last executing test programs: 25m18.733608553s ago: executing program 1 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x10100, 0x0, 0x2b5, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000180)='.\x00', 0x2000, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r8}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) flock(r6, 0x1) flock(r6, 0x2) close(r5) r9 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x4, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x20, &(0x7f00000002c0), 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 25m16.571137293s ago: executing program 1 (id=855): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x1, 0x12009, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) socket$alg(0x26, 0x5, 0x0) syz_socket_connect_nvme_tcp() r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 25m12.234344483s ago: executing program 1 (id=864): getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x1fe, 0x5, 0x10000, 0x2000, &(0x7f00004aa000/0x2000)=nil}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept(r6, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) 25m11.25044211s ago: executing program 1 (id=866): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x9]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x3, 0x5, 0x8, 0x0, 0x0, 0xfffffffffffffff9, 0xf96, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x2, 0x10, 0x2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) 25m5.958769286s ago: executing program 1 (id=878): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r0, 0x8) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000a00)=""/4096}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x140) sendfile(r2, r7, 0x0, 0x8000fbffc001) 25m3.072534135s ago: executing program 1 (id=882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe7d43252defed309, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) 24m47.428582757s ago: executing program 32 (id=882): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe7d43252defed309, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) 19m4.303691835s ago: executing program 0 (id=1675): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000180), 0x3, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x844) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 18m57.491911733s ago: executing program 0 (id=1690): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20943, 0x0) writev(r0, 0x0, 0x0) getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x9c, 0x7], [0x0, 0x1080, 0x2], [0x0, 0x0, 0x1, 0xfffffffffffff001]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f0000000100)={0x7fff, r9}) ioctl$DMA_BUF_IOCTL_SYNC(r11, 0x40086200, &(0x7f0000000040)=0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 18m52.373281346s ago: executing program 0 (id=1701): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={0x0, &(0x7f0000000c40)=""/3, 0x0, 0x3, 0x1, 0x1, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{0x0}], 0x1) r7 = dup3(r4, 0xffffffffffffffff, 0x0) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18000000061401000000000000"], 0x18}}, 0x0) 18m50.797806783s ago: executing program 0 (id=1706): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x2}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x1a0, 0x4c, 0x1a, 0x1a0, 0x73, 0x300, 0x258, 0x258, 0x300, 0x258, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0x0, 0x0, 0xff], [0x0, 0xffffff00], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x138, 0x1a0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@rateest={{0x68}, {'veth1_vlan\x00', 'veth0\x00', 0x24, 0x3, 0x8, 0x2, 0x39, 0x80000001, {0x8001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xe, 0xb, 0xc, 0xc07, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0xc, "fc84"}}, @common=@icmp6={{0x28}, {0x0, "e1f6", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x8000, 0x7, 0x18d, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) getrusage(0xffffffffffffffff, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 18m41.713431911s ago: executing program 0 (id=1724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) io_uring_setup(0x71b9, &(0x7f00000000c0)={0x0, 0xc63b, 0x0, 0x0, 0x1}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r4, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) ioctl$NBD_DISCONNECT(r4, 0xab08) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000240)='./file0/file0\x00', 0xa02, 0x101) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x17, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffb, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18m36.506203854s ago: executing program 0 (id=1734): syz_clone(0x10000000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x28a641, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) unlink(&(0x7f0000000000)='./file0\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000304000025c40000fedbdf250000", @ANYRES32=0x0, @ANYBLOB="0001000008a600001400128009000100766c616e00000000040002800a000100ffffffffffff0000"], 0x40}, 0x1, 0xba01, 0x0, 0x8000}, 0x810) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000840)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0xa, 0x800}, 0x4000080) close(r1) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0) 18m20.966508116s ago: executing program 33 (id=1734): syz_clone(0x10000000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x28a641, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) unlink(&(0x7f0000000000)='./file0\x00') r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000304000025c40000fedbdf250000", @ANYRES32=0x0, @ANYBLOB="0001000008a600001400128009000100766c616e00000000040002800a000100ffffffffffff0000"], 0x40}, 0x1, 0xba01, 0x0, 0x8000}, 0x810) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000840)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0xa, 0x800}, 0x4000080) close(r1) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0) 27.045971946s ago: executing program 5 (id=4091): ioprio_set$pid(0x1, 0x0, 0x6000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000007000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000b80)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r5, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x1, 0x2, {{0x6, 0x4, 0x2, 0xb, 0x18, 0x66, 0x0, 0x6, 0x4, 0x0, @loopback, @loopback, {[@end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="8500000038000000183300000500000000000000000000000129058912d392592a384000ffffffff973418000100000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x23, 0x0, 0x2}, 0x10) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) shmctl$IPC_RMID(0x0, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x24) sendmmsg(r9, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003c8000/0x4000)=nil, 0x4000, &(0x7f0000000040)='[:Q%@\x00') 25.85892187s ago: executing program 5 (id=4094): r0 = epoll_create1(0x80000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80000001}) accept(r1, &(0x7f00000005c0)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000340)=0x80) keyctl$restrict_keyring(0xa, 0x0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000880)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xe2\xbf\xef\x00\x001w\xfd\r4\x8eM\xeb\xb7\xa2\x95\xcdU\xb8\x98Q\x7f\x7f\"\x91,xAZ\xd3\xf1\xd5{\xc9\x14\x1a\x80\xafYK\x9e:\x0f$@\bt\ri\xfd\xad\x04G\xa0\xcbd5SN\xa8\xc1C\x8e@\x94`\x1d\x01\xb2\x96\xfe9%\xefx\xfd\xc8\xba\xa2)\xdeQ\xa0C\x80\x03+\x1b\x03c{\";\xe2\x9e\xd4&\xbb@J\xf3\xf3j\xe0:\xf5\xdc\xef\n\n\x00\x00\x00\x00\x00\x00\x00\xda\xf4') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x42000) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000000c0)=0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500200000000000211ce47a2496260ee5a1d1c68b7d0617266ff78db990ab9b86c9233a54fa04e6e55b68a3c4647684b7992e0d2c427c4cee6373ae35f6fab064de8b99eeb95fc5fb81e78fdc49be9da3bb2651aa7be55b99c6d2379e459b23bf0d9dd64af39e"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x42, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x40000}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0x0, r4, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000}}}, 0x78) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r8, 0xc0485630, &(0x7f0000000140)={0x1, "d1369cf58e4c2521380d10ba3c6906da6fab93d12c03a89341659a2aea99cef5", 0x2, 0x1ff, 0x5, 0x10003, 0x2}) 19.196083158s ago: executing program 4 (id=4107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000400)=""/243, &(0x7f0000000100)=0xf3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ptrace$cont(0x20, r3, 0x9c2, 0xff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x22000000}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000000)={0xe4, r8, r7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, 0x0, 0x0}, 0x20) recvmmsg(r4, 0x0, 0x0, 0x120, 0x0) r9 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "0e233cc0"}]}}, 0x0}, 0x0) 19.159041015s ago: executing program 5 (id=4108): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0x2, 0xfffffffe}}, 0x2e) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40)="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", 0x319, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c000004"], 0x528}}, 0xc000) r4 = socket(0x200000000000011, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0x9, 0x0, 0x0) r9 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r9) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r7], 0x70}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9bb4c93bc7f1477b75ea02f7f59040e053e5bfa7145d0200000004000000b65655aa6e411f46de2b9324475ba51981228c791591628e2bbeb86b0b1cd01f2505dd6c20854ed5d637e15805da32f1dd4c00238e5d41e44c67b0dc7a063587d3ee551aa59d", @ANYRES64=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES16=r5, @ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) fcntl$getown(r2, 0x9) 15.652725968s ago: executing program 4 (id=4115): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r2 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r3, r3) preadv(r2, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="340000003e000701fefffffffcffffff017c0000080042800400b9e80c00018006000600800a00000c00028006001780b82f0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$inet(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)='`', 0x1}], 0x1}, 0x4010) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r4, &(0x7f00000006c0)=[{&(0x7f00000005c0)='I', 0x1}], 0x1) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f5, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x12, 0xba2, 0x5, 0x3e, {0x8, 0xffffffff}, 0xd0, 0x9}}) getsockopt$inet_buf(0xffffffffffffffff, 0x6, 0x29, 0x0, &(0x7f0000695ffc)) 14.057562201s ago: executing program 5 (id=4118): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) wait4(0x0, &(0x7f0000000080), 0x1, &(0x7f0000000540)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0xfffffffc) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x3ff}, 0x1c) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2, 0x80805, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) 13.907534219s ago: executing program 2 (id=4121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf604, 0x108008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000080), 0x10) listen(r8, 0x0) accept4$llc(r8, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) r9 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x103040, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000000240)={0x48}) 13.107045963s ago: executing program 4 (id=4122): io_uring_setup(0x2471, 0x0) io_uring_setup(0x2a5a, &(0x7f0000000600)={0x0, 0x52c4, 0x4000, 0xffffffff, 0x51}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x20}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_getscheduler(0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_secret(0x0) pwrite64(r3, &(0x7f0000000000)="db1033f8c89ad399bc10ed501da24e64794d6e8abdfb003284ee187f8946c39cc107407e2fb719fc4d1af5e249af71885b4945f5b133a6c9e74bf25f4207feca9079cd0dd20634b3487da5cc3a", 0x4d, 0x1caf) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x106, 0x9}}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 12.505398987s ago: executing program 2 (id=4123): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x82ce485}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000180)=@v2={0x2000000, [{0x401, 0x7}, {0x0, 0x6df6}]}, 0x14, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r5 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r6 = fanotify_init(0xf00, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) 10.403473156s ago: executing program 2 (id=4126): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0xa8, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x94, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x4c, 0x1e, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x480, 0x3, 0x1, 0xcea}, 0x3f}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, {0x8000000, 0x0, 0x0, 0x9479, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, "d50bddda7d1d080073d517f77967fe97751f13a23aeaacb0565c2c2251560ed1"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0700802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1e00010c00028005000100000000003c0002802c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0c000280050001000000000008000740"], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000020101010000000005000000000000023b8a86baed895df4ea0d63d2aa65788d953d3cf24f0c1f1ab527932d5d86265eb0c72e1b934f00559a6390c2d7e65204521d632e6937363c15f77e5c828cd96783fdc21aac39a4ae648cb26000931c9127895d2c"], 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt(r8, 0xeb, 0x10, &(0x7f0000000340)=""/45, &(0x7f0000000400)=0x2d) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) 9.55504964s ago: executing program 6 (id=4128): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x189142) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x6000, 0x8080000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c0f000000c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576648eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af095a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0714b236f6f141ba0112c9312b3ec853aabafdf1e92cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb6ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b40867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d0400000000000000a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d445ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f710100ab8d0b545c334014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d11be2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b57fe072d3218983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e0050000006c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade3d704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae9cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f03a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de023593acc8dd6112b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be020087438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) write$rfkill(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socket$unix(0x1, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 9.545953651s ago: executing program 4 (id=4129): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES64=0x0], 0x20) r1 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r2, r2) preadv(r1, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="340000003e000701fefffffffcffffff017c0000080042800400b9e80c00018006000600800a00000c00028006001780b82f0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)='`', 0x1}], 0x1}, 0x4010) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r3, &(0x7f00000006c0)=[{&(0x7f00000005c0)='I', 0x1}], 0x1) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f5, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x12, 0xba2, 0x5, 0x3e, {0x8, 0xffffffff}, 0xd0, 0x9}}) getsockopt$inet_buf(0xffffffffffffffff, 0x6, 0x29, 0x0, &(0x7f0000695ffc)) 8.944933107s ago: executing program 2 (id=4130): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x8, 0x4) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x9782, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x4, 0x0, 0x0, 0x0, @rand_addr=0x64010101}}}}) 7.383125545s ago: executing program 5 (id=4133): r0 = socket(0x28, 0x5, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)) socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r1, 0x0, 0x4003) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'hsr0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x4}, 0xc) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000140)={0x2, 0x1, 0x10, 0x0, 0x230d}, 0xc) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7fffffff, 0xd}, 0x0, 0x0, 0x2, 0x9, 0x6d9c, 0x8, 0x14, 0xdc}}], 0x58, 0x8004}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) socket(0x28, 0x5, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000d40)={0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x40e3, "57c13f00", 0x0, 0x0, 0x2}) syz_clone3(&(0x7f0000001480)={0x6002000, &(0x7f0000001040), &(0x7f0000001140), &(0x7f0000001300), {0x30}, &(0x7f0000001340)=""/131, 0x83, &(0x7f0000001400)=""/58, &(0x7f0000001440)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) 6.901590455s ago: executing program 6 (id=4135): socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000200400007d746130000000000000000000"], 0x50) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0x2, 0x0, 0x2, {0x92e, 0x6, 0x8, 0x8}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in6=@remote, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xee00}, {@in6=@empty, 0x1100, 0x3c}, @in6=@remote, {}, {}, {0x0, 0x4}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4000814) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="3b918f3a", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000005c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) init_module(&(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000ffff00000000000000000000004000"/44], 0x40, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x0, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) socket$netlink(0x10, 0x3, 0x0) ioprio_set$pid(0x1, 0xffffffffffffffff, 0x6000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 6.736714837s ago: executing program 3 (id=4136): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000002020101000000000000083c0002802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffffac1414aa0c000236033041ad3f68cf8005000100880000000000000000"], 0x50}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) sendto$inet(r3, &(0x7f0000000200)="f8d316d6d863cf", 0x7, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @timestamp, @timestamp, @timestamp, @sack_perm], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f7", 0x24, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-256-generic)\x00'}, 0x58) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) 5.744037313s ago: executing program 2 (id=4137): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x3) semget$private(0x0, 0x207, 0x480) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, 0x0, 0x160) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x5, "90737f0000ffffffffffffffff1e277fffffeb"}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r5 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x8, '\x00', @p_u16=0x0}}) r6 = socket$inet6(0xa, 0x80002, 0x88) r7 = socket$kcm(0x10, 0x3, 0x10) read(r7, &(0x7f0000000480)=""/4096, 0x1000) sendmsg$kcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001580)=""/4075, 0xfeb}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/4096, 0x1000}], 0x3}, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) 5.538428771s ago: executing program 3 (id=4138): sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x8080, 0x81) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)={0x10}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x100002f, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) socket(0x10, 0x3, 0x0) 5.537910268s ago: executing program 4 (id=4139): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x3, &(0x7f0000000040)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) wait4(0x0, &(0x7f0000000080), 0x1, &(0x7f0000000540)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0xfffffffc) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x3ff}, 0x1c) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2, 0x80805, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) 5.255654112s ago: executing program 6 (id=4140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x2018081, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d6ac02593fd8a5b1730cb978a34102ae5025ab90c4568a6bb25ceab9831d70218b8f68166cf9da9bfc6d9f134049c710532c9b5017ceffcd694726736992980112b2191445315267041268d55ccefb43003a146daf3d965c8c0cd83ac645b6311414fcc60ff1b8c7cfe8176f4a9b29e3df92e005f8b27c69fddfb56a3f6d13ff9ae23b0885fef807a38ffc8c7dd3e191c2a938c88dd425da44a705f6a7c0c5f73e665d28a316ec89d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fanotify_init(0xf00, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4000}, 0x18) mkdir(0x0, 0x154) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd']) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) chdir(0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0xc0049364, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.378215567s ago: executing program 2 (id=4141): r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f00000001c0)={0x0, 0x30, 0x9a, {0x9a, 0x1, "145f9b7f7a50514abf67deded575718a97a2a7b2792151ca05762f7daa4f11f3bc1b01f20de2c30406f0734dee080a8b55c9bf7d4cb423861d5ecc847fcc4f52ffff1682bec4cbe909ce9f9faf3b52bf68efae0d39776f412b0c8e151db20cdf0129be92d3b4a821f0ec1606ef421716623a47ca0f4acf3da8a8d8b72b554dff9d35753a7c3bf15f1bdca0511b281e21c1ee1ca838ec99ee"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x809}}, &(0x7f00000002c0)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0xe}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0xa}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000440)={0x0, 0xc, 0xed, "7115369083a9a99492c53b3dd854a71c3ea140f8d345e62df14cbe0ea8d0c1bf7acdd0c0ac4f38f5d36a144266f44e267ea404da474f7a11440d116af0df983fc5d0a08a846180eebbbf99a7ebf51a20df0878fd6226257813116853ea1f5260ab73c49c2921251355079f15ddfc979908a8b42ca51d841eabdadb4724532833345206b97997ee2c0f2e2f3ec25b74864c0cf7f4804a8bd8a69fa8124c6a6cdd8d2755ce277f87fd885fc81d066f7bbdb9032e7df2925955b41096583dc83e64eebef30bf0fdd5c21661f807d197088c2298264c2a6726f0a8739fad7500bb31a16e68dd9198ae22ea56c73349"}, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0x20, 0x3, 0x1, 0xdd}}) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x24, [@rand_addr=0x64010100, @local]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}}}, 0x0) symlink(0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) dup(0xffffffffffffffff) ioperm(0x0, 0x8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) memfd_create(&(0x7f0000000b80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x0) creat(0x0, 0x109) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000240)='./file0\x00', 0x8fff3) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7078, 0x0, 0x400007, 0x288}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r5, 0x0) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_register(r6, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3, 0x3a, '(', 0x3a, '', 0x3a, './file0'}, 0x28) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000100070000000900020073797a31000000000c00078008001240000000000c000300686173683a697000050005000a00000000"], 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 3.961130926s ago: executing program 5 (id=4142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb(compress_null-generic),blake2s-224-arm)\x00'}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0xd0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="48d5129c0821a5b638d43e9d9b633a00fd89ca322414ec7cd23225fe53bb7c335f0a5cf34b44688239294682bf0f578eeac88993a338058c96f0414160877399255fc917715e10158377a5b1cd2bb44623b9337e56e460", @ANYRES16=r7, @ANYBLOB="000225bd7000fbdbdf250a0000002400018008000300ac1414aa06000100020000000500020010000000050002000c000000080004000400000005000500e1000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x2851) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x236, &(0x7f0000000400)={0x0, 0xf691, 0x800, 0x0, 0x2b5, 0x0, r9}, &(0x7f0000000180), &(0x7f0000000280)) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r10 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r10, 0x0, 0x400000000000000, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x1c, 0x54, 0x54, 0x2, [@union={0xc, 0x4, 0x0, 0x5, 0x0, 0x0, [{0x1, 0x1, 0x3}, {0x2, 0x10000000, 0x1}, {0xb, 0x4, 0x101}, {0xc, 0x1, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x8}}]}}, 0x0, 0x6e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x8, 0xfffffffffffffffe) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x549500, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x3}, 0x8) 3.959704409s ago: executing program 3 (id=4143): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS2(r1, 0x402c542b, 0x0) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000001c0)=@generic={0x0, 0x610, 0x200}) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0xe5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) 3.947445883s ago: executing program 6 (id=4144): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) connect$tipc(r3, &(0x7f0000000200)=@id={0x1e, 0x3, 0x6, {0x4e24, 0x1}}, 0x10) ftruncate(0xffffffffffffffff, 0x200000000000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900010073797a31000000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x84}}}], 0x18}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x50) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 3.542626433s ago: executing program 3 (id=4145): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='stack\x00') pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x3, 0x80}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11d8, @void, @value}, 0x94) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000140)=0x10000030, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x80, 0x4) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000b00)={'hsr0\x00', 0x9}) write$sequencer(r1, &(0x7f00000000c0)=[@t={0x0, 0x6, 0x2, 0x81, @generic=0xf}, @t={0x4, 0x2, 0x7, 0xad}], 0x10) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181003100000001090000000000000e000a000f00e4ff2f8002002d1f", 0x2e}], 0x1}, 0x4000) 2.711425828s ago: executing program 4 (id=4146): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001814010000000000fedbdf250800010000000000080003"], 0x20}}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) ioctl$TCSETS(r1, 0x89f2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "5dee000000594000"}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071123300000000009500000000000000326403af62f27cb9eac5f9c1315dc328df8945328e9dad5cf6cf55c5ba7dd030dc395637020634d69244c76d25cd90d9c1f0e48ffd6a85b236db905deb4f1cd729c22901d95906b952947b7caea262c46940608f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f000043f000/0x18000)=nil, &(0x7f0000000500)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000100)={"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"}) gettid() timer_create(0x6, 0x0, &(0x7f0000044000)) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r8, &(0x7f0000002000)='`', 0x88020) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000000)=0x7ffd) 2.532441855s ago: executing program 3 (id=4147): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, '.\x00'}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000000c0)) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close_range(r3, r3, 0x2) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e", @ANYRES32=r6, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r7 = syz_clone(0x30009100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x80000001, 0x0) ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={&(0x7f0000019580)=""/120, 0x78}) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000004b40), r9) sendmsg$NET_DM_CMD_START(r9, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'bond_slave_0\x00', @link_local}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 2.336347593s ago: executing program 6 (id=4148): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$selinux_relabel(0xffffff9c, &(0x7f0000000b40), 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20840, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80064d12, &(0x7f0000000000)) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) init_module(&(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x4, 0xfc, 0xffffffffffffffff, 0x3, 0x6, 0x8, 0x190, 0x40, 0x11b, 0x10, 0xa, 0x38, 0x0, 0xe9, 0x8, 0xc}}, 0x40, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1.446294922s ago: executing program 3 (id=4149): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x48, 0x30, 0x800, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmsg$tipc(r1, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4002}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x183001, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x24, r4, 0x601, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0xc) syz_usb_connect(0x2, 0x10e, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f000000000000000000000000000026fa580d1498f13cc5e6159bf757f8a2dcc266b269c2d27d96efc5ce54"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x8c0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 0s ago: executing program 6 (id=4150): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) accept4(r0, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000082232fa14b7cf42979fd798ae0352263bb05679175e5ab65a1f926c682192468e05871e089ffaa8bc786a247e2cb1246678469c5f2abcf295c73dc19e8e75a036c937fe2e704fc48842bdcc8a7d16250e59f4c2cb979ff7a9b805cad854a9296185c47d6e626771bb27017d787b3cfda3f37d3fc4dc5a719a71e23aea7d69ec60dd4f550da9e28025dae97b054cee1a808475db023df515284141ac0"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x29}, 0x1, 0x0, 0x0, 0x14000801}, 0x40810) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x25) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000b22000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x14) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYRES8, @ANYBLOB="0e3e6d93e5d87b2619adf1ff8f8953f8cfe3137aaf008ce527c121bb8a2beb18abf61774c234ee3ea9a89d5cfe004a501a2844a41011d1ca85d03c895fd7d55e39d2df682d6e4b407beb1d2a9426c4295c3c2628cb2cc2c3e93ad1c9", @ANYRES8=r1], 0x38}}, 0x4008044) kernel console output (not intermixed with test programs): e config [ 1606.719076][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1606.745275][ T30] audit: type=1400 audit(1600.604:3594): avc: denied { setopt } for pid=19998 comm="syz.4.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1606.747626][T20001] netlink: 'syz.4.3301': attribute type 9 has an invalid length. [ 1606.787359][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1606.801780][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.810223][ T9] usb 7-1: Product: syz [ 1606.814420][ T9] usb 7-1: Manufacturer: syz [ 1606.819048][ T9] usb 7-1: SerialNumber: syz [ 1606.863885][ T9] usb 7-1: config 0 descriptor?? [ 1606.906412][T20005] netlink: 'syz.4.3301': attribute type 9 has an invalid length. [ 1607.013798][T20006] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1607.513635][ T9] usb 7-1: USB disconnect, device number 9 [ 1607.647117][T20012] openvswitch: netlink: Message has 2 unknown bytes. [ 1607.659860][T20012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1609.016792][ T30] audit: type=1400 audit(1602.681:3595): avc: denied { read } for pid=20020 comm="syz.2.3307" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1609.044123][T20027] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1609.050622][T20027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1609.058347][T20027] vhci_hcd vhci_hcd.0: Device attached [ 1609.063241][ T30] audit: type=1400 audit(1602.681:3596): avc: denied { open } for pid=20020 comm="syz.2.3307" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1609.097085][ T30] audit: type=1400 audit(1602.681:3597): avc: denied { ioctl } for pid=20020 comm="syz.2.3307" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1609.871068][ T9] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 1610.584441][T20028] vhci_hcd: connection closed [ 1610.585592][ T36] vhci_hcd: stop threads [ 1610.627416][T20039] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3310'. [ 1611.199074][ T36] vhci_hcd: release socket [ 1611.219413][ T36] vhci_hcd: disconnect device [ 1611.353820][ T30] audit: type=1400 audit(1604.926:3598): avc: denied { append } for pid=20040 comm="syz.6.3311" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1611.417259][T20042] random: crng reseeded on system resumption [ 1611.648074][ T30] audit: type=1400 audit(1605.057:3599): avc: denied { ioctl } for pid=20040 comm="syz.6.3311" path="/dev/usbmon7" dev="devtmpfs" ino=738 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1611.762740][T20050] syz.4.3313 (20050): drop_caches: 2 [ 1611.774136][T20050] syz.4.3313 (20050): drop_caches: 2 [ 1612.982894][T20057] vivid-000: disconnect [ 1613.023266][ T30] audit: type=1400 audit(1606.469:3600): avc: denied { getopt } for pid=20053 comm="syz.2.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1613.742711][T20053] vivid-000: reconnect [ 1613.868623][T20064] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3315'. [ 1613.882078][ T30] audit: type=1400 audit(1607.274:3601): avc: denied { nlmsg_read } for pid=20063 comm="syz.5.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1614.120050][T20072] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1614.971548][T20074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3319'. [ 1615.021056][T20076] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3320'. [ 1616.110292][ T30] audit: type=1400 audit(1608.957:3602): avc: denied { write } for pid=20075 comm="syz.4.3320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1616.642080][ T9] vhci_hcd: vhci_device speed not set [ 1616.667667][ T30] audit: type=1400 audit(1609.883:3603): avc: denied { mount } for pid=20079 comm="syz.6.3321" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1616.947531][T20091] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1617.121451][T20093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1617.189427][ T30] audit: type=1400 audit(1610.370:3604): avc: denied { read } for pid=20079 comm="syz.6.3321" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1617.312812][ T30] audit: type=1400 audit(1610.370:3605): avc: denied { open } for pid=20079 comm="syz.6.3321" path="/syzcgroup/unified/syz6" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1617.365436][T20094] fuse: Unknown parameter 'fd0x0000000000000005' [ 1617.372021][ T30] audit: type=1400 audit(1610.538:3606): avc: denied { mounton } for pid=20079 comm="syz.6.3321" path="/307/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1617.551443][ T30] audit: type=1400 audit(1610.706:3607): avc: denied { unmount } for pid=13497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1617.712819][ T30] audit: type=1400 audit(1610.865:3608): avc: denied { setopt } for pid=20101 comm="syz.6.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1618.362221][T10804] libceph: mon0 (1)[c::]:6789 connect error [ 1618.498461][T20104] ceph: No mds server is up or the cluster is laggy [ 1619.021023][ T30] audit: type=1400 audit(1612.082:3609): avc: denied { mount } for pid=20107 comm="syz.4.3328" name="/" dev="rpc_pipefs" ino=57715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1619.701972][T17431] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1620.187477][T20129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1624.670378][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3339'. [ 1625.189721][T20175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3343'. [ 1626.150594][ T30] audit: type=1400 audit(1618.732:3610): avc: denied { bind } for pid=20180 comm="syz.4.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1627.594992][T20189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3347'. [ 1628.201190][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1628.210596][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1628.399424][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1628.958893][ T30] audit: type=1326 audit(1621.379:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20194 comm="syz.5.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd587f8e929 code=0x7fc00000 [ 1629.099154][T20214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3351'. [ 1631.057545][T20229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1631.477890][T20235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1632.563917][ T30] audit: type=1326 audit(1624.766:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20242 comm="syz.3.3361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x0 [ 1632.960558][T20243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1633.197150][T20251] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3360'. [ 1633.422183][ T30] audit: type=1400 audit(1625.327:3613): avc: denied { shutdown } for pid=20240 comm="syz.6.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1633.455418][ T974] libceph: mon0 (1)[c::]:6789 connect error [ 1633.536432][T20247] ceph: No mds server is up or the cluster is laggy [ 1634.395784][T20264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3364'. [ 1634.574970][T20265] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1635.023325][T20269] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3366'. [ 1635.267725][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1635.712148][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 1635.716843][ T30] audit: type=1400 audit(1627.347:3614): avc: denied { write } for pid=20271 comm="syz.5.3368" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1636.800077][ T9] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1636.811298][ T9] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 1636.823005][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 15441, setting to 64 [ 1636.834191][ T9] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1636.848683][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1636.858865][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.158436][ T30] audit: type=1326 audit(1629.050:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20268 comm="syz.4.3367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe43a58e929 code=0x0 [ 1638.326219][ T30] audit: type=1400 audit(1629.704:3616): avc: denied { mount } for pid=20290 comm="syz.5.3370" name="/" dev="autofs" ino=58001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1638.443933][ T9] ath6kl: Failed to submit usb control message: -71 [ 1638.450617][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 1638.477381][ T9] ath6kl: Unable to send get target info: -71 [ 1638.547636][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1638.633060][ T9] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1638.653154][ T30] audit: type=1400 audit(1630.453:3617): avc: denied { getopt } for pid=20299 comm="syz.6.3373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1638.767431][ T9] usb 3-1: USB disconnect, device number 26 [ 1638.778555][ T30] audit: type=1400 audit(1630.574:3618): avc: denied { unmount } for pid=9791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1639.798943][T20317] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1641.829068][T20309] loop2: detected capacity change from 0 to 7 [ 1641.845850][T20309] Dev loop2: unable to read RDB block 7 [ 1641.883167][T20309] loop2: unable to read partition table [ 1641.890512][T20309] loop2: partition table beyond EOD, truncated [ 1641.896927][T20309] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1642.170782][T20330] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1642.785982][T20332] overlayfs: failed to clone upperpath [ 1644.140782][T10804] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1644.333115][T10804] usb 3-1: Using ep0 maxpacket: 8 [ 1644.342911][T10804] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1644.885608][T10804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.991223][T20351] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1645.641520][T10804] usb 3-1: config 0 descriptor?? [ 1645.742161][T20357] netlink: 'syz.3.3388': attribute type 10 has an invalid length. [ 1645.750110][T20357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3388'. [ 1645.760742][T20357] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1645.904753][T10804] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1646.085824][ T30] audit: type=1400 audit(1637.393:3619): avc: denied { read } for pid=20358 comm="syz.3.3390" path="socket:[58885]" dev="sockfs" ino=58885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1646.606954][ T30] audit: type=1400 audit(1637.833:3620): avc: denied { watch watch_reads } for pid=20360 comm="syz.3.3391" path="/798" dev="tmpfs" ino=4249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1646.727350][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3389'. [ 1646.940389][ T30] audit: type=1400 audit(1638.142:3621): avc: denied { write } for pid=20362 comm="syz.5.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1647.129634][T10804] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1647.143662][T10804] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 1647.378035][T20375] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1647.887857][T20377] openvswitch: netlink: Message has 2 unknown bytes. [ 1647.894641][T20377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1647.925448][T10804] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1648.035625][T20380] usb usb9: usbfs: process 20380 (syz.5.3393) did not claim interface 0 before use [ 1648.320995][T10804] usb 3-1: USB disconnect, device number 27 [ 1649.349542][T20388] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3395'. [ 1650.939191][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3401'. [ 1651.504256][ T30] audit: type=1400 audit(1642.454:3622): avc: denied { search } for pid=20396 comm="syz.2.3399" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1651.866495][T20407] netlink: 'syz.3.3403': attribute type 15 has an invalid length. [ 1651.874424][T20407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3403'. [ 1651.956008][T20416] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1652.099606][T20415] netlink: 'syz.4.3400': attribute type 10 has an invalid length. [ 1652.107862][T20415] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3400'. [ 1652.117249][T20415] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1652.134093][T20415] CUSE: unknown device info "ÿ" [ 1652.139944][T20415] CUSE: zero length info key specified [ 1654.068201][T20435] vimc link validate: Sensor A:src:16x16 (0x33424752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1654.487882][T20434] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1656.100913][ T30] audit: type=1326 audit(1646.757:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20427 comm="syz.4.3406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43a58e929 code=0x7fc00000 [ 1658.618462][ T30] audit: type=1400 audit(1649.058:3624): avc: denied { create } for pid=20442 comm="syz.6.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1658.777020][ T30] audit: type=1400 audit(1649.179:3625): avc: denied { listen } for pid=20442 comm="syz.6.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1659.558212][ T30] audit: type=1400 audit(1649.189:3626): avc: denied { setopt } for pid=20442 comm="syz.6.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1659.588239][ T30] audit: type=1400 audit(1649.198:3627): avc: denied { accept } for pid=20442 comm="syz.6.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1659.619026][ T30] audit: type=1400 audit(1649.900:3628): avc: denied { read } for pid=20442 comm="syz.6.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1660.925239][T20477] tipc: Started in network mode [ 1660.931128][T20477] tipc: Node identity ac14140f, cluster identity 4711 [ 1660.952627][T20477] tipc: Enabling of bearer rejected, failed to enable media [ 1661.321124][T20480] siw: device registration error -23 [ 1661.354506][T20484] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1661.583141][T20486] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3420'. [ 1661.724492][T20490] syz.6.3419 (20490): drop_caches: 2 [ 1662.714482][T20498] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1662.762179][ T30] audit: type=1400 audit(1652.977:3629): avc: denied { read write } for pid=20495 comm="syz.4.3423" name="uhid" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1662.763921][T20497] Failed to initialize the IGMP autojoin socket (err -2) [ 1662.803311][ T30] audit: type=1400 audit(1652.977:3630): avc: denied { open } for pid=20495 comm="syz.4.3423" path="/dev/uhid" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1663.750102][T20505] hfs: unable to load iocharset "io#harset" [ 1663.961584][ T30] audit: type=1400 audit(1654.118:3631): avc: denied { ioctl } for pid=20513 comm="syz.2.3427" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1664.612529][T20526] NILFS (nullb0): couldn't find nilfs on the device [ 1666.558336][T20516] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1666.565685][ T30] audit: type=1400 audit(1656.550:3632): avc: denied { mount } for pid=20513 comm="syz.2.3427" name="/" dev="ocfs2_dlmfs" ino=59206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1668.002999][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3430'. [ 1668.586818][ T30] audit: type=1400 audit(1658.449:3633): avc: denied { write } for pid=20544 comm="syz.3.3434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1672.560111][T20578] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1672.909451][ T30] audit: type=1400 audit(1662.182:3634): avc: denied { getopt } for pid=20574 comm="syz.2.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1672.938933][T20584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1673.859444][T20588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1675.496545][ T30] audit: type=1400 audit(1664.221:3635): avc: denied { setopt } for pid=20592 comm="syz.4.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1675.900450][T20604] netlink: 'syz.2.3447': attribute type 1 has an invalid length. [ 1677.940582][ T30] audit: type=1400 audit(1667.205:3636): avc: denied { create } for pid=20617 comm="syz.2.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1678.287208][T20626] openvswitch: netlink: Message has 2 unknown bytes. [ 1678.293904][T20626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1678.417558][T20631] loop2: detected capacity change from 0 to 7 [ 1679.400021][T20636] openvswitch: netlink: Message has 2 unknown bytes. [ 1679.406950][T20636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1679.681536][T20631] Dev loop2: unable to read RDB block 7 [ 1679.688514][T20631] loop2: AHDI p1 p2 [ 1679.692971][T20631] loop2: partition table partially beyond EOD, truncated [ 1679.700848][T20631] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 1679.708106][T20632] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 1679.714685][T20632] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1679.733477][T20633] vhci_hcd: connection closed [ 1679.733688][T20632] vhci_hcd vhci_hcd.0: Device attached [ 1679.756809][T17842] udevd[17842]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1679.767068][ T6193] vhci_hcd: stop threads [ 1679.870973][ T6193] vhci_hcd: release socket [ 1679.875437][ T6193] vhci_hcd: disconnect device [ 1680.791901][ T30] audit: type=1400 audit(1669.842:3637): avc: denied { bind } for pid=20641 comm="syz.3.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1682.583731][T20660] netlink: 'syz.3.3459': attribute type 10 has an invalid length. [ 1682.998747][T20660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1683.006379][T20660] batadv0: entered promiscuous mode [ 1683.012176][T20660] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1683.024775][T20652] openvswitch: netlink: Message has 2 unknown bytes. [ 1683.031496][T20652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1684.343928][T20678] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1687.257816][T20697] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3467'. [ 1688.170996][T20698] new mount options do not match the existing superblock, will be ignored [ 1688.192398][ T30] audit: type=1400 audit(1676.783:3638): avc: denied { mount } for pid=20683 comm="syz.3.3464" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1688.978479][T20710] virtio-fs: tag not found [ 1689.235510][T20704] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3469'. [ 1689.322732][ T30] audit: type=1400 audit(1677.849:3639): avc: denied { create } for pid=20711 comm="syz.2.3472" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1689.373689][T20713] hub 6-0:1.0: USB hub found [ 1689.379365][T20713] hub 6-0:1.0: 1 port detected [ 1690.320785][T20727] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1691.271838][T20729] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1692.219832][ T30] audit: type=1400 audit(1680.553:3640): avc: denied { setopt } for pid=20733 comm="syz.3.3477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1693.751736][ T30] audit: type=1400 audit(1681.993:3641): avc: denied { unmount } for pid=13497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1693.881795][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1693.891949][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1694.986618][T20763] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3482'. [ 1695.900108][T20762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1695.938718][T20779] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3486'. [ 1696.774467][ T30] audit: type=1400 audit(1684.809:3642): avc: denied { mount } for pid=20783 comm="syz.6.3487" name="/" dev="ramfs" ino=60704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1696.778645][T20788] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1696.863684][T20788] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1696.994406][ T30] audit: type=1400 audit(1684.818:3643): avc: denied { mounton } for pid=20783 comm="syz.6.3487" path="/bus" dev="ramfs" ino=60709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1697.275387][T20794] fuse: Bad value for 'fd' [ 1697.312357][ T30] audit: type=1400 audit(1685.314:3644): avc: denied { append } for pid=20791 comm="syz.4.3490" name="nbd4" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1698.293371][T20807] netlink: 'syz.6.3491': attribute type 39 has an invalid length. [ 1698.738534][ T30] audit: type=1400 audit(1686.652:3645): avc: denied { mount } for pid=20799 comm="syz.2.3492" name="/" dev="hugetlbfs" ino=60750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1699.331390][ T30] audit: type=1400 audit(1687.213:3646): avc: denied { create } for pid=20818 comm="syz.4.3497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1699.641607][T20822] openvswitch: netlink: Message has 2 unknown bytes. [ 1699.650496][T20822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1699.812512][T20824] Invalid ELF header magic: != ELF [ 1700.331939][ T30] audit: type=1400 audit(1687.737:3647): avc: denied { bind } for pid=20818 comm="syz.4.3497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1700.480522][T20824] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1701.073112][T20838] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1701.115985][ T30] audit: type=1400 audit(1688.878:3648): avc: denied { watch } for pid=20832 comm="syz.3.3500" path="/824/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=4390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1701.160185][ C0] vkms_vblank_simulate: vblank timer overrun [ 1701.184801][ T30] audit: type=1400 audit(1688.878:3649): avc: denied { watch_sb watch_reads } for pid=20832 comm="syz.3.3500" path="/824/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=4390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1701.229890][ C0] vkms_vblank_simulate: vblank timer overrun [ 1701.279244][ T30] audit: type=1400 audit(1689.028:3650): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1701.299023][ C0] vkms_vblank_simulate: vblank timer overrun [ 1701.353266][T20841] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3501'. [ 1701.362551][T20841] netlink: 'syz.2.3501': attribute type 6 has an invalid length. [ 1701.370846][T20841] netlink: 'syz.2.3501': attribute type 5 has an invalid length. [ 1701.378899][T20841] netlink: 'syz.2.3501': attribute type 4 has an invalid length. [ 1701.992300][T20847] netlink: 'syz.6.3502': attribute type 1 has an invalid length. [ 1702.132543][ T30] audit: type=1400 audit(1689.701:3651): avc: denied { setopt } for pid=20842 comm="syz.6.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1702.296781][ T30] audit: type=1400 audit(1689.701:3652): avc: denied { write } for pid=20842 comm="syz.6.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1702.657580][T17431] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1702.657643][T17431] Bluetooth: hci1: Malformed Event: 0x2f [ 1703.009359][T20857] NILFS (nullb0): couldn't find nilfs on the device [ 1705.262238][T20867] openvswitch: netlink: Message has 2 unknown bytes. [ 1705.269785][T20867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1705.542898][T20869] netlink: 'syz.2.3508': attribute type 1 has an invalid length. [ 1706.258974][T20869] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1706.702925][T20871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1706.709881][T20871] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1706.721472][T20871] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 1707.095814][T20880] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3509'. [ 1707.789650][T20883] openvswitch: netlink: Message has 2 unknown bytes. [ 1707.796821][T20883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1708.915146][T20892] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 1710.111700][T20904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1710.120507][T20904] batadv_slave_0: entered promiscuous mode [ 1712.397434][T20924] openvswitch: netlink: Message has 2 unknown bytes. [ 1712.405037][T20924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1712.861491][T20930] random: crng reseeded on system resumption [ 1713.608168][T20939] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3526'. [ 1714.114790][T20943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20943 comm=syz.2.3527 [ 1714.127505][T20943] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20943 comm=syz.2.3527 [ 1714.178215][ T30] audit: type=1400 audit(1701.057:3653): avc: denied { audit_write } for pid=20938 comm="syz.2.3527" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1714.481555][T20948] openvswitch: netlink: Message has 2 unknown bytes. [ 1714.488579][T20948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1714.645341][ T974] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1715.260909][ T974] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1715.269747][ T974] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1715.280360][ T974] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1715.289754][ T974] usb 3-1: config 1 has no interface number 1 [ 1715.295838][ T974] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1715.308730][ T974] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 1715.322706][ T974] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1715.818954][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.827077][ T974] usb 3-1: Product: syz [ 1715.831253][ T974] usb 3-1: Manufacturer: syz [ 1715.835921][ T974] usb 3-1: SerialNumber: syz [ 1715.968924][T20971] netlink: 'syz.3.3533': attribute type 30 has an invalid length. [ 1716.000242][T20965] could not allocate digest TFM handle cbcmac-aes-neon [ 1716.000296][ T30] audit: type=1400 audit(1702.797:3654): avc: denied { block_suspend } for pid=20960 comm="syz.3.3533" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1717.283354][ T974] usb 3-1: USB disconnect, device number 28 [ 1717.313924][T17842] udevd[17842]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1718.989908][T20991] overlayfs: workdir and upperdir must reside under the same mount [ 1720.491008][T21006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3543'. [ 1720.575443][T21005] openvswitch: netlink: Message has 2 unknown bytes. [ 1720.582512][T21005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1720.757103][T21010] random: crng reseeded on system resumption [ 1721.524109][ T30] audit: type=1400 audit(1707.810:3655): avc: denied { setcurrent } for pid=21011 comm="syz.6.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1722.216305][T21026] tipc: Enabling of bearer rejected, already enabled [ 1723.329580][T21034] netlink: 'syz.6.3548': attribute type 7 has an invalid length. [ 1723.381297][T21034] : entered promiscuous mode [ 1724.161634][T21040] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3550'. [ 1725.919011][T21050] block device autoloading is deprecated and will be removed. [ 1725.928006][T21050] syz.4.3553: attempt to access beyond end of device [ 1725.928006][T21050] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1727.444628][T21062] openvswitch: netlink: Message has 2 unknown bytes. [ 1727.451361][T21062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1727.662045][T21064] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3556'. [ 1727.824492][T21070] trusted_key: encrypted_key: insufficient parameters specified [ 1728.996419][T21085] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1729.255709][T21091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3562'. [ 1730.733757][T21106] syz.6.3565 (21106): drop_caches: 2 [ 1731.785125][T21112] sp0: Synchronizing with TNC [ 1731.827007][T21112] netlink: 'syz.2.3567': attribute type 1 has an invalid length. [ 1731.834890][T21112] netlink: 'syz.2.3567': attribute type 2 has an invalid length. [ 1731.932006][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 1732.655729][T21113] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1733.719880][ T30] audit: type=1326 audit(1719.334:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1734.323637][ T30] audit: type=1326 audit(1719.334:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1734.346927][ T30] audit: type=1326 audit(1719.334:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1734.380231][ T30] audit: type=1326 audit(1719.334:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1734.692463][ T974] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1734.714602][ T30] audit: type=1326 audit(1719.344:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1734.737530][ C0] vkms_vblank_simulate: vblank timer overrun [ 1734.764259][ T30] audit: type=1326 audit(1719.344:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1734.787275][ C0] vkms_vblank_simulate: vblank timer overrun [ 1734.966497][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 1735.086106][ T974] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1735.119894][ T974] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 1735.172681][ T30] audit: type=1326 audit(1719.344:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1735.195934][ T974] usb 3-1: config 8 interface 0 has no altsetting 0 [ 1735.206493][ T30] audit: type=1326 audit(1719.344:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1735.231033][ T30] audit: type=1326 audit(1719.353:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1735.254588][ C0] vkms_vblank_simulate: vblank timer overrun [ 1735.262155][ T974] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1735.292904][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.331872][ T974] usb 3-1: Product: äŠ [ 1735.336105][ T974] usb 3-1: Manufacturer: з [ 1735.340655][ T974] usb 3-1: SerialNumber: ဇ [ 1735.363419][T21131] openvswitch: netlink: Message has 2 unknown bytes. [ 1735.370265][T21131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1735.385465][ T30] audit: type=1326 audit(1719.353:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21119 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1735.410557][T21124] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1735.920069][T21135] bridge0: entered allmulticast mode [ 1737.059357][ T974] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1737.111349][ T974] usb 3-1: selecting invalid altsetting 0 [ 1737.742400][ T974] usb 3-1: USB disconnect, device number 29 [ 1739.035901][T21154] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1739.088610][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3580'. [ 1739.204105][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1739.204120][ T30] audit: type=1400 audit(1724.507:3707): avc: denied { create } for pid=21161 comm="syz.2.3581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1739.356940][ T30] audit: type=1326 audit(1724.535:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.2.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1739.451580][ T30] audit: type=1326 audit(1724.535:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.2.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1739.452489][ T30] audit: type=1326 audit(1724.535:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.2.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1739.453785][ T30] audit: type=1326 audit(1724.535:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.2.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1739.454349][ T30] audit: type=1326 audit(1724.535:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.2.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1739.455397][ T30] audit: type=1400 audit(1724.498:3706): avc: denied { ioctl } for pid=21159 comm="syz.3.3580" path="socket:[61663]" dev="sockfs" ino=61663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1739.457701][ T30] audit: type=1326 audit(1724.535:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.2.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1739.458258][ T30] audit: type=1326 audit(1724.535:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.2.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1739.458299][ T30] audit: type=1326 audit(1724.535:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.2.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1739.723369][T21171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3583'. [ 1740.919481][T21180] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1742.613413][T21198] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1743.019368][T21205] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3591'. [ 1744.643188][T16656] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1744.957298][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 1744.957337][ T30] audit: type=1400 audit(1729.876:3756): avc: denied { map } for pid=21214 comm="syz.6.3593" path="socket:[62546]" dev="sockfs" ino=62546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1745.071506][T16656] usb 3-1: device descriptor read/64, error -71 [ 1745.084487][ T30] audit: type=1400 audit(1729.895:3757): avc: denied { read accept } for pid=21214 comm="syz.6.3593" path="socket:[62546]" dev="sockfs" ino=62546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1745.349130][T16656] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1745.552027][T16656] usb 3-1: device descriptor read/64, error -71 [ 1745.678434][T16656] usb usb3-port1: attempt power cycle [ 1746.086714][T16656] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1746.741770][T16656] usb 3-1: device descriptor read/8, error -71 [ 1747.460353][T16656] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1747.730512][T16656] usb 3-1: device not accepting address 33, error -71 [ 1747.854467][T16656] usb usb3-port1: unable to enumerate USB device [ 1748.171177][T21238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3598'. [ 1748.537592][T21239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3600'. [ 1748.996261][ T30] audit: type=1400 audit(1733.253:3758): avc: denied { getopt } for pid=21235 comm="syz.4.3600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1749.140746][T21234] Invalid ELF header type: 3 != 1 [ 1749.457325][ T30] audit: type=1400 audit(1734.067:3759): avc: denied { mount } for pid=21243 comm="syz.6.3601" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 1749.478625][ C1] vkms_vblank_simulate: vblank timer overrun [ 1751.544621][T21257] can0: slcan on ptm0. [ 1751.971432][T21270] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1752.201566][ T974] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1752.364145][ T974] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1752.372705][ T974] usb 3-1: config 0 has no interface number 0 [ 1752.378865][ T974] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1752.401320][T21275] netlink: 'syz.6.3609': attribute type 2 has an invalid length. [ 1752.405265][ T974] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1752.539410][ T974] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1752.548612][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.556958][ T974] usb 3-1: Product: syz [ 1752.565915][ T974] usb 3-1: Manufacturer: syz [ 1752.570577][ T974] usb 3-1: SerialNumber: syz [ 1752.688500][T21277] ptrace attach of "./syz-executor exec"[13497] was attempted by "./syz-executor exec"[21277] [ 1752.772457][T21277] netlink: 'syz.6.3609': attribute type 62 has an invalid length. [ 1753.126361][ T974] usb 3-1: config 0 descriptor?? [ 1753.132314][T21257] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1753.159737][ T974] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1753.665157][T21286] netlink: 'syz.4.3612': attribute type 10 has an invalid length. [ 1753.673401][T21286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3612'. [ 1753.693264][T21286] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1753.750788][T21287] CUSE: unknown device info "ÿ" [ 1753.756002][T21287] CUSE: zero length info key specified [ 1754.252649][T21291] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3613'. [ 1754.500960][T10804] usb 3-1: USB disconnect, device number 34 [ 1754.575705][T10804] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1754.715561][T21259] can0 (unregistered): slcan off ptm0. [ 1756.373063][T21307] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3618'. [ 1756.412647][T21308] netlink: 'syz.3.3617': attribute type 10 has an invalid length. [ 1757.387766][ T30] audit: type=1326 audit(1741.503:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21316 comm="syz.4.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43a58e929 code=0x7ffc0000 [ 1757.488451][ T30] audit: type=1326 audit(1741.503:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21316 comm="syz.4.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43a58e929 code=0x7ffc0000 [ 1758.174251][ T30] audit: type=1326 audit(1741.503:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21316 comm="syz.4.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fe43a58e929 code=0x7ffc0000 [ 1758.547307][ T30] audit: type=1326 audit(1741.503:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21316 comm="syz.4.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43a58e929 code=0x7ffc0000 [ 1758.605325][ T30] audit: type=1326 audit(1741.503:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21316 comm="syz.4.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe43a58e929 code=0x7ffc0000 [ 1758.741070][T21325] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1758.903730][ T30] audit: type=1326 audit(1741.503:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21316 comm="syz.4.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43a58e929 code=0x7ffc0000 [ 1759.101439][ T30] audit: type=1326 audit(1741.503:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21316 comm="syz.4.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43a58e929 code=0x7ffc0000 [ 1759.144112][ T30] audit: type=1326 audit(1741.503:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21316 comm="syz.4.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe43a58e929 code=0x7ffc0000 [ 1759.170399][ T30] audit: type=1326 audit(1741.503:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21316 comm="syz.4.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43a58e929 code=0x7ffc0000 [ 1759.198236][ T30] audit: type=1326 audit(1741.503:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21316 comm="syz.4.3619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe43a58e929 code=0x7ffc0000 [ 1759.558064][T21341] netlink: 'syz.6.3625': attribute type 10 has an invalid length. [ 1759.559574][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1759.574961][T21341] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3625'. [ 1759.626012][T21343] CUSE: unknown device info "ÿ" [ 1759.631150][T21343] CUSE: zero length info key specified [ 1759.735764][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1759.850174][T21341] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1760.872455][T21345] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1760.954661][T21347] tmpfs: Unknown parameter 'mpoã' [ 1761.160984][T21354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21354 comm=syz.2.3627 [ 1763.049769][T21364] netlink: 'syz.6.3640': attribute type 10 has an invalid length. [ 1763.057789][T21364] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3640'. [ 1763.107530][T21365] CUSE: unknown device info "ÿ" [ 1763.112554][T21365] CUSE: zero length info key specified [ 1764.058543][T21364] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1764.233072][T21373] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3633'. [ 1764.940810][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1764.940822][ T30] audit: type=1326 audit(1748.584:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21380 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1765.406951][T21393] openvswitch: : Dropping previously announced user features [ 1765.714301][ T30] audit: type=1326 audit(1748.584:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21380 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1765.737274][ C1] vkms_vblank_simulate: vblank timer overrun [ 1765.823582][T21395] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3638'. [ 1765.839788][T21395] syz.2.3638 (21395): drop_caches: 2 [ 1765.948115][ T30] audit: type=1326 audit(1748.584:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21380 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1765.971031][ C1] vkms_vblank_simulate: vblank timer overrun [ 1766.346230][ T30] audit: type=1326 audit(1748.584:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21380 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1766.370004][ T30] audit: type=1326 audit(1748.584:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21380 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1766.714503][ T30] audit: type=1326 audit(1748.584:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21380 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1766.737366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1766.745874][ T30] audit: type=1326 audit(1748.584:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21380 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1766.781711][ T30] audit: type=1326 audit(1748.584:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21380 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1766.819232][ T30] audit: type=1326 audit(1748.584:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21380 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1766.842112][ C1] vkms_vblank_simulate: vblank timer overrun [ 1766.895461][ T30] audit: type=1326 audit(1748.584:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21380 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1767.561745][T21410] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3639'. [ 1767.596400][T21410] syz.4.3639 (21410): drop_caches: 2 [ 1768.016903][T21414] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3643'. [ 1768.449851][T21416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3642'. [ 1769.288167][T21425] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3646'. [ 1771.434181][T21455] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1772.130266][T21458] openvswitch: netlink: Message has 2 unknown bytes. [ 1772.139269][T21458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1772.706630][T21463] syz.2.3654: attempt to access beyond end of device [ 1772.706630][T21463] loop2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1772.720139][T21463] gfs2: error -5 reading superblock [ 1772.830283][T21443] netlink: 'syz.4.3650': attribute type 16 has an invalid length. [ 1772.838153][T21443] netlink: 'syz.4.3650': attribute type 17 has an invalid length. [ 1773.094994][T21472] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3658'. [ 1774.977024][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1774.977040][ T30] audit: type=1400 audit(1757.966:3843): avc: denied { watch_mount } for pid=21483 comm="syz.3.3661" path="/861" dev="tmpfs" ino=4580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1775.430225][T21491] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3662'. [ 1776.234643][ T30] audit: type=1400 audit(1758.415:3844): avc: denied { append } for pid=21487 comm="syz.6.3662" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1776.309314][ T30] audit: type=1400 audit(1758.425:3845): avc: denied { create } for pid=21487 comm="syz.6.3662" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1776.337723][ T30] audit: type=1400 audit(1759.168:3846): avc: denied { unlink } for pid=13497 comm="syz-executor" name="file0" dev="tmpfs" ino=2076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1776.487203][ T30] audit: type=1400 audit(1759.374:3847): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.233 dest=36574 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1776.511761][ C0] vkms_vblank_simulate: vblank timer overrun [ 1776.565577][T16656] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1776.811416][T16656] usb 5-1: device descriptor read/64, error -71 [ 1777.649998][T16656] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1779.115575][T21524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3670'. [ 1779.668990][T21533] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0î„&IØü [ 1780.521936][ T30] audit: type=1400 audit(1762.873:3848): avc: denied { ioctl } for pid=21530 comm="syz.4.3673" path="socket:[62221]" dev="sockfs" ino=62221 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1780.585024][T21529] netlink: 'syz.3.3672': attribute type 4 has an invalid length. [ 1780.829648][T21540] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3675'. [ 1782.717043][ T30] audit: type=1400 audit(1765.155:3849): avc: denied { listen } for pid=21554 comm="syz.5.3679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1783.432452][T21559] netlink: 'syz.6.3678': attribute type 2 has an invalid length. [ 1785.291373][T21572] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1785.693266][ T30] audit: type=1400 audit(1767.989:3850): avc: denied { wake_alarm } for pid=21566 comm="syz.2.3684" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1785.695897][T21573] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3684'. [ 1785.713993][ C0] vkms_vblank_simulate: vblank timer overrun [ 1788.914233][T21596] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3689'. [ 1789.565201][T21611] netlink: 'syz.5.3691': attribute type 10 has an invalid length. [ 1789.573178][T21611] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3691'. [ 1789.622777][T21613] CUSE: unknown device info "ÿ" [ 1789.627824][T21613] CUSE: zero length info key specified [ 1789.889142][T21611] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1790.936328][T21626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3698'. [ 1793.997861][ T30] audit: type=1400 audit(1775.762:3851): avc: denied { ioctl } for pid=21641 comm="syz.4.3700" path="socket:[63509]" dev="sockfs" ino=63509 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1800.090341][T21671] netlink: 'syz.6.3708': attribute type 10 has an invalid length. [ 1800.208633][T21671] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3708'. [ 1800.209486][T21675] CUSE: unknown device info "ÿ" [ 1800.425658][T21690] netlink: 'syz.3.3711': attribute type 1 has an invalid length. [ 1800.433502][T21690] netlink: 'syz.3.3711': attribute type 2 has an invalid length. [ 1800.482672][T21691] syz.2.3712: attempt to access beyond end of device [ 1800.482672][T21691] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1800.495816][T21691] EXT4-fs (nbd2): unable to read superblock [ 1800.717286][T21675] CUSE: zero length info key specified [ 1800.733097][T21671] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1801.552925][ T30] audit: type=1400 audit(1782.263:3852): avc: denied { mount } for pid=21666 comm="syz.5.3707" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1802.536728][ T30] audit: type=1400 audit(1783.751:3853): avc: denied { getopt } for pid=21704 comm="syz.6.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1803.228002][T21718] Invalid ELF header magic: != ELF [ 1804.733578][ T30] audit: type=1400 audit(1785.799:3854): avc: denied { unmount } for pid=9791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1806.877109][T21735] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1806.884555][T21735] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1806.898477][T21743] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1807.741788][T21755] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1807.802627][T21757] netlink: 'syz.6.3726': attribute type 10 has an invalid length. [ 1807.809735][T21758] siw: device registration error -23 [ 1807.994282][T21759] batadv_slave_0: mtu less than device minimum [ 1808.186817][ T30] audit: type=1400 audit(1788.849:3855): avc: denied { ioctl } for pid=21753 comm="syz.3.3728" path="socket:[63400]" dev="sockfs" ino=63400 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1808.347610][T21760] CUSE: unknown device info "ÿ" [ 1808.352982][T21760] CUSE: zero length info key specified [ 1808.363827][T21757] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3726'. [ 1808.387374][T21757] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1810.371592][T21776] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3731'. [ 1810.380631][T21776] nbd: must specify at least one socket [ 1812.219979][ T30] audit: type=1400 audit(1792.787:3856): avc: denied { create } for pid=21787 comm="syz.3.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1813.218301][ T30] audit: type=1400 audit(1792.787:3857): avc: denied { ioctl } for pid=21787 comm="syz.3.3735" path="socket:[63437]" dev="sockfs" ino=63437 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1813.243304][ T30] audit: type=1400 audit(1792.787:3858): avc: denied { getopt } for pid=21787 comm="syz.3.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1813.263271][ T30] audit: type=1400 audit(1792.787:3859): avc: denied { setopt } for pid=21787 comm="syz.3.3735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1813.291209][T21797] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1814.437637][T21811] : entered promiscuous mode [ 1814.449875][T21811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3739'. [ 1814.804613][T21817] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1814.819461][ T30] audit: type=1400 audit(1795.237:3860): avc: denied { firmware_load } for pid=21812 comm="syz.2.3741" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1815.351728][T21817] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1815.753748][T21814] CIFS mount error: No usable UNC path provided in device string! [ 1815.753748][T21814] [ 1815.771585][T21814] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1816.023092][T21829] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1817.790810][T21846] qnx4: no qnx4 filesystem (no root dir). [ 1818.134417][ T30] audit: type=1400 audit(1798.044:3861): avc: denied { connect } for pid=21842 comm="syz.6.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1818.245437][ T30] audit: type=1400 audit(1798.100:3862): avc: denied { accept } for pid=21842 comm="syz.6.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1820.539987][T21864] can0: slcan on ptm1. [ 1821.048975][ T5818] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1823.153437][ T5818] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1823.178035][ T5818] usb 6-1: config 0 has no interface number 0 [ 1823.197428][ T5818] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1823.241531][ T5818] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1823.345865][ T5818] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1823.469831][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.481500][T21887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3755'. [ 1823.585150][T21864] can0 (unregistered): slcan off ptm1. [ 1824.024328][ T5818] usb 6-1: Product: syz [ 1824.029065][ T5818] usb 6-1: Manufacturer: syz [ 1824.150985][ T5818] usb 6-1: SerialNumber: syz [ 1824.401359][ T5818] usb 6-1: config 0 descriptor?? [ 1824.516722][ T5818] usb 6-1: can't set config #0, error -71 [ 1825.018216][T21890] vcan0: tx address claim with dest, not broadcast [ 1825.250426][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1825.424570][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1825.581357][ T5818] usb 6-1: USB disconnect, device number 19 [ 1825.761372][T21911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1825.935252][T21912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1827.396297][T21924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3764'. [ 1827.672826][T21926] overlayfs: failed to clone upperpath [ 1828.638623][ T30] audit: type=1400 audit(1807.791:3863): avc: denied { append } for pid=21921 comm="syz.4.3765" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1828.929019][ T30] audit: type=1400 audit(1808.436:3864): avc: denied { bind } for pid=21934 comm="syz.3.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1831.213570][ T30] audit: type=1400 audit(1810.569:3865): avc: denied { getopt } for pid=21952 comm="syz.4.3772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1833.197622][T21970] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3777'. [ 1833.439734][T21978] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3778'. [ 1835.191024][T21990] overlayfs: failed to resolve './file1': -2 [ 1835.990755][ T30] audit: type=1400 audit(1815.040:3866): avc: denied { read } for pid=21993 comm="syz.4.3781" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1836.170998][ T30] audit: type=1400 audit(1815.040:3867): avc: denied { open } for pid=21993 comm="syz.4.3781" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1837.132076][ T30] audit: type=1400 audit(1815.882:3868): avc: denied { ioctl } for pid=21993 comm="syz.4.3781" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1841.756141][ T30] audit: type=1400 audit(1820.437:3869): avc: denied { append } for pid=22040 comm="syz.6.3794" name="ubi_ctrl" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1842.281626][T22048] bridge_slave_1: left allmulticast mode [ 1842.287354][T22048] bridge_slave_1: left promiscuous mode [ 1842.293707][T22048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.672238][T22046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3792'. [ 1842.954681][T22048] bridge_slave_0: left allmulticast mode [ 1842.960366][T22048] bridge_slave_0: left promiscuous mode [ 1842.966177][T22048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.788750][T22061] overlayfs: failed to clone upperpath [ 1844.366866][ T30] audit: type=1400 audit(1822.336:3870): avc: denied { watch_sb } for pid=22058 comm="syz.3.3796" path="/893" dev="tmpfs" ino=4752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1844.441248][T22051] ubi: mtd0 is already attached to ubi31 [ 1844.883319][T22056] bridge0: entered allmulticast mode [ 1844.984369][T22067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1845.301030][T22077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3798'. [ 1845.314588][T22077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3798'. [ 1845.947854][T10804] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1846.201418][T10804] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 1846.382593][T10804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.436111][T10804] usb 5-1: config 0 descriptor?? [ 1846.458750][T10804] gspca_main: mars-2.14.0 probing 093a:050f [ 1846.549528][T22090] netlink: 'syz.2.3803': attribute type 10 has an invalid length. [ 1846.557721][T22090] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3803'. [ 1846.569177][T22090] CUSE: unknown device info "ÿ" [ 1846.574171][T22090] CUSE: zero length info key specified [ 1847.833139][T22093] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3805'. [ 1847.842981][T22075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3801'. [ 1848.190521][T10804] usb 5-1: USB disconnect, device number 22 [ 1848.384387][ T30] audit: type=1326 audit(1826.592:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22096 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1848.819906][ T30] audit: type=1326 audit(1826.592:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22096 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1849.694630][ T30] audit: type=1326 audit(1826.601:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22096 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1849.721969][ T30] audit: type=1326 audit(1826.601:3874): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22096 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1850.683211][T22114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.690441][T22114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.716259][T22114] bridge0: entered allmulticast mode [ 1850.794823][ T30] audit: type=1326 audit(1826.601:3875): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22096 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1851.062639][ T30] audit: type=1326 audit(1826.601:3876): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22096 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1851.100763][ T30] audit: type=1326 audit(1826.601:3877): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22096 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1851.238469][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'. [ 1851.827054][T22122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3810'. [ 1852.113262][ T30] audit: type=1326 audit(1826.611:3878): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22096 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1852.136874][ T30] audit: type=1326 audit(1826.611:3879): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22096 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1852.160574][ T30] audit: type=1326 audit(1826.611:3880): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22096 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1852.297836][ T7959] libceph: mon0 (1)[c::]:6789 connect error [ 1852.401531][T22127] ceph: No mds server is up or the cluster is laggy [ 1852.409919][ T7959] libceph: mon0 (1)[c::]:6789 connect error [ 1853.242009][T22149] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3817'. [ 1854.309627][ T7959] libceph: mon0 (1)[c::]:6789 connect error [ 1854.581059][T22158] ceph: No mds server is up or the cluster is laggy [ 1854.591494][ T7959] libceph: mon0 (1)[c::]:6789 connect error [ 1855.152188][T22167] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1855.734828][T22171] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1855.741929][T22171] overlayfs: failed to set xattr on upper [ 1855.747635][T22171] overlayfs: ...falling back to redirect_dir=nofollow. [ 1855.754502][T22171] overlayfs: ...falling back to metacopy=off. [ 1855.760542][T22171] overlayfs: ...falling back to index=off. [ 1855.766341][T22171] overlayfs: ...falling back to uuid=null. [ 1855.998849][T22165] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3819'. [ 1856.628919][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1856.628937][ T30] audit: type=1400 audit(1833.851:3897): avc: denied { ioctl } for pid=22174 comm="syz.3.3824" path="socket:[65416]" dev="sockfs" ino=65416 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1856.659468][ T7959] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1856.705983][ T30] audit: type=1400 audit(1833.954:3898): avc: denied { recv } for pid=22174 comm="syz.3.3824" saddr=10.128.0.169 src=36160 daddr=10.128.0.233 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1856.732262][ T30] audit: type=1400 audit(1834.393:3899): avc: denied { setopt } for pid=22176 comm="syz.6.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1856.887617][ T7959] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 1856.899720][ T7959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.019279][ T7959] usb 3-1: config 0 descriptor?? [ 1857.105468][ T7959] gspca_main: mars-2.14.0 probing 093a:050f [ 1857.306701][T22193] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1858.308412][T22173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3823'. [ 1858.569035][ T7959] usb 3-1: USB disconnect, device number 35 [ 1859.342468][T22200] trusted_key: syz.4.3826 sent an empty control message without MSG_MORE. [ 1861.384666][ T30] audit: type=1804 audit(1838.247:3900): pid=22220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3834" name="/newroot/757/file0" dev="tmpfs" ino=4094 res=1 errno=0 [ 1861.410087][ T30] audit: type=1804 audit(1838.247:3901): pid=22220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.3834" name="/newroot/757/file0" dev="tmpfs" ino=4094 res=1 errno=0 [ 1861.696922][T22229] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3837'. [ 1864.151073][T22249] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3840'. [ 1864.902798][ T30] audit: type=1400 audit(1842.054:3902): avc: denied { read } for pid=22234 comm="syz.2.3838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1866.712364][T22271] bridge0: left promiscuous mode [ 1866.717383][T22271] bridge0: entered allmulticast mode [ 1867.928963][T22283] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3848'. [ 1869.160866][ T30] audit: type=1326 audit(1846.076:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22279 comm="syz.3.3847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7fc00000 [ 1869.173021][T22295] openvswitch: netlink: Message has 2 unknown bytes. [ 1869.190727][T22295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1869.252658][ T30] audit: type=1400 audit(1846.151:3904): avc: denied { write } for pid=22301 comm="syz.5.3849" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1869.276556][ C1] vkms_vblank_simulate: vblank timer overrun [ 1869.305144][T22304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3853'. [ 1870.514630][T22315] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1870.522274][T22315] UDF-fs: Scanning with blocksize 512 failed [ 1870.547274][T22316] overlayfs: failed to clone upperpath [ 1870.555839][ T30] audit: type=1400 audit(1847.367:3905): avc: denied { mount } for pid=22310 comm="syz.3.3854" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1870.577312][ C1] vkms_vblank_simulate: vblank timer overrun [ 1870.592483][T22315] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1870.600406][T22315] UDF-fs: Scanning with blocksize 1024 failed [ 1870.644612][T22315] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1870.652239][T22315] UDF-fs: Scanning with blocksize 2048 failed [ 1870.664602][T22315] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1870.672247][T22315] UDF-fs: Scanning with blocksize 4096 failed [ 1873.011866][ T30] audit: type=1326 audit(1849.668:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22322 comm="syz.4.3857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe43a58e929 code=0x0 [ 1873.718376][T22339] can0: slcan on ptm0. [ 1874.586180][T22346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3860'. [ 1874.685579][T22349] smc: net device lo applied user defined pnetid SYZ1 [ 1874.705113][T22333] can0 (unregistered): slcan off ptm0. [ 1875.156919][T22352] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1877.042861][T22362] openvswitch: netlink: Message has 2 unknown bytes. [ 1877.049608][T22362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1878.692303][T22381] trusted_key: encrypted_key: master key parameter 'd' is invalid [ 1878.705393][T22381] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1880.222007][ T30] audit: type=1326 audit(1856.272:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22388 comm="syz.5.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd587f8e929 code=0x7ffc0000 [ 1880.288725][ T30] audit: type=1326 audit(1856.272:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22388 comm="syz.5.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd587f8e929 code=0x7ffc0000 [ 1880.639314][T22398] netlink: 'syz.3.3875': attribute type 2 has an invalid length. [ 1880.713056][T22394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3873'. [ 1881.087259][T22413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 1881.096613][T22413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3876'. [ 1881.460975][ T30] audit: type=1326 audit(1857.526:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.2.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1881.505498][ T30] audit: type=1326 audit(1857.526:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.2.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1881.528349][ C1] vkms_vblank_simulate: vblank timer overrun [ 1881.539134][T22409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1881.555130][ T30] audit: type=1326 audit(1857.526:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.2.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1881.583046][ T30] audit: type=1326 audit(1857.526:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.2.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1881.629487][T22409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1881.814540][ T30] audit: type=1326 audit(1857.535:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.2.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1881.837955][ T30] audit: type=1326 audit(1857.535:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.2.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1881.863161][ T30] audit: type=1326 audit(1857.535:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.2.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1881.886164][ C1] vkms_vblank_simulate: vblank timer overrun [ 1881.914121][ T30] audit: type=1326 audit(1857.535:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22411 comm="syz.2.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd850d8e929 code=0x7ffc0000 [ 1881.937012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1881.965469][T22425] veth0: entered promiscuous mode [ 1883.165303][T22421] veth0: left promiscuous mode [ 1883.568117][T22432] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3882'. [ 1885.760846][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 1885.760860][ T30] audit: type=1400 audit(1861.604:3946): avc: denied { load_policy } for pid=22449 comm="syz.6.3885" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1885.790019][T22451] SELinux: ebitmap: truncated map [ 1885.838975][T22451] SELinux: failed to load policy [ 1886.658176][T22457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3886'. [ 1887.022102][T22458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3887'. [ 1891.050657][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1891.059824][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1891.672862][T22491] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3896'. [ 1892.488636][T22504] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1895.476338][ T30] audit: type=1400 audit(1870.649:3947): avc: denied { write } for pid=22519 comm="syz.6.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1895.495300][ C1] vkms_vblank_simulate: vblank timer overrun [ 1895.773903][T22536] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3905'. [ 1895.886846][T22537] ubi: mtd0 is already attached to ubi31 [ 1896.703669][ T30] audit: type=1400 audit(1871.061:3948): avc: denied { ioctl } for pid=22527 comm="syz.4.3904" path="socket:[66341]" dev="sockfs" ino=66341 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1898.907077][T22569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=22569 comm=syz.2.3910 [ 1901.597673][ T30] audit: type=1400 audit(1876.411:3949): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1901.878279][T22592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1903.559115][ T30] audit: type=1326 audit(1877.833:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7fc00000 [ 1903.608418][ T30] audit: type=1326 audit(1877.833:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7fc00000 [ 1903.637942][ T30] audit: type=1326 audit(1877.833:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7fc00000 [ 1903.673620][ T30] audit: type=1326 audit(1877.833:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7fc00000 [ 1903.870016][ T30] audit: type=1326 audit(1877.833:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7fc00000 [ 1903.894798][ T30] audit: type=1326 audit(1877.833:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7fc00000 [ 1904.462421][ T30] audit: type=1326 audit(1877.833:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7fc00000 [ 1904.861081][ T30] audit: type=1326 audit(1877.833:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7fc00000 [ 1904.884573][ T30] audit: type=1326 audit(1877.833:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd850d8e929 code=0x7fc00000 [ 1904.921408][T22606] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1906.732547][T22627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3925'. [ 1906.948282][ T5818] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1907.589384][T22635] loop6: detected capacity change from 0 to 524287999 [ 1907.663725][T22488] buffer_io_error: 4 callbacks suppressed [ 1907.663741][T22488] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 1907.981782][T22641] openvswitch: netlink: Message has 2 unknown bytes. [ 1907.988577][T22641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1908.114228][ T5818] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1908.123363][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.144831][ T5818] usb 6-1: Product: syz [ 1908.179480][ T5818] usb 6-1: Manufacturer: syz [ 1908.188150][ T5818] usb 6-1: SerialNumber: syz [ 1908.242856][ T5818] usb 6-1: config 0 descriptor?? [ 1908.552112][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 1908.552128][ T30] audit: type=1400 audit(1882.810:4044): avc: denied { write } for pid=22643 comm="syz.4.3930" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1908.666243][T22647] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1908.673968][T22647] UDF-fs: Scanning with blocksize 512 failed [ 1908.681444][T22647] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1908.688915][T22647] UDF-fs: Scanning with blocksize 1024 failed [ 1908.697800][T22647] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1908.705398][T22647] UDF-fs: Scanning with blocksize 2048 failed [ 1908.712076][T22647] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1908.719559][T22647] UDF-fs: Scanning with blocksize 4096 failed [ 1909.078484][ T30] audit: type=1400 audit(1882.810:4045): avc: denied { setattr } for pid=22643 comm="syz.4.3930" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1909.119431][T22648] program syz.2.3931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1909.281447][ T5818] usb 6-1: ignoring: probably an ADSL modem [ 1909.374418][T22651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3931'. [ 1910.020446][T22652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1910.108532][T22652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1910.125224][ T5818] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1910.140482][ T5818] usb 6-1: USB disconnect, device number 20 [ 1910.783518][T22667] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3944'. [ 1912.367769][T22680] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3940'. [ 1912.425303][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3938'. [ 1912.434262][T22674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3938'. [ 1912.591712][T22684] openvswitch: netlink: Message has 2 unknown bytes. [ 1912.599506][T22684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1912.754093][T22685] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3937'. [ 1913.067574][T22674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1913.143940][T22674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1915.061425][T22695] syz.2.3945: attempt to access beyond end of device [ 1915.061425][T22695] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1915.076840][T22695] syz.2.3945: attempt to access beyond end of device [ 1915.076840][T22695] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1915.138887][T22708] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3947'. [ 1915.166783][T22708] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3947'. [ 1915.180048][ T30] audit: type=1400 audit(1889.105:4046): avc: denied { map } for pid=22707 comm="syz.4.3947" path="socket:[67605]" dev="sockfs" ino=67605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1915.308140][ T7959] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1915.308153][ T5818] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1915.312802][T22712] input: syz0 as /devices/virtual/input/input23 [ 1915.663795][T22717] netlink: 'syz.3.3949': attribute type 39 has an invalid length. [ 1915.721153][ T7959] usb 7-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.743937][ T7959] usb 7-1: config 54 has 0 interfaces, different from the descriptor's value: 1 [ 1915.904755][ T7959] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 1915.914152][ T7959] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.923070][ T7959] usb 7-1: Product: syz [ 1915.927249][ T7959] usb 7-1: Manufacturer: syz [ 1915.932227][ T7959] usb 7-1: SerialNumber: syz [ 1915.946415][T22719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3949'. [ 1916.025669][T22723] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1916.665317][T22728] syz.6.3946: attempt to access beyond end of device [ 1916.665317][T22728] loop13: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1916.678974][T22728] FAT-fs (loop13): unable to read boot sector [ 1916.688911][T22728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.697691][T22728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.710677][ T30] audit: type=1400 audit(1890.499:4047): avc: denied { mounton } for pid=22704 comm="syz.6.3946" path="/442/file0" dev="tmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1917.886461][T22730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1917.892804][T22730] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1917.943663][T22730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1917.949747][T22730] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1917.960025][T22730] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1917.966009][T22730] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1918.068173][ C0] hrtimer: interrupt took 26278 ns [ 1918.944013][ T974] usb 7-1: USB disconnect, device number 10 [ 1920.535720][ T5818] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1920.614581][ T5818] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1921.431968][ T5818] usb 6-1: can't read configurations, error -71 [ 1921.487693][T22751] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3953'. [ 1922.731786][T22767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3957'. [ 1923.515892][ T30] audit: type=1400 audit(1896.915:4048): avc: denied { write } for pid=22760 comm="syz.3.3958" path="socket:[67672]" dev="sockfs" ino=67672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1923.615314][T22778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3959'. [ 1924.001495][ T30] audit: type=1400 audit(1897.364:4049): avc: denied { create } for pid=22747 comm="syz.5.3955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1924.386354][ T30] audit: type=1400 audit(1897.626:4050): avc: denied { connect } for pid=22776 comm="syz.2.3960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1924.482511][ T30] audit: type=1400 audit(1897.626:4051): avc: denied { bind } for pid=22776 comm="syz.2.3960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1926.129396][ T30] audit: type=1400 audit(1899.357:4052): avc: denied { bind } for pid=22791 comm="syz.4.3961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1926.437991][ T5818] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1926.465961][T22799] fuse: Unknown parameter '0177777777777777777777700000000000000000000' [ 1926.477865][T22799] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3962'. [ 1926.713538][T22806] openvswitch: netlink: Message has 2 unknown bytes. [ 1926.721191][T22806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1926.943692][ T5818] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 1927.110561][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.232016][ T30] audit: type=1400 audit(2000000000.682:4053): avc: denied { bind } for pid=22807 comm="syz.4.3966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1927.587020][ T5818] usb 3-1: config 0 descriptor?? [ 1927.615702][ T5818] gspca_main: mars-2.14.0 probing 093a:050f [ 1927.926181][T22807] ALSA: mixer_oss: invalid index 40000 [ 1927.991813][T22813] netlink: 'syz.3.3967': attribute type 10 has an invalid length. [ 1928.002554][T22813] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3967'. [ 1928.100999][T22821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'. [ 1929.656397][T22813] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1931.210277][ T7959] usb 3-1: USB disconnect, device number 36 [ 1931.367159][T22836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3972'. [ 1933.368420][ T30] audit: type=1400 audit(2000000006.426:4054): avc: denied { connect } for pid=22844 comm="syz.6.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1935.291084][T10804] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1936.236598][T10804] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 1936.288818][T10804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.557043][T10804] usb 5-1: config 0 descriptor?? [ 1936.699371][T10804] gspca_main: mars-2.14.0 probing 093a:050f [ 1938.819606][T22883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3975'. [ 1940.265799][T22900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3985'. [ 1940.278317][T22900] netlink: 'syz.6.3985': attribute type 1 has an invalid length. [ 1940.286439][T22900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3985'. [ 1940.327392][T22898] syz.6.3985: attempt to access beyond end of device [ 1940.327392][T22898] nbd6: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1940.340397][T22898] qnx6: unable to read the first superblock [ 1940.346801][T22898] syz.6.3985: attempt to access beyond end of device [ 1940.346801][T22898] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1940.359712][T22898] qnx6: unable to read the first superblock [ 1940.365669][T22898] qnx6: unable to read the first superblock [ 1940.438562][T10804] usb 5-1: USB disconnect, device number 23 [ 1940.492816][T22902] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3986'. [ 1940.580393][ T30] audit: type=1400 audit(2000000013.179:4055): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1940.768272][ T30] audit: type=1326 audit(2000000013.357:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22905 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1940.862972][ T30] audit: type=1326 audit(2000000013.357:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22905 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1940.899790][ T30] audit: type=1326 audit(2000000013.413:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22905 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1940.996446][ T30] audit: type=1326 audit(2000000013.413:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22905 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1941.022890][ T30] audit: type=1326 audit(2000000013.441:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22905 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1941.046980][ T30] audit: type=1326 audit(2000000013.441:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22905 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1941.803331][ T30] audit: type=1326 audit(2000000013.441:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22905 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1941.835818][ T30] audit: type=1326 audit(2000000013.441:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22905 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1941.859781][ T30] audit: type=1326 audit(2000000013.441:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22905 comm="syz.3.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1942.549032][T22923] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.3992'. [ 1942.573708][T22923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3992'. [ 1942.583572][T22923] bridge0: left allmulticast mode [ 1943.051067][T22926] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1943.850986][T22932] usb usb8: usbfs: process 22932 (syz.4.3995) did not claim interface 0 before use [ 1943.983031][T22927] ALSA: mixer_oss: invalid OSS volume '' [ 1945.201101][T22945] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3998'. [ 1948.268165][T22969] could not allocate digest TFM handle cbcmac-aes-neon [ 1948.364919][T22957] netlink: 'syz.2.4000': attribute type 16 has an invalid length. [ 1948.372913][T22957] netlink: 'syz.2.4000': attribute type 17 has an invalid length. [ 1948.381271][T22957] netlink: 'syz.2.4000': attribute type 27 has an invalid length. [ 1948.787926][T22977] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1948.898055][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1948.898089][ T30] audit: type=1400 audit(2000000020.943:4097): avc: denied { setopt } for pid=22952 comm="syz.5.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1949.318440][ T30] audit: type=1400 audit(2000000021.355:4098): avc: denied { unmount } for pid=9791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1950.329019][T22996] tmpfs: Unknown parameter '' [ 1950.605863][T22999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4004'. [ 1952.808597][T23016] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4011'. [ 1952.835369][T23012] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1953.303250][T23022] openvswitch: netlink: Message has 2 unknown bytes. [ 1953.310241][T23022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1953.688182][T23025] netlink: 'syz.2.4017': attribute type 10 has an invalid length. [ 1953.705906][T23025] batman_adv: batadv0: Adding interface: macvtap0 [ 1953.713910][T23025] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1953.739270][ C0] vkms_vblank_simulate: vblank timer overrun [ 1953.750365][T23025] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 1956.101572][T23047] openvswitch: netlink: Message has 2 unknown bytes. [ 1956.109423][T23047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1956.610683][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1957.755743][T23064] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4030'. [ 1957.769479][T23062] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1958.011167][ T30] audit: type=1400 audit(2000000029.483:4099): avc: denied { link } for pid=23074 comm="syz.4.4033" name="#73" dev="tmpfs" ino=4388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1959.041008][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1959.072778][ T30] audit: type=1400 audit(2000000029.483:4100): avc: denied { rename } for pid=23074 comm="syz.4.4033" name="#74" dev="tmpfs" ino=4388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1960.149591][ T30] audit: type=1400 audit(2000000030.961:4101): avc: denied { read } for pid=23077 comm="syz.2.4034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1961.115497][T23093] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1961.688377][ T9] usb 6-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 1962.036936][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.058661][ T9] usb 6-1: config 0 descriptor?? [ 1962.096062][ T9] usb 6-1: can't set config #0, error -71 [ 1962.107598][ T9] usb 6-1: USB disconnect, device number 23 [ 1963.220757][T23107] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4042'. [ 1963.417521][T23111] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1964.276977][ T30] audit: type=1400 audit(2000000035.348:4102): avc: denied { shutdown } for pid=23109 comm="syz.4.4043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1964.663633][ T30] audit: type=1400 audit(2000000035.685:4103): avc: denied { write } for pid=23109 comm="syz.4.4043" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1964.762858][T10804] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1964.897865][T23122] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1965.591108][T23128] No buffer was provided with the request [ 1965.748365][T23127] 9pnet_fd: Insufficient options for proto=fd [ 1965.813468][ T30] audit: type=1400 audit(2000000036.574:4104): avc: denied { write } for pid=23124 comm="syz.2.4047" path="socket:[69128]" dev="sockfs" ino=69128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1966.445809][T22843] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 1966.708316][T23135] input: syz1 as /devices/virtual/input/input24 [ 1967.261727][T10804] usb 6-1: device not accepting address 24, error -71 [ 1967.306844][T22843] usb 5-1: device descriptor read/all, error -71 [ 1974.142946][T23177] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1975.058899][T23182] Failed to initialize the IGMP autojoin socket (err -2) [ 1976.916365][T23201] openvswitch: netlink: Message has 2 unknown bytes. [ 1976.923440][T23201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1978.974867][T23218] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1978.985575][T23218] VFS: Can't find a romfs filesystem on dev nullb0. [ 1978.985575][T23218] [ 1980.520898][T10804] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1980.603150][T23232] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1980.638153][T23231] netlink: 'syz.6.4072': attribute type 10 has an invalid length. [ 1980.671057][T23236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4074'. [ 1980.814610][T10804] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1981.527758][T23231] veth0_macvtap: left promiscuous mode [ 1981.534117][T10804] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1981.572812][T23231] batman_adv: batadv0: Adding interface: macvtap0 [ 1981.579636][T23231] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1981.605104][T10804] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1981.605133][T10804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.628599][T23229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1981.655279][T10804] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1981.664992][T23231] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 1981.804503][T23246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4076'. [ 1981.817976][ T30] audit: type=1400 audit(2000000051.736:4105): avc: denied { bind } for pid=23240 comm="syz.4.4076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1981.841212][ T30] audit: type=1400 audit(2000000051.755:4106): avc: denied { accept } for pid=23240 comm="syz.4.4076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1981.899858][T22843] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1981.928909][T10804] usb 3-1: USB disconnect, device number 37 [ 1982.012540][T23248] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[23248] [ 1982.076014][T22843] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1982.091631][T22843] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1982.406032][T22843] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1982.418344][T22843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1982.435150][T22843] usb 7-1: SerialNumber: syz [ 1982.447755][T23229] hsr0: entered promiscuous mode [ 1982.942215][T23254] openvswitch: netlink: Message has 2 unknown bytes. [ 1982.949621][T23254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1983.016084][T23228] hsr0: left promiscuous mode [ 1983.039215][T22843] usb 7-1: 0:2 : does not exist [ 1983.050665][T22843] usb 7-1: unit 5: unexpected type 0x0a [ 1983.180116][T22843] usb 7-1: USB disconnect, device number 11 [ 1985.013740][T23268] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4082'. [ 1985.770004][ T30] audit: type=1400 audit(2000000002.067:4107): avc: denied { read } for pid=23269 comm="syz.3.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1986.232539][T23280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4086'. [ 1986.479232][T23290] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1986.486403][T23290] overlayfs: failed to set xattr on upper [ 1986.492110][T23290] overlayfs: ...falling back to redirect_dir=nofollow. [ 1986.498949][T23290] overlayfs: ...falling back to metacopy=off. [ 1986.504995][T23290] overlayfs: ...falling back to index=off. [ 1986.510789][T23290] overlayfs: ...falling back to uuid=null. [ 1986.529363][T23289] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4083'. [ 1986.538395][T23289] netlink: 'syz.6.4083': attribute type 5 has an invalid length. [ 1986.548022][T23289] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4083'. [ 1986.698366][T23289] geneve2: entered promiscuous mode [ 1986.704326][T23289] geneve2: entered allmulticast mode [ 1987.029327][ T30] audit: type=1400 audit(2000000003.713:4108): avc: denied { ioctl } for pid=23286 comm="syz.2.4089" path="socket:[69633]" dev="sockfs" ino=69633 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1987.057519][T23295] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1988.546123][T23308] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1990.081337][T23317] netlink: 'syz.5.4094': attribute type 10 has an invalid length. [ 1990.089648][T23317] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4094'. [ 1992.104265][T23333] CUSE: unknown device info "ÿ" [ 1992.104616][T23317] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1992.109237][T23333] CUSE: zero length info key specified [ 1992.184409][T23331] openvswitch: netlink: Message has 2 unknown bytes. [ 1992.191138][T23331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1992.254961][T23335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4099'. [ 1993.859703][T23347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1998.006981][ T30] audit: type=1326 audit(2000000013.984:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23382 comm="syz.3.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1998.040196][ T30] audit: type=1326 audit(2000000013.984:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23382 comm="syz.3.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1998.067270][ T30] audit: type=1326 audit(2000000013.984:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23382 comm="syz.3.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1998.098760][ T30] audit: type=1326 audit(2000000013.984:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23382 comm="syz.3.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1998.169448][ T30] audit: type=1326 audit(2000000013.984:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23382 comm="syz.3.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1998.473057][ T30] audit: type=1326 audit(2000000013.984:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23382 comm="syz.3.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1998.502855][ T30] audit: type=1326 audit(2000000013.984:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23382 comm="syz.3.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1998.528209][T23391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1998.539306][T23391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1998.549358][ T30] audit: type=1326 audit(2000000013.984:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23382 comm="syz.3.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1998.579899][ T30] audit: type=1326 audit(2000000013.984:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23382 comm="syz.3.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1998.608221][ T30] audit: type=1326 audit(2000000013.984:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23382 comm="syz.3.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f813538e929 code=0x7ffc0000 [ 1999.557972][T23401] openvswitch: netlink: Message has 2 unknown bytes. [ 1999.564940][T23401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1999.902949][T23404] openvswitch: netlink: Message has 2 unknown bytes. [ 1999.909685][T23404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2001.053571][T23414] netlink: 'syz.3.4119': attribute type 10 has an invalid length. [ 2001.061490][T23414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4119'. [ 2001.070639][T23414] batadv0: entered allmulticast mode [ 2001.076325][T23414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2001.090491][T23414] bond0: (slave batadv0): Releasing backup interface [ 2001.125904][T23414] bridge0: port 4(batadv0) entered blocking state [ 2001.132457][T23414] bridge0: port 4(batadv0) entered disabled state [ 2001.152292][T23414] batman_adv: batadv0: Adding interface: dummy0 [ 2001.159994][T23414] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2001.185309][T23414] batman_adv: batadv0: Interface activated: dummy0 [ 2001.200413][T23414] batadv0: mtu less than device minimum [ 2001.206572][T23414] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 2001.217432][T23414] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 2001.228152][T23414] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 2001.238859][T23414] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 2001.249771][T23414] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 2001.879966][ T6193] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 2001.889508][ T6193] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 2003.120821][T23439] overlayfs: missing 'lowerdir' [ 2003.527773][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2003.527853][ T30] audit: type=1400 audit(2000000018.913:4130): avc: denied { watch } for pid=23432 comm="syz.2.4123" path="/820/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=4462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2004.534746][T23431] veth0_vlan: left promiscuous mode [ 2004.540707][T23431] veth0_vlan: entered promiscuous mode [ 2004.919552][T23455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4126'. [ 2004.937407][T23455] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4126'. [ 2007.302328][T23465] net_ratelimit: 14 callbacks suppressed [ 2007.302360][T23465] openvswitch: netlink: Message has 2 unknown bytes. [ 2007.315546][T23465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2008.244091][ T1162] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2008.300622][T23483] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4136'. [ 2009.201966][T23481] Invalid ELF header type: 0 != 1 [ 2011.753937][T23521] netlink: 'syz.3.4145': attribute type 10 has an invalid length. [ 2012.320869][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4141'. [ 2012.335115][T23521] hsr_slave_0: left promiscuous mode [ 2012.341302][T23521] hsr_slave_1: left promiscuous mode [ 2012.639520][T23527] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 2012.841074][T23531] syz.3.4147: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 2012.856580][T23531] CPU: 1 UID: 0 PID: 23531 Comm: syz.3.4147 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 2012.856596][T23531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2012.856603][T23531] Call Trace: [ 2012.856607][T23531] [ 2012.856612][T23531] dump_stack_lvl+0x16c/0x1f0 [ 2012.856630][T23531] warn_alloc+0x248/0x3a0 [ 2012.856645][T23531] ? __pfx_warn_alloc+0x10/0x10 [ 2012.856660][T23531] ? __pfx_stack_trace_save+0x10/0x10 [ 2012.856675][T23531] ? stack_depot_save_flags+0x28/0xa40 [ 2012.856694][T23531] ? kasan_save_stack+0x42/0x60 [ 2012.856706][T23531] ? kasan_save_stack+0x33/0x60 [ 2012.856719][T23531] ? kasan_save_track+0x14/0x30 [ 2012.856733][T23531] ? xskq_create+0x52/0x1d0 [ 2012.856744][T23531] ? xsk_setsockopt+0x640/0x840 [ 2012.856754][T23531] ? do_sock_setsockopt+0x224/0x470 [ 2012.856770][T23531] ? xskq_create+0xfb/0x1d0 [ 2012.856781][T23531] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 2012.856797][T23531] ? xskq_create+0xfb/0x1d0 [ 2012.856812][T23531] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2012.856827][T23531] ? xskq_create+0xfb/0x1d0 [ 2012.856839][T23531] vmalloc_user_noprof+0x9e/0xe0 [ 2012.856850][T23531] ? xskq_create+0xfb/0x1d0 [ 2012.856861][T23531] xskq_create+0xfb/0x1d0 [ 2012.856876][T23531] xsk_setsockopt+0x640/0x840 [ 2012.856887][T23531] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2012.856901][T23531] ? selinux_socket_setsockopt+0x6a/0x80 [ 2012.856916][T23531] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2012.856926][T23531] do_sock_setsockopt+0x224/0x470 [ 2012.856941][T23531] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2012.856955][T23531] ? __pfx_do_futex+0x10/0x10 [ 2012.856970][T23531] ? fdget+0x187/0x210 [ 2012.856984][T23531] ? __sys_sendmsg+0x18c/0x220 [ 2012.856998][T23531] ? __x64_sys_futex+0x1e0/0x4c0 [ 2012.857011][T23531] ? __x64_sys_futex+0x1e9/0x4c0 [ 2012.857028][T23531] __sys_setsockopt+0x1a0/0x230 [ 2012.857043][T23531] __x64_sys_setsockopt+0xbd/0x160 [ 2012.857054][T23531] ? do_syscall_64+0x91/0x4c0 [ 2012.857067][T23531] ? lockdep_hardirqs_on+0x7c/0x110 [ 2012.857080][T23531] do_syscall_64+0xcd/0x4c0 [ 2012.857094][T23531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2012.857104][T23531] RIP: 0033:0x7f813538e929 [ 2012.857114][T23531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2012.857129][T23531] RSP: 002b:00007f8136291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2012.857140][T23531] RAX: ffffffffffffffda RBX: 00007f81355b5fa0 RCX: 00007f813538e929 [ 2012.857148][T23531] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 2012.857154][T23531] RBP: 00007f8135410b39 R08: 0000000000000004 R09: 0000000000000000 [ 2012.857161][T23531] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2012.857167][T23531] R13: 0000000000000000 R14: 00007f81355b5fa0 R15: 00007ffed2435e48 [ 2012.857182][T23531] [ 2012.857186][T23531] Mem-Info: [ 2012.966822][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2013.150141][T23542] Invalid ELF header type: 3 != 1 [ 2013.162207][T23531] active_anon:23736 inactive_anon:17 isolated_anon:0 [ 2013.162207][T23531] active_file:20212 inactive_file:41815 isolated_file:0 [ 2013.162207][T23531] unevictable:768 dirty:644 writeback:0 [ 2013.162207][T23531] slab_reclaimable:8025 slab_unreclaimable:124850 [ 2013.162207][T23531] mapped:35161 shmem:15733 pagetables:1367 [ 2013.162207][T23531] sec_pagetables:0 bounce:0 [ 2013.162207][T23531] kernel_misc_reclaimable:0 [ 2013.162207][T23531] free:1252665 free_pcp:10855 free_cma:0 [ 2013.207799][T23531] Node 0 active_anon:94944kB inactive_anon:68kB active_file:80848kB inactive_file:167052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140644kB dirty:2576kB writeback:0kB shmem:61396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11516kB pagetables:5304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2013.241416][T23531] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2013.272830][T23531] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2013.301643][T23531] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 2013.307418][T23531] Node 0 DMA32 free:1083912kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:94916kB inactive_anon:68kB active_file:80848kB inactive_file:165736kB unevictable:1536kB writepending:2576kB present:3129332kB managed:2540696kB mlocked:0kB bounce:0kB free_pcp:37464kB local_pcp:25440kB free_cma:0kB [ 2013.340970][T23531] lowmem_reserve[]: 0 0 1 1 1 [ 2013.345716][T23531] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 2013.374687][T23531] lowmem_reserve[]: 0 0 0 0 0 [ 2013.379408][T23531] Node 1 Normal free:3911380kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:5920kB local_pcp:0kB free_cma:0kB [ 2013.410253][T23531] lowmem_reserve[]: 0 0 0 0 0 [ 2013.414971][T23531] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2013.427648][T23531] Node 0 DMA32: 1479*4kB (UME) 1133*8kB (UME) 708*16kB (UME) 190*32kB (UME) 350*64kB (UME) 201*128kB (ME) 105*256kB (UME) 51*512kB (UME) 30*1024kB (UME) 3*2048kB (UE) 223*4096kB (UM) = 1083780kB [ 2013.446839][T23531] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2013.458664][T23531] Node 1 Normal: 15*4kB (UME) 7*8kB (UME) 42*16kB (UME) 232*32kB (UME) 101*64kB (UME) 31*128kB (UME) 12*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3911380kB [ 2013.476870][T23531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2013.486621][T23531] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 2013.495983][T23531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2013.505587][T23531] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2013.514907][T23531] 77763 total pagecache pages [ 2013.519603][T23531] 6 pages in swap cache [ 2013.523787][T23531] Free swap = 124220kB [ 2013.527954][T23531] Total swap = 124996kB [ 2013.532126][T23531] 2097051 pages RAM [ 2013.535956][T23531] 0 pages HighMem/MovableOnly [ 2013.540651][T23531] 429899 pages reserved [ 2013.544834][T23531] 0 pages cma reserved [ 2017.868497][T23549] siw: device registration error -23 [ 2022.736980][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2022.973376][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2043.499219][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2082.498589][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2087.974327][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2127.388265][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2127.395229][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14236/1:b..l P23546/1:b..l [ 2127.405057][ C0] rcu: (detected by 0, t=10502 jiffies, g=71573, q=784 ncpus=2) [ 2127.412767][ C0] task:modprobe state:R running task stack:26696 pid:23546 tgid:23546 ppid:1162 task_flags:0x400000 flags:0x00004002 [ 2127.427249][ C0] Call Trace: [ 2127.430531][ C0] [ 2127.433461][ C0] __schedule+0x116a/0x5de0 [ 2127.437990][ C0] ? __pfx___schedule+0x10/0x10 [ 2127.442840][ C0] ? __lock_acquire+0x622/0x1c90 [ 2127.447788][ C0] ? mark_held_locks+0x49/0x80 [ 2127.452558][ C0] preempt_schedule_irq+0x51/0x90 [ 2127.457584][ C0] irqentry_exit+0x36/0x90 [ 2127.462000][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2127.467977][ C0] RIP: 0010:unwind_next_frame+0xa36/0x20a0 [ 2127.473777][ C0] Code: 87 0c 00 0f 84 6d f9 ff ff 80 3d 74 f0 67 12 00 0f 85 60 f9 ff ff 4c 89 ef c6 05 64 f0 67 12 01 e8 cf f0 ff ff e9 4c f9 ff ff c5 8b 36 00 84 c0 0f 85 9c f6 ff ff e8 98 3f 14 0a 85 c0 0f 84 [ 2127.493377][ C0] RSP: 0018:ffffc9000356ecf8 EFLAGS: 00000202 [ 2127.499439][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 00000000f15b9e87 [ 2127.507403][ C0] RDX: ffffffff816ac8ad RSI: ffffffff8ddef7a3 RDI: ffffffff8c157060 [ 2127.515367][ C0] RBP: ffffc9000356edb0 R08: 6616c1856c1cfbea R09: 0000000000000000 [ 2127.523331][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81a77a90 [ 2127.531297][ C0] R13: ffffc9000356ed68 R14: 0000000000000000 R15: ffff88802677c880 [ 2127.539266][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2127.545425][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 2127.550537][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 2127.555643][ C0] ? mas_store_prealloc+0x771/0x1680 [ 2127.560940][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2127.567093][ C0] arch_stack_walk+0x94/0x100 [ 2127.571774][ C0] ? mas_store_prealloc+0x771/0x1680 [ 2127.577065][ C0] stack_trace_save+0x8e/0xc0 [ 2127.581742][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2127.587122][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 2127.592066][ C0] kasan_save_stack+0x33/0x60 [ 2127.596743][ C0] ? kasan_save_stack+0x33/0x60 [ 2127.601594][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 2127.606962][ C0] ? __call_rcu_common.constprop.0+0x9a/0x9f0 [ 2127.613027][ C0] ? mas_wr_node_store+0xdc8/0x1620 [ 2127.618225][ C0] ? mas_wr_store_entry+0x102d/0x2550 [ 2127.623598][ C0] ? mas_store_prealloc+0x771/0x1680 [ 2127.628951][ C0] ? __pfx_mt_free_rcu+0x10/0x10 [ 2127.633884][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 2127.639080][ C0] __call_rcu_common.constprop.0+0x9a/0x9f0 [ 2127.644976][ C0] mas_wr_node_store+0xdc8/0x1620 [ 2127.650015][ C0] ? __pfx_mas_wr_node_store+0x10/0x10 [ 2127.655512][ C0] mas_wr_store_entry+0x102d/0x2550 [ 2127.660724][ C0] mas_store_prealloc+0x771/0x1680 [ 2127.665845][ C0] ? __pfx_mas_store_prealloc+0x10/0x10 [ 2127.671390][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 2127.676594][ C0] ? vma_iter_store_overwrite+0xa3e/0xe90 [ 2127.682320][ C0] __mmap_region+0x1639/0x25e0 [ 2127.687088][ C0] ? __pfx___mmap_region+0x10/0x10 [ 2127.692209][ C0] ? __lock_acquire+0x622/0x1c90 [ 2127.697170][ C0] ? avc_has_perm_noaudit+0x117/0x3b0 [ 2127.702568][ C0] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 2127.708467][ C0] mmap_region+0x1ab/0x3f0 [ 2127.712884][ C0] ? __get_unmapped_area+0x267/0x440 [ 2127.718167][ C0] do_mmap+0xa3e/0x1210 [ 2127.722326][ C0] ? __pfx_do_mmap+0x10/0x10 [ 2127.726913][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 2127.732568][ C0] vm_mmap_pgoff+0x281/0x450 [ 2127.737167][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2127.742297][ C0] vm_mmap+0x8e/0xc0 [ 2127.746197][ C0] elf_load+0x36d/0x780 [ 2127.750362][ C0] load_elf_binary+0x13c8/0x4f00 [ 2127.755345][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 2127.760633][ C0] ? find_held_lock+0x2b/0x80 [ 2127.765397][ C0] ? bprm_execve+0x8a2/0x1650 [ 2127.770085][ C0] bprm_execve+0x8c3/0x1650 [ 2127.774598][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 2127.779538][ C0] ? copy_strings_kernel+0x153/0x190 [ 2127.784826][ C0] kernel_execve+0x2ef/0x3b0 [ 2127.789420][ C0] call_usermodehelper_exec_async+0x255/0x4c0 [ 2127.795487][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2127.800685][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 2127.807274][ C0] ret_from_fork+0x5d4/0x6f0 [ 2127.811865][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 2127.818452][ C0] ret_from_fork_asm+0x1a/0x30 [ 2127.823228][ C0] [ 2127.826243][ C0] task:kworker/u8:3 state:R running task stack:22584 pid:14236 tgid:14236 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2127.839820][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 2127.847628][ C0] Call Trace: [ 2127.850901][ C0] [ 2127.853831][ C0] __schedule+0x116a/0x5de0 [ 2127.858332][ C0] ? arch_stack_walk+0x94/0x100 [ 2127.863198][ C0] ? __pfx___schedule+0x10/0x10 [ 2127.868048][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 2127.873012][ C0] ? mark_held_locks+0x49/0x80 [ 2127.877791][ C0] preempt_schedule_irq+0x51/0x90 [ 2127.882822][ C0] irqentry_exit+0x36/0x90 [ 2127.887245][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2127.893233][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 2127.898440][ C0] Code: e2 33 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 42 81 0f 0f 0f 82 74 02 00 00 8b 35 2a b3 0f 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 d9 e1 33 12 0f 85 c7 02 00 00 48 83 c4 [ 2127.918047][ C0] RSP: 0018:ffffc90003ddfa68 EFLAGS: 00000206 [ 2127.924110][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c4cc0 RCX: 0000000068c9ccde [ 2127.932075][ C0] RDX: 0000000000000000 RSI: ffffffff8ddef7a3 RDI: ffffffff8c157060 [ 2127.940041][ C0] RBP: 0000000000000002 R08: fb723964e4088d99 R09: 0000000000000000 [ 2127.948008][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 2127.955973][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2127.963958][ C0] ? batadv_iv_ogm_schedule_buff+0x75f/0x14e0 [ 2127.970033][ C0] batadv_iv_ogm_schedule_buff+0x5b4/0x14e0 [ 2127.975923][ C0] ? batadv_iv_ogm_schedule_buff+0x5a3/0x14e0 [ 2127.981987][ C0] ? mutex_lock_io_nested+0x901/0x920 [ 2127.987370][ C0] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 2127.993699][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 2127.999334][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 2128.006360][ C0] ? rcu_is_watching+0x12/0xc0 [ 2128.011129][ C0] process_one_work+0x9cf/0x1b70 [ 2128.016075][ C0] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 2128.023619][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2128.028994][ C0] ? assign_work+0x1a0/0x250 [ 2128.033581][ C0] worker_thread+0x6c8/0xf10 [ 2128.038179][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2128.043286][ C0] kthread+0x3c5/0x780 [ 2128.047351][ C0] ? __pfx_kthread+0x10/0x10 [ 2128.051936][ C0] ? rcu_is_watching+0x12/0xc0 [ 2128.056700][ C0] ? __pfx_kthread+0x10/0x10 [ 2128.061298][ C0] ret_from_fork+0x5d4/0x6f0 [ 2128.065906][ C0] ? __pfx_kthread+0x10/0x10 [ 2128.070503][ C0] ret_from_fork_asm+0x1a/0x30 [ 2128.075264][ C0] [ 2128.078266][ C0] rcu: rcu_preempt kthread starved for 9745 jiffies! g71573 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2128.089365][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2128.099327][ C0] rcu: RCU grace-period kthread stack dump: [ 2128.105204][ C0] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2128.118694][ C0] Call Trace: [ 2128.121967][ C0] [ 2128.124896][ C0] __schedule+0x116a/0x5de0 [ 2128.129418][ C0] ? __pfx___schedule+0x10/0x10 [ 2128.134275][ C0] ? find_held_lock+0x2b/0x80 [ 2128.138952][ C0] ? schedule+0x2d7/0x3a0 [ 2128.143285][ C0] schedule+0xe7/0x3a0 [ 2128.147354][ C0] schedule_timeout+0x123/0x290 [ 2128.152200][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2128.157568][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2128.162859][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2128.168664][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 2128.174128][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 2128.178890][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2128.184168][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2128.189366][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2128.194310][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 2128.199174][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2128.204993][ C0] rcu_gp_kthread+0x270/0x380 [ 2128.209674][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2128.214870][ C0] ? rcu_is_watching+0x12/0xc0 [ 2128.219641][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2128.224843][ C0] ? __kthread_parkme+0x19e/0x250 [ 2128.229878][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2128.235076][ C0] kthread+0x3c5/0x780 [ 2128.239141][ C0] ? __pfx_kthread+0x10/0x10 [ 2128.243728][ C0] ? rcu_is_watching+0x12/0xc0 [ 2128.248491][ C0] ? __pfx_kthread+0x10/0x10 [ 2128.253077][ C0] ret_from_fork+0x5d4/0x6f0 [ 2128.257670][ C0] ? __pfx_kthread+0x10/0x10 [ 2128.262270][ C0] ret_from_fork_asm+0x1a/0x30 [ 2128.267051][ C0] [ 2128.270067][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2128.276383][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 2128.287661][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2128.297712][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2128.303353][ C0] Code: 1b 73 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f0 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2128.322968][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 2128.329033][ C0] RAX: 0000000009670123 RBX: 0000000000000000 RCX: ffffffff8b7f1c99 [ 2128.336998][ C0] RDX: 0000000000000000 RSI: ffffffff8de14d4b RDI: ffffffff8c157060 [ 2128.344966][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 2128.352930][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 2128.360898][ C0] R13: ffffffff8e297780 R14: ffffffff90a7ff50 R15: 0000000000000000 [ 2128.368864][ C0] FS: 0000000000000000(0000) GS:ffff88812475a000(0000) knlGS:0000000000000000 [ 2128.377791][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2128.384369][ C0] CR2: 00007fd588d36f98 CR3: 0000000035930000 CR4: 00000000003526f0 [ 2128.392337][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2128.400301][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2128.408264][ C0] Call Trace: [ 2128.411535][ C0] [ 2128.414459][ C0] default_idle+0x13/0x20 [ 2128.418793][ C0] default_idle_call+0x6d/0xb0 [ 2128.423559][ C0] do_idle+0x391/0x510 [ 2128.427630][ C0] ? __pfx_do_idle+0x10/0x10 [ 2128.432219][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 2128.437423][ C0] cpu_startup_entry+0x4f/0x60 [ 2128.442189][ C0] rest_init+0x16b/0x2b0 [ 2128.446424][ C0] ? acpi_subsystem_init+0x133/0x180 [ 2128.451706][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2128.457251][ C0] start_kernel+0x3ee/0x4d0 [ 2128.461752][ C0] x86_64_start_reservations+0x18/0x30 [ 2128.467208][ C0] x86_64_start_kernel+0x130/0x190 [ 2128.472320][ C0] common_startup_64+0x13e/0x148 [ 2128.477266][ C0] SYZFAIL: failed to send rpc fd=3 want=19296 sent=0 n=-1 (errno 32: Broken pipe) [ 2129.001889][ T30] audit: type=1400 audit(2000000136.513:4131): avc: denied { write } for pid=5805 comm="syz-executor" path="pipe:[4012]" dev="pipefs" ino=4012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2129.111895][T23554] lo speed is unknown, defaulting to 1000 [ 2129.119050][T23554] lo speed is unknown, defaulting to 1000 [ 2129.138913][T23554] lo speed is unknown, defaulting to 1000 [ 2129.234239][T23554] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 2129.826077][T23554] lo speed is unknown, defaulting to 1000 [ 2129.832586][T23554] lo speed is unknown, defaulting to 1000 [ 2129.840377][T23554] lo speed is unknown, defaulting to 1000 [ 2129.847252][T23554] lo speed is unknown, defaulting to 1000 [ 2129.853721][T23554] lo speed is unknown, defaulting to 1000 [ 2130.537406][ T6193] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2130.642311][ T6193] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2130.746817][ T6193] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2130.843385][ T6193] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2130.976824][ T6193] dummy0: left allmulticast mode [ 2130.991833][ T6193] bridge0: port 3(dummy0) entered disabled state [ 2131.001519][ T6193] bridge_slave_1: left allmulticast mode [ 2131.007682][ T6193] bridge_slave_1: left promiscuous mode [ 2131.014679][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.024167][ T6193] bridge_slave_0: left allmulticast mode [ 2131.029785][ T6193] bridge_slave_0: left promiscuous mode [ 2131.036152][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.162307][ C1] ------------[ cut here ]------------ [ 2131.170348][ C1] refcount_t: addition on 0; use-after-free. [ 2131.176666][ C1] WARNING: CPU: 1 PID: 0 at lib/refcount.c:25 refcount_warn_saturate+0x1ca/0x210 [ 2131.185784][ C1] Modules linked in: [ 2131.190135][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 2131.201441][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2131.211519][ C1] RIP: 0010:refcount_warn_saturate+0x1ca/0x210 [ 2131.217698][ C1] Code: ff 89 de e8 98 4d e0 fc 84 db 0f 85 e6 fe ff ff e8 ab 52 e0 fc c6 05 d6 9e b4 0b 01 90 48 c7 c7 c0 1b 15 8c e8 17 1e 9f fc 90 <0f> 0b 90 90 e9 c3 fe ff ff e8 88 52 e0 fc c6 05 b1 9e b4 0b 01 90 [ 2131.237328][ C1] RSP: 0018:ffffc90000a088b0 EFLAGS: 00010286 [ 2131.243392][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae368 [ 2131.251368][ C1] RDX: ffff88801e6b2440 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 2131.259356][ C1] RBP: ffff8880723021ec R08: 0000000000000001 R09: 0000000000000000 [ 2131.267317][ C1] R10: 0000000000000000 R11: fffffffffffcc070 R12: ffff8880723021ec [ 2131.275287][ C1] R13: ffff888072302080 R14: ffff88807e402100 R15: ffff88802df6fe00 [ 2131.283274][ C1] FS: 0000000000000000(0000) GS:ffff88812485a000(0000) knlGS:0000000000000000 [ 2131.292210][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2131.298800][ C1] CR2: 00005615337924c0 CR3: 000000000e382000 CR4: 00000000003526f0 [ 2131.306788][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2131.314769][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2131.322756][ C1] Call Trace: [ 2131.326026][ C1] [ 2131.328850][ C1] tipc_crypto_xmit+0x20c1/0x2550 [ 2131.333891][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 2131.339271][ C1] ? lock_acquire+0x179/0x350 [ 2131.343962][ C1] ? find_held_lock+0x2b/0x80 [ 2131.348641][ C1] ? net_generic+0xea/0x2a0 [ 2131.353124][ C1] tipc_bearer_xmit_skb+0x15f/0x430 [ 2131.358333][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 2131.364050][ C1] ? mark_held_locks+0x49/0x80 [ 2131.368821][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 2131.374106][ C1] tipc_disc_timeout+0x5b2/0x850 [ 2131.379045][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 2131.384504][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 2131.389962][ C1] call_timer_fn+0x19a/0x620 [ 2131.394553][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2131.399675][ C1] ? rcu_is_watching+0x12/0xc0 [ 2131.404436][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 2131.409909][ C1] __run_timers+0x6ef/0x960 [ 2131.414413][ C1] ? __pfx___run_timers+0x10/0x10 [ 2131.419461][ C1] run_timer_base+0x114/0x190 [ 2131.424141][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2131.429347][ C1] ? rcu_is_watching+0x12/0xc0 [ 2131.434110][ C1] run_timer_softirq+0x1a/0x40 [ 2131.438851][ C1] handle_softirqs+0x219/0x8e0 [ 2131.443620][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2131.448910][ C1] __irq_exit_rcu+0x109/0x170 [ 2131.453586][ C1] irq_exit_rcu+0x9/0x30 [ 2131.457844][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2131.463479][ C1] [ 2131.466403][ C1] [ 2131.469312][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2131.475289][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2131.480937][ C1] Code: 1b 73 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f0 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2131.500545][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 2131.506617][ C1] RAX: 000000000bab6537 RBX: 0000000000000001 RCX: ffffffff8b7f1c99 [ 2131.514587][ C1] RDX: 0000000000000000 RSI: ffffffff8de14d4b RDI: ffffffff8c157060 [ 2131.522566][ C1] RBP: ffffed1003cd6488 R08: 0000000000000001 R09: ffffed10170a6645 [ 2131.530543][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 2131.538517][ C1] R13: ffff88801e6b2440 R14: ffffffff90a7ff50 R15: 0000000000000000 [ 2131.546490][ C1] ? ct_kernel_exit+0x139/0x190 [ 2131.551352][ C1] default_idle+0x13/0x20 [ 2131.555683][ C1] default_idle_call+0x6d/0xb0 [ 2131.560448][ C1] do_idle+0x391/0x510 [ 2131.564517][ C1] ? __pfx_do_idle+0x10/0x10 [ 2131.569110][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 2131.574334][ C1] cpu_startup_entry+0x4f/0x60 [ 2131.579124][ C1] start_secondary+0x21d/0x2b0 [ 2131.583888][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2131.589162][ C1] common_startup_64+0x13e/0x148 [ 2131.594112][ C1] [ 2131.597126][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2131.604380][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-syzkaller-12058-g64980441d269 #0 PREEMPT(full) [ 2131.615636][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2131.625666][ C1] Call Trace: [ 2131.628936][ C1] [ 2131.631763][ C1] dump_stack_lvl+0x3d/0x1f0 [ 2131.636337][ C1] panic+0x71c/0x800 [ 2131.640212][ C1] ? __pfx_panic+0x10/0x10 [ 2131.644617][ C1] ? show_trace_log_lvl+0x29b/0x3e0 [ 2131.649822][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 2131.654912][ C1] ? refcount_warn_saturate+0x1ca/0x210 [ 2131.660438][ C1] check_panic_on_warn+0xab/0xb0 [ 2131.665363][ C1] __warn+0xf6/0x3c0 [ 2131.669255][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 2131.674256][ C1] ? refcount_warn_saturate+0x1ca/0x210 [ 2131.679783][ C1] report_bug+0x3c3/0x580 [ 2131.684100][ C1] ? refcount_warn_saturate+0x1ca/0x210 [ 2131.689631][ C1] handle_bug+0x184/0x210 [ 2131.693940][ C1] exc_invalid_op+0x17/0x50 [ 2131.698437][ C1] asm_exc_invalid_op+0x1a/0x20 [ 2131.703260][ C1] RIP: 0010:refcount_warn_saturate+0x1ca/0x210 [ 2131.709400][ C1] Code: ff 89 de e8 98 4d e0 fc 84 db 0f 85 e6 fe ff ff e8 ab 52 e0 fc c6 05 d6 9e b4 0b 01 90 48 c7 c7 c0 1b 15 8c e8 17 1e 9f fc 90 <0f> 0b 90 90 e9 c3 fe ff ff e8 88 52 e0 fc c6 05 b1 9e b4 0b 01 90 [ 2131.729009][ C1] RSP: 0018:ffffc90000a088b0 EFLAGS: 00010286 [ 2131.735070][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae368 [ 2131.743025][ C1] RDX: ffff88801e6b2440 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 2131.750978][ C1] RBP: ffff8880723021ec R08: 0000000000000001 R09: 0000000000000000 [ 2131.758937][ C1] R10: 0000000000000000 R11: fffffffffffcc070 R12: ffff8880723021ec [ 2131.766884][ C1] R13: ffff888072302080 R14: ffff88807e402100 R15: ffff88802df6fe00 [ 2131.774837][ C1] ? __warn_printk+0x198/0x350 [ 2131.779584][ C1] ? __warn_printk+0x1a5/0x350 [ 2131.784327][ C1] tipc_crypto_xmit+0x20c1/0x2550 [ 2131.789333][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 2131.794703][ C1] ? lock_acquire+0x179/0x350 [ 2131.799378][ C1] ? find_held_lock+0x2b/0x80 [ 2131.804030][ C1] ? net_generic+0xea/0x2a0 [ 2131.808512][ C1] tipc_bearer_xmit_skb+0x15f/0x430 [ 2131.813684][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 2131.819381][ C1] ? mark_held_locks+0x49/0x80 [ 2131.824123][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 2131.829386][ C1] tipc_disc_timeout+0x5b2/0x850 [ 2131.834299][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 2131.839749][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 2131.845190][ C1] call_timer_fn+0x19a/0x620 [ 2131.849766][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 2131.854862][ C1] ? rcu_is_watching+0x12/0xc0 [ 2131.859627][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 2131.865065][ C1] __run_timers+0x6ef/0x960 [ 2131.869551][ C1] ? __pfx___run_timers+0x10/0x10 [ 2131.874564][ C1] run_timer_base+0x114/0x190 [ 2131.879228][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2131.884425][ C1] ? rcu_is_watching+0x12/0xc0 [ 2131.889168][ C1] run_timer_softirq+0x1a/0x40 [ 2131.893923][ C1] handle_softirqs+0x219/0x8e0 [ 2131.898665][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2131.903928][ C1] __irq_exit_rcu+0x109/0x170 [ 2131.908579][ C1] irq_exit_rcu+0x9/0x30 [ 2131.912807][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2131.918416][ C1] [ 2131.921331][ C1] [ 2131.924249][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2131.930202][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2131.935811][ C1] Code: 1b 73 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f0 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2131.955399][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 2131.961441][ C1] RAX: 000000000bab6537 RBX: 0000000000000001 RCX: ffffffff8b7f1c99 [ 2131.969390][ C1] RDX: 0000000000000000 RSI: ffffffff8de14d4b RDI: ffffffff8c157060 [ 2131.977341][ C1] RBP: ffffed1003cd6488 R08: 0000000000000001 R09: ffffed10170a6645 [ 2131.985294][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 2131.993253][ C1] R13: ffff88801e6b2440 R14: ffffffff90a7ff50 R15: 0000000000000000 [ 2132.001203][ C1] ? ct_kernel_exit+0x139/0x190 [ 2132.006036][ C1] default_idle+0x13/0x20 [ 2132.010350][ C1] default_idle_call+0x6d/0xb0 [ 2132.015091][ C1] do_idle+0x391/0x510 [ 2132.019138][ C1] ? __pfx_do_idle+0x10/0x10 [ 2132.023715][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 2132.028906][ C1] cpu_startup_entry+0x4f/0x60 [ 2132.033741][ C1] start_secondary+0x21d/0x2b0 [ 2132.038496][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2132.043766][ C1] common_startup_64+0x13e/0x148 [ 2132.048697][ C1] [ 2132.051901][ C1] Kernel Offset: disabled [ 2132.056204][ C1] Rebooting in 86400 seconds..