last executing test programs: 14.557921964s ago: executing program 0 (id=183): r0 = socket(0x2, 0x80805, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x46, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x375040, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000100000000000000000000009700010000000000950000000000000014139e770a1a895d056b9059459dc8cdb8e1e16df84c6078d252babfb2b887d9dda6081d042a1d12eadf51af5a06fdffe01999004f576bd7b3419f785ab0280e175ef2fef17f8c70657489f234768c9fb66ec1e2c06166dab784e3278bb16524e0ed2daed32c9dc756e3c7acd28d5896e726684c7c73d36adbb68f00dca691a453a28b34b61bc26effd60c3046b31a5d9c2d1525848a3be8e0"], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x4, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x3e3, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x100, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0xb, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 13.351312127s ago: executing program 0 (id=187): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00001ae000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180)=0xba9b, 0x401, 0x3) accept4$tipc(0xffffffffffffffff, &(0x7f0000000280)=@id, &(0x7f0000000240)=0x10, 0x80c00) r4 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x1fe, 0x0, 0x10}) bind$tipc(r4, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 13.339144619s ago: executing program 4 (id=188): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) syz_open_dev$vim2m(0x0, 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) 12.636096732s ago: executing program 2 (id=189): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, 0xfffffffffffffffd) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind(r5, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x31, &(0x7f0000000100)=""/49, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0xe, 0xb}, {0x3, 0x4, 0x0, 0x3}], 0x10, 0x2}, 0x94) socket$key(0xf, 0x3, 0x2) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f00003d3000/0x4000)=nil, 0x4000, 0x2, 0x12, r9, 0x95b53000) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) 12.208024671s ago: executing program 4 (id=190): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x100000000) userfaultfd(0x80001) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000040)=0x53c6) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000380)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'bond0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0x8, './file0\x00'}}) ioctl$TIOCGPTPEER(r4, 0x5441, 0x9) ioctl$TCSETAW(r4, 0x5407, 0x0) 11.636991877s ago: executing program 4 (id=192): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default use\x00\x00\x00\x00\x00\x00\x00\x00000000000000004093\x00'], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000200)={'wlan1\x00', @remote}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) 11.571890463s ago: executing program 2 (id=193): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x11}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$ARCH_SHSTK_LOCK(0x1e, r3, 0x2, 0x5003) setns(0xffffffffffffffff, 0x80) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000005000400850000004f000100187b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x46}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x40004) syz_open_procfs$pagemap(0x0, 0x0) mmap(&(0x7f00003d6000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0x9cba4000) r8 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x6}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, 0x0) 9.025358092s ago: executing program 0 (id=199): ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0)) lsetxattr(0x0, &(0x7f0000000180)=@known='com.apple.system.Security\x00', &(0x7f00000001c0)='/proc/cpuinfo\x00', 0xe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) setsockopt$inet_opts(r3, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) r7 = gettid() syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r8, r9, 0x0, &(0x7f0000000000)) syz_clone3(&(0x7f00000006c0)={0x2000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x2}, &(0x7f0000000500)=""/240, 0xf0, &(0x7f0000000600)=""/129, &(0x7f00000003c0)=[r0, r0, r0, r0, r7, r0], 0x6}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x223}}, './file1\x00'}) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 9.024334522s ago: executing program 4 (id=200): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'gre0\x00', 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4000050, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r4, &(0x7f0000000040), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='net/softnet_stat\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x65, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f00009b3000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r11, 0x10f, 0x80, &(0x7f0000000200)=0x8001, 0x4) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000400)) socket(0x400000000010, 0x3, 0x0) 7.866534195s ago: executing program 0 (id=202): socket$inet6(0xa, 0x2, 0x0) capset(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = getpid() prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(r2, 0x7, &(0x7f0000000140)={0x10000000008, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4, 0x80000000}}, './file0\x00'}) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r9, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac1414aa050013"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmmsg$inet(r7, &(0x7f0000001580)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @remote}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r0}) r10 = socket(0x10, 0x3, 0x0) write(r10, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x5}, 0x20) 7.79374915s ago: executing program 2 (id=203): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, 0xfffffffffffffffd) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind(r5, 0x0, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x5, 0x31, &(0x7f0000000100)=""/49, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0xe, 0xb}, {0x3, 0x4, 0x0, 0x3}], 0x10, 0x2}, 0x94) socket$key(0xf, 0x3, 0x2) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r8, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f00003d3000/0x4000)=nil, 0x4000, 0x2, 0x12, r9, 0x95b53000) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) 6.515838847s ago: executing program 1 (id=205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x14, 0x4, 0x6, 0x3, 0x0, 0x0, {0x4, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4050) sendmsg$unix(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)="02237d3c053c0be4047da815e0a21855483ffc825e4356b9104ff63230f8c0be6963d1d7c11496ebbb", 0x29}], 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1101, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r0}, @fda, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/14, 0xe, 0x1, 0x11}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x1000000000000, 0x0}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r6, &(0x7f0000002900)=[{&(0x7f0000000100)="ec53", 0x2}], 0x1) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r7, 0x540b, 0x1) semctl$GETALL(0x0, 0x0, 0xd, 0x0) 6.372694221s ago: executing program 2 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04a2f7"], 0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) r8 = dup(r5) r9 = inotify_init() fcntl$setstatus(r9, 0x4, 0x42800) fsopen(0x0, 0x1) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@ignoreqv}, {@privport}, {@access_uid}, {@loose}, {@access_user}, {@privport}, {@version_L}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x1}}, {@afid={'afid', 0x3d, 0x8}}]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) ioctl$KDADDIO(r5, 0x4b34, 0x3) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000600)=@mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x24}, @broadcast, @device_b, @initial, {0x8, 0x6}, @value=@ver_80211n={0x0, 0x7, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x48, 0x5, @broadcast, {0x0, 0xd, @random="f682811c6e60dfe009843781c5"}, @val={0x1, 0x2, [{0x3, 0x1}, {0x18}]}, @void, [{0xdd, 0xa4, "ab259e69e27a6e35cf4810a32e5e1bb631c48d5e671f1b5966a4dd0f165677567b6f31c6e5cb7c3c25f27dd68d1c35b9dee1d965a68c186a09f08a71df69ccde6ba4218f137d1f5f86929d37e21543467969aef4d334de111209fe41b7a0f295d360989307c25bfb0b8922ff64855232472557e85d3c199ab62df85d658f38cae48013b9807b47e47a4ebfb8f36bd8cb3a9de537b6e21a967a4f83b8dda17b8b20f40a36"}]}, 0xdf) 4.573092085s ago: executing program 2 (id=208): ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) setsockopt$inet_opts(r3, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x9, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) syz_io_uring_setup(0x9a, &(0x7f0000000480)={0x0, 0x5c46, 0x100, 0x7ffd, 0x1e3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r7, r8, 0x0, &(0x7f0000000000)) syz_clone3(&(0x7f00000006c0)={0x2000, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x2}, &(0x7f0000000500)=""/240, 0xf0, &(0x7f0000000600)=""/129, &(0x7f00000003c0)=[r0, r0, r0, r0, r0], 0x5}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r6, {0x223}}, './file1\x00'}) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 4.571021928s ago: executing program 3 (id=209): socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) chroot(&(0x7f0000000100)='./file0\x00') recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4008}, 0x4080) close_range(0xffffffffffffffff, r3, 0x2) syz_genetlink_get_family_id$nl80211(0x0, r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x1005) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) unlink(&(0x7f0000000280)='./file0\x00') ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1) 3.255586098s ago: executing program 3 (id=210): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setrlimit(0x9, &(0x7f0000000040)={0x7, 0x67}) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @empty, 0x8}, 0x1c) memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) sendfile(r2, r3, 0x0, 0xd39a) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r4, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x80009, 0x10000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x204c00c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x1000000, 0x0, 0x24004821}, 0x0) 3.171277481s ago: executing program 4 (id=211): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default use\x00\x00\x00\x00\x00\x00\x00\x00000000000000004093\x00'], 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000200)={'wlan1\x00', @remote}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) 3.108459335s ago: executing program 1 (id=212): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r3, 0x1) syz_open_dev$vim2m(0x0, 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) 2.554291291s ago: executing program 0 (id=213): syz_socket_connect_nvme_tcp() symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008847"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$rds(r3, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, 0x0, &(0x7f0000000180)) 1.995780766s ago: executing program 3 (id=214): r0 = socket(0x2, 0x80805, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x46, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x375040, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000100000000000000000000009700010000000000950000000000000014139e770a1a895d056b9059459dc8cdb8e1e16df84c6078d252babfb2b887d9dda6081d042a1d12eadf51af5a06fdffe01999004f576bd7b3419f785ab0280e175ef2fef17f8c70657489f234768c9fb66ec1e2c06166dab784e3278bb16524e0ed2daed32c9dc756e3c7acd28d5896e726684c7c73d36adbb68f00dca691a453a28b34b61bc26effd60c3046b31a5d9c2d1525848a3be8e0"], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x4, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x3e3, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x100, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0xb, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.75987523s ago: executing program 3 (id=215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000001500), 0x0, &(0x7f0000001800), 0x0, 0x880}], 0x1, 0x40000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x4048aec9, &(0x7f0000000980)={0x2, 0x0, @ioapic={0xfee00, 0x0, 0x4, 0x5, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xf, 0x5, 0x9, '\x00', 0x13}, {0x7, 0x3e, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xac}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0xfa, 0x2, '\x00', 0x67}, {0x2, 0x9, 0x2, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0xcc, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x4, 0x0, 0x7, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0xca, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8000, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0xc004004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x10000004, @mcast1, 0x7, 0x1}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000c00)="63e3191fa3fe", 0x6}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b000000280012800900010076657468000000fe0000", @ANYRES32=0x0, @ANYBLOB="00000400a8000100"], 0x48}, 0x1, 0x0, 0x0, 0x4004004}, 0x8080) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x84) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe) syz_usb_connect(0x0, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002c9cb8e102d1510030a3b0102030109022a0001010400030904ce00010e0100040724"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) 1.707271816s ago: executing program 1 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) io_setup(0x8, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0xc0010140, 0x6}}], 0x20}) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe9, 0x0, 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000240)=0x14) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000070000000800000008"], 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched_retired(r9, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {0xa, 0x2}, {0xfff3, 0xffe0}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x516}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f00000003c0)=0x3) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r13, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="080057a2413520251c6d128009000100766c616e000000003000028006000100020000000000001c0004800c00010005000000000800000c000100810000725c202c6234d7d555", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058000000850000000700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.602547971s ago: executing program 0 (id=217): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x1, 0x3, 0x47, 0x100, 0x1, 0x3, 0x5}, 0x1c) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) socket(0x200000000000011, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000080)={0x204801600, &(0x7f00000001c0), 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYRES32=r5], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x30, 0x10, 0x300, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40008a0) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.321422719s ago: executing program 2 (id=218): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x800001, 0x307000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000580)={0x200000, 0x200000, 0x4, 0x10000, 0x7e, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) io_setup(0x2, 0x0) eventfd(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x5f, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b", 0x5f, r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000940)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x7}, {0xa, 0x6}, {0x4, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x7}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80c4}, 0x80) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000014000d042abd700000079fcf998a19f1", @ANYRES32=0x0, @ANYBLOB="21120000000000002000128008000100736974001400028006000d000500000008000300ac1414aa"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="580100001600b30a26bd7000fedbdf25ff010000000000000b00000000000001000000000000000000000000000000004e2300004e2000020a00a0a076000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141438000000000000000000000000000004d533000000ac1414aa0000000000000000000000000000000000000000998a000000000000f9ffffffffffffff03000000000000000200000000000000350000000000000009000000000000000400000000000000fbffffffffffffff0d8600000000000010030000000000000400000000000000ffffff7f08000000d92e00002bbd7000022500000a000001000000000000000003000000ffff000014000d00ffffffff0000000000000000000000006c001200616567697332353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080010000"], 0x158}, 0x1, 0x0, 0x0, 0x44010}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) 1.128194759s ago: executing program 1 (id=219): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200007b0000000000000000dfff00850000007d00000095"], 0x0, 0x10000}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x740, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x4004080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x44) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000140)="0098bb3c76", 0x5, 0xffffffffffffffff) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r7, &(0x7f0000000c40)=ANY=[], 0x13) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_oob_ext_data={{0x6d}, {0x1, "5111da9a7457a67ffdedbbdcc290ce68", "189dfafc96b7d44be99a4495276b6176", "443066f3cbdb393497e0e1458cef9528", "dbdceee8a6350b869ea7cd536261749d"}}}}, 0x47) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x10f4, 0x1a, 0x12, r6, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000100)={0x0, 0xfffffffffffffff2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x0, r10, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0xc, &(0x7f0000000840)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 955.027569ms ago: executing program 3 (id=220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x34, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000001811", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x7fff]) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000001400078008001240000000000500150022000000050005000200000005000100"], 0x64}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 353.246487ms ago: executing program 3 (id=221): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026, r1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x3, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x2000000, @mcast2, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e2fa29c79"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xdddd1000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 195.368757ms ago: executing program 1 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) 175.89571ms ago: executing program 4 (id=223): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) unshare(0x2c020400) open_tree(r3, &(0x7f0000000640)='\x00', 0x9901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x439}, 0x20}}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 1 (id=224): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000000)={0x0, 0x3996, 0x5, 0x1, 0x2}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x860b81) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000280)=""/235) arch_prctl$ARCH_SHSTK_ENABLE(0x5003, 0x2) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000380)={{r2}, 0x8, &(0x7f00000001c0)=[0x1000, 0xffffffffffff7fff, 0x7, 0x7, 0x4, 0x2, 0x0, 0x6c22700a], 0x8000, 0x5}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) write$nbd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000040000900000082b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf70000ff571587e022bda183"], 0x40) r7 = socket(0xa, 0x801, 0x0) getsockopt(r7, 0x29, 0x43, 0x0, &(0x7f0000001ffc)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. [ 51.327489][ T29] audit: type=1400 audit(1776078960.394:62): avc: denied { mounton } for pid=5785 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 51.351061][ T29] audit: type=1400 audit(1776078960.414:63): avc: denied { mount } for pid=5785 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.353553][ T5785] cgroup: Unknown subsys name 'net' [ 51.380985][ T29] audit: type=1400 audit(1776078960.454:64): avc: denied { unmount } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.516238][ T5785] cgroup: Unknown subsys name 'cpuset' [ 51.523907][ T5785] cgroup: Unknown subsys name 'rlimit' [ 51.627388][ T29] audit: type=1400 audit(1776078960.694:65): avc: denied { setattr } for pid=5785 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.666408][ T29] audit: type=1400 audit(1776078960.694:66): avc: denied { create } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.693705][ T29] audit: type=1400 audit(1776078960.694:67): avc: denied { write } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.714347][ T29] audit: type=1400 audit(1776078960.694:68): avc: denied { read } for pid=5785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.736698][ T29] audit: type=1400 audit(1776078960.714:69): avc: denied { mounton } for pid=5785 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.761625][ T29] audit: type=1400 audit(1776078960.714:70): avc: denied { mount } for pid=5785 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.782628][ T5791] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 51.794065][ T29] audit: type=1400 audit(1776078960.864:71): avc: denied { relabelto } for pid=5791 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 52.726841][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.073522][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.082072][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.089553][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.097925][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.106990][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.117189][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.120733][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.131773][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.134131][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.147864][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.155311][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.162754][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.170422][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.170442][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.185734][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.194349][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.198933][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.208570][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.208920][ T5821] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.215904][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.231132][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.238242][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.251369][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.251430][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.266228][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.554489][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 56.554504][ T29] audit: type=1400 audit(1776078965.624:83): avc: denied { module_request } for pid=5808 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.641183][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 56.667926][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 56.736848][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 56.863259][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.870682][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.879777][ T5808] bridge_slave_0: entered allmulticast mode [ 56.888603][ T5808] bridge_slave_0: entered promiscuous mode [ 56.900029][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.907164][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.914328][ T5808] bridge_slave_1: entered allmulticast mode [ 56.921261][ T5808] bridge_slave_1: entered promiscuous mode [ 56.948060][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 56.975198][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.982312][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.989904][ T5810] bridge_slave_0: entered allmulticast mode [ 56.996658][ T5810] bridge_slave_0: entered promiscuous mode [ 57.009506][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.018928][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 57.035599][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.042714][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.050354][ T5810] bridge_slave_1: entered allmulticast mode [ 57.057124][ T5810] bridge_slave_1: entered promiscuous mode [ 57.078781][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.099760][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.106943][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.114144][ T5802] bridge_slave_0: entered allmulticast mode [ 57.120828][ T5802] bridge_slave_0: entered promiscuous mode [ 57.154806][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.161909][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.169606][ T5802] bridge_slave_1: entered allmulticast mode [ 57.176514][ T5802] bridge_slave_1: entered promiscuous mode [ 57.189099][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.199730][ T5808] team0: Port device team_slave_0 added [ 57.224423][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.239920][ T5808] team0: Port device team_slave_1 added [ 57.282994][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.293853][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.334527][ T5810] team0: Port device team_slave_0 added [ 57.340312][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.347712][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.354930][ T5801] bridge_slave_0: entered allmulticast mode [ 57.361686][ T5801] bridge_slave_0: entered promiscuous mode [ 57.369178][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.376452][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.402443][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.421855][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.429191][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.455129][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.473423][ T5810] team0: Port device team_slave_1 added [ 57.479449][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.486668][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.493918][ T5801] bridge_slave_1: entered allmulticast mode [ 57.501016][ T5801] bridge_slave_1: entered promiscuous mode [ 57.521963][ T5802] team0: Port device team_slave_0 added [ 57.529205][ T5802] team0: Port device team_slave_1 added [ 57.547810][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.555229][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.562351][ T5816] bridge_slave_0: entered allmulticast mode [ 57.569556][ T5816] bridge_slave_0: entered promiscuous mode [ 57.577390][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.584830][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.591947][ T5816] bridge_slave_1: entered allmulticast mode [ 57.599171][ T5816] bridge_slave_1: entered promiscuous mode [ 57.647964][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.659728][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.675190][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.682162][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.708329][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.720922][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.743254][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.750253][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.776201][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.787702][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.794818][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.821042][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.833851][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.856305][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.863259][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.889441][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.915174][ T5808] hsr_slave_0: entered promiscuous mode [ 57.921304][ T5808] hsr_slave_1: entered promiscuous mode [ 57.928866][ T5816] team0: Port device team_slave_0 added [ 57.936000][ T5816] team0: Port device team_slave_1 added [ 57.975231][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.982194][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.008389][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.020403][ T5801] team0: Port device team_slave_0 added [ 58.039187][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.046437][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.072339][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.084653][ T5801] team0: Port device team_slave_1 added [ 58.104649][ T5810] hsr_slave_0: entered promiscuous mode [ 58.110590][ T5810] hsr_slave_1: entered promiscuous mode [ 58.116548][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 58.122292][ T5810] Cannot create hsr debugfs directory [ 58.155139][ T5802] hsr_slave_0: entered promiscuous mode [ 58.161422][ T5802] hsr_slave_1: entered promiscuous mode [ 58.168089][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 58.173911][ T5802] Cannot create hsr debugfs directory [ 58.219424][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.226450][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.234551][ T5812] Bluetooth: hci2: command tx timeout [ 58.252923][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.289955][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.297239][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.323328][ T5812] Bluetooth: hci1: command tx timeout [ 58.323720][ T5815] Bluetooth: hci3: command tx timeout [ 58.328808][ T5818] Bluetooth: hci0: command tx timeout [ 58.334837][ T5812] Bluetooth: hci4: command tx timeout [ 58.339875][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.363400][ T5816] hsr_slave_0: entered promiscuous mode [ 58.369511][ T5816] hsr_slave_1: entered promiscuous mode [ 58.375554][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 58.381266][ T5816] Cannot create hsr debugfs directory [ 58.530482][ T5801] hsr_slave_0: entered promiscuous mode [ 58.536689][ T5801] hsr_slave_1: entered promiscuous mode [ 58.542499][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 58.548282][ T5801] Cannot create hsr debugfs directory [ 58.708619][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.727680][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.736603][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.745769][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.810668][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.821674][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.831263][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.845388][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.899594][ T5810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.918412][ T5810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.930972][ T5810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.953640][ T5810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.017649][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.038709][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.049763][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.066716][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.076400][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.111800][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.140520][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.175790][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.185924][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.196951][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.204118][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.213099][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.220187][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.230892][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.239914][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.260315][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.276957][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.284046][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.311132][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.318199][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.330268][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.391025][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.425029][ T29] audit: type=1400 audit(1776078968.484:84): avc: denied { sys_module } for pid=5808 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.465578][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.472680][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.481443][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.488507][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.566893][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.589213][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.638583][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.678717][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.716717][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.723857][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.737517][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.744701][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.754570][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.761674][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.790110][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.797201][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.817775][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.829037][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.880223][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.972501][ T5808] veth0_vlan: entered promiscuous mode [ 60.002819][ T5810] veth0_vlan: entered promiscuous mode [ 60.027796][ T5808] veth1_vlan: entered promiscuous mode [ 60.056889][ T5810] veth1_vlan: entered promiscuous mode [ 60.132330][ T5810] veth0_macvtap: entered promiscuous mode [ 60.156147][ T5808] veth0_macvtap: entered promiscuous mode [ 60.177442][ T5810] veth1_macvtap: entered promiscuous mode [ 60.187394][ T5808] veth1_macvtap: entered promiscuous mode [ 60.272674][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.285387][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.297274][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.306314][ T5815] Bluetooth: hci2: command tx timeout [ 60.317866][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.328186][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.359312][ T107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.370700][ T107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.383908][ T5815] Bluetooth: hci0: command tx timeout [ 60.392101][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.400495][ T5815] Bluetooth: hci3: command tx timeout [ 60.400533][ T5818] Bluetooth: hci1: command tx timeout [ 60.411871][ T5812] Bluetooth: hci4: command tx timeout [ 60.421590][ T107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.430444][ T107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.447498][ T107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.457187][ T107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.486020][ T107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.496413][ T107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.551878][ T5802] veth0_vlan: entered promiscuous mode [ 60.560109][ T5801] veth0_vlan: entered promiscuous mode [ 60.582755][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.593393][ T5802] veth1_vlan: entered promiscuous mode [ 60.593939][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.638473][ T5801] veth1_vlan: entered promiscuous mode [ 60.671367][ T5816] veth0_vlan: entered promiscuous mode [ 60.677724][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.694413][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.707011][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.715476][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.731901][ T5802] veth0_macvtap: entered promiscuous mode [ 60.749483][ T5816] veth1_vlan: entered promiscuous mode [ 60.757930][ T5802] veth1_macvtap: entered promiscuous mode [ 60.778537][ T29] audit: type=1400 audit(1776078969.834:85): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.I9V4rT/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 60.806459][ T29] audit: type=1400 audit(1776078969.834:86): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.826662][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.829738][ T29] audit: type=1400 audit(1776078969.834:87): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.I9V4rT/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.862999][ T29] audit: type=1400 audit(1776078969.834:88): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.866409][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.901886][ T5801] veth0_macvtap: entered promiscuous mode [ 60.904254][ T29] audit: type=1400 audit(1776078969.844:89): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.I9V4rT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.937221][ T29] audit: type=1400 audit(1776078969.844:90): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.I9V4rT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 60.938809][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.965639][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.986504][ T29] audit: type=1400 audit(1776078969.844:91): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.990138][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.021784][ T29] audit: type=1400 audit(1776078969.904:92): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 61.029104][ T5816] veth0_macvtap: entered promiscuous mode [ 61.057808][ T5801] veth1_macvtap: entered promiscuous mode [ 61.083452][ T63] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.100224][ T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.138057][ T5816] veth1_macvtap: entered promiscuous mode [ 61.166977][ T63] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.192872][ T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.224880][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.251577][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.288038][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.309914][ T107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.320399][ T107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.340385][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.355599][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.372750][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.425773][ T107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.437280][ T107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.674548][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 61.674579][ T29] audit: type=1400 audit(1776078970.684:105): avc: denied { ioctl } for pid=5917 comm="syz.3.4" path="socket:[7842]" dev="sockfs" ino=7842 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.871302][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.886738][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.896629][ T29] audit: type=1400 audit(1776078970.714:106): avc: denied { create } for pid=5917 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.936266][ T29] audit: type=1400 audit(1776078970.724:107): avc: denied { ioctl } for pid=5917 comm="syz.3.4" path="socket:[7884]" dev="sockfs" ino=7884 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.002330][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.011621][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.136480][ T29] audit: type=1400 audit(1776078971.204:108): avc: denied { read write } for pid=5926 comm="syz.3.6" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 62.167317][ T29] audit: type=1400 audit(1776078971.204:109): avc: denied { open } for pid=5926 comm="syz.3.6" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 62.213092][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.346969][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.360217][ T29] audit: type=1400 audit(1776078971.424:110): avc: denied { prog_load } for pid=5919 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.395559][ T5812] Bluetooth: hci2: command tx timeout [ 62.463881][ T5812] Bluetooth: hci4: command tx timeout [ 62.469303][ T5812] Bluetooth: hci1: command tx timeout [ 62.469787][ T5815] Bluetooth: hci3: command tx timeout [ 62.474957][ T5812] Bluetooth: hci0: command tx timeout [ 62.520434][ T5930] dummy0: entered promiscuous mode [ 62.567285][ T29] audit: type=1400 audit(1776078971.424:111): avc: denied { bpf } for pid=5919 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.588494][ T29] audit: type=1400 audit(1776078971.424:112): avc: denied { perfmon } for pid=5919 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.618085][ T5930] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 62.631342][ T5930] hsr1: entered allmulticast mode [ 62.636719][ T5930] dummy0: entered allmulticast mode [ 62.642114][ T5930] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 62.649657][ T29] audit: type=1400 audit(1776078971.424:113): avc: denied { prog_run } for pid=5919 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.778492][ T29] audit: type=1400 audit(1776078971.844:114): avc: denied { mounton } for pid=5926 comm="syz.3.6" path="/1/file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.909641][ T5929] capability: warning: `syz.3.6' uses 32-bit capabilities (legacy support in use) [ 63.074543][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.082405][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.433139][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.450255][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.462925][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.514897][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.596671][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.632566][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.873936][ T5947] overlay: Unknown parameter 'dont_hash' [ 64.685488][ T5812] Bluetooth: hci2: command tx timeout [ 64.690967][ T5812] Bluetooth: hci0: command tx timeout [ 64.696433][ T5812] Bluetooth: hci3: command tx timeout [ 64.701845][ T5812] Bluetooth: hci1: command tx timeout [ 64.707420][ T5812] Bluetooth: hci4: command tx timeout [ 64.734079][ T5949] netlink: 'syz.3.7': attribute type 1 has an invalid length. [ 64.853760][ T5949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7'. [ 66.413837][ T5970] process 'syz.3.10' launched './file2' with NULL argv: empty string added [ 66.430254][ T5970] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10'. [ 66.844504][ T5968] Illegal XDP return value 4294967274 on prog (id 3) dev N/A, expect packet loss! [ 66.959009][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 66.959041][ T29] audit: type=1400 audit(1776078975.474:139): avc: denied { execute } for pid=5958 comm="syz.3.10" name="file2" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.032933][ T5815] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 67.033016][ T5815] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 67.040525][ T5815] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 67.047757][ T5815] Bluetooth: hci1: Malformed LE Event: 0x02 [ 67.067516][ T5968] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.302854][ T29] audit: type=1400 audit(1776078975.484:140): avc: denied { execute_no_trans } for pid=5958 comm="syz.3.10" path="/3/file2" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.345889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 67.561549][ T29] audit: type=1400 audit(1776078975.924:141): avc: denied { create } for pid=5955 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 68.065763][ T5962] loop6: detected capacity change from 0 to 524287999 [ 68.080944][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.093650][ T29] audit: type=1400 audit(1776078975.924:142): avc: denied { ioctl } for pid=5955 comm="syz.2.3" path="socket:[9391]" dev="sockfs" ino=9391 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 68.227618][ T29] audit: type=1400 audit(1776078976.024:143): avc: denied { ioctl } for pid=5955 comm="syz.2.3" path="socket:[8497]" dev="sockfs" ino=8497 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.254907][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.431556][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.439961][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.448418][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.457241][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.467926][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.468072][ T5976] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 68.475897][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.491333][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.499269][ T5962] ldm_validate_partition_table(): Disk read failed. [ 68.506084][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.514117][ T5962] Buffer I/O error on dev loop6, logical block 0, async page read [ 68.522081][ T5962] Dev loop6: unable to read RDB block 0 [ 68.528665][ T5962] loop6: unable to read partition table [ 68.534612][ T5962] loop_reread_partitions: partition scan of loop6 (3 x) failed (rc=-5) [ 68.684951][ T5820] ldm_validate_partition_table(): Disk read failed. [ 68.691676][ T5820] Dev loop6: unable to read RDB block 0 [ 68.726084][ T29] audit: type=1400 audit(1776078976.094:144): avc: denied { remount } for pid=5955 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 68.954117][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 68.972468][ T5820] loop6: unable to read partition table [ 68.972465][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.001595][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.012972][ T29] audit: type=1400 audit(1776078976.134:145): avc: denied { allowed } for pid=5957 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 69.036086][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.049479][ T5990] ldm_validate_partition_table(): Disk read failed. [ 69.067776][ T5990] Dev loop6: unable to read RDB block 0 [ 69.076717][ T29] audit: type=1400 audit(1776078976.444:146): avc: denied { read } for pid=5959 comm="syz.1.11" name="sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.100176][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 69.109940][ T5990] loop6: unable to read partition table [ 69.110245][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.136468][ T5990] loop_reread_partitions: partition scan of loop6 (3 x) failed (rc=-5) [ 69.145520][ T29] audit: type=1400 audit(1776078976.444:147): avc: denied { open } for pid=5959 comm="syz.1.11" path="/dev/sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.206864][ T9] usb 3-1: config 0 descriptor?? [ 69.294058][ T29] audit: type=1400 audit(1776078976.444:148): avc: denied { ioctl } for pid=5959 comm="syz.1.11" path="/dev/sg0" dev="devtmpfs" ino=780 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.539347][ T6002] loop6: detected capacity change from 0 to 2640 [ 69.547947][ T6002] ldm_validate_partition_table(): Disk read failed. [ 69.555176][ T6002] Dev loop6: unable to read RDB block 0 [ 69.561118][ T6002] loop6: unable to read partition table [ 69.567307][ T6002] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 70.163745][ T5889] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.171395][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.198649][ T6008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.260548][ T6008] netlink: 'syz.0.16': attribute type 4 has an invalid length. [ 70.514094][ T47] usb 4-1: device descriptor read/64, error -71 [ 70.534658][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 70.543302][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 70.581366][ T5889] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 70.592171][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.601974][ T5889] usb 2-1: Product: syz [ 70.606975][ T5889] usb 2-1: Manufacturer: syz [ 70.614811][ T5889] usb 2-1: SerialNumber: syz [ 70.638859][ T5889] usb 2-1: config 0 descriptor?? [ 70.650795][ T5889] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 70.666954][ T5889] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 70.722214][ T6007] dummy0: entered promiscuous mode [ 70.729482][ T6007] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 70.738617][ T6007] debugfs: 'hsr1' already exists in 'hsr' [ 70.744976][ T6007] Cannot create hsr debugfs directory [ 70.751238][ T6007] hsr1: entered allmulticast mode [ 70.757063][ T6007] dummy0: entered allmulticast mode [ 70.762318][ T6007] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 70.809098][ T6010] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.897395][ T6010] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.993189][ T6010] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.037656][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.044279][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.053120][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.079473][ T6010] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 71.089174][ T6010] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.178385][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 71.193346][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 71.238667][ T9] usb 3-1: USB disconnect, device number 2 [ 71.250690][ T47] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 71.742184][ T6021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'. [ 71.753907][ T5889] em28xx 2-1:0.0: chip ID is em2882/3 [ 72.087768][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 72.202586][ T6018] Invalid source name [ 72.206667][ T6018] UBIFS error (pid: 6018): cannot open "./file0", error -22 [ 72.231212][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 72.251384][ T6023] batadv_slave_1: entered promiscuous mode [ 72.253615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 72.257585][ T6023] macsec1: entered promiscuous mode [ 72.271056][ T6023] macsec1: entered allmulticast mode [ 72.276433][ T6023] batadv_slave_1: entered allmulticast mode [ 72.404960][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 72.405329][ T29] audit: type=1400 audit(1776078981.464:164): avc: denied { create } for pid=6016 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.457685][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 72.783046][ T6023] batadv_slave_1: left allmulticast mode [ 72.789211][ T6023] batadv_slave_1: left promiscuous mode [ 72.835087][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 72.875879][ T29] audit: type=1400 audit(1776078981.944:165): avc: denied { append } for pid=6027 comm="syz.2.20" name="sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 73.029379][ T5889] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 73.040118][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.055268][ T5889] em28xx 2-1:0.0: board has no eeprom [ 73.060846][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.073988][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 73.105853][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 73.115652][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 73.126932][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 73.148427][ T5889] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 73.159757][ T5889] em28xx 2-1:0.0: dvb set to bulk mode. [ 73.166967][ T5932] em28xx 2-1:0.0: Binding DVB extension [ 73.243263][ T29] audit: type=1400 audit(1776078982.204:166): avc: denied { create } for pid=6027 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 73.863619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 73.940026][ T154] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.969900][ T29] audit: type=1400 audit(1776078982.214:167): avc: denied { write } for pid=6027 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.004548][ T29] audit: type=1400 audit(1776078982.284:168): avc: denied { create } for pid=6027 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.069134][ T6033] infiniband syz2: set down [ 74.074123][ T6033] infiniband syz2: added ipvlan0 [ 74.082481][ T6033] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 74.084921][ T6033] infiniband syz2: Couldn't open port 1 [ 74.107329][ T47] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 74.125836][ T47] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 74.137137][ T47] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.167979][ T29] audit: type=1400 audit(1776078982.294:169): avc: denied { bind } for pid=6027 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.187563][ T29] audit: type=1400 audit(1776078982.294:170): avc: denied { setopt } for pid=6027 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.189135][ T6033] RDS/IB: syz2: added [ 74.207422][ T29] audit: type=1400 audit(1776078982.294:171): avc: denied { accept } for pid=6027 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 74.265912][ T6040] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 74.695559][ T6033] smc: adding ib device syz2 with port count 1 [ 74.701953][ T6033] smc: ib device syz2 port 1 has no pnetid [ 75.181157][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.195957][ T29] audit: type=1400 audit(1776078983.354:172): avc: denied { read } for pid=6035 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.259259][ T47] usb 4-1: unable to read config index 4 descriptor/start: -71 [ 75.267137][ T47] usb 4-1: can't read configurations, error -71 [ 75.277680][ T47] usb usb4-port1: attempt power cycle [ 75.315282][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.327462][ T5889] usb 2-1: USB disconnect, device number 2 [ 75.954794][ T5889] em28xx 2-1:0.0: Disconnecting em28xx [ 75.962194][ T5932] em28xx 2-1:0.0: Registering input extension [ 76.335615][ T24] cfg80211: failed to load regulatory.db [ 76.345394][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.440848][ T29] audit: type=1400 audit(1776078985.484:173): avc: denied { create } for pid=6049 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.931031][ T6056] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 76.942407][ T6055] Zero length message leads to an empty skb [ 76.964628][ T6055] binder: binder_mmap: 6049 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 77.026586][ T6057] 9p: Bad value for 'wfdno' [ 77.113751][ T5932] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 77.120367][ T5932] Registered IR keymap rc-empty [ 78.425711][ T5932] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 78.519945][ T5932] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 78.650877][ T6069] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 78.710277][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 78.710288][ T29] audit: type=1400 audit(1776078987.744:186): avc: denied { write } for pid=6067 comm="syz.3.28" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.739248][ T5932] em28xx 2-1:0.0: Input extension successfully initialized [ 78.760411][ T5889] em28xx 2-1:0.0: Closing input extension [ 78.850524][ T5889] em28xx 2-1:0.0: Freeing device [ 79.029857][ T29] audit: type=1400 audit(1776078988.074:187): avc: denied { shutdown } for pid=6070 comm="syz.0.30" laddr=fe80::b lport=48892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.117546][ T29] audit: type=1400 audit(1776078988.084:188): avc: denied { connect } for pid=6070 comm="syz.0.30" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.180484][ T29] audit: type=1400 audit(1776078988.144:189): avc: denied { map } for pid=6075 comm="syz.2.31" path="socket:[9989]" dev="sockfs" ino=9989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.291324][ T29] audit: type=1400 audit(1776078988.144:190): avc: denied { read accept } for pid=6075 comm="syz.2.31" path="socket:[9989]" dev="sockfs" ino=9989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.596400][ T29] audit: type=1400 audit(1776078988.284:191): avc: denied { setopt } for pid=6075 comm="syz.2.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.256097][ T6089] binder: binder_mmap: 6082 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 80.672861][ T6088] mmap: syz.3.33 (6088) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 80.700241][ T29] audit: type=1400 audit(1776078989.664:192): avc: denied { read write } for pid=6079 comm="syz.3.33" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 80.777175][ T29] audit: type=1400 audit(1776078989.664:193): avc: denied { open } for pid=6079 comm="syz.3.33" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 81.133672][ T29] audit: type=1400 audit(1776078989.664:194): avc: denied { ioctl } for pid=6079 comm="syz.3.33" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 81.409143][ T29] audit: type=1400 audit(1776078989.674:195): avc: denied { setopt } for pid=6079 comm="syz.3.33" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.467960][ T6099] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 82.054167][ T6101] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 82.838501][ T6112] binder: binder_mmap: 6106 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 83.608589][ T6046] wlan0: Trigger new scan to find an IBSS to join [ 83.884590][ T6126] block device autoloading is deprecated and will be removed. [ 83.907054][ T6126] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 83.925804][ T6126] netlink: 'syz.2.41': attribute type 4 has an invalid length. [ 83.942473][ T6126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.213670][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 84.213686][ T29] audit: type=1400 audit(1776078993.164:201): avc: denied { sqpoll } for pid=6102 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.968311][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.42'. [ 85.849785][ T29] audit: type=1400 audit(1776078994.054:202): avc: denied { create } for pid=6128 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.145744][ T29] audit: type=1400 audit(1776078994.064:203): avc: denied { bind } for pid=6128 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.213723][ T29] audit: type=1400 audit(1776078994.064:204): avc: denied { setopt } for pid=6128 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.254955][ T29] audit: type=1400 audit(1776078994.084:205): avc: denied { write } for pid=6128 comm="syz.4.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.301780][ T29] audit: type=1400 audit(1776078994.084:206): avc: denied { ioctl } for pid=6128 comm="syz.4.42" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 87.691623][ T29] audit: type=1400 audit(1776078995.694:207): avc: denied { map } for pid=6132 comm="syz.4.43" path="socket:[10225]" dev="sockfs" ino=10225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.720958][ T29] audit: type=1400 audit(1776078995.694:208): avc: denied { read accept } for pid=6132 comm="syz.4.43" path="socket:[10225]" dev="sockfs" ino=10225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.747189][ T29] audit: type=1400 audit(1776078996.724:209): avc: denied { mount } for pid=6140 comm="syz.0.44" name="/" dev="autofs" ino=8795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 87.772277][ T29] audit: type=1400 audit(1776078996.724:210): avc: denied { read } for pid=6140 comm="syz.0.44" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.108569][ T5932] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.130982][ T6155] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 88.304809][ T6157] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 88.490159][ T35] wlan0: Trigger new scan to find an IBSS to join [ 88.564975][ T5932] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 88.575426][ T5932] usb 3-1: config 0 interface 0 has no altsetting 0 [ 88.588922][ T5932] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 88.600498][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 88.613869][ T5932] usb 3-1: Product: syz [ 88.618881][ T5932] usb 3-1: Manufacturer: syz [ 88.623792][ T5932] usb 3-1: SerialNumber: syz [ 88.635535][ T5932] usb 3-1: config 0 descriptor?? [ 88.644237][ T6143] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 88.659837][ T5932] usb 3-1: selecting invalid altsetting 0 [ 89.150728][ T6163] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 90.322694][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.648499][ T5916] usb 3-1: USB disconnect, device number 3 [ 91.933179][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 91.933196][ T29] audit: type=1400 audit(1776079000.404:218): avc: denied { shutdown } for pid=6182 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 91.979082][ T29] audit: type=1400 audit(1776079000.414:219): avc: denied { create } for pid=6182 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.014863][ T29] audit: type=1400 audit(1776079000.414:220): avc: denied { setopt } for pid=6182 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 92.075172][ T29] audit: type=1400 audit(1776079000.424:221): avc: denied { create } for pid=6182 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 92.377140][ T29] audit: type=1400 audit(1776079001.394:222): avc: denied { create } for pid=6193 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.730969][ T29] audit: type=1400 audit(1776079001.394:223): avc: denied { setopt } for pid=6193 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.767531][ T29] audit: type=1400 audit(1776079001.404:224): avc: denied { connect } for pid=6193 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.889638][ T5916] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.901552][ T29] audit: type=1400 audit(1776079001.404:225): avc: denied { read } for pid=6193 comm="syz.1.57" path="socket:[10381]" dev="sockfs" ino=10381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.950695][ T29] audit: type=1400 audit(1776079001.784:226): avc: denied { write } for pid=6174 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.045566][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 93.062366][ T5916] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 93.106389][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.127261][ T29] audit: type=1400 audit(1776079001.934:227): avc: denied { read append } for pid=6174 comm="syz.3.52" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 93.151802][ T5916] usb 3-1: config 0 descriptor?? [ 93.676652][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 93.765810][ T6211] ubi0: attaching mtd0 [ 93.778449][ T6211] ubi0: scanning is finished [ 93.783074][ T6211] ubi0: empty MTD device detected [ 94.566423][ T5916] (null): keene_cmd_main failed (-110) [ 94.589725][ T5916] video4linux radio48: keene_cmd_main failed (-32) [ 94.597458][ T5916] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 95.733169][ T6211] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 95.740735][ T6211] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 95.748042][ T6211] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 95.755210][ T6211] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 95.762729][ T6211] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 95.769542][ T6211] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 95.777528][ T6211] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2751266345 [ 95.787723][ T6211] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 95.802342][ T6241] ubi0: background thread "ubi_bgt0d" started, PID 6241 [ 96.531102][ T5934] usb 3-1: USB disconnect, device number 4 [ 96.919136][ T6265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.436243][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 97.436256][ T29] audit: type=1400 audit(1776079006.504:240): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.632895][ T29] audit: type=1400 audit(1776079006.684:241): avc: denied { create } for pid=6274 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.633970][ T6272] smc: net device wlan0 applied user defined pnetid SYZ0 [ 98.289048][ T5916] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 98.328753][ T29] audit: type=1400 audit(1776079006.724:242): avc: denied { setopt } for pid=6274 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.466007][ T29] audit: type=1400 audit(1776079006.734:243): avc: denied { create } for pid=6274 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.637690][ T5916] usb 5-1: device descriptor read/all, error -71 [ 98.734909][ T6292] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.607321][ T29] audit: type=1400 audit(1776079006.934:244): avc: denied { shutdown } for pid=6274 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 99.626830][ T29] audit: type=1400 audit(1776079007.364:245): avc: denied { block_suspend } for pid=6268 comm="syz.0.62" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.758524][ T29] audit: type=1400 audit(1776079007.434:246): avc: denied { execute } for pid=6268 comm="syz.0.62" path="/11/bus/file1" dev="overlay" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.781434][ T29] audit: type=1400 audit(1776079007.794:247): avc: denied { write } for pid=6288 comm="syz.1.67" name="sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.852602][ T6293] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 100.067665][ T29] audit: type=1400 audit(1776079007.814:248): avc: denied { ioctl } for pid=6288 comm="syz.1.67" path="socket:[8969]" dev="sockfs" ino=8969 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.162031][ T6297] No control pipe specified [ 100.526294][ T29] audit: type=1400 audit(1776079007.834:249): avc: denied { ioctl } for pid=6288 comm="syz.1.67" path="socket:[8966]" dev="sockfs" ino=8966 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.680527][ T6301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.69'. [ 103.535277][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 103.535292][ T29] audit: type=1400 audit(1776079012.584:251): avc: denied { connect } for pid=6314 comm="syz.2.73" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.008253][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 104.793285][ T6315] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 106.330762][ T6374] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 106.715089][ T6379] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 107.300954][ T6383] kAFS: unable to lookup cell '' [ 107.312188][ T6383] kAFS: unable to lookup cell '(,c' [ 107.446386][ T6383] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 107.460463][ T6383] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 107.573874][ T6389] netlink: 'syz.3.81': attribute type 4 has an invalid length. [ 107.756384][ T6383] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 107.769245][ T29] audit: type=1400 audit(1776079016.824:252): avc: denied { firmware_load } for pid=6380 comm="syz.2.80" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 107.985801][ T6392] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 108.597768][ T29] audit: type=1400 audit(1776079017.664:253): avc: denied { node_bind } for pid=6386 comm="syz.3.81" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 109.012453][ T6400] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 109.227821][ T6402] binder: binder_mmap: 6398 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 109.363160][ T29] audit: type=1400 audit(1776079018.244:254): avc: denied { ioctl } for pid=6398 comm="syz.1.85" path="socket:[9158]" dev="sockfs" ino=9158 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.007344][ T6418] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 110.444022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 110.717110][ T6421] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 110.727197][ T29] audit: type=1400 audit(1776079019.684:255): avc: denied { create } for pid=6422 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 111.160000][ T29] audit: type=1400 audit(1776079019.814:256): avc: denied { bind } for pid=6405 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.179369][ T29] audit: type=1400 audit(1776079019.814:257): avc: denied { name_bind } for pid=6405 comm="syz.2.86" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 111.257208][ T29] audit: type=1400 audit(1776079019.814:258): avc: denied { node_bind } for pid=6405 comm="syz.2.86" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 111.353652][ T29] audit: type=1400 audit(1776079019.884:259): avc: denied { create } for pid=6422 comm="syz.1.90" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.504468][ T29] audit: type=1400 audit(1776079019.884:260): avc: denied { write } for pid=6422 comm="syz.1.90" name="file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.534561][ T29] audit: type=1400 audit(1776079019.884:261): avc: denied { open } for pid=6422 comm="syz.1.90" path="/20/file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 111.763854][ T29] audit: type=1400 audit(1776079019.894:262): avc: denied { ioctl } for pid=6422 comm="syz.1.90" path="/20/file0" dev="tmpfs" ino=134 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.092380][ T6436] comedi comedi1: no devices specified [ 113.673796][ T5889] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.683198][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 113.823825][ T5889] usb 1-1: device descriptor read/64, error -32 [ 114.083804][ T5889] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.257024][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 114.257040][ T29] audit: type=1400 audit(1776079023.134:271): avc: denied { setopt } for pid=6445 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.312630][ T29] audit: type=1400 audit(1776079023.194:272): avc: denied { ioctl } for pid=6445 comm="syz.1.96" path="socket:[10717]" dev="sockfs" ino=10717 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.465835][ T5889] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.475745][ T5889] usb 1-1: config 0 has no interface number 0 [ 114.487644][ T5889] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 114.506893][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.506906][ T29] audit: type=1400 audit(1776079023.204:273): avc: denied { bind } for pid=6445 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.633678][ T5889] usb 1-1: Product: syz [ 114.638042][ T5889] usb 1-1: Manufacturer: syz [ 114.707186][ T6466] ======================================================= [ 114.707186][ T6466] WARNING: The mand mount option has been deprecated and [ 114.707186][ T6466] and is ignored by this kernel. Remove the mand [ 114.707186][ T6466] option from the mount to silence this warning. [ 114.707186][ T6466] ======================================================= [ 114.765805][ T6466] misc userio: Can't change port type on an already running userio instance [ 114.862326][ T29] audit: type=1400 audit(1776079023.774:274): avc: denied { remount } for pid=6459 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 114.901322][ T5889] usb 1-1: SerialNumber: syz [ 114.929475][ T5889] usb 1-1: config 0 descriptor?? [ 115.021864][ T6468] netlink: 'syz.4.100': attribute type 2 has an invalid length. [ 115.038993][ T6468] !: entered promiscuous mode [ 115.047219][ T6468] netlink: 'syz.4.100': attribute type 2 has an invalid length. [ 115.139229][ T5889] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 115.156829][ T5889] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.199527][ T5889] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 115.223904][ T5889] usb 1-1: media controller created [ 115.240478][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.261711][ T6472] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 115.543864][ T6476] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 115.895440][ T5889] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 116.865390][ T5815] Bluetooth: hci2: command 0x2016 tx timeout [ 116.977877][ T5889] usb 1-1: USB disconnect, device number 3 [ 117.031524][ T6489] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 117.105747][ T29] audit: type=1400 audit(1776079026.174:275): avc: denied { getopt } for pid=6490 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 117.553971][ T29] audit: type=1400 audit(1776079026.604:276): avc: denied { ioctl } for pid=6490 comm="syz.0.106" path="socket:[11365]" dev="sockfs" ino=11365 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.944668][ T5812] Bluetooth: hci2: command 0x2016 tx timeout [ 119.188451][ T6511] wlan1 speed is unknown, defaulting to 1000 [ 119.195192][ T6511] wlan1 speed is unknown, defaulting to 1000 [ 119.207540][ T6511] wlan1 speed is unknown, defaulting to 1000 [ 119.231646][ T6511] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.283603][ T6511] infiniband yz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.387483][ T6511] wlan1 speed is unknown, defaulting to 1000 [ 119.404009][ T6511] wlan1 speed is unknown, defaulting to 1000 [ 119.420298][ T6511] wlan1 speed is unknown, defaulting to 1000 [ 119.436151][ T6511] wlan1 speed is unknown, defaulting to 1000 [ 119.452807][ T6511] wlan1 speed is unknown, defaulting to 1000 [ 120.155256][ T29] audit: type=1400 audit(1776079029.224:277): avc: denied { setopt } for pid=6509 comm="syz.3.109" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.642312][ T6527] binder: binder_mmap: 6519 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 123.672016][ T29] audit: type=1400 audit(1776079032.524:278): avc: denied { mount } for pid=6538 comm="syz.3.117" name="/" dev="autofs" ino=10837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 123.901045][ T29] audit: type=1400 audit(1776079032.924:279): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 124.147020][ T6552] kernel read not supported for file /policy (pid: 6552 comm: syz.2.115) [ 124.163374][ T29] audit: type=1400 audit(1776079033.214:280): avc: denied { module_load } for pid=6531 comm="syz.2.115" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 124.725063][ T29] audit: type=1400 audit(1776079033.324:281): avc: denied { mounton } for pid=6545 comm="syz.1.118" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 125.414756][ T6553] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.857873][ T6570] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 127.207101][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 127.245548][ T6565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.530820][ T6627] netlink: 'syz.0.127': attribute type 2 has an invalid length. [ 129.555646][ T6627] !: entered promiscuous mode [ 129.988740][ T6627] netlink: 'syz.0.127': attribute type 2 has an invalid length. [ 131.333028][ T6641] ptrace attach of "./syz-executor exec"[5802] was attempted by "./syz-executor exec"[6641] [ 131.898663][ T29] audit: type=1400 audit(1776079040.964:282): avc: denied { create } for pid=6646 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 132.006723][ T6655] dummy0: entered promiscuous mode [ 132.206094][ T6655] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 132.352675][ T29] audit: type=1400 audit(1776079040.964:283): avc: denied { ioctl } for pid=6646 comm="syz.1.126" path="socket:[10927]" dev="sockfs" ino=10927 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.382280][ T6655] debugfs: 'hsr1' already exists in 'hsr' [ 132.398088][ T6655] Cannot create hsr debugfs directory [ 132.409032][ T6655] hsr1: entered allmulticast mode [ 132.427339][ T6655] dummy0: entered allmulticast mode [ 132.432591][ T6655] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 132.466231][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.472606][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.623867][ T5916] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.706608][ T29] audit: type=1400 audit(1776079041.764:284): avc: denied { mounton } for pid=6647 comm="syz.2.133" path="/21/file0" dev="tmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.769596][ T6667] netlink: 'syz.0.135': attribute type 1 has an invalid length. [ 132.850860][ T29] audit: type=1400 audit(1776079041.774:285): avc: denied { mount } for pid=6647 comm="syz.2.133" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 132.884821][ T5916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.892809][ T5916] usb 4-1: config 0 has no interface number 0 [ 133.012780][ T5916] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 133.023020][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.041357][ T5916] usb 4-1: Product: syz [ 133.050732][ T5916] usb 4-1: Manufacturer: syz [ 133.086270][ T29] audit: type=1400 audit(1776079042.154:286): avc: denied { unmount } for pid=5801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 133.111524][ T5916] usb 4-1: SerialNumber: syz [ 133.121156][ T6662] zonefs (nullb0) ERROR: Not a zoned block device [ 133.135373][ T5916] usb 4-1: config 0 descriptor?? [ 133.145156][ T29] audit: type=1400 audit(1776079042.214:287): avc: denied { write } for pid=6660 comm="syz.0.135" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.348504][ T5916] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 133.559822][ T5916] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 133.570596][ T29] audit: type=1400 audit(1776079042.624:288): avc: denied { append } for pid=6657 comm="syz.3.134" name="i2c-1" dev="devtmpfs" ino=2843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.605187][ T5916] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 133.620432][ T5916] usb 4-1: media controller created [ 133.634466][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.635661][ T6670] netlink: 80 bytes leftover after parsing attributes in process `syz.2.136'. [ 133.818197][ T5916] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 134.286709][ T5916] usb 4-1: USB disconnect, device number 5 [ 134.738637][ T29] audit: type=1400 audit(1776079043.804:289): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 136.044214][ T6694] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 136.293653][ T29] audit: type=1400 audit(1776079045.114:290): avc: denied { setopt } for pid=6688 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 136.314075][ T29] audit: type=1400 audit(1776079045.314:291): avc: denied { read } for pid=6688 comm="syz.3.141" path="socket:[10982]" dev="sockfs" ino=10982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 136.985569][ T6704] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 137.075331][ T6711] netlink: 'syz.1.145': attribute type 2 has an invalid length. [ 137.089842][ T6711] !: entered promiscuous mode [ 137.098281][ T6711] netlink: 'syz.1.145': attribute type 2 has an invalid length. [ 141.064214][ T5951] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 141.355528][ T5951] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.374053][ T5951] usb 1-1: config 0 has no interface number 0 [ 141.386891][ T5951] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 141.400789][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.515135][ T5951] usb 1-1: Product: syz [ 141.519327][ T5951] usb 1-1: Manufacturer: syz [ 141.551459][ T5951] usb 1-1: SerialNumber: syz [ 141.743311][ T5951] usb 1-1: config 0 descriptor?? [ 142.337739][ T5951] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 142.537438][ T5951] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 142.549446][ T5951] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 142.557856][ T5951] usb 1-1: media controller created [ 142.715898][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.243980][ T5951] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 145.693690][ T5951] usb 1-1: USB disconnect, device number 4 [ 145.846594][ T6769] netlink: 80 bytes leftover after parsing attributes in process `syz.0.158'. [ 146.389821][ T6770] hub 9-0:1.0: USB hub found [ 146.486054][ T6770] hub 9-0:1.0: 1 port detected [ 146.901942][ T6788] binder: binder_mmap: 6779 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 147.381763][ T6792] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 147.729812][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 147.729822][ T29] audit: type=1400 audit(1776079056.794:295): avc: denied { view } for pid=6793 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 147.851859][ T29] audit: type=1400 audit(1776079056.914:296): avc: denied { name_bind } for pid=6793 comm="syz.0.176" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 148.107978][ T6803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.165'. [ 148.223664][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 148.775167][ T6805] batadv_slave_1: entered promiscuous mode [ 148.781015][ T6805] macsec1: entered promiscuous mode [ 148.786544][ T6805] macsec1: entered allmulticast mode [ 148.791807][ T6805] batadv_slave_1: entered allmulticast mode [ 148.798772][ T6805] batadv_slave_1: left allmulticast mode [ 148.804697][ T6805] batadv_slave_1: left promiscuous mode [ 148.865359][ T6799] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 149.211764][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.297688][ T6810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.808042][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.914018][ T6810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.153893][ T5889] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.791638][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 150.801092][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 150.812761][ T5889] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 150.825808][ T29] audit: type=1400 audit(1776079059.884:297): avc: denied { execute_no_trans } for pid=6818 comm="syz.3.171" path="/35/file2" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.852670][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.898235][ T5889] usb 3-1: Product: ᝩ [ 150.996988][ T5889] usb 3-1: Manufacturer: ࠌ [ 151.002902][ T5889] usb 3-1: SerialNumber: Ṗ矒낆パꤒ堚虗ণ樘泤ᕢ縎짰Ҋ⛀ְ풭㫿窠Ǡ멛烻┬炡홧莆鶰蒡囝 [ 151.035398][ T6832] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 151.058995][ T29] audit: type=1400 audit(1776079059.121:298): avc: denied { ioctl } for pid=6818 comm="syz.3.171" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12369 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 151.376938][ T6837] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 151.758721][ T6844] netlink: 'syz.4.178': attribute type 2 has an invalid length. [ 151.776769][ T5889] kalmia 3-1:1.0: probe with driver kalmia failed with error -22 [ 151.789091][ T5889] usb 3-1: USB disconnect, device number 5 [ 151.802701][ T29] audit: type=1400 audit(1776079059.871:299): avc: denied { create } for pid=6843 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.853950][ T6847] netlink: 'syz.4.178': attribute type 2 has an invalid length. [ 151.864434][ T29] audit: type=1400 audit(1776079059.871:300): avc: denied { connect } for pid=6843 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.897486][ T6847] syz.4.178 uses obsolete (PF_INET,SOCK_PACKET) [ 151.980476][ T6851] netlink: 'syz.4.178': attribute type 1 has an invalid length. [ 151.991156][ T29] audit: type=1400 audit(1776079060.051:301): avc: denied { mount } for pid=6843 comm="syz.4.178" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 152.255017][ T29] audit: type=1400 audit(1776079060.331:302): avc: denied { bind } for pid=6853 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 152.337192][ T6854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.180'. [ 152.357405][ T6852] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 152.457204][ T29] audit: type=1400 audit(1776079060.351:303): avc: denied { setopt } for pid=6853 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.127154][ T29] audit: type=1400 audit(1776079061.101:304): avc: denied { execmem } for pid=6861 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 153.553918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 153.937999][ T29] audit: type=1400 audit(1776079061.191:305): avc: denied { write } for pid=6853 comm="syz.3.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.958401][ T29] audit: type=1400 audit(1776079061.351:306): avc: denied { create } for pid=6861 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.026760][ T29] audit: type=1400 audit(1776079061.361:307): avc: denied { read write } for pid=6861 comm="syz.0.182" name="sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 154.090899][ T29] audit: type=1400 audit(1776079061.371:308): avc: denied { open } for pid=6861 comm="syz.0.182" path="/dev/sg0" dev="devtmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 154.184986][ T29] audit: type=1400 audit(1776079061.371:309): avc: denied { ioctl } for pid=6861 comm="syz.0.182" path="/dev/sg0" dev="devtmpfs" ino=780 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 154.211608][ T29] audit: type=1400 audit(1776079061.381:310): avc: denied { create } for pid=6861 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.246777][ T29] audit: type=1400 audit(1776079061.381:311): avc: denied { ioctl } for pid=6861 comm="syz.0.182" path="socket:[12095]" dev="sockfs" ino=12095 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.288779][ T29] audit: type=1400 audit(1776079061.391:312): avc: denied { ioctl } for pid=6861 comm="syz.0.182" path="socket:[12092]" dev="sockfs" ino=12092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.318778][ T29] audit: type=1400 audit(1776079061.401:313): avc: denied { create } for pid=6861 comm="syz.0.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 154.373625][ T5916] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 154.538595][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.583457][ T5916] usb 2-1: config 0 has no interface number 0 [ 154.694000][ T5916] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 154.705351][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.714346][ T5916] usb 2-1: Product: syz [ 154.718602][ T5916] usb 2-1: Manufacturer: syz [ 154.723225][ T5916] usb 2-1: SerialNumber: syz [ 154.747343][ T5916] usb 2-1: config 0 descriptor?? [ 154.967070][ T5916] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 154.995954][ T5916] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 155.016591][ T5916] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 155.037895][ T5916] usb 2-1: media controller created [ 155.115252][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.837539][ T5916] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 155.964490][ T5916] usb 2-1: USB disconnect, device number 3 [ 156.124880][ T6891] binder: binder_mmap: 6889 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 157.004905][ T6898] syzkaller0: entered allmulticast mode [ 157.036537][ T6898] syzkaller0: entered promiscuous mode [ 157.190605][ T6909] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 157.191862][ T6898] syzkaller0 (unregistering): left allmulticast mode [ 157.367421][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 157.676048][ T6898] syzkaller0 (unregistering): left promiscuous mode [ 157.738058][ T6910] veth0_macvtap: left promiscuous mode [ 157.763616][ T5889] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.938826][ T5889] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 157.981138][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.119959][ T5889] usb 3-1: config 0 descriptor?? [ 158.229087][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 158.239299][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 158.733548][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 159.033923][ T6926] overlayfs: failed to resolve './file2': -2 [ 159.040106][ T29] audit: type=1400 audit(1776079066.801:383): avc: denied { prog_run } for pid=6901 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 159.199244][ T5812] Bluetooth: hci5: command 0x1003 tx timeout [ 159.208020][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.270754][ T29] audit: type=1400 audit(1776079067.171:384): avc: denied { ioctl } for pid=6901 comm="syz.2.193" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=12498 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 159.463787][ T5889] ath6kl: Failed to submit usb control message: -71 [ 159.470461][ T5889] ath6kl: unable to send the bmi data to the device: -71 [ 159.512031][ T5889] ath6kl: Unable to send get target info: -71 [ 159.545587][ T5889] ath6kl: Failed to init ath6kl core: -71 [ 159.592522][ T5889] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 159.620473][ T5889] usb 3-1: USB disconnect, device number 6 [ 159.830674][ T6942] autofs: Unknown parameter '0x0000000000000000' [ 159.870205][ T29] audit: type=1400 audit(1776079067.911:385): avc: denied { read } for pid=6930 comm="syz.0.199" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.068778][ T29] audit: type=1400 audit(1776079067.911:386): avc: denied { open } for pid=6930 comm="syz.0.199" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 161.250671][ T6954] binder: binder_mmap: 6951 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 162.036159][ T29] audit: type=1400 audit(1776079067.911:387): avc: denied { ioctl } for pid=6930 comm="syz.0.199" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 162.163616][ T29] audit: type=1400 audit(1776079067.911:388): avc: denied { allowed } for pid=6930 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.226226][ T29] audit: type=1400 audit(1776079067.911:389): avc: denied { map } for pid=6930 comm="syz.0.199" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.483626][ T29] audit: type=1400 audit(1776079067.911:390): avc: denied { read write } for pid=6930 comm="syz.0.199" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.872784][ T6971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.088631][ T5951] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.209462][ T29] audit: type=1400 audit(1776079069.321:391): avc: denied { create } for pid=6953 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.368794][ T29] audit: type=1400 audit(1776079069.541:392): avc: denied { setopt } for pid=6953 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.385301][ T5951] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.940576][ T5951] usb 2-1: config 0 has no interface number 0 [ 163.995306][ T5951] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 164.025194][ T29] audit: type=1400 audit(1776079069.541:393): avc: denied { write } for pid=6953 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.056370][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.160099][ T5951] usb 2-1: Product: syz [ 164.168428][ T29] audit: type=1400 audit(1776079069.601:394): avc: denied { setopt } for pid=6953 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 164.193613][ T29] audit: type=1400 audit(1776079070.451:395): avc: denied { write } for pid=6967 comm="syz.2.206" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 164.198613][ T5951] usb 2-1: Manufacturer: syz [ 164.279633][ T6984] netlink: 172 bytes leftover after parsing attributes in process `syz.3.209'. [ 165.173694][ T5951] usb 2-1: SerialNumber: syz [ 165.193533][ T5951] usb 2-1: config 0 descriptor?? [ 165.313134][ T5951] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 165.352822][ T5951] usb 2-1: USB disconnect, device number 4 [ 165.618870][ T29] audit: type=1400 audit(1776079073.671:396): avc: denied { create } for pid=6985 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.859989][ T29] audit: type=1400 audit(1776079073.671:397): avc: denied { setopt } for pid=6985 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.922532][ T29] audit: type=1400 audit(1776079073.671:398): avc: denied { connect } for pid=6985 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.004054][ T29] audit: type=1400 audit(1776079073.681:399): avc: denied { read } for pid=6985 comm="syz.3.210" path="socket:[12565]" dev="sockfs" ino=12565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 166.090956][ T29] audit: type=1400 audit(1776079074.161:400): avc: denied { create } for pid=6988 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.113083][ T29] audit: type=1400 audit(1776079074.161:401): avc: denied { setopt } for pid=6988 comm="syz.1.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 166.181050][ T6998] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.213'. [ 166.225143][ T6998] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 166.553007][ T29] audit: type=1400 audit(1776079074.241:402): avc: denied { create } for pid=6994 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.632511][ T7001] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 166.850039][ T7005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 167.227761][ T7007] netlink: 80 bytes leftover after parsing attributes in process `syz.1.216'. [ 167.264840][ T7014] capability: warning: `syz.2.218' uses deprecated v2 capabilities in a way that may be insecure [ 167.570933][ T7020] netlink: 76 bytes leftover after parsing attributes in process `syz.2.218'. [ 168.581741][ T7039] /dev/nullb0: Can't lookup blockdev [ 169.009730][ T7031] siw: device registration error -23 [ 169.081069][ T7036] smc: removing ib device syz2 [ 169.536048][ T7036] ------------[ cut here ]------------ [ 169.541514][ T7036] !xa_empty(&pool->xa) [ 169.541523][ T7036] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.3.221/7036 [ 169.556781][ T7036] Modules linked in: [ 169.560799][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz.3.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.571543][ T7036] Tainted: [L]=SOFTLOCKUP [ 169.575849][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.585898][ T7036] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 169.591349][ T7036] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 56 ca 4e f9 5b c3 cc cc cc cc e8 4b ca 4e f9 90 <0f> 0b 90 e8 42 ca 4e f9 5b c3 cc cc cc cc e8 97 5e bb f9 eb d0 0f [ 169.610967][ T7036] RSP: 0018:ffffc9000461f1a0 EFLAGS: 00010246 [ 169.617019][ T7036] RAX: 0000000000080000 RBX: ffff8880295913b8 RCX: ffffc9000dd44000 [ 169.624977][ T7036] RDX: 0000000000080000 RSI: ffffffff88ba2e75 RDI: ffff888029591438 [ 169.633179][ T7036] RBP: ffffffff88b89100 R08: 0000000000000005 R09: 0000000000000001 [ 169.641146][ T7036] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880295906b0 [ 169.649104][ T7036] R13: ffff88802958ffe0 R14: ffff88802958ffe0 R15: ffff888029591118 [ 169.657057][ T7036] FS: 00007f447eb136c0(0000) GS:ffff888124338000(0000) knlGS:0000000000000000 [ 169.666004][ T7036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.672564][ T7036] CR2: 000000110c31c7a8 CR3: 0000000062a91000 CR4: 00000000003526f0 [ 169.680532][ T7036] Call Trace: [ 169.683803][ T7036] [ 169.686721][ T7036] rxe_dealloc+0x25/0xc0 [ 169.690943][ T7036] ib_dealloc_device+0x49/0x230 [ 169.695796][ T7036] __ib_unregister_device+0x396/0x480 [ 169.701149][ T7036] ib_unregister_device_and_put+0x5a/0x80 [ 169.706862][ T7036] nldev_dellink+0x226/0x320 [ 169.711429][ T7036] ? __pfx_nldev_dellink+0x10/0x10 [ 169.716566][ T7036] ? rcu_is_watching+0x12/0xc0 [ 169.721308][ T7036] ? cap_capable+0x107/0x460 [ 169.725886][ T7036] ? bpf_lsm_capable+0x9/0x10 [ 169.730536][ T7036] ? security_capable+0x80/0x260 [ 169.735728][ T7036] ? ns_capable+0xd2/0xf0 [ 169.740036][ T7036] ? __pfx_nldev_dellink+0x10/0x10 [ 169.745145][ T7036] rdma_nl_rcv_msg+0x38a/0x6e0 [ 169.749887][ T7036] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 169.755157][ T7036] ? __lock_acquire+0x4a5/0x2630 [ 169.760070][ T7036] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 169.766470][ T7036] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 169.773396][ T7036] ? netlink_deliver_tap+0x1ae/0xcc0 [ 169.778680][ T7036] netlink_unicast+0x5aa/0x870 [ 169.783419][ T7036] ? __pfx_netlink_unicast+0x10/0x10 [ 169.788699][ T7036] netlink_sendmsg+0x8b0/0xda0 [ 169.793439][ T7036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.798709][ T7036] ? __might_fault+0x10/0x140 [ 169.803370][ T7036] ____sys_sendmsg+0x9e1/0xb70 [ 169.808117][ T7036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.813376][ T7036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.818648][ T7036] ? __pfx_futex_wake_mark+0x10/0x10 [ 169.823934][ T7036] ___sys_sendmsg+0x190/0x1e0 [ 169.828606][ T7036] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.833805][ T7036] __sys_sendmsg+0x170/0x220 [ 169.838620][ T7036] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.843746][ T7036] ? __x64_sys_futex+0x34f/0x4d0 [ 169.848683][ T7036] do_syscall_64+0x106/0xf80 [ 169.853247][ T7036] ? clear_bhb_loop+0x40/0x90 [ 169.857916][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.863802][ T7036] RIP: 0033:0x7f447db9c819 [ 169.868191][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.887789][ T7036] RSP: 002b:00007f447eb13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.896184][ T7036] RAX: ffffffffffffffda RBX: 00007f447de16090 RCX: 00007f447db9c819 [ 169.904147][ T7036] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 169.912092][ T7036] RBP: 00007f447dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 169.920044][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.927999][ T7036] R13: 00007f447de16128 R14: 00007f447de16090 R15: 00007ffd9a3dae78 [ 169.935977][ T7036] [ 169.939216][ T7036] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 169.946474][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz.3.221 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.957206][ T7036] Tainted: [L]=SOFTLOCKUP [ 169.961501][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 169.971531][ T7036] Call Trace: [ 169.974786][ T7036] [ 169.977693][ T7036] dump_stack_lvl+0x100/0x190 [ 169.982355][ T7036] vpanic+0x552/0x970 [ 169.986311][ T7036] ? __pfx_vpanic+0x10/0x10 [ 169.990794][ T7036] panic+0xd1/0xe0 [ 169.994488][ T7036] ? __pfx_panic+0x10/0x10 [ 169.998881][ T7036] check_panic_on_warn.cold+0x19/0x34 [ 170.004227][ T7036] ? rxe_pool_cleanup+0x46/0x60 [ 170.009054][ T7036] __warn.cold+0x191/0x348 [ 170.013446][ T7036] __report_bug+0x296/0x3d0 [ 170.017937][ T7036] ? rxe_pool_cleanup+0x46/0x60 [ 170.022783][ T7036] ? __pfx___report_bug+0x10/0x10 [ 170.027785][ T7036] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 170.033576][ T7036] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 170.039367][ T7036] ? __flush_workqueue+0x426/0x1200 [ 170.044541][ T7036] ? __mutex_unlock_slowpath+0x15c/0x790 [ 170.050150][ T7036] ? rxe_pool_cleanup+0x46/0x60 [ 170.054980][ T7036] report_bug+0xb2/0x220 [ 170.059204][ T7036] ? rxe_pool_cleanup+0x46/0x60 [ 170.064041][ T7036] handle_bug+0x16a/0x2a0 [ 170.068345][ T7036] exc_invalid_op+0x17/0x50 [ 170.072822][ T7036] asm_exc_invalid_op+0x1a/0x20 [ 170.077648][ T7036] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 170.083084][ T7036] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 56 ca 4e f9 5b c3 cc cc cc cc e8 4b ca 4e f9 90 <0f> 0b 90 e8 42 ca 4e f9 5b c3 cc cc cc cc e8 97 5e bb f9 eb d0 0f [ 170.102662][ T7036] RSP: 0018:ffffc9000461f1a0 EFLAGS: 00010246 [ 170.108701][ T7036] RAX: 0000000000080000 RBX: ffff8880295913b8 RCX: ffffc9000dd44000 [ 170.116647][ T7036] RDX: 0000000000080000 RSI: ffffffff88ba2e75 RDI: ffff888029591438 [ 170.124592][ T7036] RBP: ffffffff88b89100 R08: 0000000000000005 R09: 0000000000000001 [ 170.132537][ T7036] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880295906b0 [ 170.140482][ T7036] R13: ffff88802958ffe0 R14: ffff88802958ffe0 R15: ffff888029591118 [ 170.148450][ T7036] ? __pfx_rxe_dealloc+0x10/0x10 [ 170.153375][ T7036] ? rxe_pool_cleanup+0x45/0x60 [ 170.158206][ T7036] rxe_dealloc+0x25/0xc0 [ 170.162423][ T7036] ib_dealloc_device+0x49/0x230 [ 170.167256][ T7036] __ib_unregister_device+0x396/0x480 [ 170.172609][ T7036] ib_unregister_device_and_put+0x5a/0x80 [ 170.178308][ T7036] nldev_dellink+0x226/0x320 [ 170.182874][ T7036] ? __pfx_nldev_dellink+0x10/0x10 [ 170.188086][ T7036] ? rcu_is_watching+0x12/0xc0 [ 170.192826][ T7036] ? cap_capable+0x107/0x460 [ 170.197394][ T7036] ? bpf_lsm_capable+0x9/0x10 [ 170.202045][ T7036] ? security_capable+0x80/0x260 [ 170.206968][ T7036] ? ns_capable+0xd2/0xf0 [ 170.211279][ T7036] ? __pfx_nldev_dellink+0x10/0x10 [ 170.216369][ T7036] rdma_nl_rcv_msg+0x38a/0x6e0 [ 170.221110][ T7036] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 170.226375][ T7036] ? __lock_acquire+0x4a5/0x2630 [ 170.231300][ T7036] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 170.237697][ T7036] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 170.244622][ T7036] ? netlink_deliver_tap+0x1ae/0xcc0 [ 170.249911][ T7036] netlink_unicast+0x5aa/0x870 [ 170.254652][ T7036] ? __pfx_netlink_unicast+0x10/0x10 [ 170.259914][ T7036] netlink_sendmsg+0x8b0/0xda0 [ 170.264670][ T7036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.269935][ T7036] ? __might_fault+0x10/0x140 [ 170.274616][ T7036] ____sys_sendmsg+0x9e1/0xb70 [ 170.279355][ T7036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.284614][ T7036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.289874][ T7036] ? __pfx_futex_wake_mark+0x10/0x10 [ 170.295140][ T7036] ___sys_sendmsg+0x190/0x1e0 [ 170.299800][ T7036] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.305012][ T7036] __sys_sendmsg+0x170/0x220 [ 170.309604][ T7036] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.314695][ T7036] ? __x64_sys_futex+0x34f/0x4d0 [ 170.319615][ T7036] do_syscall_64+0x106/0xf80 [ 170.324179][ T7036] ? clear_bhb_loop+0x40/0x90 [ 170.328833][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.334699][ T7036] RIP: 0033:0x7f447db9c819 [ 170.339095][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.358679][ T7036] RSP: 002b:00007f447eb13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.367069][ T7036] RAX: ffffffffffffffda RBX: 00007f447de16090 RCX: 00007f447db9c819 [ 170.375012][ T7036] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 170.382971][ T7036] RBP: 00007f447dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 170.390929][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.398890][ T7036] R13: 00007f447de16128 R14: 00007f447de16090 R15: 00007ffd9a3dae78 [ 170.406846][ T7036] [ 170.410151][ T7036] Kernel Offset: disabled [ 170.414451][ T7036] Rebooting in 86400 seconds..