left allmulticast mode [ 600.119888][T10951] bridge_slave_1: left promiscuous mode [ 600.150534][T10951] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.160402][T10951] bond0: (slave bond_slave_0): Releasing backup interface [ 600.168450][T10951] bond0: (slave bond_slave_1): Releasing backup interface [ 600.206354][T10951] team0: Port device team_slave_0 removed [ 600.274516][T10951] team0: Port device team_slave_1 removed [ 600.299093][T10951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.366250][T10951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.422746][T10959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.490709][T10959] team0: Port device bond0 added [ 601.293976][T10980] rdma_rxe: rxe_newlink: failed to add wg0 [ 601.716533][T10983] No source specified [ 602.185790][ T30] audit: type=1400 audit(2000000175.041:789): avc: denied { ioctl } for pid=10981 comm="syz.0.1118" path="socket:[29746]" dev="sockfs" ino=29746 ioctlcmd=0x64a7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 602.443627][ T30] audit: type=1400 audit(2000000175.051:790): avc: denied { read } for pid=10981 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 602.756013][ T30] audit: type=1400 audit(2000000175.681:791): avc: denied { setopt } for pid=10991 comm="syz.2.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 605.489879][T11022] overlayfs: missing 'lowerdir' [ 606.669403][T11040] netlink: 'syz.0.1131': attribute type 10 has an invalid length. [ 606.737896][T11040] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 607.147953][T11046] rdma_rxe: rxe_newlink: failed to add wg0 [ 608.124929][T11054] Can't find a SQUASHFS superblock on nullb0 [ 608.494290][ T30] audit: type=1800 audit(2000000181.041:792): pid=11054 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1134" name="SYSV798dd824" dev="tmpfs" ino=0 res=0 errno=0 [ 608.569953][ T30] audit: type=1400 audit(2000000181.051:793): avc: denied { mounton } for pid=11051 comm="syz.4.1134" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 610.322669][ T30] audit: type=1400 audit(2000000182.941:794): avc: denied { relabelto } for pid=11066 comm="syz.0.1138" name="250" dev="tmpfs" ino=1377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 610.350226][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.493314][T11068] netlink: 'syz.2.1136': attribute type 10 has an invalid length. [ 610.503013][T11068] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1136'. [ 610.607426][ T30] audit: type=1400 audit(2000000182.941:795): avc: denied { associate } for pid=11066 comm="syz.0.1138" name="250" dev="tmpfs" ino=1377 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 610.634835][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.341873][ T30] audit: type=1400 audit(2000000183.511:796): avc: denied { remove_name } for pid=5832 comm="syz-executor" name="file1" dev="tmpfs" ino=1382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 611.389711][ T30] audit: type=1400 audit(2000000183.511:797): avc: denied { rmdir } for pid=5832 comm="syz-executor" name="250" dev="tmpfs" ino=1377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 612.895652][T11097] can0: slcan on ttyS3. [ 613.083889][T11097] can0 (unregistered): slcan off ttyS3. [ 613.518467][T11105] ubi: mtd0 is already attached to ubi31 [ 613.772472][T11116] rdma_rxe: rxe_newlink: failed to add wg0 [ 614.919628][T11120] usb usb5: selecting invalid altsetting 2 [ 614.941437][ T30] audit: type=1400 audit(2000000187.841:798): avc: denied { mount } for pid=11117 comm="syz.2.1149" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 615.500050][ T30] audit: type=1400 audit(2000000188.371:799): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 615.809993][ T1861] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 615.996886][ T1861] usb 3-1: Using ep0 maxpacket: 8 [ 616.524123][ T1861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.537549][ T1861] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 616.573465][ T1861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 617.084296][ T1861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 617.129892][ T1861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 617.163783][ T1861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 617.219311][ T1861] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.279720][ T1861] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 617.299059][ T1861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.489907][T11145] overlay: Unknown parameter 'audit' [ 618.282425][ T1861] usb 3-1: Product: syz [ 618.286661][ T1861] usb 3-1: Manufacturer: syz [ 618.343161][ T1861] usb 3-1: SerialNumber: syz [ 618.360412][ T1861] usb 3-1: config 0 descriptor?? [ 618.372003][T11123] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 618.767820][ T1861] usb 3-1: can't set config #0, error -71 [ 618.805105][ T1861] usb 3-1: USB disconnect, device number 7 [ 619.878394][T11161] ubi: mtd0 is already attached to ubi31 [ 620.009252][T11168] rdma_rxe: rxe_newlink: failed to add wg0 [ 621.913380][T11182] bpq0: entered promiscuous mode [ 622.311444][ T30] audit: type=1400 audit(2000000195.111:800): avc: denied { write } for pid=11188 comm="syz.0.1163" path="socket:[30797]" dev="sockfs" ino=30797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 623.284740][T11197] ubi: mtd0 is already attached to ubi31 [ 623.614172][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 623.623224][T11206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1167'. [ 623.879119][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.887564][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.406594][ T30] audit: type=1326 audit(2000000197.331:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.2.1168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df498e929 code=0x0 [ 625.004058][T11213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1169'. [ 625.063763][ T30] audit: type=1400 audit(2000000197.931:802): avc: denied { ioctl } for pid=11207 comm="syz.4.1169" path="socket:[30828]" dev="sockfs" ino=30828 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 625.462134][ T30] audit: type=1400 audit(2000000198.391:803): avc: denied { map } for pid=11218 comm="syz.2.1170" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 625.498848][ T30] audit: type=1400 audit(2000000198.411:804): avc: denied { execute } for pid=11218 comm="syz.2.1170" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 628.520828][T11250] ALSA: mixer_oss: invalid index 40000 [ 629.703548][T11266] syz2: rxe_newlink: already configured on wg0 [ 630.077293][T11268] syz.4.1179: attempt to access beyond end of device [ 630.077293][T11268] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 630.090601][T11268] hpfs: hpfs_map_sector(): read error [ 630.595966][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 630.641735][T11270] ip6_vti0: Master is either lo or non-ether device [ 630.682864][T11270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1181'. [ 630.864714][T11278] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 631.047455][T11282] ubi: mtd0 is already attached to ubi31 [ 631.202711][T11285] ubi: mtd0 is already attached to ubi31 [ 631.320970][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 631.347315][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 631.401347][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 632.280547][T11296] fuse: Unknown parameter 'fd0x0000000000000006' [ 632.773468][T11294] netlink: 'syz.4.1187': attribute type 4 has an invalid length. [ 632.804923][T11294] netlink: 'syz.4.1187': attribute type 4 has an invalid length. [ 634.013028][ T30] audit: type=1400 audit(2000000206.931:805): avc: denied { set_context_mgr } for pid=11298 comm="syz.4.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 634.057388][ T30] audit: type=1400 audit(2000000206.971:806): avc: denied { read write } for pid=11298 comm="syz.4.1189" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 634.117606][ T30] audit: type=1400 audit(2000000206.971:807): avc: denied { open } for pid=11298 comm="syz.4.1189" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 634.643113][T11317] overlay: Unknown parameter 'smackfshat' [ 634.649192][ T30] audit: type=1400 audit(2000000207.551:808): avc: denied { mount } for pid=11311 comm="syz.1.1192" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 634.725626][T11318] overlayfs: failed to clone upperpath [ 636.517699][ T30] audit: type=1400 audit(2000000208.271:809): avc: denied { watch } for pid=11315 comm="syz.2.1193" path="/225" dev="tmpfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 637.529413][ T30] audit: type=1400 audit(2000000208.281:810): avc: denied { watch_sb } for pid=11315 comm="syz.2.1193" path="/225" dev="tmpfs" ino=1236 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 637.761561][ T30] audit: type=1400 audit(2000000210.681:811): avc: denied { create } for pid=11328 comm="syz.1.1195" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 638.188011][T11337] bridge0: entered promiscuous mode [ 638.193613][T11337] macvlan0: entered promiscuous mode [ 638.707425][ T30] audit: type=1400 audit(2000000211.131:812): avc: denied { append } for pid=11328 comm="syz.1.1195" name="file0" dev="tmpfs" ino=1378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 638.734984][ T30] audit: type=1400 audit(2000000211.131:813): avc: denied { open } for pid=11328 comm="syz.1.1195" path="/246/file0" dev="tmpfs" ino=1378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 638.890225][T11346] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 639.143848][T11349] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 640.279969][ T30] audit: type=1400 audit(2000000212.871:814): avc: denied { append } for pid=11350 comm="syz.3.1200" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 641.866150][T11375] overlayfs: missing 'lowerdir' [ 641.880363][T11375] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 642.109813][ T30] audit: type=1400 audit(2000000215.001:815): avc: denied { create } for pid=11366 comm="syz.2.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 642.159908][ T30] audit: type=1400 audit(2000000215.051:816): avc: denied { bind } for pid=11366 comm="syz.2.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 642.225317][ T30] audit: type=1400 audit(2000000215.111:817): avc: denied { execute } for pid=11366 comm="syz.2.1205" dev="hugetlbfs" ino=30379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 642.444963][T11366] delete_channel: no stack [ 642.450563][T11382] ubi: mtd0 is already attached to ubi31 [ 642.534938][T11384] tmpfs: Bad value for 'mpol' [ 642.853221][ T30] audit: type=1400 audit(2000000215.111:818): avc: denied { execute_no_trans } for pid=11366 comm="syz.2.1205" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=30379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 643.858349][T11396] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 644.155517][ T30] audit: type=1400 audit(2000000217.081:819): avc: denied { mount } for pid=11403 comm="syz.1.1213" name="/" dev="autofs" ino=31287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 645.065900][T11418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1216'. [ 645.079900][T11418] batadv_slave_0: entered promiscuous mode [ 645.117631][T11419] Invalid source name [ 645.128370][T11419] UBIFS error (pid: 11419): cannot open "ubifs", error -22 [ 645.129078][ T5840] Bluetooth: hci3: Malformed LE Event: 0x0d [ 647.247988][T11434] overlayfs: failed to clone upperpath [ 649.204842][T11452] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 649.773688][T11463] syz.4.1228 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 650.065652][T11465] Invalid source name [ 650.077107][T11465] UBIFS error (pid: 11465): cannot open "ubifs", error -22 [ 650.120159][ T5840] Bluetooth: hci2: Malformed LE Event: 0x0d [ 650.589643][T11473] loop6: detected capacity change from 0 to 7 [ 650.700452][T11473] Dev loop6: unable to read RDB block 7 [ 650.706307][T11473] loop6: AHDI p1 p2 p3 [ 650.710777][T11473] loop6: partition table partially beyond EOD, truncated [ 650.718771][T11473] loop6: p1 start 1601398130 is beyond EOD, truncated [ 650.725661][T11473] loop6: p2 start 1702059890 is beyond EOD, truncated [ 651.194985][T11476] 9pnet_fd: Insufficient options for proto=fd [ 651.721354][T11482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 651.830156][T11482] sp0: Synchronizing with TNC [ 657.408964][T11511] Invalid source name [ 657.482860][T11511] UBIFS error (pid: 11511): cannot open "ubifs", error -22 [ 657.483978][ T5840] Bluetooth: hci3: Malformed LE Event: 0x0d [ 657.909990][ T92] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 658.773925][ T92] usb 3-1: Using ep0 maxpacket: 32 [ 658.830396][ T92] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 658.850091][ T92] usb 3-1: config 0 has no interface number 0 [ 658.858900][ T92] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 658.877464][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.908264][ T92] usb 3-1: Product: syz [ 658.942947][ T92] usb 3-1: Manufacturer: syz [ 659.059835][ T92] usb 3-1: SerialNumber: syz [ 659.157034][ T92] usb 3-1: config 0 descriptor?? [ 659.187182][ T92] smsc95xx v2.0.0 [ 659.749050][T11542] dlm: no local IP address has been set [ 659.755029][T11542] dlm: cannot start dlm midcomms -107 [ 660.013767][ T30] audit: type=1400 audit(2000000232.551:820): avc: denied { setopt } for pid=11538 comm="syz.3.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 660.206796][T11546] ubi: mtd0 is already attached to ubi31 [ 660.367300][T11550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1249'. [ 660.481484][ T30] audit: type=1400 audit(2000000233.411:821): avc: denied { bind } for pid=11549 comm="syz.3.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 661.329337][ T92] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 661.385617][T11545] netlink: 'syz.0.1247': attribute type 10 has an invalid length. [ 661.393895][T11545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1247'. [ 661.415368][T11545] bridge0: port 1(dummy0) entered blocking state [ 661.422133][T11545] bridge0: port 1(dummy0) entered disabled state [ 661.429385][T11545] dummy0: entered allmulticast mode [ 661.447614][T11545] dummy0: entered promiscuous mode [ 661.461813][T11545] bridge0: port 1(dummy0) entered blocking state [ 661.468235][T11545] bridge0: port 1(dummy0) entered forwarding state [ 661.648175][ T92] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 661.676169][ T92] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 662.787674][ T92] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 662.959857][ T92] usb 3-1: USB disconnect, device number 8 [ 663.703761][T11583] loop6: detected capacity change from 0 to 7 [ 664.191845][T11583] Dev loop6: unable to read RDB block 7 [ 664.197448][T11583] loop6: AHDI p1 p2 p3 [ 664.201666][T11583] loop6: partition table partially beyond EOD, truncated [ 664.208775][T11583] loop6: p1 start 1601398130 is beyond EOD, truncated [ 664.215547][T11583] loop6: p2 start 1702059890 is beyond EOD, truncated [ 664.331705][T11576] Invalid source name [ 664.339841][T11576] UBIFS error (pid: 11576): cannot open "ubifs", error -22 [ 664.340486][ T5840] Bluetooth: hci4: Malformed LE Event: 0x0d [ 666.369445][T11610] ubi: mtd0 is already attached to ubi31 [ 667.688220][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'. [ 667.748585][ T30] audit: type=1400 audit(2000000240.671:822): avc: denied { getopt } for pid=11625 comm="syz.4.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 667.849527][ T30] audit: type=1400 audit(2000000240.761:823): avc: denied { ioctl } for pid=11625 comm="syz.4.1269" path="socket:[31888]" dev="sockfs" ino=31888 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 670.259879][T11659] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 670.309845][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 670.319681][T11655] netlink: 'syz.1.1274': attribute type 10 has an invalid length. [ 670.327658][T11655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1274'. [ 670.339994][T11655] bridge0: port 3(dummy0) entered blocking state [ 670.346808][T11655] bridge0: port 3(dummy0) entered disabled state [ 670.353961][T11655] dummy0: entered allmulticast mode [ 670.368715][T11655] dummy0: entered promiscuous mode [ 670.376429][T11655] bridge0: port 3(dummy0) entered blocking state [ 670.382877][T11655] bridge0: port 3(dummy0) entered forwarding state [ 670.625829][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 670.699894][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 670.749434][ T10] usb 4-1: config 0 has no interface number 0 [ 670.862506][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 671.088425][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.186126][ T10] usb 4-1: Product: syz [ 671.191229][ T10] usb 4-1: Manufacturer: syz [ 671.196256][ T10] usb 4-1: SerialNumber: syz [ 671.220959][ T10] usb 4-1: config 0 descriptor?? [ 671.222742][ T30] audit: type=1400 audit(2000000244.021:824): avc: denied { read append } for pid=11661 comm="syz.2.1279" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 671.251182][ T10] smsc95xx v2.0.0 [ 672.098160][ T30] audit: type=1400 audit(2000000244.021:825): avc: denied { open } for pid=11661 comm="syz.2.1279" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 672.158518][ T30] audit: type=1400 audit(2000000244.021:826): avc: denied { ioctl } for pid=11661 comm="syz.2.1279" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 672.777547][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 672.788377][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 672.800999][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 672.813598][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 672.827549][ T10] usb 4-1: USB disconnect, device number 13 [ 675.446342][T11694] overlayfs: failed to clone upperpath [ 676.869129][T11712] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 677.103755][T11718] overlayfs: missing 'lowerdir' [ 677.108384][ T30] audit: type=1400 audit(2000000250.031:827): avc: denied { connect } for pid=11717 comm="syz.4.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 677.141196][T11718] lo speed is unknown, defaulting to 1000 [ 677.148065][T11718] lo speed is unknown, defaulting to 1000 [ 677.154573][T11718] lo speed is unknown, defaulting to 1000 [ 677.264522][T11718] infiniband sz1: set active [ 677.269207][T11718] infiniband sz1: added lo [ 677.275101][T11718] sz1: rxe_create_qp: returned err = -2 [ 677.280771][T11718] infiniband sz1: Couldn't create ib_mad QP1 [ 677.287182][T11718] infiniband sz1: Couldn't open port 1 [ 677.294947][ T5909] lo speed is unknown, defaulting to 1000 [ 677.314135][T11718] RDS/IB: sz1: added [ 677.318127][T11718] smc: adding ib device sz1 with port count 1 [ 677.324328][T11718] smc: ib device sz1 port 1 has pnetid [ 677.332672][ T92] lo speed is unknown, defaulting to 1000 [ 677.338813][T11718] lo speed is unknown, defaulting to 1000 [ 677.428353][T11718] lo speed is unknown, defaulting to 1000 [ 677.510927][T11718] lo speed is unknown, defaulting to 1000 [ 677.593145][T11718] lo speed is unknown, defaulting to 1000 [ 677.676532][T11718] lo speed is unknown, defaulting to 1000 [ 678.027463][ T92] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 679.009783][ T92] usb 3-1: Using ep0 maxpacket: 16 [ 679.035630][ T92] usb 3-1: config 3 has an invalid interface number: 71 but max is 0 [ 679.049809][ T92] usb 3-1: config 3 has no interface number 0 [ 679.061253][ T92] usb 3-1: config 3 interface 71 has no altsetting 0 [ 679.076775][ T92] usb 3-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 679.098869][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.115469][ T92] usb 3-1: Product: syz [ 679.124245][ T92] usb 3-1: Manufacturer: syz [ 679.128855][ T92] usb 3-1: SerialNumber: syz [ 679.481103][T11740] Invalid source name [ 679.485164][T11740] UBIFS error (pid: 11740): cannot open "ubifs", error -22 [ 679.510366][ T5840] Bluetooth: hci2: Malformed LE Event: 0x0d [ 680.451038][ T92] go7007 3-1:3.71: Sensoray 2250 found [ 680.487319][ T92] go7007 3-1:3.71: probe with driver go7007 failed with error -12 [ 680.523531][ T92] usb 3-1: USB disconnect, device number 9 [ 680.736980][T11750] netlink: 'syz.4.1297': attribute type 11 has an invalid length. [ 682.910234][ T92] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 683.359802][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 683.366590][ T92] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 683.408233][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 683.457643][ T92] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 684.050064][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.103987][ T92] usb 3-1: Product: syz [ 684.208951][ T92] usb 3-1: Manufacturer: syz [ 684.213748][ T92] usb 3-1: SerialNumber: syz [ 684.225835][ T92] usb 3-1: config 0 descriptor?? [ 684.255375][ T92] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 684.694724][T11798] 9pnet_virtio: no channels available for device syz [ 685.347883][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.401820][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.742078][T11803] Invalid source name [ 685.769064][T11803] UBIFS error (pid: 11803): cannot open "ubifs", error -22 [ 685.893076][ T5840] Bluetooth: hci3: Malformed LE Event: 0x0d [ 686.227087][ T92] usb 3-1: USB disconnect, device number 10 [ 686.287185][T11817] lo speed is unknown, defaulting to 1000 [ 686.293260][T11817] lo speed is unknown, defaulting to 1000 [ 686.302549][T11817] lo speed is unknown, defaulting to 1000 [ 686.335979][T11817] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 686.435720][T11817] lo speed is unknown, defaulting to 1000 [ 686.448841][T11817] lo speed is unknown, defaulting to 1000 [ 686.461826][T11817] lo speed is unknown, defaulting to 1000 [ 686.475099][T11817] lo speed is unknown, defaulting to 1000 [ 686.488275][T11817] lo speed is unknown, defaulting to 1000 [ 687.017777][T11824] ALSA: mixer_oss: invalid index 40000 [ 687.909932][ T30] audit: type=1326 audit(2000000260.651:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a24b8e929 code=0x7ffc0000 [ 687.937368][T11829] netlink: 'syz.4.1311': attribute type 10 has an invalid length. [ 688.711022][ T30] audit: type=1326 audit(2000000260.651:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a24b8e929 code=0x7ffc0000 [ 688.734407][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.766269][T11829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1311'. [ 688.800466][T11829] bridge0: port 3(dummy0) entered blocking state [ 688.815272][ T30] audit: type=1326 audit(2000000260.651:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a24b8e929 code=0x7ffc0000 [ 688.840340][T11829] bridge0: port 3(dummy0) entered disabled state [ 688.851185][ T30] audit: type=1326 audit(2000000260.651:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a24b8e929 code=0x7ffc0000 [ 688.875137][ T30] audit: type=1326 audit(2000000260.651:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a24b8e929 code=0x7ffc0000 [ 688.898553][ C0] vkms_vblank_simulate: vblank timer overrun [ 688.990786][ T30] audit: type=1326 audit(2000000260.651:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a24b8e929 code=0x7ffc0000 [ 689.014225][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.020860][ T30] audit: type=1326 audit(2000000260.651:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a24b8e929 code=0x7ffc0000 [ 689.048541][ T30] audit: type=1326 audit(2000000260.661:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a24b8e929 code=0x7ffc0000 [ 689.085240][T11829] dummy0: entered allmulticast mode [ 689.092996][ T30] audit: type=1326 audit(2000000260.661:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a24b8e929 code=0x7ffc0000 [ 689.116419][ C0] vkms_vblank_simulate: vblank timer overrun [ 689.762810][ T30] audit: type=1326 audit(2000000260.661:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.3.1315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5a24b8e929 code=0x7ffc0000 [ 689.946682][T11829] dummy0: entered promiscuous mode [ 692.411013][T11868] Invalid source name [ 692.415078][T11868] UBIFS error (pid: 11868): cannot open "ubifs", error -22 [ 692.437861][ T5840] Bluetooth: hci3: Malformed LE Event: 0x0d [ 692.505674][T11870] siw: device registration error -23 [ 693.253274][T11882] ALSA: mixer_oss: invalid index 40000 [ 693.830183][T11889] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 694.112279][T11892] ceph: No mds server is up or the cluster is laggy [ 694.119295][ T1861] libceph: mon0 (1)[c::]:6789 connect error [ 695.164045][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 695.176085][T11914] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 695.246531][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 695.246542][ T30] audit: type=1400 audit(2000000268.171:865): avc: denied { append } for pid=11912 comm="syz.4.1336" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 695.363751][T11913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 695.370477][T11913] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 695.378982][T11913] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 695.388485][T11913] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 695.431488][T11913] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 695.448214][T11913] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 695.460957][T11913] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 695.467861][T11913] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 697.532747][T11934] Invalid source name [ 697.561660][T11934] UBIFS error (pid: 11934): cannot open "ubifs", error -22 [ 697.968558][T11930] netlink: 'syz.3.1339': attribute type 10 has an invalid length. [ 697.983664][T11930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1339'. [ 697.995805][T11930] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 698.413550][T11939] overlay: Unknown parameter '/' [ 699.226723][T11938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1343'. [ 700.510130][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 700.545802][ T30] audit: type=1400 audit(2000000273.471:866): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 701.110433][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 701.132578][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 701.153859][ T10] usb 3-1: config 0 has no interface number 0 [ 701.365899][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 701.392448][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.406496][ T10] usb 3-1: Product: syz [ 701.412193][ T10] usb 3-1: Manufacturer: syz [ 701.416887][ T10] usb 3-1: SerialNumber: syz [ 701.426024][ T10] usb 3-1: config 0 descriptor?? [ 701.438028][ T10] smsc95xx v2.0.0 [ 702.673663][T11970] Failed to initialize the IGMP autojoin socket (err -2) [ 703.887889][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 703.904126][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 703.931303][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 703.969305][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 704.086498][ T10] usb 3-1: USB disconnect, device number 11 [ 704.123667][T11992] Invalid source name [ 704.127683][T11992] UBIFS error (pid: 11992): cannot open "ubifs", error -22 [ 705.850797][T12009] rdma_rxe: rxe_newlink: failed to add wg0 [ 706.245423][T12011] ceph: No mds server is up or the cluster is laggy [ 706.268167][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 706.308403][T12014] vxfs: WRONG superblock magic 00000000 at 1 [ 706.315949][T12014] vxfs: WRONG superblock magic 00000000 at 8 [ 706.322006][T12014] vxfs: can't find superblock. [ 708.500495][T12025] rdma_rxe: rxe_newlink: failed to add wg0 [ 708.553789][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 710.161778][ T30] audit: type=1400 audit(2000000282.971:867): avc: denied { ioctl } for pid=12033 comm="syz.2.1366" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 711.217938][ T30] audit: type=1400 audit(2000000284.141:868): avc: denied { create } for pid=12048 comm="syz.4.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 711.469660][ T5941] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 712.324174][T12060] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1370'. [ 712.333615][T12060] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1370'. [ 712.584659][ T5941] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 712.593812][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.601929][ T5941] usb 3-1: Product: syz [ 712.606134][ T5941] usb 3-1: Manufacturer: syz [ 712.610789][ T5941] usb 3-1: SerialNumber: syz [ 712.703509][ T5941] usb 3-1: config 0 descriptor?? [ 712.715876][ T5941] usb 3-1: can't set config #0, error -71 [ 712.723627][ T5941] usb 3-1: USB disconnect, device number 12 [ 716.104902][T12090] netlink: 'syz.4.1379': attribute type 10 has an invalid length. [ 716.150390][T12090] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1379'. [ 716.190937][T12090] batadv0: entered promiscuous mode [ 716.208665][T12090] batadv0: entered allmulticast mode [ 716.294007][T12090] bridge0: port 4(batadv0) entered blocking state [ 716.341908][T12090] bridge0: port 4(batadv0) entered disabled state [ 716.885925][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 716.895535][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 716.941332][ T30] audit: type=1400 audit(2000000289.862:869): avc: denied { shutdown } for pid=12089 comm="syz.4.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.459304][ T30] audit: type=1400 audit(2000000291.272:870): avc: denied { create } for pid=12127 comm="syz.2.1384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 721.846733][ T30] audit: type=1400 audit(2000000294.422:871): avc: denied { write } for pid=12179 comm="syz.4.1391" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 723.446533][T12213] netlink: 'syz.2.1396': attribute type 2 has an invalid length. [ 723.454402][T12213] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 723.462916][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 723.904397][T12215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12215 comm=syz.0.1395 [ 724.775994][T12226] ubi: mtd0 is already attached to ubi31 [ 725.559794][T12232] Invalid source name [ 725.690856][T12232] UBIFS error (pid: 12232): cannot open "ubifs", error -22 [ 726.214056][ T30] audit: type=1400 audit(2000000299.092:872): avc: denied { read } for pid=12216 comm="syz.4.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 726.291452][ T30] audit: type=1400 audit(2000000299.212:873): avc: denied { read } for pid=12216 comm="syz.4.1398" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 728.229337][T12263] 9pnet_virtio: no channels available for device syz [ 728.767713][ T30] audit: type=1400 audit(2000000301.652:874): avc: denied { mount } for pid=12258 comm="syz.2.1409" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 730.649129][T12279] Invalid source name [ 730.748555][T12279] UBIFS error (pid: 12279): cannot open "ubifs", error -22 [ 731.044653][ T30] audit: type=1400 audit(2000000303.963:875): avc: denied { map } for pid=12287 comm="syz.4.1415" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 731.558654][ T30] audit: type=1400 audit(2000000303.963:876): avc: denied { execute } for pid=12287 comm="syz.4.1415" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 733.618540][T12317] netlink: 'syz.2.1419': attribute type 5 has an invalid length. [ 734.515735][T12326] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1421'. [ 734.525335][T12326] ip6tnl0: entered promiscuous mode [ 734.530612][T12326] ip6tnl0: entered allmulticast mode [ 734.897957][ T30] audit: type=1400 audit(2000000307.823:877): avc: denied { read write } for pid=12324 comm="syz.3.1424" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 734.905991][ T5941] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 735.083981][ T5941] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 735.091831][ T5941] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 735.102541][ T30] audit: type=1400 audit(2000000307.823:878): avc: denied { open } for pid=12324 comm="syz.3.1424" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 735.225720][ T5941] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 735.756003][T12335] Can't find a SQUASHFS superblock on nullb0 [ 736.270545][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 736.560459][ T30] audit: type=1400 audit(2000000309.223:879): avc: denied { getopt } for pid=12339 comm="syz.4.1426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 736.608182][ T5941] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 736.865542][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 736.914665][ T5941] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 736.962416][ T5941] usb 3-1: config 0 has no interface number 0 [ 737.065488][ T5941] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 737.211904][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.362343][ T5941] usb 3-1: Product: syz [ 737.366993][ T5941] usb 3-1: Manufacturer: syz [ 737.375750][ T5941] usb 3-1: SerialNumber: syz [ 737.385539][ T5941] usb 3-1: config 0 descriptor?? [ 737.395224][ T5941] smsc95xx v2.0.0 [ 739.257802][ T5941] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 739.279441][ T5941] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 739.328363][ T5941] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 739.347221][ T5941] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 739.370782][ T5941] usb 3-1: USB disconnect, device number 13 [ 741.594839][ T30] audit: type=1400 audit(2000000314.523:880): avc: denied { mount } for pid=12394 comm="syz.2.1438" name="/" dev="ramfs" ino=35572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 742.357411][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'. [ 742.366528][T12400] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 742.373866][T12400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.747474][T12409] Invalid source name [ 742.751590][T12409] UBIFS error (pid: 12409): cannot open "ubifs", error -22 [ 744.874665][T12430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50630 sclass=netlink_route_socket pid=12430 comm=syz.0.1446 [ 745.452528][T12434] netlink: 'syz.0.1446': attribute type 10 has an invalid length. [ 745.465842][T12434] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1446'. [ 745.517686][ T5909] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 745.564942][ T30] audit: type=1400 audit(2000000318.493:881): avc: denied { setopt } for pid=12437 comm="syz.3.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 745.739705][ T5909] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 745.752159][ T5909] usb 3-1: config 0 has no interface number 0 [ 745.765278][ T5909] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 745.812628][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.017609][ T30] audit: type=1400 audit(2000000318.923:882): avc: denied { getopt } for pid=12442 comm="syz.0.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 746.065990][ T5909] usb 3-1: config 0 descriptor?? [ 746.119927][ T5909] hub 3-1:0.3: bad descriptor, ignoring hub [ 746.137665][ T5909] hub 3-1:0.3: probe with driver hub failed with error -5 [ 746.162843][ T30] audit: type=1400 audit(2000000319.083:883): avc: denied { create } for pid=12437 comm="syz.3.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 746.272984][ T5909] sierra 3-1:0.3: Sierra USB modem converter detected [ 746.461966][ T5909] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 746.539504][ T5909] usb 3-1: USB disconnect, device number 14 [ 746.633747][ T5909] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 746.677129][ T5909] sierra 3-1:0.3: device disconnected [ 746.714930][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.721394][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.075031][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 748.084114][T12475] openvswitch: netlink: nsh attr 801 is out of range max 3 [ 748.091400][T12475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.370305][T12481] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 748.387489][ T30] audit: type=1400 audit(2000000321.244:884): avc: denied { ioctl } for pid=12472 comm="syz.4.1453" path="/284/file0" dev="tmpfs" ino=1590 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 751.081973][T12504] rdma_rxe: rxe_newlink: failed to add wg0 [ 751.745311][T12520] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1462'. [ 754.926088][T12524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 755.565573][T12535] Invalid source name [ 755.572140][T12535] UBIFS error (pid: 12535): cannot open "ubifs", error -22 [ 756.091409][T12541] Invalid source name [ 756.170742][T12541] UBIFS error (pid: 12541): cannot open "ubifs", error -22 [ 756.455064][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'. [ 756.471823][T12547] netlink: 'syz.1.1468': attribute type 15 has an invalid length. [ 758.061049][T12560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1470'. [ 758.070061][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1470'. [ 758.290029][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 758.299026][T12559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1470'. [ 758.313402][T12559] geneve2: entered promiscuous mode [ 758.318687][T12559] geneve2: entered allmulticast mode [ 758.504970][ T30] audit: type=1400 audit(2000000330.994:885): avc: denied { write } for pid=12554 comm="syz.3.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 760.379539][T12588] netlink: 'syz.1.1476': attribute type 2 has an invalid length. [ 761.183243][T12605] Invalid source name [ 761.204544][T12605] UBIFS error (pid: 12605): cannot open "ubifs", error -22 [ 762.807683][T12619] ubi: mtd0 is already attached to ubi31 [ 765.378316][T12640] 9pnet_virtio: no channels available for device 127.0.0.1 [ 766.300311][ T30] audit: type=1400 audit(2000000338.695:886): avc: denied { setopt } for pid=12650 comm="syz.2.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 767.979444][ T30] audit: type=1400 audit(2000000340.145:887): avc: denied { remount } for pid=12661 comm="syz.0.1494" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 768.423122][T12686] ubi: mtd0 is already attached to ubi31 [ 770.110565][T12693] veth0_to_team: entered promiscuous mode [ 770.116634][T12693] veth0_to_team: entered allmulticast mode [ 770.453313][T12700] rdma_rxe: rxe_newlink: failed to add wg0 [ 774.226665][T12715] usb usb8: usbfs: process 12715 (syz.4.1503) did not claim interface 0 before use [ 774.262628][T12725] ceph: No mds server is up or the cluster is laggy [ 774.272934][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 774.282833][ T30] audit: type=1400 audit(2000000346.965:888): avc: denied { link } for pid=12717 comm="syz.3.1506" name="#1d" dev="tmpfs" ino=1553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 774.496557][ T30] audit: type=1400 audit(2000000346.965:889): avc: denied { rename } for pid=12717 comm="syz.3.1506" name="#1e" dev="tmpfs" ino=1553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 774.530348][ T30] audit: type=1800 audit(2000000346.995:890): pid=12730 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1506" name="bus" dev="overlay" ino=1551 res=0 errno=0 [ 777.354782][ T30] audit: type=1400 audit(2000000350.265:891): avc: denied { append } for pid=12750 comm="syz.3.1512" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 777.381701][ T30] audit: type=1400 audit(2000000350.315:892): avc: denied { watch_sb } for pid=12750 comm="syz.3.1512" path="/283/file0" dev="tmpfs" ino=1559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 780.355835][ T30] audit: type=1400 audit(2000000353.155:893): avc: denied { watch watch_reads } for pid=12786 comm="syz.2.1520" path="/292/file0" dev="tmpfs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 781.362384][ T30] audit: type=1400 audit(2000000354.295:894): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 782.395630][T12810] ubi: mtd0 is already attached to ubi31 [ 782.630966][ T5941] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 783.886411][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 783.910290][ T5941] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 784.220638][ T5941] usb 3-1: config 0 has no interface number 0 [ 784.664045][ T5941] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 784.825183][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.837240][T12818] hsr0: entered promiscuous mode [ 784.858594][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1528'. [ 785.392092][ T5941] usb 3-1: config 0 descriptor?? [ 785.398896][T12818] hsr_slave_0: left promiscuous mode [ 785.413791][ T5941] usb 3-1: can't set config #0, error -71 [ 785.536389][T12818] hsr_slave_1: left promiscuous mode [ 785.551818][T12818] hsr0 (unregistering): left promiscuous mode [ 785.560506][ T5941] usb 3-1: USB disconnect, device number 15 [ 785.684378][T12842] syz.2.1531: attempt to access beyond end of device [ 785.684378][T12842] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 788.019938][T12855] syz2: rxe_newlink: already configured on wg0 [ 789.256761][ T5909] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 789.978864][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 789.984947][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1540'. [ 789.999999][ T5909] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 790.008227][ T5909] usb 3-1: config 0 has no interface number 0 [ 790.016942][ T5909] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 790.026108][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.034246][ T5909] usb 3-1: Product: syz [ 790.038649][ T5909] usb 3-1: Manufacturer: syz [ 790.043252][ T5909] usb 3-1: SerialNumber: syz [ 790.058401][ T5909] usb 3-1: config 0 descriptor?? [ 790.074781][ T5909] smsc95xx v2.0.0 [ 791.356651][ T5909] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 791.376949][ T5909] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 791.648620][ T5909] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 791.663494][ T5909] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 791.675085][ T5909] usb 3-1: USB disconnect, device number 16 [ 793.112160][T12909] veth0_vlan: entered allmulticast mode [ 793.121413][T12909] veth0_vlan: left promiscuous mode [ 793.129407][T12909] veth0_vlan: entered promiscuous mode [ 793.158053][T12909] Failed to initialize the IGMP autojoin socket (err -2) [ 793.778236][ T30] audit: type=1400 audit(2000000366.576:895): avc: denied { listen } for pid=12912 comm="syz.2.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 793.955056][ T30] audit: type=1400 audit(2000000366.576:896): avc: denied { accept } for pid=12912 comm="syz.2.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 793.981159][ T30] audit: type=1400 audit(2000000366.636:897): avc: denied { write } for pid=12912 comm="syz.2.1551" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 794.005001][ T30] audit: type=1400 audit(2000000366.886:898): avc: denied { write } for pid=12914 comm="syz.0.1552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 794.215070][T12930] ubi: mtd0 is already attached to ubi31 [ 795.723451][ T5909] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 796.102838][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 796.109958][ T5909] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 796.118264][ T5909] usb 3-1: config 0 has no interface number 0 [ 796.129820][ T5909] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 796.139059][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.148406][ T5909] usb 3-1: Product: syz [ 796.153818][ T5909] usb 3-1: Manufacturer: syz [ 796.158612][ T5909] usb 3-1: SerialNumber: syz [ 796.167808][ T5909] usb 3-1: config 0 descriptor?? [ 796.180294][ T5909] smsc95xx v2.0.0 [ 797.359432][ T5909] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 797.503308][ T5909] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 797.539312][ T5909] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 797.572420][ T5909] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 797.601615][ T5909] usb 3-1: USB disconnect, device number 17 [ 804.054802][T13019] netlink: 'syz.2.1575': attribute type 1 has an invalid length. [ 804.361813][T13016] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 806.717367][T13038] Invalid source name [ 806.810302][T13038] UBIFS error (pid: 13038): cannot open "ubifs", error -22 [ 807.871000][T13051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1584'. [ 808.092668][ T30] audit: type=1400 audit(2000000380.977:899): avc: denied { bind } for pid=13048 comm="syz.2.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 808.181742][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.200174][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.608587][ T30] audit: type=1400 audit(2000000381.427:900): avc: denied { map } for pid=13048 comm="syz.2.1584" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 810.751493][ T30] audit: type=1400 audit(2000000381.507:901): avc: denied { call } for pid=13048 comm="syz.2.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 811.156440][ T30] audit: type=1400 audit(2000000381.947:902): avc: denied { mount } for pid=13052 comm="syz.3.1586" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 811.436068][T13090] rdma_rxe: rxe_newlink: failed to add wg0 [ 812.249204][ T30] audit: type=1400 audit(2000000385.187:903): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 813.016972][T13098] Invalid source name [ 813.027321][T13098] UBIFS error (pid: 13098): cannot open "ubifs", error -22 [ 819.413313][T13156] rdma_rxe: rxe_newlink: failed to add wg0 [ 820.179430][T13157] ubi: mtd0 is already attached to ubi31 [ 823.932729][ T30] audit: type=1400 audit(2000000396.838:904): avc: denied { write } for pid=13177 comm="syz.0.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 824.517468][T13204] option changes via remount are deprecated (pid=13199 comm=syz.2.1619) [ 826.767601][T13228] ubi: mtd0 is already attached to ubi31 [ 828.635109][ T30] audit: type=1400 audit(2000000401.538:905): avc: denied { connect } for pid=13241 comm="syz.1.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 829.959251][T13262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.250734][ T30] audit: type=1400 audit(2000000402.958:906): avc: denied { write } for pid=13257 comm="syz.4.1633" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 830.332759][ T30] audit: type=1400 audit(2000000402.968:907): avc: denied { open } for pid=13257 comm="syz.4.1633" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 832.068603][T13291] rdma_rxe: rxe_newlink: failed to add wg0 [ 833.406044][T13310] 9pnet_virtio: no channels available for device 127.0.0.1 [ 835.303737][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'. [ 838.252123][ T30] audit: type=1400 audit(2000000411.189:908): avc: denied { read write } for pid=13353 comm="syz.2.1656" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 839.473916][ T30] audit: type=1400 audit(2000000411.189:909): avc: denied { open } for pid=13353 comm="syz.2.1656" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 839.809589][ T30] audit: type=1326 audit(2000000412.649:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13353 comm="syz.2.1656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5df498e929 code=0x0 [ 842.047073][T13402] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 844.492084][ T30] audit: type=1400 audit(2000000417.409:911): avc: denied { map } for pid=13417 comm="syz.2.1672" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 845.477937][ T30] audit: type=1400 audit(2000000417.409:912): avc: denied { execute } for pid=13417 comm="syz.2.1672" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 845.913341][T13443] Invalid source name [ 845.917360][T13443] UBIFS error (pid: 13443): cannot open "ubifs", error -22 [ 845.959019][T13428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1672'. [ 846.032247][T13453] ubi: mtd0 is already attached to ubi31 [ 848.371875][T13472] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1685'. [ 848.538438][T13473] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1684'. [ 850.907059][T13504] Invalid source name [ 850.926447][T13504] UBIFS error (pid: 13504): cannot open "ubifs", error -22 [ 857.412651][T13566] orangefs_mount: mount request failed with -4 [ 857.436109][ T30] audit: type=1400 audit(2000000429.500:913): avc: denied { mount } for pid=13558 comm="syz.2.1706" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 857.506571][ T30] audit: type=1400 audit(2000000429.510:914): avc: denied { mounton } for pid=13558 comm="syz.2.1706" path="/325/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 857.556374][ T30] audit: type=1400 audit(2000000430.130:915): avc: denied { unmount } for pid=13558 comm="syz.2.1706" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 859.714174][T13586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1710'. [ 861.818533][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 861.827920][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1719'. [ 864.016919][T13633] Invalid source name [ 864.141749][T13633] UBIFS error (pid: 13633): cannot open "ubifs", error -22 [ 866.580540][ T30] audit: type=1400 audit(2000000438.930:916): avc: denied { remove_name } for pid=13647 comm="syz.3.1726" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 866.953802][T13655] Failed to initialize the IGMP autojoin socket (err -2) [ 866.962241][ T30] audit: type=1400 audit(2000000438.940:917): avc: denied { unlink } for pid=13647 comm="syz.3.1726" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 869.960305][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.974264][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.997807][T13702] Invalid source name [ 870.113604][T13702] UBIFS error (pid: 13702): cannot open "ubifs", error -22 [ 872.486876][T13731] ubi: mtd0 is already attached to ubi31 [ 872.987319][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 873.618099][T13744] ubi: mtd0 is already attached to ubi31 [ 873.967401][ C0] hrtimer: interrupt took 19506 ns [ 873.996344][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1748'. [ 876.771466][T13771] Invalid source name [ 877.507888][T13771] UBIFS error (pid: 13771): cannot open "ubifs", error -22 [ 879.094117][T13794] ubi: mtd0 is already attached to ubi31 [ 879.982360][T13800] rdma_rxe: rxe_newlink: failed to add wg0 [ 881.253713][T13813] siw: device registration error -23 [ 883.175823][T13822] ubi: mtd0 is already attached to ubi31 [ 883.887570][T13837] ubi: mtd0 is already attached to ubi31 [ 886.299907][ T30] audit: type=1326 audit(2000000459.161:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 886.384620][ T30] audit: type=1326 audit(2000000459.161:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 886.413228][ T30] audit: type=1326 audit(2000000459.161:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 886.543616][ T30] audit: type=1326 audit(2000000459.161:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 886.586546][ T30] audit: type=1326 audit(2000000459.161:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 886.647475][ T30] audit: type=1326 audit(2000000459.161:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 886.674792][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 886.716867][ T30] audit: type=1326 audit(2000000459.161:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 886.751966][T13879] Invalid source name [ 886.760002][ T30] audit: type=1326 audit(2000000459.161:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 886.783482][ T30] audit: type=1326 audit(2000000459.171:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 886.807963][ T30] audit: type=1326 audit(2000000459.171:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13859 comm="syz.2.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7ffc0000 [ 886.818758][T13878] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 886.831710][T13879] UBIFS error (pid: 13879): cannot open "ubifs", error -22 [ 886.861342][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 886.882684][ T10] usb 3-1: config 0 has an invalid interface number: 155 but max is 0 [ 886.893008][ T10] usb 3-1: config 0 has no interface number 0 [ 886.909552][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c [ 886.928147][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.943732][ T10] usb 3-1: Product: syz [ 886.947984][ T10] usb 3-1: Manufacturer: syz [ 886.957301][ T10] usb 3-1: SerialNumber: syz [ 886.967113][ T10] usb 3-1: config 0 descriptor?? [ 889.111770][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.155/input/input9 [ 889.395023][ T5187] bcm5974 3-1:0.155: could not read from device [ 889.416576][ T5187] bcm5974 3-1:0.155: could not read from device [ 889.522010][T13912] wireguard: wg1: Could not create IPv4 socket [ 889.872359][ T10] usb 3-1: USB disconnect, device number 18 [ 890.265717][T13914] netlink: 'syz.2.1783': attribute type 10 has an invalid length. [ 890.273881][T13914] bridge0: port 1(dummy0) entered disabled state [ 890.741621][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 890.764276][T13914] bridge0: port 1(dummy0) entered blocking state [ 890.771783][T13914] bridge0: port 1(dummy0) entered forwarding state [ 892.430583][T13914] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 892.503662][T13937] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 892.517097][T13937] Error validating options; rc = [-22] [ 892.741468][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 892.741485][ T30] audit: type=1400 audit(2000000465.472:965): avc: denied { bind } for pid=13929 comm="syz.3.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 892.836561][T13923] dummy0: left allmulticast mode [ 892.841636][T13923] dummy0: left promiscuous mode [ 892.852673][T13940] Invalid source name [ 892.861354][T13923] bridge0: port 1(dummy0) entered disabled state [ 892.868459][T13940] UBIFS error (pid: 13940): cannot open "ubifs", error -22 [ 893.635906][T13923] bond0: (slave bridge0): Releasing backup interface [ 893.676516][T13952] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 894.115120][T13958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 894.670448][T13964] rdma_rxe: rxe_newlink: failed to add wg0 [ 895.054837][T13970] ubi: mtd0 is already attached to ubi31 [ 896.951843][ T30] audit: type=1400 audit(2000000469.892:966): avc: denied { connect } for pid=13976 comm="syz.3.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 898.740463][T14000] Invalid source name [ 898.756447][T14000] UBIFS error (pid: 14000): cannot open "ubifs", error -22 [ 900.914521][T14023] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 901.191060][T14018] ubi: mtd0 is already attached to ubi31 [ 906.244329][T14072] ubi: mtd0 is already attached to ubi31 [ 907.252771][T14086] snd_dummy snd_dummy.0: control 6:65280:0:syz0:-3 is already present [ 908.311064][T14094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1821'. [ 909.780310][T14095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.788828][T14095] batadv_slave_0: entered promiscuous mode [ 913.079778][T14137] Invalid source name [ 913.325553][ T30] audit: type=1400 audit(2000000486.263:967): avc: denied { listen } for pid=14131 comm="syz.4.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 913.346549][ T30] audit: type=1400 audit(2000000486.263:968): avc: denied { accept } for pid=14131 comm="syz.4.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 913.390948][T14137] UBIFS error (pid: 14137): cannot open "ubifs", error -22 [ 914.446518][T14154] Failed to initialize the IGMP autojoin socket (err -2) [ 915.318836][T14169] rdma_rxe: rxe_newlink: failed to add wg0 [ 917.573688][T14187] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1839'. [ 918.207992][ T9714] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 918.458173][ T9714] usb 4-1: Using ep0 maxpacket: 32 [ 918.476944][ T9714] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 918.485635][ T9714] usb 4-1: config 0 has no interface number 0 [ 918.695477][ T9714] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 918.706727][ T9714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.772165][ T9714] usb 4-1: Product: syz [ 918.787933][ T9714] usb 4-1: Manufacturer: syz [ 918.802059][ T9714] usb 4-1: SerialNumber: syz [ 919.027047][ T9714] usb 4-1: config 0 descriptor?? [ 919.090179][ T9714] smsc95xx v2.0.0 [ 919.301319][T14201] Invalid source name [ 919.305391][T14201] UBIFS error (pid: 14201): cannot open "ubifs", error -22 [ 919.462233][ T9714] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 919.513971][ T9714] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 920.221379][T14219] ubi: mtd0 is already attached to ubi31 [ 920.847082][ T9714] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 920.858158][ T9714] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 920.871636][ T9714] usb 4-1: USB disconnect, device number 14 [ 923.641369][ T9714] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 924.313294][ T9714] usb 4-1: Using ep0 maxpacket: 32 [ 924.329455][ T9714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.730522][T14257] siw: device registration error -23 [ 925.284115][ T9714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.294018][ T9714] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 925.303154][ T9714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.361842][ T9714] usb 4-1: config 0 descriptor?? [ 925.490108][T14260] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 925.501977][ T9714] hub 4-1:0.0: USB hub found [ 925.516813][T14260] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1852'. [ 925.675569][T14265] Invalid source name [ 925.686556][T14265] UBIFS error (pid: 14265): cannot open "ubifs", error -22 [ 926.894462][ T9714] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 926.915213][ T9714] usbhid 4-1:0.0: can't add hid device: -71 [ 926.923237][ T9714] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 927.681953][ T9714] usb 4-1: USB disconnect, device number 15 [ 929.707416][ T5883] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 929.943538][ T30] audit: type=1400 audit(2000000502.884:969): avc: denied { create } for pid=14305 comm="syz.4.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 930.167252][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 931.487587][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.496294][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.523052][ T5883] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 931.832223][T14317] syz.4.1867: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 931.847723][T14317] CPU: 0 UID: 0 PID: 14317 Comm: syz.4.1867 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 931.847751][T14317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 931.847761][T14317] Call Trace: [ 931.847770][T14317] [ 931.847778][T14317] dump_stack_lvl+0x16c/0x1f0 [ 931.847809][T14317] warn_alloc+0x248/0x3a0 [ 931.847837][T14317] ? __pfx_warn_alloc+0x10/0x10 [ 931.847861][T14317] ? __pfx_stack_trace_save+0x10/0x10 [ 931.847886][T14317] ? stack_depot_save_flags+0x28/0xa40 [ 931.847918][T14317] ? kasan_save_stack+0x42/0x60 [ 931.847941][T14317] ? kasan_save_stack+0x33/0x60 [ 931.847964][T14317] ? kasan_save_track+0x14/0x30 [ 931.847988][T14317] ? xskq_create+0x52/0x1d0 [ 931.848009][T14317] ? xsk_setsockopt+0x640/0x840 [ 931.848028][T14317] ? do_sock_setsockopt+0x221/0x470 [ 931.848060][T14317] ? xskq_create+0xfb/0x1d0 [ 931.848083][T14317] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 931.848114][T14317] ? xskq_create+0xfb/0x1d0 [ 931.848146][T14317] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 931.848177][T14317] ? xskq_create+0xfb/0x1d0 [ 931.848200][T14317] vmalloc_user_noprof+0x9e/0xe0 [ 931.848221][T14317] ? xskq_create+0xfb/0x1d0 [ 931.848244][T14317] xskq_create+0xfb/0x1d0 [ 931.848269][T14317] xsk_setsockopt+0x640/0x840 [ 931.848292][T14317] ? __pfx_xsk_setsockopt+0x10/0x10 [ 931.848311][T14317] ? __lock_acquire+0x622/0x1c90 [ 931.848335][T14317] ? selinux_socket_setsockopt+0x6a/0x80 [ 931.848361][T14317] ? __pfx_xsk_setsockopt+0x10/0x10 [ 931.848382][T14317] do_sock_setsockopt+0x221/0x470 [ 931.848412][T14317] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 931.848456][T14317] __sys_setsockopt+0x1a0/0x230 [ 931.848485][T14317] __x64_sys_setsockopt+0xbd/0x160 [ 931.848509][T14317] ? do_syscall_64+0x91/0x4c0 [ 931.848535][T14317] ? lockdep_hardirqs_on+0x7c/0x110 [ 931.848561][T14317] do_syscall_64+0xcd/0x4c0 [ 931.848589][T14317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.848608][T14317] RIP: 0033:0x7f3dbb18e929 [ 931.848624][T14317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.848642][T14317] RSP: 002b:00007f3dbbf4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 931.848659][T14317] RAX: ffffffffffffffda RBX: 00007f3dbb3b6160 RCX: 00007f3dbb18e929 [ 931.848677][T14317] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 931.848688][T14317] RBP: 00007f3dbb210b39 R08: 0000000000000052 R09: 0000000000000000 [ 931.848699][T14317] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.848710][T14317] R13: 0000000000000000 R14: 00007f3dbb3b6160 R15: 00007ffd49aa3608 [ 931.848735][T14317] [ 931.848758][T14317] Mem-Info: [ 932.119913][T14317] active_anon:20808 inactive_anon:0 isolated_anon:0 [ 932.119913][T14317] active_file:13029 inactive_file:43942 isolated_file:0 [ 932.119913][T14317] unevictable:776 dirty:534 writeback:0 [ 932.119913][T14317] slab_reclaimable:7687 slab_unreclaimable:119585 [ 932.119913][T14317] mapped:39923 shmem:13585 pagetables:1259 [ 932.119913][T14317] sec_pagetables:0 bounce:0 [ 932.119913][T14317] kernel_misc_reclaimable:0 [ 932.119913][T14317] free:1266667 free_pcp:19499 free_cma:0 [ 932.165804][T14317] Node 0 active_anon:76064kB inactive_anon:0kB active_file:52116kB inactive_file:175516kB unevictable:1568kB isolated(anon):0kB isolated(file):0kB mapped:159640kB dirty:2136kB writeback:0kB shmem:45636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11924kB pagetables:4904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 932.199695][T14317] Node 1 active_anon:7168kB inactive_anon:0kB active_file:0kB inactive_file:252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:8704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 932.231795][T14317] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 932.260914][T14317] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 932.266835][T14317] Node 0 DMA32 free:1168312kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76040kB inactive_anon:0kB active_file:52116kB inactive_file:174188kB unevictable:1568kB writepending:2136kB present:3129332kB managed:2540076kB mlocked:0kB bounce:0kB free_pcp:48844kB local_pcp:14068kB free_cma:0kB [ 932.299633][T14317] lowmem_reserve[]: 0 0 1 1 1 [ 932.304530][T14317] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 932.333915][T14317] lowmem_reserve[]: 0 0 0 0 0 [ 932.338815][T14317] Node 1 Normal free:3882988kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7168kB inactive_anon:0kB active_file:0kB inactive_file:252kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:29124kB local_pcp:13376kB free_cma:0kB [ 932.370625][T14317] lowmem_reserve[]: 0 0 0 0 0 [ 932.375524][T14317] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 932.388761][T14317] Node 0 DMA32: 1046*4kB (UME) 520*8kB (UME) 350*16kB (UME) 517*32kB (UME) 216*64kB (UME) 81*128kB (UME) 62*256kB (UME) 42*512kB (UME) 19*1024kB (UME) 10*2048kB (UM) 253*4096kB (UM) = 1168280kB [ 932.409163][T14317] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 932.421395][T14317] Node 1 Normal: 214*4kB (UME) 51*8kB (UME) 47*16kB (UME) 176*32kB (UME) 49*64kB (UME) 12*128kB (UME) 6*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 3*2048kB (ME) 942*4096kB (M) = 3883040kB [ 932.440343][T14317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 932.450029][T14317] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 932.460019][T14317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 932.469714][T14317] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 932.479207][T14317] 70552 total pagecache pages [ 932.483956][T14317] 0 pages in swap cache [ 932.505762][ T30] audit: type=1400 audit(2000000504.504:970): avc: denied { create } for pid=14305 comm="syz.4.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 932.549244][ T5883] usb 4-1: config 0 has no interface number 0 [ 932.559219][T14317] Free swap = 124996kB [ 932.567176][T14317] Total swap = 124996kB [ 932.574785][T14317] 2097051 pages RAM [ 932.578743][T14317] 0 pages HighMem/MovableOnly [ 932.583497][T14317] 430054 pages reserved [ 932.588355][T14317] 0 pages cma reserved [ 932.927316][ T30] audit: type=1400 audit(2000000504.774:971): avc: denied { setopt } for pid=14305 comm="syz.4.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 933.079770][ T5883] usb 4-1: string descriptor 0 read error: -71 [ 933.191720][ T5883] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 933.237801][T14322] audit: audit_backlog=65 > audit_backlog_limit=64 [ 933.256293][ T30] audit: type=1400 audit(2000000505.894:972): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 933.280709][ T30] audit: type=1400 audit(2000000505.894:973): avc: denied { open } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 933.281357][T14321] audit: audit_backlog=65 > audit_backlog_limit=64 [ 933.304871][ T30] audit: type=1400 audit(2000000505.904:974): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 933.337223][ T30] audit: type=1326 audit(2000000506.064:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.2.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df498e929 code=0x7fc00000 [ 933.343072][T14322] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 933.368433][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.393544][ T5883] usb 4-1: config 0 descriptor?? [ 933.583731][ T5883] usb 4-1: can't set config #0, error -71 [ 933.605816][ T5883] usb 4-1: USB disconnect, device number 16 [ 933.626204][T14330] fuseblk: Bad value for 'fd' [ 933.825744][T14332] ubi: mtd0 is already attached to ubi31 [ 935.206884][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 935.221602][ T30] audit: type=1400 audit(2000000508.144:1070): avc: denied { write } for pid=14344 comm="syz.2.1875" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 935.389086][ T30] audit: type=1400 audit(2000000508.334:1071): avc: denied { read write } for pid=14344 comm="syz.2.1875" name="video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 936.300000][ T30] audit: type=1400 audit(2000000508.334:1072): avc: denied { open } for pid=14344 comm="syz.2.1875" path="/dev/video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 937.391677][ T30] audit: type=1400 audit(2000000508.334:1073): avc: denied { ioctl } for pid=14344 comm="syz.2.1875" path="/dev/video37" dev="devtmpfs" ino=1050 ioctlcmd=0x5609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 938.158381][ T30] audit: type=1400 audit(2000000508.594:1074): avc: denied { read } for pid=14344 comm="syz.2.1875" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 938.181452][ T30] audit: type=1400 audit(2000000508.604:1075): avc: denied { open } for pid=14344 comm="syz.2.1875" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 938.690242][T14373] ubi: mtd0 is already attached to ubi31 [ 939.010538][ T30] audit: type=1400 audit(2000000509.284:1076): avc: denied { mount } for pid=14350 comm="syz.1.1876" name="/" dev="ramfs" ino=46133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 939.190501][ T30] audit: type=1400 audit(2000000509.284:1077): avc: denied { execute } for pid=14350 comm="syz.1.1876" name="file1" dev="ramfs" ino=46134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 939.222321][ T30] audit: type=1400 audit(2000000509.294:1078): avc: denied { execute_no_trans } for pid=14350 comm="syz.1.1876" path="/file1" dev="ramfs" ino=46134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 939.245777][ T30] audit: type=1400 audit(2000000510.314:1079): avc: denied { mounton } for pid=14352 comm="syz.2.1877" path="/355/file0" dev="tmpfs" ino=1949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 939.486730][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 939.661950][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 939.674189][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 939.682551][ T24] usb 4-1: config 0 has no interface number 0 [ 939.696350][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 939.714541][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.746333][ T24] usb 4-1: Product: syz [ 939.754520][ T24] usb 4-1: Manufacturer: syz [ 939.765467][ T24] usb 4-1: SerialNumber: syz [ 939.782951][ T24] usb 4-1: config 0 descriptor?? [ 939.792469][ T24] smsc95xx v2.0.0 [ 939.796759][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 939.814196][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 940.074352][T14388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1886'. [ 940.085052][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 940.135938][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 940.780339][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 940.818254][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 940.818269][ T30] audit: type=1400 audit(2000000513.764:1099): avc: denied { create } for pid=14399 comm="syz.2.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 940.933651][ T30] audit: type=1400 audit(2000000513.794:1100): avc: denied { write } for pid=14399 comm="syz.2.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 942.988182][T14412] No source specified [ 942.993830][ T30] audit: type=1400 audit(2000000515.934:1101): avc: denied { create } for pid=14411 comm="syz.4.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 943.101031][ T30] audit: type=1400 audit(2000000515.964:1102): avc: denied { bind } for pid=14411 comm="syz.4.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 943.120686][ T30] audit: type=1400 audit(2000000515.964:1103): avc: denied { setopt } for pid=14411 comm="syz.4.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 943.145531][ T30] audit: type=1400 audit(2000000515.964:1104): avc: denied { accept } for pid=14411 comm="syz.4.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 943.174210][ T10] usb 4-1: USB disconnect, device number 17 [ 943.736677][ T30] audit: type=1400 audit(2000000515.964:1105): avc: denied { write } for pid=14411 comm="syz.4.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 943.839858][ T30] audit: type=1400 audit(2000000515.964:1106): avc: denied { unlink } for pid=14411 comm="syz.4.1891" name="#1f" dev="tmpfs" ino=2014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 943.865334][ T30] audit: type=1400 audit(2000000515.964:1107): avc: denied { mount } for pid=14411 comm="syz.4.1891" name="/" dev="overlay" ino=2009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 943.990288][T14420] ubi31: detaching mtd0 [ 944.012724][ T30] audit: type=1400 audit(2000000515.974:1108): avc: denied { connect } for pid=14411 comm="syz.4.1891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 946.146398][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 946.146416][ T30] audit: type=1400 audit(2000000518.735:1113): avc: denied { read append } for pid=14433 comm="syz.4.1897" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 946.522156][T14420] ubi31: mtd0 is detached [ 946.543506][ T30] audit: type=1400 audit(2000000518.765:1114): avc: denied { open } for pid=14433 comm="syz.4.1897" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 946.570393][ T30] audit: type=1400 audit(2000000518.955:1115): avc: denied { map } for pid=14433 comm="syz.4.1897" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 946.605660][ T30] audit: type=1400 audit(2000000518.985:1116): avc: denied { read write } for pid=14433 comm="syz.4.1897" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 946.786894][ T30] audit: type=1400 audit(2000000519.065:1117): avc: denied { execute } for pid=14433 comm="syz.4.1897" path="/362/net_prio.prioidx" dev="tmpfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 946.876566][ T9714] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 947.356497][ T9714] usb 4-1: Using ep0 maxpacket: 32 [ 948.348463][ T30] audit: type=1400 audit(2000000521.095:1118): avc: denied { watch } for pid=14431 comm="syz.3.1896" path="/359/control" dev="tmpfs" ino=1971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 950.823216][ T30] audit: type=1400 audit(2000000522.645:1119): avc: denied { firmware_load } for pid=14470 comm="syz.0.1904" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 951.052528][ T9714] usb 4-1: unable to get BOS descriptor or descriptor too short [ 951.061076][ T9714] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 951.068892][ T9714] usb 4-1: can't read configurations, error -71 [ 951.090351][ T30] audit: type=1400 audit(2000000524.025:1120): avc: denied { create } for pid=14477 comm="syz.3.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 951.157679][ T30] audit: type=1400 audit(2000000524.055:1121): avc: denied { ioctl } for pid=14477 comm="syz.3.1905" path="socket:[45732]" dev="sockfs" ino=45732 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 952.263057][ T30] audit: type=1400 audit(2000000524.075:1122): avc: denied { create } for pid=14483 comm="syz.2.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 952.283000][ T30] audit: type=1400 audit(2000000524.245:1123): avc: denied { read write } for pid=14481 comm="syz.4.1907" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 952.306618][ T30] audit: type=1400 audit(2000000524.245:1124): avc: denied { open } for pid=14481 comm="syz.4.1907" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 952.336292][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1905'. [ 952.496166][ T30] audit: type=1400 audit(2000000525.225:1125): avc: denied { mount } for pid=14483 comm="syz.2.1908" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 952.519379][ T30] audit: type=1400 audit(2000000525.235:1126): avc: denied { write } for pid=14483 comm="syz.2.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 952.539216][ T30] audit: type=1400 audit(2000000525.235:1127): avc: denied { setopt } for pid=14483 comm="syz.2.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 952.560514][T14488] Failed to initialize the IGMP autojoin socket (err -2) [ 952.697309][ T30] audit: type=1400 audit(2000000525.275:1128): avc: denied { setopt } for pid=14477 comm="syz.3.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 952.725858][ T30] audit: type=1400 audit(2000000525.275:1129): avc: denied { shutdown } for pid=14477 comm="syz.3.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 953.129256][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1911'. [ 953.214625][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'. [ 953.223689][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'. [ 953.254400][ T30] audit: type=1400 audit(2000000525.435:1130): avc: denied { sys_module } for pid=14479 comm="syz.0.1906" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 954.535610][T14508] lo: entered promiscuous mode [ 954.964857][T14508] tunl0: entered promiscuous mode [ 954.997470][T14508] gre0: entered promiscuous mode [ 955.025335][T14508] gretap0: entered promiscuous mode [ 955.553019][T14530] netlink: 'syz.4.1916': attribute type 4 has an invalid length. [ 955.981356][T14508] erspan0: entered promiscuous mode [ 955.991999][T14508] ip_vti0: entered promiscuous mode [ 956.000731][T14508] ip6_vti0: entered promiscuous mode [ 956.013296][T14508] sit0: entered promiscuous mode [ 956.120302][T14508] ip6tnl0: entered promiscuous mode [ 956.342207][T14508] ip6gre0: entered promiscuous mode [ 956.348446][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 956.348457][ T30] audit: type=1400 audit(2000000529.295:1137): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 956.883952][T14508] syz_tun: entered promiscuous mode [ 956.901178][T14508] ip6gretap0: entered promiscuous mode [ 956.935184][ T30] audit: type=1400 audit(2000000529.875:1138): avc: denied { create } for pid=14542 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 956.961637][T14508] vcan0: entered promiscuous mode [ 956.970559][T14508] bond0: entered promiscuous mode [ 956.975645][T14508] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 957.019004][ T30] audit: type=1400 audit(2000000529.965:1139): avc: denied { setopt } for pid=14542 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 957.046304][T14508] team0: entered promiscuous mode [ 957.061886][T14508] dummy0: entered promiscuous mode [ 957.074599][T14508] nlmon0: entered promiscuous mode [ 957.089230][T14508] caif0: entered promiscuous mode [ 957.210682][ T30] audit: type=1400 audit(2000000530.145:1140): avc: denied { create } for pid=14542 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 957.231303][ T30] audit: type=1400 audit(2000000530.145:1141): avc: denied { write } for pid=14542 comm="syz.2.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 957.255160][T14508] veth0: entered promiscuous mode [ 957.265528][T14508] veth1: entered promiscuous mode [ 957.471836][T14508] wg0: entered promiscuous mode [ 958.002518][T14508] wg1: entered promiscuous mode [ 958.031454][T14508] wg2: entered promiscuous mode [ 958.058409][T14508] veth0_to_bridge: entered promiscuous mode [ 958.068367][T14508] bridge_slave_0: entered promiscuous mode [ 958.078254][T14508] veth1_to_bridge: entered promiscuous mode [ 958.124194][T14508] bridge_slave_1: entered promiscuous mode [ 958.138768][T14508] veth0_to_bond: entered promiscuous mode [ 958.155539][T14508] bond_slave_0: entered promiscuous mode [ 958.163666][T14508] veth1_to_bond: entered promiscuous mode [ 958.184311][T14508] bond_slave_1: entered promiscuous mode [ 958.192407][T14508] veth0_to_team: entered promiscuous mode [ 958.272592][T14508] team_slave_0: entered promiscuous mode [ 958.282788][T14508] veth1_to_team: entered promiscuous mode [ 958.297802][T14508] team_slave_1: entered promiscuous mode [ 958.846399][T14508] veth0_to_batadv: entered promiscuous mode [ 958.951843][T14508] batadv_slave_0: entered promiscuous mode [ 958.967486][T14508] veth1_to_batadv: entered promiscuous mode [ 958.975497][T14508] batadv_slave_1: entered promiscuous mode [ 958.984777][T14508] xfrm0: entered promiscuous mode [ 958.991728][T14508] veth0_to_hsr: entered promiscuous mode [ 959.056048][T14562] ALSA: mixer_oss: invalid index 40000 [ 959.072402][ T30] audit: type=1400 audit(2000000532.015:1142): avc: denied { create } for pid=14559 comm="syz.2.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 959.539714][T14508] veth1_to_hsr: entered promiscuous mode [ 959.551158][T14508] hsr0: entered promiscuous mode [ 959.558425][T14508] veth1_virt_wifi: entered promiscuous mode [ 959.567780][T14508] veth0_virt_wifi: entered promiscuous mode [ 959.575391][T14508] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 959.591867][T14508] vlan0: entered promiscuous mode [ 959.599139][T14508] vlan1: entered promiscuous mode [ 959.605012][T14508] macvlan0: entered promiscuous mode [ 959.612139][T14508] macvlan1: entered promiscuous mode [ 959.619492][T14508] ipvlan0: entered promiscuous mode [ 959.624862][T14508] ipvlan1: entered promiscuous mode [ 959.648002][T14508] macvtap0: entered promiscuous mode [ 959.657066][T14508] macsec0: entered promiscuous mode [ 959.669231][T14508] geneve0: entered promiscuous mode [ 959.687609][T14508] geneve1: entered promiscuous mode [ 959.694915][T14508] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 959.707607][T14508] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 959.717314][T14508] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 959.730606][T14508] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 959.830979][T14508] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 959.838719][T14508] pimreg3: entered promiscuous mode [ 959.845927][T14508] sit1: entered promiscuous mode [ 959.863240][T14508] gretap1: entered promiscuous mode [ 959.868781][T14508] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 959.876394][T14508] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 960.343735][T14508] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.353404][T14508] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.363757][T14508] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.373185][T14508] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.384037][T14508] syztnl1: entered promiscuous mode [ 960.462320][ T92] wg0 speed is unknown, defaulting to 1000 [ 960.472192][ T92] syz2: Port: 1 Link DOWN [ 960.685559][ T5883] lo speed is unknown, defaulting to 1000 [ 960.691644][ T5883] sz1: Port: 1 Link DOWN [ 960.713604][ T30] audit: type=1400 audit(2000000533.655:1143): avc: denied { create } for pid=14576 comm="syz.0.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 960.753135][ T24] wg0 speed is unknown, defaulting to 1000 [ 960.767190][T14576] delete_channel: no stack [ 960.772130][ T24] lo speed is unknown, defaulting to 1000 [ 960.802750][ T30] audit: type=1400 audit(2000000533.705:1144): avc: denied { create } for pid=14576 comm="syz.0.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 960.803236][T14572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50630 sclass=netlink_route_socket pid=14572 comm=syz.4.1927 [ 960.837905][ T30] audit: type=1400 audit(2000000533.715:1145): avc: denied { setopt } for pid=14576 comm="syz.0.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 961.053866][T14582] ubi31: attaching mtd0 [ 961.064948][T14582] ubi31: scanning is finished [ 961.481092][T14586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1927'. [ 961.530196][T14586] netlink: 'syz.4.1927': attribute type 10 has an invalid length. [ 961.538241][T14586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1927'. [ 961.821481][ T30] audit: type=1400 audit(2000000534.766:1146): avc: denied { create } for pid=14573 comm="syz.1.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 961.847711][T14582] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 961.855270][T14582] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 961.862607][T14582] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 961.869615][T14582] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 961.877077][T14582] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 961.883908][T14582] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 961.891959][T14582] ubi31: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1411690517 [ 961.902061][T14582] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 961.912108][T14588] ubi31: background thread "ubi_bgt31d" started, PID 14588 [ 962.839220][T14597] fuseblk: Bad value for 'user_id' [ 962.844449][T14597] fuseblk: Bad value for 'user_id' [ 962.866565][ T30] audit: type=1400 audit(2000000535.816:1147): avc: denied { write } for pid=14596 comm="syz.4.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 964.356986][ T30] audit: type=1400 audit(2000000537.306:1148): avc: denied { setopt } for pid=14612 comm="syz.3.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 965.858809][ T30] audit: type=1400 audit(2000000538.746:1149): avc: denied { map } for pid=14627 comm="syz.2.1941" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 966.011830][ T30] audit: type=1400 audit(2000000538.796:1150): avc: denied { bind } for pid=14627 comm="syz.2.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 968.665848][T14659] sit0: left promiscuous mode [ 970.647053][T14683] Failed to initialize the IGMP autojoin socket (err -2) [ 971.118699][T14691] veth0_vlan: entered allmulticast mode [ 971.154467][T14691] Failed to initialize the IGMP autojoin socket (err -2) [ 972.033122][T14697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50630 sclass=netlink_route_socket pid=14697 comm=syz.1.1957 [ 972.083879][T14697] netlink: 'syz.1.1957': attribute type 10 has an invalid length. [ 972.091915][T14697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1957'. [ 973.619561][T14723] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1963'. [ 973.628594][T14723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 973.814870][ T5883] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 974.909279][ T30] audit: type=1400 audit(2000000547.826:1151): avc: denied { setopt } for pid=14717 comm="syz.3.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 975.033074][T14719] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1962'. [ 975.544791][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 975.559643][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 975.571052][ T5883] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 975.586793][ T5883] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 975.768396][ T5883] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 975.778619][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.787209][ T5883] usb 3-1: Product: syz [ 975.796631][ T5883] usb 3-1: Manufacturer: syz [ 975.801328][ T5883] usb 3-1: SerialNumber: syz [ 977.185291][ T5883] usb 3-1: config 0 descriptor?? [ 977.775076][ T30] audit: type=1400 audit(2000000550.356:1152): avc: denied { read } for pid=14743 comm="syz.4.1968" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 978.133158][ T30] audit: type=1400 audit(2000000550.356:1153): avc: denied { open } for pid=14743 comm="syz.4.1968" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 978.162953][ T30] audit: type=1400 audit(2000000551.016:1154): avc: denied { ioctl } for pid=14747 comm="syz.1.1970" path="socket:[47284]" dev="sockfs" ino=47284 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 978.193987][ T30] audit: type=1400 audit(2000000551.076:1155): avc: denied { create } for pid=14747 comm="syz.1.1970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 978.213868][ T30] audit: type=1400 audit(2000000551.076:1156): avc: denied { ioctl } for pid=14747 comm="syz.1.1970" path="socket:[46941]" dev="sockfs" ino=46941 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 978.312762][T14759] Invalid source name [ 978.365437][T14759] UBIFS error (pid: 14759): cannot open "ubifs", error -22 [ 978.923179][ T5883] usb 3-1: can't set config #0, error -71 [ 978.958814][ T5883] usb 3-1: USB disconnect, device number 19 [ 980.551489][ T30] audit: type=1400 audit(2000000553.447:1157): avc: denied { ioctl } for pid=14779 comm="syz.2.1976" path="socket:[46993]" dev="sockfs" ino=46993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 980.608619][ T30] audit: type=1400 audit(2000000553.557:1158): avc: denied { bind } for pid=14779 comm="syz.2.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 980.646987][ T30] audit: type=1400 audit(2000000553.557:1159): avc: denied { write } for pid=14779 comm="syz.2.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 982.837750][ T30] audit: type=1400 audit(2000000555.267:1160): avc: denied { bind } for pid=14793 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 982.893251][T14808] trusted_key: syz.2.1980 sent an empty control message without MSG_MORE. [ 982.939373][T14810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14810 comm=syz.0.1982 [ 982.951866][ T30] audit: type=1400 audit(2000000555.267:1161): avc: denied { listen } for pid=14793 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 982.951906][ T30] audit: type=1400 audit(2000000555.277:1162): avc: denied { connect } for pid=14793 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 982.995792][T14811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1982'. [ 983.214376][ T30] audit: type=1400 audit(2000000555.287:1163): avc: denied { write } for pid=14793 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 983.320014][ T30] audit: type=1400 audit(2000000555.287:1164): avc: denied { setopt } for pid=14793 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 983.393979][T14810] vlan2: entered allmulticast mode [ 983.408068][T14810] bond1: entered allmulticast mode [ 983.932241][ T30] audit: type=1400 audit(2000000556.427:1165): avc: denied { accept } for pid=14813 comm="syz.3.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 983.993584][T14823] cgroup: No subsys list or none specified [ 984.131745][T14823] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14823 comm=syz.1.1985 [ 985.488195][T14837] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1988'. [ 985.497344][T14837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 987.199806][T14855] ip6erspan0: entered allmulticast mode [ 987.598758][ T30] audit: type=1400 audit(2000000560.547:1166): avc: denied { write } for pid=14856 comm="syz.4.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 987.870324][T14859] syz.4.1994 (14859) used obsolete PPPIOCDETACH ioctl [ 987.879881][T14859] binder: 14856:14859 ioctl c0306201 200000000540 returned -22 [ 988.084826][ T30] audit: type=1400 audit(2000000560.797:1167): avc: denied { read } for pid=14856 comm="syz.4.1994" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 988.159268][ T30] audit: type=1400 audit(2000000560.797:1168): avc: denied { open } for pid=14856 comm="syz.4.1994" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 988.223798][ T30] audit: type=1400 audit(2000000560.797:1169): avc: denied { ioctl } for pid=14856 comm="syz.4.1994" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 988.498220][ T30] audit: type=1400 audit(2000000560.837:1170): avc: denied { create } for pid=14856 comm="syz.4.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 988.519879][ T30] audit: type=1400 audit(2000000560.837:1171): avc: denied { bind } for pid=14856 comm="syz.4.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 988.541233][ T30] audit: type=1400 audit(2000000560.837:1172): avc: denied { listen } for pid=14856 comm="syz.4.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 989.539038][ T30] audit: type=1400 audit(2000000562.477:1173): avc: denied { create } for pid=14870 comm="syz.4.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 989.929591][ T30] audit: type=1400 audit(2000000562.617:1174): avc: denied { setopt } for pid=14879 comm="syz.2.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 990.556380][ T30] audit: type=1400 audit(2000000563.457:1175): avc: denied { connect } for pid=14870 comm="syz.4.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 992.457293][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.463659][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.733429][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 994.733447][ T30] audit: type=1400 audit(2000000567.667:1177): avc: denied { read } for pid=14899 comm="syz.2.2006" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 994.766461][ T30] audit: type=1400 audit(2000000567.667:1178): avc: denied { open } for pid=14899 comm="syz.2.2006" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 995.192040][T14907] netlink: 'syz.3.2008': attribute type 33 has an invalid length. [ 995.199888][T14907] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2008'. [ 995.523759][T14921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 995.565363][T14921] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2009'. [ 995.578311][T14921] siw: device registration error -23 [ 995.584887][T14921] smc: removing ib device syz2 [ 996.381535][T14921] ------------[ cut here ]------------ [ 996.387063][T14921] WARNING: CPU: 0 PID: 14921 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 996.397872][T14921] Modules linked in: [ 996.401928][T14921] CPU: 0 UID: 0 PID: 14921 Comm: syz.2.2009 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 996.414037][T14921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 996.424118][T14921] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 996.429585][T14921] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 f5 51 0a f9 e8 f0 51 0a f9 90 <0f> 0b 90 5b e9 e6 51 0a f9 e8 e1 2d 71 f9 eb da 66 66 2e 0f 1f 84 [ 996.449280][T14921] RSP: 0018:ffffc9001ec9f1f0 EFLAGS: 00010246 [ 996.455359][T14921] RAX: 0000000000080000 RBX: ffff888036509320 RCX: ffffc9000c909000 [ 996.463343][T14921] RDX: 0000000000080000 RSI: ffffffff88b1ceb0 RDI: ffff8880365093a0 [ 996.471353][T14921] RBP: ffffffff88b03360 R08: 0000000000000005 R09: 0000000000000001 [ 996.479369][T14921] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888036508668 [ 996.487368][T14921] R13: ffff888036507fe0 R14: ffff888036507fe0 R15: ffff888036509080 [ 996.495377][T14921] FS: 00007f5df58846c0(0000) GS:ffff888124717000(0000) knlGS:0000000000000000 [ 996.504335][T14921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 996.510927][T14921] CR2: 00007f9a74a4df00 CR3: 0000000076142000 CR4: 00000000003526f0 [ 996.518910][T14921] Call Trace: [ 996.522184][T14921] [ 996.525125][T14921] rxe_dealloc+0x25/0xc0 [ 996.529368][T14921] ib_dealloc_device+0x46/0x230 [ 996.534232][T14921] __ib_unregister_device+0x396/0x480 [ 996.539619][T14921] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 996.545528][T14921] ib_unregister_device_and_put+0x5a/0x80 [ 996.551243][T14921] nldev_dellink+0x21f/0x320 [ 996.555844][T14921] ? __pfx_nldev_dellink+0x10/0x10 [ 996.560989][T14921] ? cap_capable+0xb3/0x250 [ 996.565510][T14921] ? bpf_lsm_capable+0x9/0x10 [ 996.570191][T14921] ? security_capable+0x7e/0x260 [ 996.575139][T14921] ? ns_capable+0xd7/0x110 [ 996.579553][T14921] ? __pfx_nldev_dellink+0x10/0x10 [ 996.584676][T14921] rdma_nl_rcv_msg+0x387/0x6e0 [ 996.589459][T14921] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 996.594787][T14921] ? __lock_acquire+0x622/0x1c90 [ 996.599737][T14921] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 996.606217][T14921] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 996.613175][T14921] ? netlink_deliver_tap+0x1ae/0xd30 [ 996.618497][T14921] ? is_vmalloc_addr+0x86/0xa0 [ 996.623269][T14921] netlink_unicast+0x53a/0x7f0 [ 996.628050][T14921] ? __pfx_netlink_unicast+0x10/0x10 [ 996.633338][T14921] netlink_sendmsg+0x8d1/0xdd0 [ 996.638109][T14921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.643400][T14921] ____sys_sendmsg+0xa95/0xc70 [ 996.648183][T14921] ? copy_msghdr_from_user+0x10a/0x160 [ 996.653669][T14921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 996.658958][T14921] ? __pfx_futex_wake_mark+0x10/0x10 [ 996.664254][T14921] ___sys_sendmsg+0x134/0x1d0 [ 996.668932][T14921] ? __pfx____sys_sendmsg+0x10/0x10 [ 996.674139][T14921] ? __lock_acquire+0x622/0x1c90 [ 996.679088][T14921] __sys_sendmsg+0x16d/0x220 [ 996.683690][T14921] ? __pfx___sys_sendmsg+0x10/0x10 [ 996.688798][T14921] ? __x64_sys_futex+0x1e0/0x4c0 [ 996.693753][T14921] do_syscall_64+0xcd/0x4c0 [ 996.698253][T14921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.704156][T14921] RIP: 0033:0x7f5df498e929 [ 996.708583][T14921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.728334][T14921] RSP: 002b:00007f5df5884038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 996.736760][T14921] RAX: ffffffffffffffda RBX: 00007f5df4bb5fa0 RCX: 00007f5df498e929 [ 996.744833][T14921] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 996.752829][T14921] RBP: 00007f5df4a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 996.760854][T14921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 996.768859][T14921] R13: 0000000000000000 R14: 00007f5df4bb5fa0 R15: 00007fff1dafb078 [ 996.776865][T14921] [ 996.779877][T14921] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 996.787130][T14921] CPU: 0 UID: 0 PID: 14921 Comm: syz.2.2009 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(full) [ 996.799161][T14921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 996.809187][T14921] Call Trace: [ 996.812441][T14921] [ 996.815348][T14921] dump_stack_lvl+0x3d/0x1f0 [ 996.819918][T14921] panic+0x71c/0x800 [ 996.823795][T14921] ? __pfx_panic+0x10/0x10 [ 996.828190][T14921] ? show_trace_log_lvl+0x29b/0x3e0 [ 996.833371][T14921] ? rxe_pool_cleanup+0x41/0x60 [ 996.838199][T14921] check_panic_on_warn+0xab/0xb0 [ 996.843109][T14921] __warn+0xf6/0x3c0 [ 996.846975][T14921] ? rxe_pool_cleanup+0x41/0x60 [ 996.851818][T14921] report_bug+0x3c3/0x580 [ 996.856123][T14921] ? rxe_pool_cleanup+0x41/0x60 [ 996.860951][T14921] handle_bug+0x184/0x210 [ 996.865255][T14921] exc_invalid_op+0x17/0x50 [ 996.869731][T14921] asm_exc_invalid_op+0x1a/0x20 [ 996.874554][T14921] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 996.879990][T14921] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 f5 51 0a f9 e8 f0 51 0a f9 90 <0f> 0b 90 5b e9 e6 51 0a f9 e8 e1 2d 71 f9 eb da 66 66 2e 0f 1f 84 [ 996.899569][T14921] RSP: 0018:ffffc9001ec9f1f0 EFLAGS: 00010246 [ 996.905611][T14921] RAX: 0000000000080000 RBX: ffff888036509320 RCX: ffffc9000c909000 [ 996.913555][T14921] RDX: 0000000000080000 RSI: ffffffff88b1ceb0 RDI: ffff8880365093a0 [ 996.921499][T14921] RBP: ffffffff88b03360 R08: 0000000000000005 R09: 0000000000000001 [ 996.929441][T14921] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888036508668 [ 996.937383][T14921] R13: ffff888036507fe0 R14: ffff888036507fe0 R15: ffff888036509080 [ 996.945328][T14921] ? __pfx_rxe_dealloc+0x10/0x10 [ 996.950243][T14921] ? rxe_pool_cleanup+0x40/0x60 [ 996.955072][T14921] rxe_dealloc+0x25/0xc0 [ 996.959289][T14921] ib_dealloc_device+0x46/0x230 [ 996.964131][T14921] __ib_unregister_device+0x396/0x480 [ 996.969481][T14921] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 996.975349][T14921] ib_unregister_device_and_put+0x5a/0x80 [ 996.981042][T14921] nldev_dellink+0x21f/0x320 [ 996.985607][T14921] ? __pfx_nldev_dellink+0x10/0x10 [ 996.990727][T14921] ? cap_capable+0xb3/0x250 [ 996.995205][T14921] ? bpf_lsm_capable+0x9/0x10 [ 996.999856][T14921] ? security_capable+0x7e/0x260 [ 997.004768][T14921] ? ns_capable+0xd7/0x110 [ 997.009158][T14921] ? __pfx_nldev_dellink+0x10/0x10 [ 997.014245][T14921] rdma_nl_rcv_msg+0x387/0x6e0 [ 997.018987][T14921] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 997.024251][T14921] ? __lock_acquire+0x622/0x1c90 [ 997.029170][T14921] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 997.035575][T14921] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 997.042510][T14921] ? netlink_deliver_tap+0x1ae/0xd30 [ 997.047783][T14921] ? is_vmalloc_addr+0x86/0xa0 [ 997.052531][T14921] netlink_unicast+0x53a/0x7f0 [ 997.057285][T14921] ? __pfx_netlink_unicast+0x10/0x10 [ 997.062555][T14921] netlink_sendmsg+0x8d1/0xdd0 [ 997.067300][T14921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 997.072567][T14921] ____sys_sendmsg+0xa95/0xc70 [ 997.077310][T14921] ? copy_msghdr_from_user+0x10a/0x160 [ 997.082750][T14921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 997.088020][T14921] ? __pfx_futex_wake_mark+0x10/0x10 [ 997.093292][T14921] ___sys_sendmsg+0x134/0x1d0 [ 997.097949][T14921] ? __pfx____sys_sendmsg+0x10/0x10 [ 997.103124][T14921] ? __lock_acquire+0x622/0x1c90 [ 997.108054][T14921] __sys_sendmsg+0x16d/0x220 [ 997.112621][T14921] ? __pfx___sys_sendmsg+0x10/0x10 [ 997.117710][T14921] ? __x64_sys_futex+0x1e0/0x4c0 [ 997.122639][T14921] do_syscall_64+0xcd/0x4c0 [ 997.127123][T14921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.133004][T14921] RIP: 0033:0x7f5df498e929 [ 997.137396][T14921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.156995][T14921] RSP: 002b:00007f5df5884038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 997.165409][T14921] RAX: ffffffffffffffda RBX: 00007f5df4bb5fa0 RCX: 00007f5df498e929 [ 997.173386][T14921] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 997.181338][T14921] RBP: 00007f5df4a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 997.189374][T14921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.197337][T14921] R13: 0000000000000000 R14: 00007f5df4bb5fa0 R15: 00007fff1dafb078 [ 997.205293][T14921] [ 997.208483][T14921] Kernel Offset: disabled [ 997.212784][T14921] Rebooting in 86400 seconds..