last executing test programs: 9m6.08887159s ago: executing program 2 (id=235): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x60, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe8000000000000000000000000000000100"/40, 0x2a}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000180)=0x1400200bd2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) r9 = syz_open_dev$amidi(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0305710, &(0x7f0000000040)) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 9m1.223870896s ago: executing program 2 (id=242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000140)=0x5, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) sendto$inet(r3, &(0x7f00000000c0)='+', 0xffffffffffffff60, 0xf408, 0x0, 0xf06) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8) getsockopt$inet6_opts(r6, 0x29, 0x3b, 0x0, &(0x7f0000000040)=0xffffffffffffffba) r7 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r7, &(0x7f0000235000/0x4000)=nil, 0x4000) 9m0.062510718s ago: executing program 2 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) bpf$BPF_GET_PROG_INFO(0x3, 0x0, 0x0) 8m59.077051569s ago: executing program 2 (id=249): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, 0x0, r8}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000580)="ddb9547ed38704e9abaf9b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 8m56.554429337s ago: executing program 2 (id=252): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x1) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) r5 = fcntl$dupfd(r4, 0x0, r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, 0x0, &(0x7f0000000340)) r6 = creat(&(0x7f0000000240)='./bus\x00', 0x20) setsockopt$inet_tcp_int(r6, 0x6, 0x8, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) fallocate(r6, 0x3, 0x0, 0x1a00) 8m53.540305456s ago: executing program 2 (id=257): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000044}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$video(0x0, 0x101, 0x800) r3 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e00)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x857305fc5432a946}, {0x0, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 8m36.835815372s ago: executing program 32 (id=257): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000044}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$video(0x0, 0x101, 0x800) r3 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r8, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e00)=@deltfilter={0x34, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x857305fc5432a946}, {0x0, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 6m30.438174987s ago: executing program 3 (id=534): socket$nl_netfilter(0x10, 0x3, 0xc) openat$vmci(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "9fbbb0", 0x0, 0x6c, 0x0, @private1, @local}}}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x8}, {0x800000}, {}, {0x1ff}, {0x0, 0x5}, {0x0, 0x5}, {}, {}, {}, {0x0, 0xe28b}], 0xc}) syz_io_uring_setup(0x297a, &(0x7f0000000200), &(0x7f00000002c0)=0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000d14090e000000000000000008000100000000000800030003"], 0x20}}, 0x0) syz_io_uring_submit(r5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3332, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r7, 0x1, 0x2, &(0x7f0000000000)=""/166, &(0x7f00000000c0)=0xa6) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00008400000005b97c9e9a8d89", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) 6m29.250429019s ago: executing program 3 (id=538): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r6, &(0x7f0000004400), 0x400000000000203, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_disconnect(0xffffffffffffffff) r7 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000000040)={{0x0, 0x1}, 0x0, 0x0, 0x401, {0x0, 0x8}}) setsockopt$inet_msfilter(r3, 0x0, 0x8, &(0x7f0000000100)=ANY=[], 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private0, 0x1, r5}) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8936, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000680)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_io_uring_setup(0xafb, &(0x7f0000000440)={0x0, 0x32c5, 0x2, 0x2, 0x181}, &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f00000006c0), 0x0) 6m24.829086997s ago: executing program 3 (id=548): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x4, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x3, r7, 0x0, 0x7ffffe02, 0xb, 0x1fd, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x9c7, 0x4, {0xa, @raw_data="f7ac256025ed04299415b497c6933bbd2419b84f08b5f181285fbfc442469dad4dc1ae597876dbafe9dc7ff671e7fb15e55e245e3c4b76bcb197bf11ed975cf0d077aab012599f3bee6671577a29f04f836fe04f18196627708657311e65c8c058b5b58ec43ff4ca3185ad21062b1ff9f5109c74dccb0e6e6cfdc9535f6f4418c28f3b098f580324d7a391fcb4b40fa020496f15b29b4abeadee5aae0fb514e78bd6e8a4fbb9999e9b1ceef39cfce78070d0b8ed719af4f6da70d4caa31ad9899aa9ea633052d8f7"}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) 6m23.224011735s ago: executing program 3 (id=550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x10000000, 0x1, 0xa, 0xb}, {0x1, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d3078163030303030303030303030303030372c0001da5280833471f915c7"]) r5 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 6m20.224876563s ago: executing program 3 (id=554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mknod(0x0, 0xc000, 0x0) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) getpid() syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) close(0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) 6m4.431839414s ago: executing program 33 (id=554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mknod(0x0, 0xc000, 0x0) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) getpid() syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) close(0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}]}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) 3m47.998392159s ago: executing program 1 (id=837): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0xffffc90000000000, 0x0, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7ffffe, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') readv(r2, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/200, 0xc8}], 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000ab3000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_tables_matches\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000100)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @rand_addr=0x64010102, 0x0, "0000000000080056f50100bd6178697e3b10d9e021e1dc0500abc133a9eed800", 0x2, 0x200, 0x7, 0x403}, 0x3c) 3m44.304240054s ago: executing program 1 (id=846): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0xfe}]}, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) timerfd_gettime(0xffffffffffffffff, 0x0) connect$inet6(r2, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) getpid() syz_open_pts(0xffffffffffffffff, 0x141601) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r4, 0x807c6406, &(0x7f0000010d00)=""/245) setsockopt$inet6_int(r0, 0x29, 0xce, 0x0, 0x0) 3m42.611180731s ago: executing program 1 (id=849): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010001", 0x7) 3m42.519879335s ago: executing program 1 (id=851): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x4084880) dup(0xffffffffffffffff) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x0, 0x1}, 0xff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000000000008500000027000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x71) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef}, 0xfffffdef}], 0x72368e, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 3m41.547837106s ago: executing program 1 (id=853): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0806000108000604000200000000002000000000aaaa090000000000009399fa54a86c29b575f7"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x6, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = epoll_create1(0x0) r4 = dup(r3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000100)={0x0, r6}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000cc0)={0x0, r6}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) open(0x0, 0x14927e, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/236, 0xec}], 0x1}, 0x20) r7 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0x800455d1, &(0x7f00000014c0)=""/4096) 3m40.437789769s ago: executing program 1 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000640)={0x81, 0x0, 'client0\x00', 0x0, "1e1dc136d6f4bdda", "a973ee4846d9504bc69a10238bcd150b0e95547bd679f139106e78e15913759d"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) getresgid(&(0x7f0000002e80), &(0x7f0000002ec0), &(0x7f0000002f00)) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) close(0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a0001010000000000"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000004100), 0x0, 0x0, 0x0) 3m25.288871021s ago: executing program 34 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000640)={0x81, 0x0, 'client0\x00', 0x0, "1e1dc136d6f4bdda", "a973ee4846d9504bc69a10238bcd150b0e95547bd679f139106e78e15913759d"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) getresgid(&(0x7f0000002e80), &(0x7f0000002ec0), &(0x7f0000002f00)) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) close(0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a0001010000000000"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000004100), 0x0, 0x0, 0x0) 17.807665121s ago: executing program 4 (id=1265): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r3 = open$dir(0x0, 0x6042, 0x80) openat(r3, 0x0, 0x303d01, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000040)={0x1900}) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800"], 0x44}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x470, 0x300, 0x3d8, 0xfeffffff, 0x230, 0x108, 0x3d8, 0x3d8, 0xffffffff, 0x3d8, 0x3d8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) socket$netlink(0x10, 0x3, 0x8) 16.852432084s ago: executing program 4 (id=1269): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) socket(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x400, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x16, 0x0, 0x0, 0x5}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a20000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}}, 0x0) 16.825721658s ago: executing program 7 (id=1270): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x100}}, 0x2400c044) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r0, r5, 0x0, 0x2) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) poll(0x0, 0x0, 0x0) 14.643498495s ago: executing program 7 (id=1271): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc240, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='loginuid\x00') pread64(r0, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r3 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x7c80, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000100)={r8, 0x58, &(0x7f00000102c0)}, 0x10) 14.221405996s ago: executing program 4 (id=1273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r3, &(0x7f0000000580), 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x20000000) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0x32) read(0xffffffffffffffff, &(0x7f00000019c0)=""/4107, 0x100b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) 12.069033925s ago: executing program 0 (id=1279): syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r1, 0x5, 0x4, [0x3, 0x1ff, 0x3, 0x3]}, &(0x7f00000000c0)=0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="9691add7737b11a81b99c1c80ddafd38e051f5cd3585b34b2633f2481e38bd2288", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000006e54d53db8da80bb"], 0x48}}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/4153], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000018c0), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x800000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000700)='svc_alloc_arg_err\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000000)) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000001900)={{}, "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"}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) close(r10) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000005c0), 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 11.925792862s ago: executing program 6 (id=1280): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) socket$inet(0x2, 0x6, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/74, 0x4a}], 0x3a}, 0x2043) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x202000, 0x7, 0xa, 0x0, 0x5, 0x5}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r9, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x1000, 0x0, 0x749bc, 0x3f}) 11.836481495s ago: executing program 5 (id=1281): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x100}}, 0x2400c044) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r0, r5, 0x0, 0x2) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) poll(0x0, 0x0, 0x0) 9.93970421s ago: executing program 6 (id=1282): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x4807}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}]}, 0x30}}, 0x0) ioperm(0x0, 0x12e, 0x8000000000008) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f0000000200)}}, {{&(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000280)="fb9d5a80edc7352a9e5bdcfd1b06c19f17bf52a090319c704111386750112be2a188a31493755b1e7ed2eaba18b977394a8ce79ea5cdb63d101b61651c0850d7d1d9cfc18739aa764f4b1190235923a9b1fdf13cd86935f0eafee9273a24a4ef180b360f4810b42bdc226ba97e0dd981b768d727fd1e2d5566d22e89f79e137217f6511905f1092894186a3a125804027a", 0x91}, {&(0x7f0000000340)="1819d08133a747a2e87150f61fb48c49487256fd7095296e7d", 0x19}, {&(0x7f00000003c0)="176d068590dfa3068e34a85b801a83d35232fc35066b6d1477cb4215b62f1dc0b8ba2129149a8b060d20e104c0dab8287fde648c3e48ccca9b598a953cff5bdfe3638a8698058a22f7e420c1553720c6fc172922ac41c052d53855e61d11f3e74d8213111b864e471e8eff70cebfcd1400", 0x71}, {&(0x7f0000000480)="8d070dbe70adb9b1980fd40edac42c02512f59e56a48d7b44d2c6bb425a5fc04090ec3f321980add8d6684fe03920cf842dabaeb6ed97530c0c3f8299410217a68bb640eeac7d14d5d0797b14b33b6d48cf0", 0x52}, {&(0x7f0000000500)="e1e8cca3fd05eb95caf318794f0ca978c1ae944a1a6de5b900908b543ef2901d41592b856fdb5d9329f9824df1c037626b177531887c6902e3a86db0ad57073c20ce84104610d565d0cf9d7ee7f9f48658fefaa884b94e17c6cce46d74d4e4287a07", 0x62}], 0x5, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xc4, [@loopback, @empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @noop, @noop, @timestamp_prespec={0x44, 0xc, 0xdb, 0x3, 0x2, [{@local}]}, @rr={0x7, 0x13, 0xeb, [@rand_addr=0x64010102, @loopback, @private=0xa010101, @multicast2]}, @ssrr={0x89, 0x7, 0xd4, [@local]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010102, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x3f}, @broadcast}}}], 0xc0}}, {{&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000700)="225f88e9393aef47494ae80f0c74509c01861a364f777c6998e5308d1dc5d926cb9c9bf13ebe89c218c4ffb541dc", 0x2e}, {&(0x7f0000000740)="84a8188d5b8565d2eb82e1aa364b935199d578947438f3f07d65d8332aa7c94c92eac8c83e3cf7cdbcac3d5fc7b4e2f599bcf6d04468dfd2d6769d69fc93b41aaaeecc2720c5077e874240bf4601e454f9fde9a9c7f850864fc9ce48f214978e578eed79a457991279b861bad0eb7a80ad559e0b5f04dafbdeb8a7dd", 0x7c}, {&(0x7f00000007c0)="e0ff2e8ef24569a78fa5f5c51cd01b44c0cf9e0add8bd0703a96112ff489f77c274c06cf516707a5d457dda358da6faf6b7d111f22aeae06edf13f8e25cd7110d46dfc1e4603af6f2e800dc022e746bba44f0596643cfe393eb9b9c29b54d9d5c7323397c3fd67f19878", 0x6a}, {&(0x7f0000000840)="554c04ea2df1ce5cf5748172a6a824aeb5d0b7b4322199f5d1ca8105f27feb241b515e92407dd1ad9e7c00cd8d5091cc710899f0583187c3c72b0c7fe10b083e1512746c4997d55d923154711dc955b52076492c0f07a1b0d1d5f43410c907baaa56be3989864b60501a47546f4779a22a5d7615dd7566eb8d6f", 0x7a}, {&(0x7f00000008c0)="a7d10a68c199a8d46864524a74f417fa72ace712cfe6230466a3b6d12be94770b39ccf57106054abac922ee0aad71a4e319480", 0x33}], 0x5}}], 0x3, 0x2400c010) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x1, 0x8, 0x8001, 0x3, 0x60, 0x8, 0x3}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000a40)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r4, 0x9}, 0xc) close_range(r0, r2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), 0xffffffffffffffff) socket(0x23, 0x5, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002a00090000000000000000000400002c08000c8002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x2f, 0x0, 0x0, 0x3, 0x0, @void, @value}, 0x28) writev(r7, &(0x7f0000001040), 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000400)={0x0, 0x0, 0x0, r9}) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$amidi(&(0x7f0000000000), 0x8000004, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x0) 9.808225532s ago: executing program 0 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0xb8, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) semtimedop(0x0, &(0x7f0000000400)=[{0x4, 0x4, 0x1000}, {0x4, 0x2, 0x800}, {0x3, 0x6, 0x1000}, {0x4, 0x3ff, 0x1800}, {0x0, 0x7ff, 0x1400}, {0x2, 0x1}, {0x1, 0x7, 0x2000}, {0x4, 0x1e}], 0x2aaaaaaaaaaaad26, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000040)) semctl$SETVAL(0x0, 0x2, 0x10, &(0x7f00000003c0)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 9.381000478s ago: executing program 5 (id=1284): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) socket(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x400, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x16, 0x0, 0x0, 0x5}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a20000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}}, 0x0) 8.606509806s ago: executing program 0 (id=1285): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x8081}, 0x8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x4a) sendmsg$key(r1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) r6 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r6, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc532, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x48001) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 8.168909562s ago: executing program 7 (id=1286): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000040)={0x1f, @fixed}, 0x8) ioctl$KVM_GET_MSRS(r1, 0xc0189436, &(0x7f0000000100)) read$FUSE(r0, &(0x7f00000022c0)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x3ef, 0x7fffffff, 0x3, 0x88, r0, 0x0, '\x00', 0x0, r0, 0x0, 0x2, 0x1, 0xe, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000380)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xa7c, 0xffffffffffffffff, 0x0, 0x5c0900a0}, 0x38) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) 7.171580312s ago: executing program 5 (id=1287): socket$inet(0x2, 0x2000080001, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x7fdf, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x6}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, 0x0, 0xa0880, 0x0) shutdown(r3, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r4) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="05000000010001", 0x7) 6.450432147s ago: executing program 6 (id=1288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x60, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe8000000000000000000000000000000100"/40, 0x28}], 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x53, &(0x7f0000000180)=0x1400200bd2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0xbfffd000, 0x800000}], 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070601020100000000000000000000000500010007000000"], 0x1c}}, 0x0) r9 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r9, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r9, 0x1a, &(0x7f0000000140), 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r9, {r9}}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r10, 0x7fffffff) 6.438495693s ago: executing program 4 (id=1289): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11000000040000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x7, 0x8, @local, @mcast1, 0x10, 0x7, 0x4, 0xe2c}}) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x3a, 0x24, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c00)=@deltclass={0x10ac, 0x29, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8, 0xf}, {0x3, 0x7}, {0x0, 0x1c}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_RATE={0x6, 0x5, {0x3, 0x40}}, @tclass_kind_options=@c_htb={{0x8}, {0x1068, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x600000000000}, @TCA_HTB_RATE64={0xc, 0x6, 0x1}, @TCA_HTB_CEIL64={0xc, 0x7, 0xa63f}, @TCA_HTB_CTAB={0x404, 0x3, [0x0, 0x7, 0x627, 0x0, 0x5, 0x5, 0x5, 0x19a, 0x4, 0x1, 0x4, 0xffff, 0xe31, 0x1, 0x2, 0x101, 0x9, 0x2, 0x8000, 0xde, 0x1, 0xd, 0x6, 0x800, 0xd9, 0x7, 0x7, 0x9, 0x100, 0x7, 0xfffffffe, 0x2, 0x10000, 0x5, 0x1, 0x80000000, 0x5, 0x400, 0x7, 0x3, 0x1, 0x401, 0x5, 0xd5e1, 0x0, 0x7, 0x7, 0xf, 0x0, 0x7f, 0x3, 0x5, 0x3, 0x800, 0x101, 0xe90, 0x1, 0x6, 0x400, 0x30, 0x40, 0xcb, 0xeae2, 0x55, 0x0, 0xb2, 0xff, 0xfffffff9, 0xef, 0xffff, 0x6f6, 0x6, 0x7, 0x7, 0x0, 0x9, 0x7ff, 0x9, 0x1, 0x9b08, 0x5, 0xfffffffa, 0x7f, 0x7, 0x7, 0x8000, 0x7ff, 0x4, 0xa8, 0x5, 0x0, 0x8, 0x7, 0x2, 0x9, 0x1, 0xf, 0x7fff, 0x1, 0x8, 0x2, 0x8, 0x5, 0x5, 0x2, 0x100, 0x6, 0x80000000, 0x1, 0xfffffff8, 0x3, 0x3, 0x4, 0x8, 0xd91, 0x9, 0xc1, 0x7, 0xfffffffe, 0x0, 0x8, 0x8f1, 0x40, 0xc, 0x1ff, 0xb72, 0xdc, 0xb, 0xb30b, 0x5, 0x5, 0xfa16, 0x9, 0x8, 0x7fff, 0x6, 0x1, 0x0, 0x6, 0x40, 0x9, 0x7, 0x321, 0x5, 0x1, 0x8000, 0x80000001, 0xd, 0x400, 0x2, 0x2e9, 0x1, 0x0, 0xfffffff8, 0x4, 0x0, 0x400, 0xb, 0x4, 0x4, 0x2, 0x6, 0x3, 0x5, 0x7a, 0xffffffff, 0xffffffff, 0xfffff5ef, 0x9, 0x4, 0x6, 0x6, 0x40, 0x2bf6, 0xd729, 0x1, 0x8, 0x7, 0x1, 0x2, 0x8, 0x5, 0x1, 0x1, 0xf141, 0x6, 0x3, 0x6, 0x4, 0xf, 0x8, 0x0, 0x5, 0x100, 0x3, 0xb5, 0xde09, 0x2, 0xffffd1c7, 0x200, 0x0, 0x6, 0x7fffffff, 0x7, 0x4, 0x3, 0xff800000, 0x8, 0x200, 0x6, 0x0, 0x9, 0xfff, 0xc3c, 0xe5a2, 0x9, 0x5, 0xca49, 0x8, 0x800, 0x1, 0x4, 0x4084, 0x3fe0000, 0xfffffffe, 0x79, 0x700000, 0x92ed, 0xb0b, 0x7d156a29, 0x80000000, 0x6, 0xfffff801, 0x1, 0xcb50, 0x0, 0x2, 0x6, 0x9, 0x30, 0xc86, 0xf, 0x8000, 0x2, 0x2, 0x6, 0x7, 0x0, 0x5, 0x3, 0x200, 0x7, 0x4, 0x2, 0x3, 0xa82]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x0, 0x7, 0xffff, 0xb, 0x7}, {0x9, 0x1, 0x10, 0x3, 0x7, 0xff}, 0x8, 0x4, 0x437663e9, 0x9, 0xf}}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x5f, 0x2, 0x7, 0xfffffff8, 0x2, 0xfffffffc, 0x7fffffff, 0x10001, 0xfffff001, 0x1, 0x0, 0x5, 0x80000000, 0x2, 0x800000, 0x3ff, 0x1, 0x45183188, 0x1, 0x6cb4, 0xf2db0ed1, 0x7fffffff, 0x7f, 0x5, 0xa, 0x8, 0x9, 0x3a2, 0x5ed1, 0x4, 0xffffffff, 0x1, 0x1ff00, 0x2, 0xdc5a, 0xa000, 0x3, 0xc, 0x9, 0xd83, 0x9, 0x63a, 0x8, 0x6, 0xffffffff, 0x1, 0xe, 0x0, 0x1ff, 0x77, 0x4, 0x80000000, 0x101, 0x5, 0x1, 0x4, 0x4, 0x7, 0x3, 0x9d2, 0x9, 0x8, 0x101, 0x3, 0x0, 0x3, 0x80000001, 0xe7, 0x9970, 0xa, 0xfffffffe, 0x0, 0xa58, 0x3, 0x9, 0xe, 0x9, 0x65835b87, 0x6, 0xfffffffd, 0xd, 0x400, 0x6, 0x66f9, 0x9, 0x8001, 0xff, 0xfffffcdd, 0x5, 0x7ff, 0x6, 0xf3e, 0x13a, 0x401, 0x4, 0x1, 0x5, 0x5, 0xddb2, 0x2, 0x100, 0x4f7, 0x80000000, 0xa13, 0x0, 0xc, 0x3, 0x4, 0x4, 0x3, 0x8, 0x8, 0x468, 0x95, 0x7, 0xffffffff, 0xac, 0x1000, 0x665, 0x400, 0x7, 0x400, 0x1, 0x0, 0x1f62, 0x320e, 0x4, 0x3ce8, 0x8, 0x8, 0x4, 0x1, 0x2, 0x2be2, 0x1c7, 0xbd, 0x4, 0x6d3, 0x5, 0x81, 0x9, 0x4, 0x6ec1, 0x5, 0x1, 0x100, 0x8, 0x4, 0x8, 0x2, 0x8, 0x2, 0x400, 0x2, 0xb9a0, 0x4, 0x8, 0x7, 0x187d, 0x200, 0x4, 0x8, 0x7, 0x5, 0x4, 0x3, 0x5a, 0xfffffffa, 0x9, 0x0, 0x6, 0x8, 0x0, 0x8, 0x4, 0x3, 0x8000, 0x1, 0xd571, 0x8, 0x5, 0xffff, 0x3ff, 0x7, 0x400, 0x4, 0x76b7, 0x8, 0x0, 0x3, 0x6, 0x6, 0x0, 0x1, 0x10000, 0x28b0, 0x7, 0xaa, 0xfffffffa, 0xa3, 0x101, 0x8, 0x40, 0xa, 0x7, 0x4, 0x8, 0x5, 0x8, 0x42, 0xd48e, 0x5, 0x368, 0x2, 0xffff, 0x7, 0x6, 0x3, 0x6, 0x6, 0xd, 0x10, 0xbb69, 0x7, 0x6, 0x7f, 0x8, 0x5, 0x95a, 0x0, 0x0, 0x9, 0x40, 0x7, 0x101, 0x1, 0x82e2, 0x7, 0x0, 0x8, 0x8, 0x8, 0x6, 0x4, 0x8, 0x533d000, 0x400, 0x80, 0xdd9b, 0x4, 0x6, 0x10000, 0x3, 0x1000, 0x401]}, @TCA_HTB_CTAB={0x404, 0x3, [0x9, 0xffffffff, 0x3, 0x2, 0x9, 0x6, 0x0, 0x10001, 0x1, 0x8, 0x400, 0xfffffff7, 0x7, 0xccf, 0x0, 0x3, 0xfffffffe, 0x3ff, 0xe, 0xffffa19e, 0x7fffffff, 0x49, 0x9, 0xf63, 0x0, 0x47, 0x6, 0x1, 0x0, 0x1000, 0x0, 0x1, 0xdaa9, 0x3, 0xb, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x9c, 0xe8db, 0x8, 0xfff, 0x6, 0x1ff, 0xc8, 0x8, 0x4, 0x8, 0xc, 0x3, 0xb, 0x6, 0x5, 0x9, 0x5, 0x4, 0x2740, 0x744, 0x7, 0x7fffffff, 0x1, 0x2, 0x9, 0x7, 0x7, 0x4, 0x7ff, 0x0, 0x100, 0x9, 0x6, 0xffffffff, 0x1, 0x3, 0x7f9d, 0x7, 0x8a, 0x8, 0xfffffff9, 0x7, 0x3, 0x2, 0x3c, 0x2, 0x5, 0x72, 0xd9, 0x1, 0x8, 0x0, 0x3, 0x8, 0x80000000, 0xfffffff9, 0x5, 0x2, 0x0, 0x527, 0x2, 0xb, 0x9, 0x33d, 0x4, 0x101, 0x5, 0x4, 0x6, 0x7, 0x8, 0x6, 0x2, 0x3, 0x40, 0x6541, 0x4, 0xbce, 0x4, 0xffff, 0x800, 0xffffffff, 0x3, 0x5, 0x7, 0xffffffde, 0xfffffff7, 0x9, 0x7f, 0x8, 0x0, 0x4, 0x0, 0x800, 0x8, 0x401, 0x1ff, 0x302, 0x10000, 0xffffffff, 0x7, 0x1, 0x0, 0x400, 0x5, 0xb, 0x9, 0xfff, 0x1000, 0x5603, 0x4, 0x0, 0x8, 0x0, 0x5, 0xffffffff, 0x9, 0x1, 0x3, 0x1, 0x3, 0x1000, 0xab92, 0xf0, 0x7, 0xffffff92, 0x9ca1, 0x1, 0x4, 0x8, 0x1, 0xffff7fff, 0x7, 0x12, 0x0, 0xcec, 0x1, 0xff, 0x100, 0x1e, 0x7, 0x8, 0x5, 0x10, 0x1, 0x2, 0x800, 0x7, 0x8001, 0x9, 0xd, 0x800, 0xfffffff3, 0x9, 0x4, 0x10000, 0x3, 0x988d, 0x80, 0xbe63, 0x5, 0x40, 0x2, 0x6, 0x8, 0x400, 0x40, 0x1, 0x7, 0x8, 0x3, 0x6, 0x9, 0x6, 0xffffffff, 0x1c98, 0x0, 0x8, 0x7, 0x5, 0x80000001, 0xf196, 0x3, 0x0, 0x6, 0xfffffffe, 0x3, 0xc, 0x8001, 0x2, 0xfff, 0x345f, 0x9486, 0x8, 0x0, 0x2, 0x8, 0x0, 0x9, 0xe, 0x7, 0x6, 0x7, 0x10, 0xfffffffc, 0x6, 0x1, 0x400, 0x8, 0x100, 0x10001, 0x9, 0x3, 0x7]}, @TCA_HTB_RTAB={0x404, 0x4, [0x2744bf0e, 0x5, 0x900000, 0x2, 0x9, 0x70c, 0x0, 0xade, 0xfffffff8, 0x10, 0x80000000, 0x3, 0x9, 0x6, 0x9, 0x3ff, 0x5, 0x7, 0x9, 0x2545, 0x5, 0x6, 0x0, 0x6, 0x1ff, 0xfffffff7, 0x2, 0x3, 0x96da, 0x10000, 0x4, 0x3, 0x6, 0x6, 0x1, 0x3, 0x0, 0x1, 0x7, 0x8, 0x0, 0x65b9, 0x800, 0x7ff, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x8, 0x5, 0x7, 0x40, 0x80, 0x62, 0x8, 0x4, 0x7, 0xd, 0x1, 0x7, 0x1, 0x2d, 0x80000001, 0x7, 0x0, 0x0, 0x85f, 0x5, 0x5, 0xe32b, 0x3, 0xfffffff9, 0x5, 0x4, 0x3, 0xe76, 0xfffffffa, 0xfffffff7, 0xffff8000, 0x10001, 0xb2, 0x9, 0x5, 0x8, 0x1, 0x8138, 0x3, 0x4, 0xfffffa50, 0x0, 0x8, 0x5, 0x9, 0x429094f8, 0x5, 0x2f5d, 0x2, 0x1, 0x3, 0x9, 0x2, 0x6, 0x2, 0xc, 0x200, 0x0, 0x8, 0x2, 0x9, 0x2, 0x3, 0x9, 0x1, 0xba63, 0x9, 0xa9b, 0x9, 0x5, 0x5, 0x8, 0x101, 0x80, 0x8, 0xfffffbff, 0x4, 0xac0, 0x5, 0x9, 0x1de3, 0x6, 0x7fffffff, 0x0, 0x4a5b5880, 0x4, 0x1, 0x94, 0x3, 0x7, 0xd, 0x400, 0x4, 0x7b02, 0x6, 0xfffeffff, 0xfff, 0xf, 0x9, 0x7, 0x9, 0xdd, 0x0, 0x3, 0x40, 0x0, 0x4, 0x1, 0xb04, 0x7f, 0x6, 0x4, 0x1, 0x3, 0xfffffff5, 0x0, 0x3000000, 0x3, 0x697, 0x4f5e, 0x4, 0x2, 0x0, 0x8, 0x9, 0xd, 0x0, 0x7, 0x7, 0x4, 0x80000001, 0x19, 0x6, 0xe, 0x8001, 0x7f, 0x6, 0x3, 0x2, 0x1, 0x2, 0xbc, 0x5, 0x4, 0x4, 0x2377, 0x400, 0x6, 0x7fffffff, 0x9, 0x51, 0xfffffffc, 0x3ff, 0x9, 0x0, 0x9, 0x259, 0x2a9b, 0x6, 0xfffffffe, 0x401, 0x6, 0xffff8001, 0xf4b, 0x8, 0xd5b, 0x77e9, 0x0, 0x9, 0x2, 0xc0000000, 0x800, 0xdf, 0x3, 0x7a2, 0x8001, 0x3, 0x1, 0x7, 0x8, 0x1, 0x81, 0x5db1, 0x101, 0x0, 0x7, 0xa, 0xcd, 0x3, 0xffffffff, 0x5, 0x8, 0xfffffffe, 0x3dceebc1, 0xfffffffb, 0x100, 0x0, 0x0, 0x3, 0xffffffff, 0x2, 0x3, 0x800, 0x0, 0x2, 0xd, 0xfffffffe]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0x10ac}, 0x1, 0x0, 0x0, 0x10}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@tcp6}, 0x20) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088040010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a0000000000080009000000000008000a00000000000c000b8008000900000000001c000b8008000c00000000000000090000000000080009000000000024000b80080009000000000008000900000000000800090000000000080009000000000054000b8008000a00004fd2"], 0x16c}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$inet(0x2, 0x2, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r7]) 6.437236299s ago: executing program 7 (id=1290): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) socket(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x400, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x16, 0x0, 0x0, 0x5}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0], 0x21c}}, 0x0) 5.375072903s ago: executing program 7 (id=1291): memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r1 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d", 0x63, 0x0, 0x0, &(0x7f00000015c0)="89ef1284c86555bfe69b541fc18b8f329814f57bd00b1b3a") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="030000000000000000000000050000000000000000000000030000000000f100ffffffff"]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0xfff9, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64=r7, @ANYRES32=r1, @ANYRES16=r2, @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x2010) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x85902, 0x0) sendfile(r8, r8, 0x0, 0x40008) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x810) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4.899711381s ago: executing program 5 (id=1292): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x4f24, @remote={0xac, 0xc}}}}, 0x118) 4.812485079s ago: executing program 5 (id=1293): syz_open_procfs$namespace(0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) socket(0x28, 0x3, 0x3) r2 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x82, 0x2800) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001"], 0xe4}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000a747", @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32=0x0, @ANYBLOB='<\x00'], 0x58}, 0x1, 0xf000}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000180)={0x0, 0xb00, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b00010a000000000000001807"], 0x114}], 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0xfffffffe, 0x9b, 0x1014, 0x0, 0x1, 0xa, 0x2, 0x700}}) r8 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x2cf, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001e2605c10d1050120bf5e010203010902bd0201020b80000904cf0405e7ffc2020921020001e722f1021600805a0d7828f374454edd1ca4a77ce11c46a0eef60905001200000805fad6008368c11ee7bc1c645b4ac7d05396184fe688bc44caec521c3080cfbcba093b31cb50ae51b530f0b4b155a17986aa1fd29b7558d63b2114e40c8f36ad9aeb167e3abe3eb32dc6fa09a7279c6fd51abfdf06ed15fc0b360db70c48a091e85ffa483b7e26951fad5d326822244ac82d438182621a7068e12d784015b0d84e22690c5e9f63a1dc2ffa8d790e7b5a07cfcede44eba6181006b0221790e0751506fb587543a745985697e2f0ff15f8df83eaa90d98ac6c5fc2aec08edae6f297a092b2cbf0a50b4908dff0a3bb3ebcadb034bf1893cce2090501020800080f0009050f000002050708552112ab071ac879ec3d26b00f45b756c252b25865bdca56296ee383e56f5703b3a8cc1c91796e75f80e59525b91a513ac36d462506dc0d59e1d525bb6e3cd909728096c709bb5cac65ba9c150a7c88123d95424b8c120253b6cc9cb2e1333d9059fc1d8b9c0a421ba9b539ea95a8662e6ba3e0362fa2c1583db6fed446d3c5c949e5cf207869bc5662b6fb8cb5b1266df05203a4bf3c115db2323d88c8e2b9da065b46e869b068400e47d05f4e1bd2a65c84593142ef22fa6415c76fb1e6706551831e48ad30eea3a73c40a21cb3c5614dda7709d0677045cd2e0c316648a9e53fb0dd6b3749519"], &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x0, 0x9, 0x61, 0x10, 0x4}, 0xa2, &(0x7f0000000580)={0x5, 0xf, 0xa2, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xd, 0x8, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x8, 0x7f, 0x6}, @generic={0x67, 0x10, 0x1, "83b9ee3fb8573105c96f0ae7a38400480fbccda267fa6dbbb2f8b6df6b04c698e553d1451055d2b5b64afa00348361c7ce33d8d490a16d703205d5fe02a8a9bf68e56695c8d933c367f89ff61680b78669b8cb5b86d511a0a0de103e7d8a0929077e7b67"}, @ssp_cap={0x14, 0x10, 0xa, 0xff, 0x2, 0x9, 0x0, 0x1, [0xff0000, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x4, 0x4, 0x9, 0x2}, @ptm_cap={0x3}]}}) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffff6}]}, 0x10) sendto$packet(r5, &(0x7f0000000180)='`', 0x1, 0x0, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x1, 0x0, 0x6, @random="2d990300"}, 0x14) 3.880422477s ago: executing program 6 (id=1294): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x0, 0xc89e, 0x6}, 'syz0\x00', 0x4000003e}) r1 = fsopen(&(0x7f00000002c0)='rpc_pipefs\x00', 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) setrlimit(0x1, &(0x7f0000000100)={0x800000000ffff, 0x38}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shutdown(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup2(r6, r5) close_range(r7, 0xffffffffffffffff, 0x0) getuid() getcwd(0x0, 0x0) getcwd(&(0x7f0000000000)=""/25, 0x19) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) r9 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r9, 0x81000000) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.86954275s ago: executing program 0 (id=1295): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mremap(&(0x7f0000aeb000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) capset(0x0, 0x0) socket(0x2, 0x3, 0xff) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002100070100000000000000000102000008000180"], 0x1c}}, 0x0) mremap(&(0x7f0000c41000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f00004c3000/0x3000)=nil) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r5, 0x0, 0x0, 0xff7f, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f00000002c0)=0x19) read$dsp(r6, &(0x7f0000000200)=""/168, 0xa8) 3.657691585s ago: executing program 4 (id=1296): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0xa}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981) r5 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c9201ef8001a00050017a6160008000002cf000f00022983d6e91c716454001a4a08"], 0x23) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000080)={0x10001, r5}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r8 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x810, r8, 0x5687e000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') ioctl$BLKRRPART(r8, 0x125f, 0x0) 2.414946187s ago: executing program 7 (id=1298): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x401, 0xfffffffe, 0x35314142, 0x0, 0x0, 0x8, 0x8, 0x2, 0x0, 0x0, 0x2, 0x1}}) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) close(0x3) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) rt_sigsuspend(0x0, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)="d70e8365fbf081299cf152c39107fa8e6989db079fba116ae42df9fc4bbe692a3e8e4bff7ba32472c4a865b4712fda8b33a174a946182a9fafc1ad3c3bd6081c3809a589a5145179476f053a1fca89f4b486660c5af8", 0x56, 0xfffffffffffffffd) 2.409835727s ago: executing program 0 (id=1299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r3, &(0x7f0000000580), 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = syz_open_dev$radio(0x0, 0x1, 0x2) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x20000000) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000000c0)=0x32) read(0xffffffffffffffff, &(0x7f00000019c0)=""/4107, 0x100b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) 1.626837726s ago: executing program 5 (id=1300): socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc0305602, &(0x7f0000000200)={0x1}) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000079c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000007c00)={0x0, 0x700, &(0x7f0000007bc0)={&(0x7f0000007a00)={0x1c, r3, 0x1, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x80207450, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$kcm(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) write$cgroup_int(r5, &(0x7f0000000040)=0x15c, 0x12) socket$nl_generic(0x10, 0x3, 0x10) 1.612221556s ago: executing program 6 (id=1301): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x80, 0x0, 0xffffffffc2680a4f}) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000034700)=""/102400, 0x19000) r4 = syz_open_procfs(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000002000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r6, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xb, 0x1, 0x4f3, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f00000004c0)=[{}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000040)="4dc07f94", 0x4) 57.932981ms ago: executing program 4 (id=1302): ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffff9, 0x80000001, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) syz_io_uring_setup(0x3ed9, 0x0, 0x0, &(0x7f0000000140)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xf61}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r1 = socket(0x22, 0x2, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x3, 0x0, 0x1}, 0x0, &(0x7f0000000100)={0xb}, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000200)={0x41, 0x0, 0x3, 0xfffe}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000300)={0xd6b, {{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x88) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = open(0x0, 0x400101042, 0x0) mount(&(0x7f00000002c0)=@nullb, 0x0, 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) io_uring_enter(r4, 0x291c, 0x81d3, 0x8, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) 0s ago: executing program 0 (id=1303): socket$inet(0x2, 0x2000080001, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x7fdf, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x6}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0xa0880, 0x0) shutdown(r3, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r4) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="05000000010001", 0x7) kernel console output (not intermixed with test programs): capability permissive=1 [ 258.549640][ T29] audit: type=1400 audit(1732728393.644:438): avc: denied { setrlimit } for pid=8026 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 258.864224][ T29] audit: type=1400 audit(1732728394.104:439): avc: denied { write } for pid=8030 comm="syz.5.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 259.504128][ T5850] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 259.512770][ T5850] Bluetooth: hci1: Injecting HCI hardware error event [ 259.521411][ T5153] Bluetooth: hci1: hardware error 0x00 [ 260.273559][ T29] audit: type=1400 audit(1732728395.564:440): avc: denied { write } for pid=8032 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 262.141078][ T5153] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 264.374332][ T8095] serio: Serial port ptm0 [ 264.468173][ T8090] veth1_macvtap: left promiscuous mode [ 264.598603][ T8090] macsec0: entered promiscuous mode [ 264.710849][ T8090] macsec0: entered allmulticast mode [ 266.289632][ T8109] ceph: No mds server is up or the cluster is laggy [ 266.289868][ T5889] libceph: connect (1)[c::]:6789 error -101 [ 266.623064][ T5889] libceph: mon0 (1)[c::]:6789 connect error [ 267.401722][ T8137] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.424684][ T8167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 271.286598][ T8169] overlayfs: cannot append lower layer [ 271.362335][ T8172] program syz.0.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.775769][ T29] audit: type=1400 audit(1732728406.674:441): avc: denied { write } for pid=8162 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.067564][ T29] audit: type=1400 audit(1732728408.994:442): avc: denied { append } for pid=8175 comm="syz.1.422" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 274.090302][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.370123][ T8215] bridge0: port 2(gretap0) entered blocking state [ 275.377539][ T8215] bridge0: port 2(gretap0) entered disabled state [ 275.388918][ T8215] gretap0: entered allmulticast mode [ 275.404267][ T8215] gretap0: entered promiscuous mode [ 275.413104][ T8215] bridge0: port 2(gretap0) entered blocking state [ 275.419905][ T8215] bridge0: port 2(gretap0) entered forwarding state [ 275.887017][ T29] audit: type=1400 audit(1732728410.644:443): avc: denied { append } for pid=8214 comm="syz.4.427" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.909606][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.531747][ T29] audit: type=1400 audit(1732728411.804:444): avc: denied { setopt } for pid=8204 comm="syz.1.436" lport=37465 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 277.036628][ T8223] ceph: No mds server is up or the cluster is laggy [ 277.044703][ T5886] libceph: connect (1)[c::]:6789 error -101 [ 277.051304][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 277.679757][ T8247] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 278.087093][ T29] audit: type=1400 audit(1732728412.864:445): avc: denied { ioctl } for pid=8239 comm="syz.3.430" path="socket:[15310]" dev="sockfs" ino=15310 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 278.111625][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.288126][ T8263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.298420][ T29] audit: type=1400 audit(1732728413.724:446): avc: denied { execute } for pid=8250 comm="syz.5.431" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 279.914494][ T5153] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 280.068066][ T8264] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 280.774750][ T8283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.438'. [ 281.435286][ T29] audit: type=1400 audit(1732728416.074:447): avc: denied { mount } for pid=8274 comm="syz.0.438" name="/" dev="hugetlbfs" ino=16429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 281.620865][ T8289] ieee802154 phy0 wpan0: encryption failed: -22 [ 283.238540][ T8308] netlink: 'syz.5.443': attribute type 30 has an invalid length. [ 283.833170][ T29] audit: type=1400 audit(1732728418.634:448): avc: denied { bind } for pid=8302 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 284.082356][ T8314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.690797][ T29] audit: type=1400 audit(1732728421.664:449): avc: denied { ioctl } for pid=8325 comm="syz.4.448" path="socket:[16507]" dev="sockfs" ino=16507 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 286.728110][ T8327] Zero length message leads to an empty skb [ 286.747232][ T29] audit: type=1400 audit(1732728422.024:450): avc: denied { accept } for pid=8325 comm="syz.4.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.885201][ T29] audit: type=1400 audit(1732728422.534:451): avc: denied { create } for pid=8338 comm="syz.5.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 288.010808][ T29] audit: type=1400 audit(1732728422.544:452): avc: denied { write } for pid=8338 comm="syz.5.450" path="socket:[15498]" dev="sockfs" ino=15498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 288.234080][ T8354] atomic_op ffff888029cdf998 conn xmit_atomic 0000000000000000 [ 289.393550][ T8367] netlink: 'syz.3.454': attribute type 9 has an invalid length. [ 290.065909][ T8367] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.454'. [ 293.122318][ T8418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.901348][ T8430] syz.4.463: attempt to access beyond end of device [ 293.901348][ T8430] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 293.914441][ T8430] efs: cannot read volume header [ 294.230861][ T29] audit: type=1400 audit(1732728429.104:453): avc: denied { mounton } for pid=8424 comm="syz.4.463" path="/93/file0" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 294.493184][ T8436] capability: warning: `syz.3.464' uses deprecated v2 capabilities in a way that may be insecure [ 294.510266][ T29] audit: type=1400 audit(1732728429.794:454): avc: denied { write } for pid=8433 comm="syz.3.464" path="socket:[15635]" dev="sockfs" ino=15635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.473581][ T8450] ieee802154 phy0 wpan0: encryption failed: -22 [ 295.729146][ T8434] syz.1.462 (8434): drop_caches: 2 [ 296.820871][ T8463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.009590][ T5850] Bluetooth: hci5: unknown advertising packet type: 0xae [ 298.009656][ T5850] Bluetooth: hci5: Malformed LE Event: 0x02 [ 298.439874][ T8482] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 298.991002][ T29] audit: type=1400 audit(1732728433.954:455): avc: denied { name_bind } for pid=8469 comm="syz.1.470" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 299.652095][ T8481] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 299.660410][ T8481] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 299.669701][ T8481] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 299.701537][ T8491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.289391][ T29] audit: type=1400 audit(1732728435.574:456): avc: denied { ioctl } for pid=8511 comm="syz.5.476" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 302.851148][ T8528] ieee802154 phy0 wpan0: encryption failed: -22 [ 305.013286][ T29] audit: type=1400 audit(1732728439.604:457): avc: denied { connect } for pid=8541 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 305.096398][ T8560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.226568][ T8564] vxcan1: entered promiscuous mode [ 305.240103][ T8564] vxcan1: left promiscuous mode [ 305.253963][ T8564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.484'. [ 306.112340][ T29] audit: type=1400 audit(1732728441.394:458): avc: denied { create } for pid=8571 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 306.241568][ T8576] bridge0: port 3(erspan0) entered blocking state [ 306.248124][ T8576] bridge0: port 3(erspan0) entered disabled state [ 306.255049][ T8576] erspan0: entered allmulticast mode [ 306.261218][ T8576] erspan0: entered promiscuous mode [ 306.266794][ T8576] bridge0: port 3(erspan0) entered blocking state [ 306.273320][ T8576] bridge0: port 3(erspan0) entered forwarding state [ 306.437299][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 306.476734][ T8572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.488'. [ 308.153211][ T8605] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 308.153211][ T8605] The task syz.3.491 (8605) triggered the difference, watch for misbehavior. [ 308.257427][ T29] audit: type=1400 audit(1732728443.534:459): avc: denied { lock } for pid=8601 comm="syz.4.492" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 308.281750][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.345908][ T8616] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.166776][ T29] audit: type=1400 audit(1732728447.404:460): avc: denied { nlmsg_read } for pid=8633 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 313.340892][ T8665] process 'syz.3.502' launched '/dev/fd/5' with NULL argv: empty string added [ 313.979812][ T29] audit: type=1400 audit(1732728448.634:461): avc: denied { execute_no_trans } for pid=8655 comm="syz.3.502" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 314.005058][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.477226][ T29] audit: type=1326 audit(1732728450.714:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 315.500520][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.714049][ T29] audit: type=1326 audit(1732728450.714:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 315.737312][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.815295][ T29] audit: type=1326 audit(1732728450.714:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 315.838507][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.844941][ T29] audit: type=1326 audit(1732728450.714:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 315.868125][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.874484][ T29] audit: type=1326 audit(1732728450.714:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 315.898136][ T29] audit: type=1326 audit(1732728450.724:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 315.921236][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.927681][ T29] audit: type=1326 audit(1732728450.724:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 315.951760][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.958949][ T29] audit: type=1326 audit(1732728450.724:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8669 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 316.358724][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 316.941659][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.948107][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.081531][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.508'. [ 318.993942][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 318.993960][ T29] audit: type=1400 audit(2000000003.030:479): avc: denied { create } for pid=8707 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 319.355100][ T29] audit: type=1400 audit(2000000003.900:480): avc: denied { ioctl } for pid=8712 comm="syz.5.515" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 320.207365][ T29] audit: type=1326 audit(2000000004.750:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8718 comm="syz.3.519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3784b80809 code=0x0 [ 320.254315][ T8724] netlink: 'syz.3.519': attribute type 4 has an invalid length. [ 320.330801][ T8734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 320.941473][ T8747] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 320.951160][ T8747] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 321.018063][ T8748] netlink: 244 bytes leftover after parsing attributes in process `syz.5.522'. [ 323.057477][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.528'. [ 323.807746][ T8774] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.798496][ T8784] netlink: 68 bytes leftover after parsing attributes in process `syz.4.531'. [ 326.927878][ T29] audit: type=1400 audit(2000000011.430:482): avc: denied { validate_trans } for pid=8780 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 327.165225][ T8787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.350805][ T29] audit: type=1400 audit(2000000011.890:483): avc: denied { write } for pid=8785 comm="syz.5.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 327.630951][ T5924] IPVS: starting estimator thread 0... [ 328.189486][ T8793] IPVS: using max 36 ests per chain, 86400 per kthread [ 328.318517][ T29] audit: type=1326 audit(2000000012.860:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8794 comm="syz.0.535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x0 [ 328.635436][ T29] audit: type=1400 audit(2000000013.040:485): avc: denied { connect } for pid=8808 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 329.807762][ T8812] netlink: 'syz.0.535': attribute type 4 has an invalid length. [ 330.897072][ T29] audit: type=1804 audit(2000000014.830:486): pid=8822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.540" name="/newroot/108/file0" dev="fuse" ino=1 res=1 errno=0 [ 331.063344][ T29] audit: type=1400 audit(2000000015.240:487): avc: denied { bind } for pid=8819 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 332.253120][ T8838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.612119][ T8853] bridge0: port 3(erspan0) entered blocking state [ 333.619457][ T8853] bridge0: port 3(erspan0) entered disabled state [ 333.628582][ T8853] erspan0: entered allmulticast mode [ 333.649219][ T8853] erspan0: entered promiscuous mode [ 333.658930][ T8853] bridge0: port 3(erspan0) entered blocking state [ 333.665515][ T8853] bridge0: port 3(erspan0) entered forwarding state [ 339.476456][ T8905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.801652][ T29] audit: type=1400 audit(2000000024.280:488): avc: denied { bind } for pid=8906 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.095470][ T8913] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.695743][ T8927] usb usb8: usbfs: process 8927 (syz.0.561) did not claim interface 0 before use [ 342.952171][ T5850] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 346.587402][ T5850] Bluetooth: hci5: link tx timeout [ 346.597367][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 346.777246][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 346.812751][ T5850] Bluetooth: hci5: link tx timeout [ 346.817923][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 346.841302][ T5850] Bluetooth: hci5: link tx timeout [ 346.847576][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 347.046842][ T29] audit: type=1326 audit(2000000031.550:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 347.070178][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.099102][ T9004] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.275952][ T5850] Bluetooth: hci5: link tx timeout [ 347.281131][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 347.289957][ T29] audit: type=1326 audit(2000000031.550:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 347.320100][ T29] audit: type=1326 audit(2000000031.810:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 347.348718][ T29] audit: type=1326 audit(2000000031.810:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 347.371954][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.392941][ T29] audit: type=1326 audit(2000000031.810:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 348.054972][ T5850] Bluetooth: hci5: link tx timeout [ 348.060130][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 348.244163][ T29] audit: type=1326 audit(2000000031.810:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 348.319624][ T29] audit: type=1326 audit(2000000031.810:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 348.343593][ T29] audit: type=1326 audit(2000000031.810:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 348.367306][ T29] audit: type=1326 audit(2000000031.810:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 348.413310][ T29] audit: type=1326 audit(2000000031.810:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9000 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 348.440415][ T5850] Bluetooth: hci5: link tx timeout [ 348.445769][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 348.700562][ T5850] Bluetooth: hci5: command 0x0406 tx timeout [ 349.085706][ T5850] Bluetooth: hci5: link tx timeout [ 349.096023][ T5850] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 349.569157][ T9055] lo speed is unknown, defaulting to 1000 [ 349.575564][ T9055] lo speed is unknown, defaulting to 1000 [ 349.586090][ T9055] lo speed is unknown, defaulting to 1000 [ 349.604396][ T9055] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 349.633444][ T9055] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 350.054911][ T9055] lo speed is unknown, defaulting to 1000 [ 350.062769][ T9055] lo speed is unknown, defaulting to 1000 [ 350.070038][ T9055] lo speed is unknown, defaulting to 1000 [ 350.076615][ T9055] lo speed is unknown, defaulting to 1000 [ 350.083812][ T9055] lo speed is unknown, defaulting to 1000 [ 351.412253][ T9076] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9076 comm=syz.5.582 [ 353.003001][ T9081] mac80211_hwsim hwsim7 ÿÿÿÿÿÿ: renamed from wlan1 [ 354.427543][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 354.427554][ T29] audit: type=1400 audit(2000000038.940:521): avc: denied { map } for pid=9090 comm="syz.4.589" path="socket:[18784]" dev="sockfs" ino=18784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 354.808434][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.820328][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.839999][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.634420][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.642115][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 355.649581][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.031955][ T9114] lo speed is unknown, defaulting to 1000 [ 356.277686][ T9114] chnl_net:caif_netlink_parms(): no params data found [ 356.615945][ T9140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.726122][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.733351][ T9114] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.751730][ T9114] bridge_slave_0: entered allmulticast mode [ 358.287694][ T5850] Bluetooth: hci0: command tx timeout [ 358.333587][ T9114] bridge_slave_0: entered promiscuous mode [ 358.400308][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.408864][ T9114] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.501458][ T9114] bridge_slave_1: entered allmulticast mode [ 360.071518][ T9114] bridge_slave_1: entered promiscuous mode [ 360.114651][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.129063][ T9114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.160912][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.196752][ T9114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.300841][ T5153] Bluetooth: hci0: command tx timeout [ 360.580469][ T9114] team0: Port device team_slave_0 added [ 361.347221][ T9114] team0: Port device team_slave_1 added [ 362.075105][ T9114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.103215][ T9114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.410739][ T9114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.416030][ T5153] Bluetooth: hci0: command tx timeout [ 362.550546][ T9114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.569869][ T9114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.579686][ T9192] Cannot find set identified by id 0 to match [ 362.710952][ T9114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.006743][ T9114] hsr_slave_0: entered promiscuous mode [ 363.037865][ T9114] hsr_slave_1: entered promiscuous mode [ 363.059945][ T9114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.128487][ T9114] Cannot create hsr debugfs directory [ 364.460930][ T9206] Bluetooth: hci0: command tx timeout [ 365.798252][ T9225] pimreg: entered allmulticast mode [ 366.320507][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 366.361142][ T9114] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 366.371691][ T29] audit: type=1400 audit(2000000050.920:522): avc: denied { write } for pid=9209 comm="syz.4.610" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 366.433405][ T9114] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 366.444568][ T9114] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 366.488463][ T9114] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 366.552967][ T9206] Bluetooth: hci0: command 0x0405 tx timeout [ 366.687277][ T9114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.787687][ T9114] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.854821][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.861927][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.923733][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.930867][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.361688][ T29] audit: type=1400 audit(2000000051.700:523): avc: denied { nlmsg_write } for pid=9255 comm="syz.4.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 367.365640][ T9114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.368889][ T29] audit: type=1400 audit(2000000051.910:524): avc: denied { module_request } for pid=9114 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 368.438164][ T9114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.819811][ T29] audit: type=1400 audit(2000000053.330:525): avc: denied { connect } for pid=9284 comm="syz.4.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 370.796230][ T9114] veth0_vlan: entered promiscuous mode [ 370.843730][ T9114] veth1_vlan: entered promiscuous mode [ 371.029455][ T9114] veth0_macvtap: entered promiscuous mode [ 371.104157][ T9114] veth1_macvtap: entered promiscuous mode [ 372.334407][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.854586][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.864603][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.875234][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.885105][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.896528][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.907510][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.221893][ T9324] SELinux: policydb version 2094917270 does not match my version range 15-33 [ 373.242185][ T9324] SELinux: failed to load policy [ 373.791955][ T29] audit: type=1400 audit(2000000057.760:526): avc: denied { load_policy } for pid=9315 comm="syz.4.624" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 373.813668][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.850865][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.886425][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.899959][ T9114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.483867][ T29] audit: type=1400 audit(2000000058.970:527): avc: denied { setopt } for pid=9327 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.630367][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.641074][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.745803][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.770808][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.798943][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.830792][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.847338][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.858172][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.869073][ T9114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.880294][ T9114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.000572][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.627'. [ 375.009676][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.627'. [ 375.153394][ T9114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.416968][ T9114] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.500413][ T9114] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.537557][ T9114] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.569709][ T9114] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.857368][ T9349] hub 6-0:1.0: USB hub found [ 375.865732][ T9349] hub 6-0:1.0: 1 port detected [ 378.988488][ T29] audit: type=1400 audit(2000000063.530:528): avc: denied { listen } for pid=9365 comm="syz.5.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 379.220875][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.227132][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.395450][ T29] audit: type=1400 audit(2000000063.530:529): avc: denied { connect } for pid=9365 comm="syz.5.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 379.423091][ T9367] bond0: entered promiscuous mode [ 379.428176][ T9367] bond_slave_0: entered promiscuous mode [ 379.433926][ T9367] bond_slave_1: entered promiscuous mode [ 379.439737][ T9367] macvlan2: entered promiscuous mode [ 379.445483][ T9367] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 379.781214][ T29] audit: type=1400 audit(2000000063.860:530): avc: denied { append } for pid=9365 comm="syz.5.633" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 379.976270][ T9372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.990850][ T9372] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 379.996972][ T9372] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 380.112407][ T9372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.119502][ T9372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 380.214481][ T9372] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 380.622843][ T9391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.846936][ T6637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.855245][ T6637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.862680][ T6637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.874081][ T6637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.043842][ T9419] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.308418][ T9206] Bluetooth: hci2: command 0x0c1a tx timeout [ 382.308464][ T5848] Bluetooth: hci0: command 0x0405 tx timeout [ 382.333046][ T5153] Bluetooth: hci5: command 0x0406 tx timeout [ 384.714927][ T5848] Bluetooth: hci0: command 0x0405 tx timeout [ 384.721245][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 385.018787][ T29] audit: type=1400 audit(2000000069.290:531): avc: denied { bind } for pid=9439 comm="syz.5.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 385.230837][ T5890] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 385.604808][ T9457] qrtr: Invalid version 0 [ 385.615224][ T9457] fuse: Bad value for 'fd' [ 385.943817][ T9446] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.404028][ T9454] Cannot find set identified by id 0 to match [ 386.694061][ T5890] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 386.704769][ T5890] usb 2-1: can't read configurations, error -71 [ 386.795683][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 386.807369][ T5153] Bluetooth: hci0: command 0x0405 tx timeout [ 387.606508][ T29] audit: type=1804 audit(2000000071.960:532): pid=9480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.650" name="/newroot/58/file0" dev="fuse" ino=1 res=1 errno=0 [ 388.776121][ T9500] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.407858][ T9504] lo speed is unknown, defaulting to 1000 [ 390.293123][ T9521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.701360][ T9556] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 395.701486][ T9556] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 395.701569][ T9556] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 397.080748][ T5890] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 397.273879][ T9603] hub 6-0:1.0: USB hub found [ 397.274780][ T9603] hub 6-0:1.0: 1 port detected [ 397.420944][ T9604] xt_TPROXY: Can be used only with -p tcp or -p udp [ 397.939134][ T5848] Bluetooth: hci0: command 0x0405 tx timeout [ 397.939176][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 397.939275][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 397.980755][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 398.121105][ T5890] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 398.121135][ T5890] usb 2-1: config 179 has no interface number 0 [ 398.121165][ T5890] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 398.121192][ T5890] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 398.121222][ T5890] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 398.121248][ T5890] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 398.121276][ T5890] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 398.121306][ T5890] usb 2-1: config 179 interface 65 has no altsetting 0 [ 398.121328][ T5890] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 398.121349][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.333266][ T5890] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 398.391541][ T5197] input input10: unable to receive magic message: -110 [ 398.799797][ T5197] input input10: unable to receive magic message: -32 [ 398.828125][ T5197] input input10: unable to receive magic message: -32 [ 398.853970][ T5197] input input10: unable to receive magic message: -32 [ 399.101429][ T5197] input input10: unable to receive magic message: -32 [ 399.181181][ T5827] input input10: unable to receive magic message: -32 [ 399.421931][ T5197] input input10: unable to receive magic message: -32 [ 399.448483][ T5197] input input10: unable to receive magic message: -32 [ 399.894655][ T5197] input input10: unable to receive magic message: -32 [ 400.988692][ T5924] usb 2-1: USB disconnect, device number 8 [ 400.988811][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 400.991232][ T5924] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 401.128326][ T29] audit: type=1326 audit(2000000085.670:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 401.152311][ T29] audit: type=1326 audit(2000000085.670:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 401.175875][ T29] audit: type=1326 audit(2000000085.670:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 401.199679][ T29] audit: type=1326 audit(2000000085.670:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 401.223299][ T29] audit: type=1326 audit(2000000085.670:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 401.246759][ T29] audit: type=1326 audit(2000000085.670:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 401.270590][ T29] audit: type=1326 audit(2000000085.670:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 401.294456][ T29] audit: type=1326 audit(2000000085.670:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 401.318587][ T29] audit: type=1326 audit(2000000085.670:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 401.357155][ T29] audit: type=1326 audit(2000000085.670:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9642 comm="syz.4.677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x7ffc0000 [ 407.377686][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 407.377697][ T29] audit: type=1400 audit(2000000091.800:568): avc: denied { read } for pid=9701 comm="syz.1.686" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 409.003412][ T29] audit: type=1400 audit(2000000093.260:569): avc: denied { setopt } for pid=9708 comm="syz.4.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 409.326944][ T29] audit: type=1400 audit(2000000093.760:570): avc: denied { unlink } for pid=9114 comm="syz-executor" name="file0" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 409.822411][ T9727] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.688' sets config #0 [ 410.458808][ T9731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.691'. [ 410.896190][ T9728] vxcan1: entered promiscuous mode [ 410.904532][ T9729] vxcan1: left promiscuous mode [ 415.467026][ T9775] ieee802154 phy0 wpan0: encryption failed: -22 [ 416.339848][ T9778] ERROR: device name not specified. [ 416.356512][ T29] audit: type=1400 audit(2000000100.570:571): avc: denied { bind } for pid=9769 comm="syz.5.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 416.356543][ T29] audit: type=1400 audit(2000000100.710:572): avc: denied { listen } for pid=9769 comm="syz.5.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 416.356558][ T29] audit: type=1400 audit(2000000100.780:573): avc: denied { read } for pid=9769 comm="syz.5.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 416.692173][ T29] audit: type=1400 audit(2000000100.820:574): avc: denied { accept } for pid=9769 comm="syz.5.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 417.480758][ T9786] x_tables: duplicate underflow at hook 2 [ 419.240297][ T9778] tty tty33: ldisc open failed (-12), clearing slot 32 [ 419.265889][ T9788] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 419.328246][ T29] audit: type=1400 audit(2000000103.870:575): avc: denied { read } for pid=9793 comm="syz.1.703" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 419.359004][ T29] audit: type=1400 audit(2000000103.900:576): avc: denied { open } for pid=9793 comm="syz.1.703" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 419.481234][ T29] audit: type=1400 audit(2000000104.010:577): avc: denied { ioctl } for pid=9796 comm="syz.4.704" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 419.506753][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.834036][ T9823] binder: 9806:9823 ioctl c0306201 200003c0 returned -14 [ 422.207242][ T9831] tipc: Can't bind to reserved service type 2 [ 422.217593][ T9831] sg_read: process 659 (syz.4.711) changed security contexts after opening file descriptor, this is not allowed. [ 422.875876][ T29] audit: type=1400 audit(2000000107.420:578): avc: denied { call } for pid=9806 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 423.211858][ T9842] netlink: 'syz.4.714': attribute type 2 has an invalid length. [ 424.157138][ T29] audit: type=1400 audit(2000000108.690:579): avc: denied { append } for pid=9839 comm="syz.1.713" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 424.455560][ T9853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.717'. [ 424.565442][ T9853] netlink: 32 bytes leftover after parsing attributes in process `syz.4.717'. [ 424.570476][ T29] audit: type=1400 audit(2000000109.050:580): avc: denied { accept } for pid=9850 comm="syz.4.717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 425.774751][ T29] audit: type=1400 audit(2000000110.320:581): avc: denied { mount } for pid=9854 comm="syz.5.716" name="/" dev="ramfs" ino=19958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 427.685505][ T9871] netlink: 'syz.4.720': attribute type 8 has an invalid length. [ 428.028580][ T29] audit: type=1804 audit(2000000110.530:582): pid=9855 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.716" name="/newroot/71/file0/bus" dev="ramfs" ino=20981 res=1 errno=0 [ 428.973303][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 429.394104][ T29] audit: type=1400 audit(2000000113.510:583): avc: denied { getopt } for pid=9874 comm="syz.1.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 430.888491][ T29] audit: type=1400 audit(2000000115.430:584): avc: denied { unmount } for pid=7384 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 432.128348][ T29] audit: type=1400 audit(2000000116.120:585): avc: denied { read } for pid=9888 comm="syz.6.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 434.139022][ T9906] netlink: 'syz.5.726': attribute type 1 has an invalid length. [ 434.260849][ T5890] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 434.359550][ T9911] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 434.396627][ T6098] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 434.417378][ T9906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.442525][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.459340][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.489538][ T5890] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 434.514535][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.561125][ T6637] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 434.645357][ T29] audit: type=1400 audit(2000000119.160:586): avc: denied { write } for pid=9910 comm="syz.0.729" path="socket:[20108]" dev="sockfs" ino=20108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 434.670310][ T29] audit: type=1400 audit(2000000119.180:587): avc: denied { connect } for pid=9910 comm="syz.0.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 435.098329][ T5890] usb 5-1: config 0 descriptor?? [ 435.106645][ T5890] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 435.329866][ T5890] usb 5-1: USB disconnect, device number 3 [ 436.960765][ T29] audit: type=1400 audit(2000000121.450:588): avc: denied { read } for pid=9929 comm="syz.4.734" laddr=172.20.20.170 lport=3 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 439.050845][ T29] audit: type=1326 audit(2000000123.480:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9941 comm="syz.6.736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff180809 code=0x7fc00000 [ 439.748704][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.791205][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.678793][ T9970] lo speed is unknown, defaulting to 1000 [ 442.326927][ T5848] Bluetooth: hci0: command 0x0405 tx timeout [ 443.209909][ T9989] block device autoloading is deprecated and will be removed. [ 445.003451][ T29] audit: type=1400 audit(2000000129.550:590): avc: denied { ioctl } for pid=10002 comm="syz.1.751" path="socket:[20253]" dev="sockfs" ino=20253 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 445.028248][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.772474][ T9998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.376118][ T29] audit: type=1400 audit(2000000130.890:591): avc: denied { connect } for pid=10017 comm="syz.5.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 448.278169][T10036] netlink: 'syz.5.757': attribute type 15 has an invalid length. [ 450.027327][T10055] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20001 [ 450.734406][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.760'. [ 450.909100][T10058] usb usb9: usbfs: process 10058 (syz.5.761) did not claim interface 0 before use [ 450.923691][T10058] binder: 10047:10058 ioctl c018620c 20000240 returned -1 [ 450.961113][ T29] audit: type=1400 audit(2000000135.270:592): avc: denied { sqpoll } for pid=10047 comm="syz.5.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 451.174894][ T9206] Bluetooth: hci0: command 0x0405 tx timeout [ 453.630917][T10081] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 453.637737][T10081] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 453.645024][T10081] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 454.640839][ T29] audit: type=1400 audit(2000000139.180:593): avc: denied { setcurrent } for pid=10090 comm="syz.1.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 454.696480][ T29] audit: type=1401 audit(2000000139.180:594): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 455.030270][ T29] audit: type=1400 audit(2000000139.220:595): avc: denied { create } for pid=10094 comm="syz.6.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 455.050864][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.185079][T10099] netlink: 36 bytes leftover after parsing attributes in process `syz.6.771'. [ 455.194971][T10099] netlink: 84 bytes leftover after parsing attributes in process `syz.6.771'. [ 455.688359][ T5153] Bluetooth: hci2: command 0x0c1a tx timeout [ 456.734706][ T5848] Bluetooth: hci0: command 0x0405 tx timeout [ 456.740901][ T5153] Bluetooth: hci5: command 0x0c1a tx timeout [ 457.822387][ T29] audit: type=1400 audit(2000000140.500:596): avc: denied { ioctl } for pid=10100 comm="syz.6.772" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 460.236659][T10123] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.098962][T10133] ======================================================= [ 462.098962][T10133] WARNING: The mand mount option has been deprecated and [ 462.098962][T10133] and is ignored by this kernel. Remove the mand [ 462.098962][T10133] option from the mount to silence this warning. [ 462.098962][T10133] ======================================================= [ 462.135164][T10133] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 462.190243][T10133] infiniband syz2: set down [ 462.194950][T10133] infiniband syz2: added team_slave_1 [ 462.225014][T10133] RDS/IB: syz2: added [ 462.229470][T10133] smc: adding ib device syz2 with port count 1 [ 462.235943][T10133] smc: ib device syz2 port 1 has pnetid [ 462.647378][ T29] audit: type=1400 audit(2000000147.190:597): avc: denied { read write } for pid=10140 comm="syz.6.782" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 463.115786][T10146] No such timeout policy "syz0" [ 464.270192][ T29] audit: type=1400 audit(2000000147.190:598): avc: denied { open } for pid=10140 comm="syz.6.782" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 464.293349][ C0] vkms_vblank_simulate: vblank timer overrun [ 464.299456][ T29] audit: type=1400 audit(2000000147.670:599): avc: denied { create } for pid=10141 comm="syz.5.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 464.925163][ T29] audit: type=1400 audit(2000000149.420:600): avc: denied { write } for pid=10165 comm="syz.4.786" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 465.961940][T10175] hub 6-0:1.0: USB hub found [ 465.969243][T10175] hub 6-0:1.0: 1 port detected [ 466.316182][ T29] audit: type=1326 audit(2000000150.820:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.0.787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x0 [ 466.660746][T10189] ieee802154 phy0 wpan0: encryption failed: -22 [ 467.085994][T10194] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 467.945619][ T29] audit: type=1400 audit(2000000152.490:602): avc: denied { listen } for pid=10177 comm="syz.4.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 470.183405][T10212] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.191977][T10212] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.337533][ T29] audit: type=1400 audit(2000000154.880:603): avc: denied { ioctl } for pid=10206 comm="syz.4.796" path="socket:[21416]" dev="sockfs" ino=21416 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 470.558780][T10222] sp0: Synchronizing with TNC [ 472.436903][ T29] audit: type=1326 audit(2000000156.890:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.1.801" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa937380809 code=0x0 [ 472.507199][T10243] Bluetooth: MGMT ver 1.23 [ 473.294521][T10258] xt_l2tp: v2 doesn't support IP mode [ 473.353245][T10258] xt_TPROXY: Can be used only with -p tcp or -p udp [ 473.481001][T10254] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 473.540849][ T29] audit: type=1400 audit(2000000157.820:605): avc: denied { cmd } for pid=10235 comm="syz.6.799" path="socket:[21667]" dev="sockfs" ino=21667 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 473.744024][T10249] netlink: 'syz.4.803': attribute type 4 has an invalid length. [ 473.779565][ T29] audit: type=1326 audit(2000000158.260:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10248 comm="syz.4.803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x0 [ 474.000978][ T29] audit: type=1400 audit(2000000158.510:607): avc: denied { ioctl } for pid=10260 comm="syz.5.805" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 474.027197][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.090373][T10262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 474.229902][ T29] audit: type=1400 audit(2000000158.630:608): avc: denied { remount } for pid=10260 comm="syz.5.805" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 474.607881][T10265] Can't find ip_set type ha [ 476.386522][T10286] befs: (nbd1): No write support. Marking filesystem read-only [ 476.401517][T10286] syz.1.810: attempt to access beyond end of device [ 476.401517][T10286] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 476.414327][T10286] befs: (nbd1): unable to read superblock [ 480.275871][ T29] audit: type=1400 audit(2000000164.820:609): avc: denied { ioctl } for pid=10318 comm="syz.0.818" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 480.670850][ T29] audit: type=1400 audit(2000000165.170:610): avc: denied { getattr } for pid=10318 comm="syz.0.818" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 481.054623][ T29] audit: type=1326 audit(2000000165.600:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10307 comm="syz.4.817" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x0 [ 481.238569][T10325] netlink: 'syz.4.817': attribute type 4 has an invalid length. [ 482.171231][ T29] audit: type=1400 audit(2000000166.240:612): avc: denied { connect } for pid=10333 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 482.215064][ T29] audit: type=1400 audit(2000000166.310:613): avc: denied { listen } for pid=10333 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 482.418952][ T29] audit: type=1326 audit(2000000166.810:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.0.820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x0 [ 482.629357][T10336] netlink: 'syz.0.820': attribute type 4 has an invalid length. [ 483.655662][T10348] evm: overlay not supported [ 483.777628][ T29] audit: type=1400 audit(2000000168.300:615): avc: denied { append } for pid=10340 comm="syz.4.822" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 484.091726][T10353] syz.0.824 (10353): /proc/10351/oom_adj is deprecated, please use /proc/10351/oom_score_adj instead. [ 484.120778][ T29] audit: type=1400 audit(2000000168.310:616): avc: denied { map } for pid=10340 comm="syz.4.822" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 485.818183][T10357] Illegal XDP return value 4294967274 on prog (id 231) dev N/A, expect packet loss! [ 487.137441][ T29] audit: type=1400 audit(2000000171.650:617): avc: denied { read } for pid=10378 comm="syz.5.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 487.587769][ T29] audit: type=1400 audit(2000000172.130:618): avc: denied { ioctl } for pid=10381 comm="syz.4.831" path="socket:[22730]" dev="sockfs" ino=22730 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 488.023265][ T29] audit: type=1400 audit(2000000172.500:619): avc: denied { create } for pid=10382 comm="syz.6.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 488.392403][ T29] audit: type=1400 audit(2000000172.500:620): avc: denied { write } for pid=10382 comm="syz.6.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 488.456964][ T29] audit: type=1400 audit(2000000172.500:621): avc: denied { nlmsg_read } for pid=10382 comm="syz.6.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 488.621136][ T5890] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 489.257531][ T29] audit: type=1400 audit(2000000173.800:622): avc: denied { write } for pid=10398 comm="syz.6.836" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 490.167801][ T29] audit: type=1400 audit(2000000174.210:623): avc: denied { execute } for pid=10398 comm="syz.6.836" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=22746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 490.327068][ T5890] usb 5-1: device descriptor read/all, error -71 [ 491.036723][T10420] binder: 10417:10420 ioctl c0306201 0 returned -14 [ 491.997123][ T29] audit: type=1400 audit(2000000176.280:624): avc: denied { getopt } for pid=10416 comm="syz.4.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 493.215836][ T5153] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 493.341546][T10411] overlayfs: failed to resolve './file0': -2 [ 494.369797][T10450] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.846'. [ 494.491671][ T29] audit: type=1400 audit(2000000178.700:625): avc: denied { create } for pid=10440 comm="syz.1.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 496.645580][ T5924] kernel write not supported for file [eventfd] (pid: 5924 comm: kworker/0:8) [ 497.285524][ T5153] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 497.294345][ T5153] Bluetooth: hci5: Injecting HCI hardware error event [ 497.305757][ T5153] Bluetooth: hci5: hardware error 0x00 [ 499.469715][ T5153] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 499.493041][T10503] libceph: resolve ' [ 499.493041][T10503] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 499.493041][T10503] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 500.117406][T10520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.072009][ T29] audit: type=1326 audit(2000000185.460:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10526 comm="syz.4.864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x0 [ 501.250033][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.256550][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.578402][T10543] netlink: 'syz.4.864': attribute type 10 has an invalid length. [ 503.615127][T10543] team0: Port device geneve1 added [ 503.794286][T10553] loop7: detected capacity change from 0 to 16384 [ 503.860466][ T29] audit: type=1326 audit(2000000188.400:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10552 comm="syz.4.869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x0 [ 503.910920][T10553] loop7: detected capacity change from 16384 to 16383 [ 507.147651][T10585] hub 6-0:1.0: USB hub found [ 507.157487][T10585] hub 6-0:1.0: 1 port detected [ 512.246822][ T29] audit: type=1400 audit(2000000194.140:628): avc: denied { audit_write } for pid=10590 comm="syz.6.877" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 512.978291][T10608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10608 comm=syz.4.880 [ 513.004954][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.880'. [ 513.261059][T10609] kernel profiling enabled (shift: 17) [ 513.428799][ T29] audit: type=1400 audit(2000000194.260:629): avc: denied { write } for pid=10590 comm="syz.6.877" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 513.586752][ T11] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 514.332027][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.876'. [ 514.355566][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.876'. [ 514.378498][ T29] audit: type=1400 audit(2000000198.560:630): avc: denied { getattr } for pid=10610 comm="syz.0.881" path="cgroup:[4026532808]" dev="nsfs" ino=4026532808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 514.416806][T10614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10614 comm=syz.5.876 [ 514.426400][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 514.440540][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 514.449322][T10614] netlink: 31 bytes leftover after parsing attributes in process `syz.5.876'. [ 514.544608][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.557975][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.567558][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 514.574998][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.615370][T10618] lo speed is unknown, defaulting to 1000 [ 516.179397][T10636] syz2: rxe_newlink: already configured on team_slave_1 [ 516.892126][ T5848] Bluetooth: hci4: command tx timeout [ 517.048710][T10649] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 517.058023][T10649] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 517.453864][T10618] chnl_net:caif_netlink_parms(): no params data found [ 518.245533][T10618] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.567793][T10618] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.618708][T10618] bridge_slave_0: entered allmulticast mode [ 518.648806][T10618] bridge_slave_0: entered promiscuous mode [ 518.671315][ T29] audit: type=1400 audit(2000000203.210:631): avc: denied { write } for pid=10645 comm="syz.5.888" path="socket:[22384]" dev="sockfs" ino=22384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 518.679959][T10618] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.730723][T10618] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.021181][T10618] bridge_slave_1: entered allmulticast mode [ 519.097963][T10618] bridge_slave_1: entered promiscuous mode [ 519.180972][T10666] ªªªªª»: renamed from bridge_slave_0 (while UP) [ 519.270721][ T5153] Bluetooth: hci4: command tx timeout [ 519.286375][T10618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.479193][T10618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.884677][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 520.043339][T10618] team0: Port device team_slave_0 added [ 520.059850][T10618] team0: Port device team_slave_1 added [ 520.299639][T10618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.884554][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.911650][T10618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.372884][ T5153] Bluetooth: hci4: command tx timeout [ 521.383488][T10618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.390455][T10618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.417522][T10618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.743048][T10618] hsr_slave_0: entered promiscuous mode [ 522.832266][ T29] audit: type=1400 audit(2000000207.110:632): avc: denied { shutdown } for pid=10698 comm="syz.6.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 522.852020][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.170448][ T29] audit: type=1400 audit(2000000207.380:633): avc: granted { setsecparam } for pid=10711 comm="syz.0.900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 523.193605][T10618] hsr_slave_1: entered promiscuous mode [ 523.647184][ T5153] Bluetooth: hci4: command tx timeout [ 523.660191][T10618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.687937][T10618] Cannot create hsr debugfs directory [ 524.498640][ T29] audit: type=1326 audit(2000000209.040:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10718 comm="syz.5.901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0fe580809 code=0x0 [ 524.545982][T10719] netlink: 'syz.5.901': attribute type 4 has an invalid length. [ 524.591568][T10618] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 524.822885][T10618] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 525.052556][T10618] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 525.237241][T10742] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 526.373066][T10618] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 527.001270][ T1335] Bluetooth: hci2: Frame reassembly failed (-84) [ 527.288199][ T29] audit: type=1400 audit(2000000211.830:635): avc: denied { write } for pid=10748 comm="syz.5.906" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 528.419542][T10618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.434324][T10618] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.400380][ T5153] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 529.572464][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.579616][ T6637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.672186][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.679540][ T6637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.763623][T10618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 529.790849][T10618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.283555][ T29] audit: type=1400 audit(2000000215.800:636): avc: denied { setattr } for pid=10773 comm="syz.6.911" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 531.738616][T10618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.985840][T10800] netlink: 'syz.0.913': attribute type 21 has an invalid length. [ 531.993878][T10800] netlink: 156 bytes leftover after parsing attributes in process `syz.0.913'. [ 533.374619][T10807] lo speed is unknown, defaulting to 1000 [ 533.625314][T10618] veth0_vlan: entered promiscuous mode [ 533.654264][T10618] veth1_vlan: entered promiscuous mode [ 533.709723][T10618] veth0_macvtap: entered promiscuous mode [ 533.759897][T10618] veth1_macvtap: entered promiscuous mode [ 533.784438][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.802581][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.820718][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.840670][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.906409][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.927678][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.937683][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.950873][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.053830][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.095462][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.293541][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.536260][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.611122][T10618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.951907][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.065592][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.075912][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.086745][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.097146][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.108143][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.118508][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.129465][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.139634][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.150452][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.160735][T10618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.171554][T10618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.202453][T10618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.433316][T10618] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.788626][T10618] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.802343][T10618] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.823271][T10618] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.903193][ T29] audit: type=1400 audit(2000000220.450:637): avc: denied { map } for pid=10838 comm="syz.4.919" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 536.086513][ T29] audit: type=1400 audit(2000000220.450:638): avc: denied { execute } for pid=10838 comm="syz.4.919" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 536.313372][ T29] audit: type=1400 audit(2000000220.540:639): avc: denied { ioctl } for pid=10838 comm="syz.4.919" path="socket:[23957]" dev="sockfs" ino=23957 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 536.337968][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.374194][T10853] Process accounting resumed [ 536.746205][ T6637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.792734][ T6637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.805150][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.840597][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.856889][ T29] audit: type=1326 audit(2000000221.400:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.0.922" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff44db80809 code=0x0 [ 537.150888][T10870] netlink: 64 bytes leftover after parsing attributes in process `syz.5.923'. [ 537.159951][T10870] netlink: 64 bytes leftover after parsing attributes in process `syz.5.923'. [ 537.761781][T10872] block nbd7: shutting down sockets [ 538.485276][ T29] audit: type=1400 audit(2000000222.960:641): avc: denied { setattr } for pid=10869 comm="syz.7.878" name="nbd7" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 538.569619][ T29] audit: type=1400 audit(2000000223.100:642): avc: denied { map } for pid=10864 comm="syz.4.924" path=2F6465762F7074732F30202864656C6574656429 dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 539.611220][ T29] audit: type=1400 audit(2000000223.100:643): avc: denied { execute } for pid=10864 comm="syz.4.924" path=2F6465762F7074732F30202864656C6574656429 dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 539.805385][T10896] loop7: detected capacity change from 0 to 16384 [ 540.906182][ T29] audit: type=1400 audit(2000000225.380:644): avc: denied { shutdown } for pid=10899 comm="syz.4.930" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 541.839965][T10916] cgroup: none used incorrectly [ 543.375009][ T29] audit: type=1400 audit(2000000227.350:645): avc: denied { read write } for pid=10919 comm="syz.5.936" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 543.397631][ C1] vkms_vblank_simulate: vblank timer overrun [ 543.583670][ T29] audit: type=1400 audit(2000000227.350:646): avc: denied { open } for pid=10919 comm="syz.5.936" path="/117/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 544.359953][T10938] ieee802154 phy0 wpan0: encryption failed: -22 [ 545.467648][T10942] netlink: 112 bytes leftover after parsing attributes in process `syz.5.939'. [ 545.671110][ T29] audit: type=1400 audit(2000000230.170:647): avc: denied { create } for pid=10948 comm="syz.6.943" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 546.690148][ T29] audit: type=1400 audit(2000000230.180:648): avc: denied { link } for pid=10948 comm="syz.6.943" name="file1" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 546.886960][ T29] audit: type=1400 audit(2000000230.190:649): avc: denied { setattr } for pid=10948 comm="syz.6.943" name="#19" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 547.000940][T10419] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 547.007078][ T29] audit: type=1400 audit(2000000230.190:650): avc: denied { rename } for pid=10948 comm="syz.6.943" name="#19" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 547.038430][ T29] audit: type=1400 audit(2000000231.190:651): avc: denied { read } for pid=10935 comm="syz.5.939" lport=53729 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 547.875277][ T5153] Bluetooth: hci0: unexpected event for opcode 0x202d [ 548.099596][T10419] usb 5-1: Using ep0 maxpacket: 8 [ 548.136152][T10419] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 548.146359][T10419] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 548.156272][T10419] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 548.167763][T10419] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.666348][ T29] audit: type=1800 audit(2000000233.050:652): pid=10981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.946" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 548.761807][T10419] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.770948][T10419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.836225][T10419] usb 5-1: can't set config #16, error -71 [ 548.884572][T10419] usb 5-1: USB disconnect, device number 6 [ 549.564000][ T29] audit: type=1326 audit(2000000234.110:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.4.948" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7983380809 code=0x0 [ 549.886258][T11001] ieee802154 phy0 wpan0: encryption failed: -22 [ 550.040339][T11000] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 550.094770][ T969] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 550.370890][ T969] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 550.391685][ T969] usb 6-1: config 0 has no interface number 0 [ 550.398045][ T969] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 550.872440][ T969] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 550.883563][ T969] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 550.892988][ T969] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.920867][ T969] usb 6-1: config 0 descriptor?? [ 550.926348][T10993] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 551.061826][ T969] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 551.623128][ T969] usb 6-1: USB disconnect, device number 2 [ 551.655150][ T969] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected [ 552.531472][T11032] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 552.765112][T11021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.675398][T11047] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 555.799327][ T29] audit: type=1400 audit(2000000239.770:654): avc: denied { map } for pid=11055 comm="syz.5.960" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 555.828948][ T29] audit: type=1400 audit(2000000239.780:655): avc: denied { execute } for pid=11055 comm="syz.5.960" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 556.199979][T11077] overlay: ./file0 is not a directory [ 557.205530][T11080] hub 6-0:1.0: USB hub found [ 557.210568][T11080] hub 6-0:1.0: 1 port detected [ 557.222592][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.963'. [ 558.605987][ T29] audit: type=1804 audit(2000000243.140:656): pid=11097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.965" name="/newroot/125/file0" dev="fuse" ino=1 res=1 errno=0 [ 559.208699][T11106] netlink: 'syz.7.968': attribute type 4 has an invalid length. [ 559.822843][T11111] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.561934][T11113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=11113 comm=syz.7.968 [ 560.574792][ T29] audit: type=1326 audit(2000000245.110:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11115 comm="syz.6.971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff180809 code=0x0 [ 560.616816][ T5153] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 560.650514][T11106] netlink: 'syz.7.968': attribute type 8 has an invalid length. [ 560.670882][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.7.968'. [ 561.788255][ T29] audit: type=1400 audit(2000000246.330:658): avc: denied { unmount } for pid=10618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 561.859090][ T29] audit: type=1326 audit(2000000246.400:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11123 comm="syz.4.974" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7983380809 code=0x0 [ 561.947626][T11135] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 561.954396][T11135] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 561.962580][T11135] vhci_hcd vhci_hcd.0: Device attached [ 562.113633][T11140] vxcan1: entered promiscuous mode [ 562.141033][T10640] vhci_hcd: vhci_device speed not set [ 562.201113][T10640] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 562.608003][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.614929][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.420902][ T5153] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 564.744515][T11161] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.960198][T11164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 565.763891][T11137] vhci_hcd: connection reset by peer [ 566.552241][ T29] audit: type=1326 audit(2000000251.080:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.6.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff180809 code=0x7ffc0000 [ 566.576029][ T29] audit: type=1326 audit(2000000251.080:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.6.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff180809 code=0x7ffc0000 [ 566.601202][ T29] audit: type=1326 audit(2000000251.090:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.6.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5ff17f170 code=0x7ffc0000 [ 566.624643][ T29] audit: type=1326 audit(2000000251.090:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.6.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe5ff182037 code=0x7ffc0000 [ 566.674568][ T29] audit: type=1326 audit(2000000251.090:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.6.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5ff180809 code=0x7ffc0000 [ 566.704169][ T29] audit: type=1326 audit(2000000251.090:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.6.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe5ff182037 code=0x7ffc0000 [ 566.728076][ T29] audit: type=1326 audit(2000000251.090:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.6.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe5ff17f46a code=0x7ffc0000 [ 566.751387][ T29] audit: type=1326 audit(2000000251.090:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.6.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff180809 code=0x7ffc0000 [ 566.805560][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 566.805586][ T29] audit: type=1326 audit(2000000251.340:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.6.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5ff180809 code=0x7ffc0000 [ 566.836254][ T29] audit: type=1326 audit(2000000251.340:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.6.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff180809 code=0x7ffc0000 [ 566.859972][ T29] audit: type=1326 audit(2000000251.340:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11159 comm="syz.6.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ff180809 code=0x7ffc0000 [ 566.930749][ T150] vhci_hcd: stop threads [ 566.937692][ T150] vhci_hcd: release socket [ 567.003658][ T150] vhci_hcd: disconnect device [ 567.740904][T10640] vhci_hcd: vhci_device speed not set [ 567.753072][ T29] audit: type=1400 audit(2000000252.300:684): avc: denied { ioctl } for pid=11167 comm="syz.7.985" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 567.780264][ T5848] Bluetooth: hci4: link tx timeout [ 567.790517][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 569.896726][T11205] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 569.936443][ T29] audit: type=1326 audit(2000000254.460:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11199 comm="syz.0.993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff44db80809 code=0x0 [ 570.194422][ T5153] Bluetooth: hci4: command 0x0406 tx timeout [ 570.402337][T11217] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.962906][T11220] syz.7.996 uses old SIOCAX25GETINFO [ 572.082371][ T29] audit: type=1400 audit(2000000256.610:686): avc: denied { ioctl } for pid=11229 comm="syz.0.999" path="socket:[25192]" dev="sockfs" ino=25192 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 573.031251][ T5153] Bluetooth: hci4: command 0x0406 tx timeout [ 573.824445][T11249] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 574.849410][T11263] ieee802154 phy0 wpan0: encryption failed: -22 [ 576.103920][T11270] vxcan1: left promiscuous mode [ 576.127468][T11270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1005'. [ 577.365533][ T29] audit: type=1326 audit(2000000261.910:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11275 comm="syz.5.1009" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0fe580809 code=0x0 [ 578.027075][T11283] 9pnet_fd: p9_fd_create_unix (11283): problem connecting socket: ./file0: -111 [ 578.036589][ T29] audit: type=1400 audit(2000000262.570:688): avc: denied { mounton } for pid=11278 comm="syz.7.1010" path="/13/file0" dev="tmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 578.160912][ T29] audit: type=1326 audit(2000000262.700:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11281 comm="syz.0.1011" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x0 [ 578.183838][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.275569][T11285] netlink: 'syz.0.1011': attribute type 4 has an invalid length. [ 578.340304][T11254] syz.6.1004 (11254): drop_caches: 2 [ 580.214391][T10640] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 580.227918][ T29] audit: type=1400 audit(2000000264.750:690): avc: denied { read } for pid=11297 comm="syz.6.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 580.622886][T11302] xt_CT: No such helper "netbios-ns" [ 581.546628][T11322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1019'. [ 581.608717][T10640] usb 6-1: device descriptor read/64, error -71 [ 581.625577][T11316] tty tty32: ldisc open failed (-12), clearing slot 31 [ 581.784230][T11318] vxcan1: entered promiscuous mode [ 581.849348][T11320] vxcan1: left promiscuous mode [ 582.128764][T11335] pim6reg527: entered allmulticast mode [ 582.766025][T11336] ieee802154 phy0 wpan0: encryption failed: -22 [ 584.319975][T11352] pim6reg527: entered allmulticast mode [ 585.042607][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1028'. [ 585.296204][ T5889] IPVS: starting estimator thread 0... [ 585.516074][ T29] audit: type=1326 audit(2000000270.060:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11347 comm="syz.4.1026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7983380809 code=0x0 [ 585.570864][T11367] IPVS: using max 38 ests per chain, 91200 per kthread [ 585.591688][T11370] netlink: 'syz.4.1026': attribute type 4 has an invalid length. [ 585.945401][ T29] audit: type=1400 audit(2000000270.480:692): avc: denied { append } for pid=11371 comm="syz.0.1031" name="event3" dev="devtmpfs" ino=1008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 587.054272][T11389] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 587.532917][ T29] audit: type=1400 audit(2000000272.080:693): avc: denied { watch_mount } for pid=11374 comm="syz.4.1033" path="/223" dev="tmpfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 587.602819][T11393] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 587.609342][T11393] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 587.648815][T11393] vhci_hcd vhci_hcd.0: Device attached [ 587.897111][ T29] audit: type=1400 audit(2000000272.440:694): avc: denied { getopt } for pid=11399 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 587.921930][T11271] usb 48-1: SetAddress Request (2) to port 0 [ 587.928346][T11271] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 588.354101][T11403] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 588.493207][T11394] vhci_hcd: connection reset by peer [ 588.561520][ T150] vhci_hcd: stop threads [ 588.568367][ T150] vhci_hcd: release socket [ 588.599900][ T150] vhci_hcd: disconnect device [ 588.895577][ T29] audit: type=1400 audit(2000000273.440:695): avc: denied { bind } for pid=11399 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 588.914824][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.091010][T11412] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1038'. [ 589.842354][T10640] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 590.011065][ T29] audit: type=1400 audit(2000000274.470:696): avc: denied { getopt } for pid=11418 comm="syz.0.1041" laddr=172.20.20.46 lport=49319 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 590.061530][T11424] vivid-000: ================= START STATUS ================= [ 590.070999][T11424] vivid-000: Generate PTS: true [ 590.076160][T11424] vivid-000: Generate SCR: true [ 590.082557][T11424] tpg source WxH: 320x180 (R'G'B) [ 590.087808][T11424] tpg field: 1 [ 590.091549][T11424] tpg crop: 320x180@0x0 [ 590.095799][T11424] tpg compose: 320x180@0x0 [ 590.100649][T11424] tpg colorspace: 8 [ 590.104475][T11424] tpg transfer function: 0/0 [ 590.111202][T11424] tpg quantization: 0/0 [ 590.115420][T11424] tpg RGB range: 0/2 [ 590.119407][T11424] vivid-000: ================== END STATUS ================== [ 590.333706][T10640] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 590.344825][T10640] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 590.361520][T10640] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 590.370587][T10640] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.397519][T11416] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 590.427700][T10640] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 592.905334][T11444] netlink: 'syz.6.1039': attribute type 9 has an invalid length. [ 592.913202][T11444] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1039'. [ 593.199550][T11271] usb 48-1: device descriptor read/8, error -110 [ 593.860278][ T29] audit: type=1326 audit(2000000278.390:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.5.1043" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0fe580809 code=0x0 [ 593.911693][T11271] usb usb48-port1: attempt power cycle [ 593.985530][T11447] netlink: 'syz.5.1043': attribute type 4 has an invalid length. [ 595.756025][T10419] usb 7-1: USB disconnect, device number 2 [ 595.769531][T11271] usb usb48-port1: unable to enumerate USB device [ 596.339950][T11480] overlayfs: failed to resolve './file0': -2 [ 596.711825][ T29] audit: type=1326 audit(2000000281.060:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11469 comm="syz.5.1052" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0fe580809 code=0x0 [ 596.951296][T11477] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 596.957825][T11477] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 597.581406][T11477] vhci_hcd vhci_hcd.0: Device attached [ 597.588110][T11478] vhci_hcd: connection closed [ 597.588363][ T8279] vhci_hcd: stop threads [ 597.597738][ T8279] vhci_hcd: release socket [ 597.603903][ T8279] vhci_hcd: disconnect device [ 598.058541][T11486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 599.377799][T11509] netdevsim netdevsim6: Direct firmware load for mu failed with error -2 [ 599.377852][T11509] netdevsim netdevsim6: Falling back to sysfs fallback for: mu [ 600.425176][T11503] Invalid ELF header type: 2 != 1 [ 602.891826][T11535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.350708][ T29] audit: type=1400 audit(2000000286.590:699): avc: denied { view } for pid=11530 comm="syz.7.1063" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 608.421251][ T29] audit: type=1400 audit(2000000292.280:700): avc: denied { getopt } for pid=11580 comm="syz.6.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 608.517020][ T29] audit: type=1400 audit(2000000292.940:701): avc: denied { setopt } for pid=11573 comm="syz.5.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 609.191380][T11597] ax25_connect(): syz.6.1079 uses autobind, please contact jreuter@yaina.de [ 609.709448][ T29] audit: type=1400 audit(2000000293.730:702): avc: denied { connect } for pid=11592 comm="syz.6.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 609.902066][T11600] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1078'. [ 610.353202][T11600] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 610.389686][T11603] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 610.537245][T11603] kvm: pic: single mode not supported [ 610.544197][T11603] kvm: pic: non byte read [ 610.711872][T11603] kvm: pic: non byte read [ 610.978527][T11603] kvm: pic: level sensitive irq not supported [ 610.981442][T11603] kvm: pic: non byte read [ 611.791531][T11603] kvm: pic: non byte read [ 611.799029][T11603] kvm: pic: non byte read [ 611.810908][T11603] kvm: pic: single mode not supported [ 611.810996][T11603] kvm: pic: non byte read [ 611.822529][T11603] kvm: pic: non byte read [ 612.676318][T11637] bridge0: port 3(erspan0) entered blocking state [ 612.682923][T11637] bridge0: port 3(erspan0) entered disabled state [ 612.689521][T11637] erspan0: entered allmulticast mode [ 612.696102][T11637] erspan0: entered promiscuous mode [ 612.701865][T11637] bridge0: port 3(erspan0) entered blocking state [ 612.708385][T11637] bridge0: port 3(erspan0) entered forwarding state [ 613.099351][ T29] audit: type=1400 audit(2000000297.640:703): avc: denied { unmount } for pid=9114 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 614.226933][ T29] audit: type=1400 audit(2000000298.770:704): avc: denied { mounton } for pid=11653 comm="syz.0.1092" path="/221/bus/file0" dev="ramfs" ino=27123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 614.250831][T11658] 9pnet_virtio: no channels available for device syz [ 614.262246][T11658] netlink: 'syz.0.1092': attribute type 4 has an invalid length. [ 614.448840][T11658] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 614.722018][T11658] overlayfs: failed to set xattr on upper [ 614.781486][T11658] overlayfs: ...falling back to redirect_dir=nofollow. [ 614.938101][T11658] overlayfs: ...falling back to index=off. [ 614.950739][T11658] overlayfs: ...falling back to uuid=null. [ 617.260796][ T29] audit: type=1400 audit(2000000301.720:705): avc: denied { write } for pid=11687 comm="syz.5.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 617.514392][T11702] fuse: Unknown parameter '00000000000000000011' [ 617.537086][T11702] Bluetooth: MGMT ver 1.23 [ 617.988791][T11696] ALSA: seq fatal error: cannot create timer (-22) [ 619.867355][T11721] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1104'. [ 625.521983][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.528317][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.761821][ T29] audit: type=1326 audit(2000000311.310:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11764 comm="syz.7.1116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b80809 code=0x0 [ 627.012344][ T29] audit: type=1800 audit(2000000311.550:707): pid=11779 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1120" name="bus" dev="overlay" ino=566 res=0 errno=0 [ 627.076909][T11780] netlink: 'syz.7.1116': attribute type 4 has an invalid length. [ 627.750787][T11786] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 628.276371][T11800] sg_write: data in/out 4060/14 bytes for SCSI command 0x0-- guessing data in; [ 628.276371][T11800] program syz.4.1123 not setting count and/or reply_len properly [ 629.198327][ T29] audit: type=1326 audit(2000000313.740:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.4.1124" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7983380809 code=0x0 [ 630.995268][T11822] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.995649][T11822] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.995719][T11822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.587539][T11863] atomic_op ffff88805ab29998 conn xmit_atomic 0000000000000000 [ 633.742593][T11863] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.860390][T11862] ebt_limit: overflow, try lower: 570423552/2483027968 [ 633.862349][T11858] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 633.879383][ T29] audit: type=1400 audit(2000000318.420:709): avc: denied { mounton } for pid=11854 comm="syz.4.1136" path="/bus" dev="sysfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 633.901943][T11862] overlay: filesystem on ./bus is read-only [ 634.182789][T11859] block device autoloading is deprecated and will be removed. [ 636.230034][T11892] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 637.877922][ T29] audit: type=1400 audit(2000000322.420:710): avc: denied { setopt } for pid=11906 comm="syz.7.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 639.267059][T11918] sp0: Synchronizing with TNC [ 639.797852][ T29] audit: type=1400 audit(2000000323.820:711): avc: denied { create } for pid=11905 comm="syz.0.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 639.819451][ T29] audit: type=1400 audit(2000000323.830:712): avc: denied { sys_admin } for pid=11905 comm="syz.0.1145" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 639.840427][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.055435][T11929] netdevsim netdevsim6: Direct firmware load for mu failed with error -2 [ 640.087274][T11929] netdevsim netdevsim6: Falling back to sysfs fallback for: mu [ 650.175789][T12018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 652.740774][ T29] audit: type=1326 audit(2000000336.790:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 652.892729][ T29] audit: type=1326 audit(2000000336.790:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 652.980733][ T29] audit: type=1326 audit(2000000336.790:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff44db7f170 code=0x7ffc0000 [ 653.167307][ T29] audit: type=1326 audit(2000000336.790:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff44db82037 code=0x7ffc0000 [ 654.009660][ T29] audit: type=1326 audit(2000000336.790:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 654.033087][ T29] audit: type=1326 audit(2000000336.790:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff44db82037 code=0x7ffc0000 [ 654.107977][ T29] audit: type=1326 audit(2000000336.790:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff44db7f46a code=0x7ffc0000 [ 654.131504][ T29] audit: type=1326 audit(2000000336.790:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 654.155293][ T29] audit: type=1326 audit(2000000336.800:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 654.192105][ T29] audit: type=1326 audit(2000000336.800:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12002 comm="syz.0.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff44db80809 code=0x7ffc0000 [ 655.348923][T12027] veth1_macvtap: left promiscuous mode [ 656.406404][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 656.415204][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 656.625027][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 656.696712][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 656.697456][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 656.811328][T12067] siw: device registration error -23 [ 657.205437][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 657.205522][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 657.290280][T12070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 657.362742][T12071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 657.807479][T12080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 658.189626][T12081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 658.511649][T11271] libceph: connect (1)[c::]:6789 error -101 [ 658.511766][T11271] libceph: mon0 (1)[c::]:6789 connect error [ 659.551586][T11271] libceph: connect (1)[c::]:6789 error -101 [ 659.655577][T11271] libceph: mon0 (1)[c::]:6789 connect error [ 659.804974][T12091] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1185'. [ 659.983880][T10419] libceph: connect (1)[c::]:6789 error -101 [ 659.990199][T10419] libceph: mon0 (1)[c::]:6789 connect error [ 660.643304][T10419] libceph: connect (1)[c::]:6789 error -101 [ 660.655659][T10419] libceph: mon0 (1)[c::]:6789 connect error [ 660.667216][T10640] kernel read not supported for file /video37 (pid: 10640 comm: kworker/0:3) [ 660.679314][ T5924] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 660.865149][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 660.865166][ T29] audit: type=1326 audit(2000000345.400:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12092 comm="syz.0.1186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff44db80809 code=0x0 [ 660.894324][ T5924] usb 7-1: Using ep0 maxpacket: 8 [ 661.448644][T12056] ceph: No mds server is up or the cluster is laggy [ 661.460352][ T5924] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 661.471399][ T5924] usb 7-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 661.480766][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.486658][ T5153] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 661.501881][T11271] libceph: connect (1)[c::]:6789 error -101 [ 661.507911][T11271] libceph: mon0 (1)[c::]:6789 connect error [ 661.610897][ T29] audit: type=1400 audit(2000000346.150:737): avc: denied { create } for pid=12106 comm="syz.7.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 661.648481][ T5924] usb 7-1: config 0 descriptor?? [ 661.669343][ T5924] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 662.061355][ T5924] usb 7-1: Detected SIO [ 662.094226][ T5924] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 662.385714][T12129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.132332][T11271] usb 7-1: USB disconnect, device number 3 [ 663.143985][T11271] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 663.344862][T12132] hub 5-0:1.0: USB hub found [ 663.349765][T12132] hub 5-0:1.0: 1 port detected [ 663.951808][T11271] ftdi_sio 7-1:0.0: device disconnected [ 664.935522][T12148] /dev/nullb0: Can't open blockdev [ 665.061790][ T5153] Bluetooth: hci4: link tx timeout [ 665.067305][ T5153] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 665.669038][ T5848] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 665.678034][ T5848] Bluetooth: hci4: Injecting HCI hardware error event [ 666.286817][T12164] ax25_connect(): syz.5.1200 uses autobind, please contact jreuter@yaina.de [ 667.290694][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 667.316590][ T29] audit: type=1400 audit(2000000351.350:738): avc: denied { ioctl } for pid=12153 comm="syz.0.1198" path="socket:[28479]" dev="sockfs" ino=28479 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 668.560041][ T5153] Bluetooth: hci4: hardware error 0x00 [ 668.840767][T12187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 669.650658][ T29] audit: type=1326 audit(2000000354.180:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12173 comm="syz.4.1205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7983380809 code=0x0 [ 669.847184][T12197] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1208'. [ 669.920965][T12197] overlayfs: invalid redirect (./file1) [ 670.470958][T12182] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1204'. [ 671.481882][ T5153] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 672.210814][ T29] audit: type=1400 audit(2000000356.010:740): avc: denied { execute } for pid=12171 comm="syz.0.1204" path="/dev/audio1" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 672.651630][ T29] audit: type=1400 audit(2000000357.050:741): avc: denied { watch } for pid=12219 comm="syz.4.1211" path="/256" dev="tmpfs" ino=1379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 672.785084][T12217] loop2: detected capacity change from 0 to 7 [ 672.920649][ T29] audit: type=1400 audit(2000000357.050:742): avc: denied { watch_sb } for pid=12219 comm="syz.4.1211" path="/256" dev="tmpfs" ino=1379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 673.083834][ T29] audit: type=1326 audit(2000000357.120:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12211 comm="syz.7.1212" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41a4b80809 code=0x0 [ 673.146775][T12217] Dev loop2: unable to read RDB block 7 [ 673.153434][T12217] loop2: unable to read partition table [ 673.159457][T12217] loop2: partition table beyond EOD, truncated [ 673.165811][T12217] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 673.260534][ T29] audit: type=1400 audit(2000000357.800:744): avc: denied { ioctl } for pid=12216 comm="syz.6.1210" path="socket:[28556]" dev="sockfs" ino=28556 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 675.883183][ T29] audit: type=1326 audit(2000000360.430:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12268 comm="syz.7.1221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41a4b80809 code=0x0 [ 676.143870][ T29] audit: type=1326 audit(2000000360.690:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12273 comm="syz.6.1222" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5ff180809 code=0x0 [ 677.053189][ T29] audit: type=1326 audit(2000000361.600:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 677.261083][ T29] audit: type=1326 audit(2000000361.600:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41a4b7f170 code=0x7ffc0000 [ 677.284856][ T29] audit: type=1326 audit(2000000361.600:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 677.308515][ T29] audit: type=1326 audit(2000000361.600:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 678.293940][ T29] audit: type=1326 audit(2000000361.600:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 678.317486][ T29] audit: type=1326 audit(2000000361.600:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 678.370514][ T29] audit: type=1326 audit(2000000361.600:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 678.394718][ T29] audit: type=1326 audit(2000000361.600:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 678.400816][ T5153] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 678.426858][ T29] audit: type=1326 audit(2000000361.600:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 678.455488][ T29] audit: type=1326 audit(2000000361.600:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 678.480778][ T5153] Bluetooth: hci0: command 0x0405 tx timeout [ 678.487610][ T29] audit: type=1326 audit(2000000361.600:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 678.511274][ T29] audit: type=1326 audit(2000000361.600:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 678.773789][ T29] audit: type=1326 audit(2000000361.600:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 678.846256][ T29] audit: type=1326 audit(2000000361.600:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12290 comm="syz.7.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 678.976430][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1227'. [ 678.994920][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1227'. [ 682.119642][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1233'. [ 682.137458][T12347] batman_adv: batadv1: Adding interface: netdevsim0 [ 682.144778][T12347] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.210647][T12347] batman_adv: batadv1: Interface activated: netdevsim0 [ 683.938979][T12354] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.826737][T12379] CIFS: VFS: Malformed UNC in devname [ 686.377445][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.383862][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.458100][T12356] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 686.590841][T12356] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 687.843417][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1238'. [ 687.852458][T12391] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1238'. [ 687.861470][T12391] netlink: 'syz.7.1238': attribute type 6 has an invalid length. [ 689.166833][T12401] veth1_macvtap: left promiscuous mode [ 689.172351][T12401] macsec0: entered promiscuous mode [ 689.177559][T12401] macsec0: entered allmulticast mode [ 690.048392][T12423] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1246'. [ 690.468068][T12433] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.615192][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1249'. [ 694.077586][T12467] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.111374][T12483] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 697.981449][T12503] SELinux: syz.4.1262 (12503) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 699.764192][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 699.764206][ T29] audit: type=1400 audit(2000000384.310:776): avc: denied { unmount } for pid=9114 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 700.301660][T12534] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 700.330733][ T29] audit: type=1400 audit(2000000384.870:777): avc: denied { create } for pid=12525 comm="syz.4.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 700.610831][ T972] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 700.653259][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'. [ 700.790907][ T972] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.804006][ T972] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 701.715035][T12552] ieee802154 phy0 wpan0: encryption failed: -22 [ 701.774203][ T972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.872200][ T972] usb 7-1: config 0 descriptor?? [ 703.448789][ T29] audit: type=1326 audit(2000000387.990:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12568 comm="syz.0.1274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff44db80809 code=0x0 [ 703.482019][T12572] netlink: 'syz.5.1272': attribute type 3 has an invalid length. [ 703.637753][ T29] audit: type=1400 audit(2000000388.050:779): avc: denied { lock } for pid=12560 comm="syz.7.1271" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 703.660983][ C0] vkms_vblank_simulate: vblank timer overrun [ 703.782707][T12572] netlink: 666 bytes leftover after parsing attributes in process `syz.5.1272'. [ 703.832279][T12572] batman_adv: batadv0: Adding interface: dummy0 [ 703.844274][T12572] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 703.913578][ T972] ath6kl: Failed to submit usb control message: -110 [ 703.925542][ T972] ath6kl: unable to send the bmi data to the device: -110 [ 703.947358][ T972] ath6kl: Unable to send get target info: -110 [ 703.950739][T12572] batman_adv: batadv0: Interface activated: dummy0 [ 703.965721][T12574] dvmrp8: entered allmulticast mode [ 704.003316][ T972] ath6kl: Failed to init ath6kl core: -110 [ 704.013998][ T972] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 704.859746][T12593] netlink: 'syz.0.1277': attribute type 29 has an invalid length. [ 704.922840][T12593] netlink: 'syz.0.1277': attribute type 29 has an invalid length. [ 704.943686][T12593] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1277'. [ 705.387911][T11271] usb 7-1: USB disconnect, device number 4 [ 706.909423][T12601] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 707.581029][T12610] ieee802154 phy0 wpan0: encryption failed: -22 [ 708.008238][ T29] audit: type=1400 audit(2000000392.550:780): avc: denied { getopt } for pid=12614 comm="syz.6.1282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 708.430769][ T5887] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 708.517340][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 708.706753][ T5848] Bluetooth: hci0: command tx timeout [ 709.381330][ T5887] usb 7-1: device descriptor read/64, error -32 [ 710.637248][ T5890] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 710.948906][ T29] audit: type=1326 audit(2000000395.490:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.5.1287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0fe580809 code=0x0 [ 711.141732][ T5887] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 711.210082][ T29] audit: type=1400 audit(2000000395.750:782): avc: denied { write } for pid=12637 comm="syz.4.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 711.264533][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 711.607292][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 711.616619][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.620230][T12643] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1289'. [ 711.637022][ T5890] usb 1-1: config 0 descriptor?? [ 711.642161][T12643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1289'. [ 711.651251][T12643] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1289'. [ 711.662895][ T5890] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 712.318376][T12652] netlink: 'syz.4.1289': attribute type 16 has an invalid length. [ 712.326354][T12652] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1289'. [ 713.650438][ T5887] usb 1-1: USB disconnect, device number 5 [ 714.115781][T11271] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 714.928861][ T29] audit: type=1400 audit(2000000398.800:783): avc: denied { mount } for pid=12667 comm="syz.6.1294" name="/" dev="rpc_pipefs" ino=31124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 717.430426][ T29] audit: type=1326 audit(2000000401.710:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.7.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 717.463198][ T29] audit: type=1326 audit(2000000401.710:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.7.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a4b80809 code=0x7ffc0000 [ 717.865565][ T29] audit: type=1326 audit(2000000401.760:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12679 comm="syz.7.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41a4b7f170 code=0x7ffc0000 [ 822.920582][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 822.927593][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12679/1:b..l [ 822.936254][ C0] rcu: (detected by 0, t=10502 jiffies, g=25513, q=49 ncpus=2) [ 822.943887][ C0] task:syz.7.1298 state:R running task stack:26048 pid:12679 tgid:12679 ppid:10618 flags:0x00004000 [ 822.956722][ C0] Call Trace: [ 822.960002][ C0] [ 822.962932][ C0] __schedule+0xe58/0x5ad0 [ 822.967361][ C0] ? __pfx_mark_lock+0x1/0x10 [ 822.972081][ C0] ? __pfx___schedule+0x10/0x10 [ 822.976928][ C0] ? mark_held_locks+0x9f/0xe0 [ 822.981696][ C0] ? irqentry_exit+0x3b/0x90 [ 822.986292][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 822.991667][ C0] preempt_schedule_common+0x44/0xc0 [ 822.996955][ C0] preempt_schedule_thunk+0x1a/0x30 [ 823.002153][ C0] _raw_spin_unlock+0x3e/0x50 [ 823.006825][ C0] unmap_page_range+0xb87/0x3d60 [ 823.011774][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 823.017143][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 823.022084][ C0] ? uprobe_munmap+0x20/0x5c0 [ 823.026763][ C0] unmap_single_vma+0x194/0x2b0 [ 823.031613][ C0] unmap_vmas+0x22f/0x490 [ 823.035939][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 823.040789][ C0] ? __pfx_lock_release+0x10/0x10 [ 823.045822][ C0] ? lock_acquire+0x2f/0xb0 [ 823.050319][ C0] ? mlock_drain_local+0x6f/0x4f0 [ 823.055347][ C0] exit_mmap+0x1c6/0xb30 [ 823.059589][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 823.064363][ C0] ? __pfx_mark_lock+0x10/0x10 [ 823.069139][ C0] __mmput+0x12a/0x480 [ 823.073206][ C0] mmput+0x62/0x70 [ 823.076924][ C0] do_exit+0x9bf/0x2d70 [ 823.081085][ C0] ? __pfx_do_exit+0x10/0x10 [ 823.085679][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 823.091053][ C0] do_group_exit+0xd3/0x2a0 [ 823.095567][ C0] __x64_sys_exit_group+0x3e/0x50 [ 823.100601][ C0] x64_sys_call+0x151f/0x1720 [ 823.105276][ C0] do_syscall_64+0xcd/0x250 [ 823.109780][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.115679][ C0] RIP: 0033:0x7f41a4b80809 [ 823.120093][ C0] RSP: 002b:00007fff2579aac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 823.128500][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f41a4b80809 [ 823.136469][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 823.144436][ C0] RBP: 00007fff2579ab1c R08: 00007fff2579abaf R09: 00000000000ae401 [ 823.152403][ C0] R10: 000000000001d234 R11: 0000000000000246 R12: 0000000000000032 [ 823.160370][ C0] R13: 00000000000ae401 R14: 00000000000adfbb R15: 00007fff2579ab70 [ 823.168348][ C0] [ 823.171363][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g25513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 823.183674][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=44205 [ 823.191546][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g25513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 823.202989][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 823.212947][ C0] rcu: RCU grace-period kthread stack dump: [ 823.219177][ C0] task:rcu_preempt state:I stack:28424 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 823.229372][ C0] Call Trace: [ 823.232640][ C0] [ 823.235565][ C0] __schedule+0xe58/0x5ad0 [ 823.239979][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 823.245270][ C0] ? __pfx___schedule+0x10/0x10 [ 823.250120][ C0] ? schedule+0x298/0x350 [ 823.254448][ C0] ? __pfx_lock_release+0x10/0x10 [ 823.259483][ C0] ? lock_acquire+0x2f/0xb0 [ 823.263979][ C0] ? schedule+0x1fd/0x350 [ 823.268310][ C0] schedule+0xe7/0x350 [ 823.272383][ C0] schedule_timeout+0x124/0x280 [ 823.277228][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 823.282598][ C0] ? __pfx_process_timeout+0x10/0x10 [ 823.288062][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 823.293865][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 823.299863][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 823.304641][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 823.309932][ C0] ? rcu_gp_init+0xc82/0x1630 [ 823.314613][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 823.319838][ C0] rcu_gp_kthread+0x271/0x380 [ 823.324553][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 823.329761][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 823.334963][ C0] ? __kthread_parkme+0x148/0x220 [ 823.340075][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 823.345372][ C0] kthread+0x2c1/0x3a0 [ 823.349439][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 823.354636][ C0] ? __pfx_kthread+0x10/0x10 [ 823.359223][ C0] ret_from_fork+0x45/0x80 [ 823.363634][ C0] ? __pfx_kthread+0x10/0x10 [ 823.368220][ C0] ret_from_fork_asm+0x1a/0x30 [ 823.373017][ C0] [ 823.376042][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 823.382367][ C0] Sending NMI from CPU 0 to CPUs 1: [ 823.387582][ C1] NMI backtrace for cpu 1 [ 823.387592][ C1] CPU: 1 UID: 0 PID: 12684 Comm: syz.6.1301 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 823.387608][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 823.387615][ C1] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 823.387641][ C1] Code: c6 c0 e1 d1 8b 48 c7 c7 00 e2 d1 8b e9 f9 fe ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 89 fe 48 c7 c7 40 e2 d1 8b e9 cd fe ff ff 66 2e 0f [ 823.387653][ C1] RSP: 0018:ffffc90000a18c80 EFLAGS: 00000046 [ 823.387665][ C1] RAX: 0000000000000007 RBX: 1ffff92000143192 RCX: 0000000000000000 [ 823.387674][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8b6ce1a0 [ 823.387682][ C1] RBP: 0000000000000046 R08: 0000000000000001 R09: 0000000000000000 [ 823.387690][ C1] R10: ffffffff9060bed7 R11: 0000000000000002 R12: 0000000000000000 [ 823.387698][ C1] R13: ffff88805c41b300 R14: 0000000000000000 R15: 0000000000000000 [ 823.387707][ C1] FS: 00005555725c2500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 823.387722][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 823.387730][ C1] CR2: 0000001b30703ff8 CR3: 0000000031fa8000 CR4: 00000000003526f0 [ 823.387739][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 823.387747][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 823.387755][ C1] Call Trace: [ 823.387762][ C1] [ 823.387768][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 823.387784][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 823.387797][ C1] ? nmi_handle+0x1a7/0x5c0 [ 823.387812][ C1] ? __pfx___this_cpu_preempt_check+0x10/0x10 [ 823.387830][ C1] ? default_do_nmi+0x6a/0x160 [ 823.387844][ C1] ? exc_nmi+0x170/0x1e0 [ 823.387856][ C1] ? end_repeat_nmi+0xf/0x53 [ 823.387877][ C1] ? __pfx___this_cpu_preempt_check+0x10/0x10 [ 823.387895][ C1] ? __pfx___this_cpu_preempt_check+0x10/0x10 [ 823.387914][ C1] ? __pfx___this_cpu_preempt_check+0x10/0x10 [ 823.387932][ C1] [ 823.387936][ C1] [ 823.387940][ C1] lock_acquire.part.0+0xe0/0x380 [ 823.387956][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 823.387970][ C1] ? rcu_is_watching+0x12/0xc0 [ 823.387987][ C1] ? trace_lock_acquire+0x146/0x1e0 [ 823.388005][ C1] ? advance_sched+0xd8/0xc60 [ 823.388021][ C1] ? lock_acquire+0x2f/0xb0 [ 823.388034][ C1] ? advance_sched+0xd8/0xc60 [ 823.388047][ C1] ? __pfx_advance_sched+0x10/0x10 [ 823.388060][ C1] _raw_spin_lock+0x2e/0x40 [ 823.388074][ C1] ? advance_sched+0xd8/0xc60 [ 823.388087][ C1] advance_sched+0xd8/0xc60 [ 823.388101][ C1] ? timerqueue_del+0x83/0x150 [ 823.388114][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 823.388131][ C1] ? __pfx_advance_sched+0x10/0x10 [ 823.388144][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 823.388164][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 823.388180][ C1] ? read_tsc+0x9/0x20 [ 823.388199][ C1] hrtimer_interrupt+0x392/0x8e0 [ 823.388219][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 823.388235][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 823.388252][ C1] [ 823.388256][ C1] [ 823.388260][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 823.388279][ C1] RIP: 0010:mt_validate+0x1627/0x41b0 [ 823.388297][ C1] Code: 00 e8 9d 38 71 f6 4c 89 e0 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 0e 27 00 00 4d 8b 24 24 4d 85 e4 74 42 74 38 71 f6 be ff ff ff ff 4c 89 e7 e8 97 f8 11 00 31 ff 41 89 [ 823.388309][ C1] RSP: 0018:ffffc9000e98f6e0 EFLAGS: 00000286 [ 823.388319][ C1] RAX: 1ffff1100f759278 RBX: 000000000000000e RCX: ffffffff8b1d9804 [ 823.388328][ C1] RDX: dffffc0000000000 RSI: ffffffff8b1d9403 RDI: 0000000000000005 [ 823.388336][ C1] RBP: ffff8880328d88f0 R08: 0000000000000005 R09: 0000000000000300 [ 823.388344][ C1] R10: 0000000000000300 R11: 0000000000000001 R12: ffff88807bac9560 [ 823.388353][ C1] R13: 0000000000000000 R14: 0000000000000300 R15: 0000000000000001 [ 823.388363][ C1] ? mt_validate+0x1a04/0x41b0 [ 823.388379][ C1] ? mt_validate+0x1603/0x41b0 [ 823.388402][ C1] ? __pfx_mt_validate+0x10/0x10 [ 823.388424][ C1] validate_mm+0xb1/0x530 [ 823.388441][ C1] ? __pfx_validate_mm+0x10/0x10 [ 823.388457][ C1] ? vma_complete+0x9da/0xda0 [ 823.388476][ C1] ? __asan_memset+0x23/0x50 [ 823.388490][ C1] __split_vma+0xc09/0x1160 [ 823.388505][ C1] ? __pfx___split_vma+0x10/0x10 [ 823.388521][ C1] ? __pfx_lock_release+0x10/0x10 [ 823.388535][ C1] ? ima_file_mprotect+0x1b9/0x690 [ 823.388552][ C1] vma_modify.constprop.0+0x1f9/0x3b0 [ 823.388569][ C1] vma_modify_flags+0x209/0x2a0 [ 823.388584][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 823.388605][ C1] mprotect_fixup+0x2c2/0xbe0 [ 823.388622][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 823.388636][ C1] ? selinux_file_mprotect+0x161/0x610 [ 823.388653][ C1] do_mprotect_pkey+0x981/0xcf0 [ 823.388671][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 823.388691][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 823.388709][ C1] ? rcu_is_watching+0x12/0xc0 [ 823.388727][ C1] __x64_sys_mprotect+0x78/0xc0 [ 823.388742][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 823.388757][ C1] do_syscall_64+0xcd/0x250 [ 823.388776][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.388794][ C1] RIP: 0033:0x7fe5ff1808c7 [ 823.388804][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.388816][ C1] RSP: 002b:00007fffd245dd28 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 823.388828][ C1] RAX: ffffffffffffffda RBX: 00007fe5fff516c0 RCX: 00007fe5ff1808c7 [ 823.388837][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fe5fff32000 [ 823.388845][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 823.388853][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007fffd245de80 [ 823.388861][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 823.388874][ C1]