last executing test programs: 5m51.328230315s ago: executing program 0 (id=2675): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) keyctl$get_keyring_id(0x0, 0x0, 0x9947) 5m51.189119393s ago: executing program 0 (id=2676): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) umount2(&(0x7f0000000180)='./file0\x00', 0xb) 5m50.385583654s ago: executing program 0 (id=2678): syz_emit_vhci(&(0x7f0000000440)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x11) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed}, &(0x7f0000000540)=0xe, 0x80800) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000580)) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x82}}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) 5m47.088781096s ago: executing program 0 (id=2687): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="460c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) 5m39.40835882s ago: executing program 0 (id=2706): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001cc0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="83b7c51218f9820ed21674d369c252cf163b98cc761bb26071f24aabaaab0d15854340d53e6b7be414a6bb32e8d6340a42f3b75ad37c817edb15436920da2bb35171ed6d5f11970cdd36ca406e800ffc06b7ea7ebdd94807d6c846f6ee6edc1328716dc8c839b7d680122b016980d204cd302a37bc70e9064d55860d8914a5ca2be932d7ddee0e1f0b1d7ce2b9220144f28fce4520a580ddea7ba21bef9d33c4715452e1bc8a3aa3bfcca6490baa711527de886c722d8206fdbbb1a51a7242a0349475dd089deabe9a343d5a39890dfcb2c498c836f476a6ea82", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0xf, 0x10}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x25dfdbfb, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) getpid() setns(0xffffffffffffffff, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m37.746565788s ago: executing program 0 (id=2707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x400, 0x1070bd26, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) close(r11) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="1201010200000010"], 0x0) ioctl$SIOCSIFHWADDR(r11, 0x40095505, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 5m22.29418069s ago: executing program 32 (id=2707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5393, &(0x7f0000000000)) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x400, 0x1070bd26, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) close(r11) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="1201010200000010"], 0x0) ioctl$SIOCSIFHWADDR(r11, 0x40095505, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 4m19.496575553s ago: executing program 4 (id=2876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000c00", @ANYRES32=0x0, @ANYBLOB="5fc15a56094d978e0fbb60cc7ef221d2eb68a16c255e0e441020d3b1b819ccc1c8b799ac4f9ebf7749ce2537ed3cfc97f2976d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 4m18.40611983s ago: executing program 4 (id=2880): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x150}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/kexec_crash_size', 0x141a82, 0x104) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r2, 0x0, 0x0, 0x800) pwritev(r2, &(0x7f0000000580)=[{&(0x7f00000002c0)="ec66611fc3888b48cf91f885efa1d7cb548376aa3f99e9f6892657b74c462f170fbf843669449e49f730d74909ce6bf04cc9ed309547745217920b3486d05487bff2d4775b76aa268e666c51363e8dc7fbb0132888", 0x55}, {&(0x7f0000000340)="9fd7cd64fcb1a5c98c9fa0be2013ee15cfa7090a7ccf8b712b5b028dd41c23bf14a47e200bf8d8e6636737d82a7e3161e582b84e8431", 0x36}, {&(0x7f0000000540)="08272fefd7342af91f839fe095fb371e267aff64ca5cff829a9a9203530a0d8a", 0x20}], 0x3, 0x3, 0x3) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x101ff, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4m17.164177865s ago: executing program 4 (id=2883): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x2, 0xb, 0x6109, 0xc2}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 4m17.029760532s ago: executing program 4 (id=2884): socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) syz_socket_connect_nvme_tcp() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x402000, 0x0) recvmsg$can_raw(r1, 0x0, 0x10042) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000002400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x107, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x24004080) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(0x0, 0x6, 0x0) r5 = fcntl$getown(r0, 0x9) rt_tgsigqueueinfo(0x0, r5, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x4a}) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r6, 0x2285, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f747082f52a9d212fad09cdb0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 4m16.541922332s ago: executing program 4 (id=2886): socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) syz_socket_connect_nvme_tcp() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x402000, 0x0) recvmsg$can_raw(r1, 0x0, 0x10042) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000002400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x107, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x24004080) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(0x0, 0x6, 0x0) r4 = fcntl$getown(r0, 0x9) rt_tgsigqueueinfo(0x0, r4, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x4a}) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r5, 0x2285, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f747082f52a9d212fad09cdb0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 4m14.962101176s ago: executing program 4 (id=2889): syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}}}}}}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000001c0)={0x1, 0x4, 0x0, 0x0}) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x54}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 3m59.079227266s ago: executing program 33 (id=2889): syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}}}}}}, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000001c0)={0x1, 0x4, 0x0, 0x0}) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x54}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2m48.615921775s ago: executing program 5 (id=3052): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x80186e83, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0xe4bc, 0x2, 0x0, 0x370}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) r4 = creat(&(0x7f0000000080)='./file1\x00', 0xa14089a55daf2c6c) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f000001b000)=0x2) fcntl$setlease(r4, 0x400, 0x0) mkdirat(r4, 0x0, 0x120) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000000000791214000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) write$binfmt_aout(r5, 0x0, 0xff2e) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4096, 0x1000) memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000c, 0x8116, r6, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) 2m46.784091827s ago: executing program 5 (id=3056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x4}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000004c0)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0xad, 0xce, 0x1c, 0x89, 0xa4, 0x27, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x19, 0x3fb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x0, 0x7, 0x0, 0xdc, 0x4, 0x6, 0x7, 0x7, 0x9, 0x3, 0x9, 0x0, 0x40, 0x100, 0xf7, 0x5, 0xf4, 0xc, '\x00', 0xfe}) dup(r1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m45.393747189s ago: executing program 5 (id=3057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2010042, 0x0) gettid() r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, 0x0) 2m43.824423317s ago: executing program 5 (id=3059): socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) syz_socket_connect_nvme_tcp() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x402000, 0x0) recvmsg$can_raw(r1, 0x0, 0x10042) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000002400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x107, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x24004080) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(0x0, 0x6, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) 2m42.363343379s ago: executing program 5 (id=3064): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000300)={r3, 0x40000, 0x2, r3}) r4 = eventfd2(0x8, 0x80001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r4, 0x7, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r4, 0x0, 0x2, r2}) 2m42.098813248s ago: executing program 5 (id=3065): syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x12) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x801c581f, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000d34ed0f900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000180)={0x0, 0xb5a9, 0x2000, 0xfffffffd, 0x4006, 0x0, r5}, &(0x7f0000000280), &(0x7f00000002c0)) 2m26.831210136s ago: executing program 34 (id=3065): syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x12) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x801c581f, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000d34ed0f900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x10f, &(0x7f0000000180)={0x0, 0xb5a9, 0x2000, 0xfffffffd, 0x4006, 0x0, r5}, &(0x7f0000000280), &(0x7f00000002c0)) 52.00708485s ago: executing program 6 (id=3291): socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="0402"], 0x20) 50.052074565s ago: executing program 6 (id=3292): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = socket(0x2c, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004e0093532dbd7000fedbdf251900005a4a8a00e046de0497204600"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r3, 0x8925, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) setpriority(0x0, 0x1, 0xa7a8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000300)=r0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000001280)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) preadv2(r12, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) r13 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r13, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 48.137923289s ago: executing program 6 (id=3299): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="66b81a1500000f23c80f21f86635080000000f23f80fc779cf652e0f01c50f78e4650f01c9f30f090fb0b1f500baf80c66b8903c2d8f66efbafc0c66ed0f20e06635004000000f22e0f08130c1a9", 0x4e}], 0x1, 0x54, &(0x7f0000000100)=[@cstype3={0x5, 0xa}], 0x1) fsetxattr$security_evm(r0, &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0x3, "a2ecb4b8319a590b0ab6"}, 0xc, 0x2) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000001c0)={[{0x4040, 0x8, 0x6, 0xdd, 0x6, 0x2c, 0x40, 0x7, 0x7f, 0x7f, 0x7, 0x80, 0x1}, {0x7, 0x84, 0xf, 0x1, 0x84, 0xfa, 0x2, 0xc0, 0x80, 0x4, 0x10, 0x6, 0x1000}, {0x401, 0xa, 0x3, 0x4, 0x3, 0x6, 0x6, 0x2, 0xf, 0x4, 0x2, 0x7f}], 0x42}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, &(0x7f0000000240)={0xdb, 0x0, 0x8}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='cachefiles_link\x00', r0, 0x0, 0xff}, 0x18) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x3) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x3, 0x0, [{0x308, 0x0, 0x10000}, {0x811, 0x0, 0xbb4}, {0x851, 0x0, 0x79}]}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000000, 0x110, r0, 0x8000000) syz_io_uring_setup(0x615c, &(0x7f0000000380)={0x0, 0x1ece, 0x40, 0x2, 0x286, 0x0, r2}, &(0x7f0000000400), &(0x7f0000000440)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_OPENAT={0x12, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x8, 0x840, 0x12345, {0x0, r5}}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000500)={0x8, 0xc}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@multicast2}}, &(0x7f0000000980)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@delpolicy={0x64, 0x14, 0x100, 0x70bd27, 0x25dfdbfc, {{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e22, 0xfffd, 0x4e24, 0x85d, 0xa, 0x80, 0x80, 0x29, r6, r7}, 0x6e6bbb}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x64}, 0x1, 0x0, 0x0, 0xc80}, 0x8000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x4, 0x50, r8, 0x6796d000) socket$unix(0x1, 0x5, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r0, 0x4018aee3, &(0x7f0000000b80)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000000b40)={0xb98, 0x3}}) fsetxattr$security_selinux(r0, &(0x7f0000000bc0), &(0x7f0000000c00)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x1) read$FUSE(r2, &(0x7f0000000c40)={0x2020}, 0x2020) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002cc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x20, r10, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c889}, 0x8000) write$proc_mixer(r0, &(0x7f0000002dc0)=[{'BASS', @void}, {'DIGITAL2', @val={' \'', 'Master Playback Volume'}}, {'RECLEV', @void}, {'MIC', @void}], 0x47) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000003200)={0x0, &(0x7f0000002e40)=[@nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_load_code={0x12e, 0x67, {0x2, "66b8e7008ee0f042289004000000b9460900000f3266b8e9000f00d026430f73f4aeb805000000b9180000000f01c1440f01c8b96c020000b88d2ef343bad01497390f3066ba4000b013eef2677600"}}, @out_dx={0x6a, 0x28, {0xef3, 0x2}}, @nested_vmresume={0x130, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @nested_load_code={0x12e, 0x7b, {0x3, "b9220900000f3266ba200066b8c20066ef66ba6100b01cee48b80c000000000000000f23d00f21f835300000010f23f866450f38826b000fc72b440f011ceb48b8d39b5fba000000000f23d80f21f835000000e00f23f88fc800ee26b02e67460f01ca"}}, @code={0xa, 0x5f, {"66b82f010f00d0410f01ca66baa100b8211347e7ef0f72e402420f30660f388025cd24f73bc463f9601c070066ba4300ecc443e55f8a090000008bc74424001b010000c74424020f000000ff1c24"}}, @nested_create_vm={0x12d, 0x18}, @out_dx={0x6a, 0x28, {0x6273, 0x4}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x280f, 0xebf, 0x1, 0x1}}, @nested_vmresume={0x130, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x0, 0x10001}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x46, 0x5, 0x5, 0x5}}, @uexit={0x0, 0x18, 0xffffffffffffff98}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x2010, 0x1, 0x4, 0xfffffffffffffff9}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x8}}, @wr_drn={0x68, 0x20, {0x5, 0x7}}, @code={0xa, 0x60, {"c744240082230000c744240200800000c7442406000000000f011c24c4a3457869324166b871000f00d84a0fc76c000036660fb4b9ad833a63f3460f1eedc4e1bdfe12dce7360f781266b832018ec0"}}], 0x3a9}) ioctl$KVM_GET_SREGS(r11, 0x8138ae83, &(0x7f0000003240)) 34.44400903s ago: executing program 6 (id=3327): pipe(&(0x7f0000000080)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0xd3015ecdf910ee12) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r3 = syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x100ba7) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040084}, 0x84) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r5, &(0x7f0000003840)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xe1e6}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x29, 0x39}], 0x10}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0xa388}}}}}}}, 0x0) 28.916678333s ago: executing program 6 (id=3338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg(r6, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000640)=""/85, 0x55}], 0x1}, 0xc}], 0x1, 0x10022, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES32=r7, @ANYBLOB="040081000a000600080211000001"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) (fail_nth: 3) 27.867873946s ago: executing program 6 (id=3342): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c00070000000000000000000800090071000000070006007272000008000800"], 0x54}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0xfffffffc, 0x3, 0x0, 0x5, 0x800, 0x0, 0x1003}}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r5, 0x89a3, 0x0) 13.602190197s ago: executing program 1 (id=3381): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffec00000000000000000000000000010ff020000000000000000000000000001"], 0x340a) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x3, 0x0, 0x2, 0x9c00}}}, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x21) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000001d007b000000070256cc0e00"/37], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.546225507s ago: executing program 35 (id=3342): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c00070000000000000000000800090071000000070006007272000008000800"], 0x54}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0xfffffffc, 0x3, 0x0, 0x5, 0x800, 0x0, 0x1003}}) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r5, 0x89a3, 0x0) 11.484302005s ago: executing program 3 (id=3388): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x82}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c1000000000", 0x53}], 0x1) 11.174084104s ago: executing program 1 (id=3389): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0x1}, {&(0x7f0000000040)}], 0x2}, 0x0) recvmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/120, 0x78}], 0x1}}], 0x1, 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)={0x620440, 0x0, 0x22}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ce) openat(r6, &(0x7f0000000000)='./file0\x00', 0x401c2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000001000)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa4) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0x40) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=r6], 0x0) 10.727487717s ago: executing program 3 (id=3390): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0x1}, {&(0x7f0000000040)}], 0x2}, 0x0) recvmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/120, 0x78}], 0x1}}], 0x1, 0x0, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)={0x620440, 0x0, 0x22}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ce) openat(r6, &(0x7f0000000000)='./file0\x00', 0x401c2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000001000)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa4) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0x40) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX=r6], 0x0) 8.410245209s ago: executing program 7 (id=3393): socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) syz_socket_connect_nvme_tcp() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x10042) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000002400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x107, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x24004080) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sched_setscheduler(0x0, 0x6, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x4a}) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) 7.945508206s ago: executing program 1 (id=3396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/142, 0x8e}, {&(0x7f00000000c0)=""/216, 0xd8}], 0x2}, 0x80}, {{&(0x7f0000000200)=@l2tp6, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/56, 0x38}, {&(0x7f00000002c0)=""/16, 0x10}, {&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000300)=""/7, 0x7}, {&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000700)=""/201, 0xc9}, {&(0x7f0000000800)=""/142, 0x8e}, {&(0x7f00000008c0)=""/246, 0xf6}], 0xa, &(0x7f0000000a80)=""/204, 0xcc}, 0x240}], 0x2, 0x2121, &(0x7f0000000c00)) (async, rerun: 64) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) (rerun: 64) 7.58285696s ago: executing program 7 (id=3397): unshare(0x24020400) socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 6.995573993s ago: executing program 2 (id=3398): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x5, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000780)={{0x4, 0x4, 0x6c0, 0x8, '\x00', 0x1}, 0x0, [0x2, 0x8, 0x7, 0x8, 0x4c64, 0x0, 0x9, 0xa2b, 0x300000000, 0xfffffffffffffffd, 0x4bed, 0x400, 0x1, 0x17df40000000000, 0x8000000000000001, 0x5, 0x4b, 0x10001, 0x0, 0x8, 0x21b5, 0x101, 0x9, 0x8, 0x1, 0x3, 0xda8, 0x2, 0x800, 0x7e, 0x1, 0xff, 0x2, 0x5, 0x9, 0x8000000000000000, 0x3, 0x5, 0xb9, 0xfffffffffffffff9, 0x59a, 0x3, 0x0, 0x9, 0x7fffffff, 0x9, 0xce4d, 0x9, 0x0, 0x3, 0x3ff, 0x6, 0x7, 0x7, 0x9, 0xb37b, 0xea5, 0x10001, 0x1, 0x869b, 0x2, 0xffffffffffffff60, 0xe9, 0x0, 0xcc40000000000000, 0x0, 0x7, 0x4, 0x7ff, 0x2, 0x5, 0x8, 0x1, 0xffff, 0x7, 0x4, 0x7fffffff, 0x8, 0x35, 0x1000, 0x0, 0x1, 0x3, 0x2, 0x5, 0x0, 0x5, 0x6456, 0x6, 0x1, 0x8000, 0x9, 0x7, 0x5, 0x8000000000000001, 0x3, 0xd, 0xffffffff, 0xd3, 0x3, 0xd, 0x3, 0x81, 0xfffffffffffffffe, 0x4, 0x40, 0xffffffff, 0x9, 0x98d8000000000000, 0x1, 0x7, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x6, 0x283, 0x3, 0xfffffffffffffffe, 0x9, 0x7f, 0x5, 0x4, 0x9, 0x8, 0x100000000, 0x8]}) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r3) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf250100000008000200010000ef08000100", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000000c0)={0x1, 0xbef}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 6.744246298s ago: executing program 3 (id=3399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x82}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c1000000000000000", 0x56}], 0x1) 6.292055754s ago: executing program 7 (id=3400): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18d63142470000000700000000000000f5ffffff94000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1, 0x0, 0x5}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, 0x0) eventfd2(0x8, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r5 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000080)=0xfff, 0x4) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(0x0, r8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) 6.143840958s ago: executing program 2 (id=3401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r3) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r5, 0x11, 0x66, 0x0, &(0x7f0000000480)) mq_notify(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x36, 0x0, @tid=r2}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_fuse_handle_req(r3, &(0x7f0000002100)="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", 0x2000, &(0x7f0000004d80)={&(0x7f0000000540)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x320, 0xffffffff80080200, 0x2, 0xf43b, 0x12b9, 0x0, 0x0, 0x0, 0x80, 0x5bc}}, &(0x7f0000000140)={0x18, 0x0, 0x4, {0x7}}, &(0x7f00000005c0)={0x18, 0x0, 0xdd3, {0x101}}, &(0x7f0000000600)={0x18, 0x0, 0x2}, &(0x7f0000000780)={0x18, 0x0, 0x9, {0x7}}, &(0x7f0000000800)={0x28, 0x0, 0x200, {{0xfffffffffffff67c, 0x7df0, 0x2, r2}}}, &(0x7f0000000880)={0x60, 0x0, 0xf, {{0xfffffffffffff800, 0x2, 0xf, 0x401, 0x0, 0xb, 0x4, 0x8001}}}, &(0x7f0000000900)={0x18, 0x0, 0x80000001}, &(0x7f0000000a80)={0x1a, 0xfffffffffffffff5, 0x7, {'/dev/ptp0\x00'}}, &(0x7f0000000ac0)={0x20, 0x0, 0x0, {0x0, 0x2}}, &(0x7f0000000b00)={0x78, 0x0, 0xc5, {0x9, 0x0, 0x0, {0x3, 0x800, 0x8, 0x3, 0x5, 0x1, 0x4, 0x8001, 0x80, 0xa000, 0x6, 0xee00, 0xee00, 0x1ff, 0xedd3}}}, &(0x7f0000000bc0)={0x90, 0x0, 0x3, {0x2, 0x3, 0x8, 0x3, 0x0, 0x3a2, {0x1, 0x6, 0x9, 0x8, 0x8, 0xad11, 0x8, 0x10001, 0x79, 0x1000, 0xdc, 0x0, 0x0, 0x4, 0x3}}}, &(0x7f0000000c80)={0x58, 0x0, 0x2, [{0x3, 0x7f, 0xd, 0x9, '/proc/mdstat\x00'}, {0x6, 0x8000, 0x1, 0x5, '.'}]}, &(0x7f0000004580)={0x5c0, 0x0, 0x7, [{{0x5, 0x1, 0x6, 0x0, 0x81, 0x6, {0x1, 0x6, 0x5f4b, 0xa9, 0x8ed5, 0x1000, 0x9, 0x2b7, 0x7, 0xc000, 0x4, 0x0, 0x0, 0x1000000, 0x7}}, {0x1, 0xfffffffffffffffb, 0x0, 0x8}}, {{0x6, 0x2, 0x0, 0x1, 0x8, 0x9, {0x1, 0x8, 0x100000000, 0x8, 0x9, 0x400, 0x6, 0x7, 0x4f, 0x4000, 0x6, 0x0, 0x0, 0x100, 0x10}}, {0x1, 0x7f, 0x5, 0xf, '%[(.]'}}, {{0x2, 0x3, 0x1, 0x6, 0x9, 0x9, {0x1, 0x3, 0x8000000000000001, 0x3470, 0x5, 0x0, 0x7, 0x5, 0x8001, 0x8000, 0x6, 0x0, 0x0, 0x6232, 0xa}}, {0x6, 0x0, 0x1, 0xc0000000, '%'}}, {{0x3, 0x1, 0x7, 0x80000000, 0x101, 0x400, {0x3, 0x5, 0x0, 0x7, 0x4, 0x4, 0x9, 0x3, 0x3, 0x6000, 0x7, 0x0, 0xffffffffffffffff, 0xd, 0x6}}, {0x2, 0x10001, 0xa, 0x6, 'syzkaller\x00'}}, {{0x4, 0x3, 0x3, 0x10001, 0x9, 0x6f, {0x5, 0x3, 0x1, 0x1, 0x7, 0xfffffffffffffffd, 0x3, 0x7, 0x8, 0xc000, 0x8085, 0x0, 0x0, 0x10001, 0x4}}, {0x2, 0x689, 0x4, 0x7, 'GPL\x00'}}, {{0x4, 0x1, 0x1, 0x1a6, 0x240, 0x6, {0x1, 0xfffffffffffffff7, 0x0, 0x6, 0x2, 0x0, 0xfffffffa, 0x0, 0x7, 0x1000, 0x401, 0x0, 0xffffffffffffffff, 0x4, 0x3}}, {0x6, 0x6, 0x8, 0x5, '\'^/(^+{.'}}, {{0x3, 0x0, 0x0, 0x7, 0x7, 0x9, {0x2, 0xd, 0x2, 0xffffffffffffffff, 0x4, 0x4cb5, 0x7, 0x10000, 0xfffffff8, 0x4000, 0x7f, 0x0, 0x0, 0xc, 0x3}}, {0x6, 0x7, 0x2, 0x4, '-;'}}, {{0x4, 0x2, 0x6, 0x45d4, 0x4, 0x8f, {0x5, 0xbc, 0x80000001, 0x230, 0x2, 0xd, 0x2, 0x3, 0xbf, 0x1000, 0x6, 0xffffffffffffffff, 0x0, 0x1, 0x1}}, {0x6, 0xffffffffc4924525, 0xa, 0x6, 'syzkaller\x00'}}, {{0x4, 0x3, 0x5, 0x7ff, 0x4c81, 0xd8, {0x1, 0x0, 0x9, 0x1, 0x2, 0xfffffffffffffffe, 0x0, 0x80, 0x8, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x1000}}, {0x3, 0x9, 0xa, 0xb7, '/dev/ptp0\x00'}}]}, &(0x7f0000004b40)={0xa0, 0x0, 0x1, {{0x2, 0x2, 0x4, 0x4b, 0x4, 0x1, {0x6, 0x636c, 0x6, 0xc5ec, 0x9, 0x4ca7, 0x8, 0x0, 0x5, 0x1000, 0x101, 0x0, 0x0, 0xd, 0x5}}, {0x0, 0x2}}}, &(0x7f0000004c00)={0x20, 0x0, 0x7fffffff, {0x7fffffff, 0x0, 0x6, 0x1}}, &(0x7f0000004c40)={0x130, 0x0, 0x1d87, {0x101, 0x7, 0x0, '\x00', {0x1, 0x7f, 0x3, 0x9, 0x0, 0x0, 0x4000, '\x00', 0x2, 0xc0, 0x401, 0x8000000000000001, {0x6, 0x196}, {0x8, 0x9}, {0x7fffffffffffffff, 0x5}, {0x7}, 0xb36d, 0x8, 0x0, 0x8ee}}}}) getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_UNLINKAT={0x24, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00'}) 6.143406809s ago: executing program 1 (id=3402): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) write$vhost_msg(r1, &(0x7f0000000840)={0x1, {&(0x7f0000000780)=""/129, 0x81, &(0x7f0000000580)=""/120, 0x3, 0x3}}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000749632bac97078a600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3, 0x800000}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18ebafd936040047f4020000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd85000000", @ANYRES32=r4, @ANYBLOB="0000000100000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT=r3, @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0xc5, 0xa, &(0x7f0000000000)="2ecb1ee8fcc011a36d495f00102b5393ba387c6f5bd2102f0d8e4505805bea76179d3a3c6640e369857f8ea55219a349c8cbbaa6a9772016e6125f0f108d148ea385bd1b8bd483dc78998215f1e0e370eed2894a279c9bda08ba0920ffea38116703d009d37b1967127da913c15b453bbb1281e5d01cad5af4fafa94fc53749882600bf36641a67680119723d02c42d1f4f8c5ea33b6734a83ba52e07d8c58baa9da0d2268ee753a964505af16b758e8c364af5983d48ab0e3627b6d671f104c541199261a", &(0x7f0000000140)=""/10, 0x5, 0x0, 0x1000, 0xef, &(0x7f0000000ec0)="25e47c3a3040dad06055d4d6ec24eb44687f88d0799ac28223a5318ff6fd689c60b0875d2512e4d2ab504dba17b2bdf15403a915f36ec525c27835ef14576ba0634afb977b6625cd25fd0687b430cc5d288955085f508c5455627059fd105c4a64ff625aecc8db5acd88ceb92d0e7860a703f96d374ebe099eee612fa56d4530616f1cf0b22c2231e6616fcd719c44760e524824b5ca62ab7694cc356014e915d06de4b3063b47c51bc1ffb60ee8a022d13cdff2c8789d81906f9b7527d77dbe28ed8848728b662c6e537912905157167e10102737405bb5d054b32f0c964f974959737ce2f3036cda8474c2fb91cbdc2ce5aaba106e18942394608205a49c74f37e8919bda6f4000c155cb20727640a797294fe4d00fdd53a3fb95e20654fc4184eea06f5ea24eaa14095a849d54d7789ce5bd7125c443afda0c8425ca443e6ce1f1de7aaa7d5fa811686fa031f3403251b00fe024cc957b77c6b562cf5a4491863011b466d188592138bdc3decaeb9476a52638fcdfd0cc5ca5a7a11bf34a44cd52570769c7f3c274f0cfcecadf30b5e2c8d04ec733dc69f30c170dd9df0d73047cfb77f87db92b805d9d2b5bcfe5f2c6ea72019461fb14b9b50a408278be9eb9df7859c4098b368a3cfaa86b4ec0c62aeaba3d4470f42a507d58f047035c805509a5a4ed4dc36be8b5ed32ef7cf60fe4d2a7c505e0d6a7e582d878357d607983f668f8a2d1c73891e8ff47e581935f754897d80ff4c6b811dad8082346a35fe72377f3103734858f49199dbadbd0a6ef35b0d6fe4605e80e74545be002e363aed7db45be7e7f51d5f1b35aa7bb48f3ae0b944011f15e01edb2b4a6c617159e8a256313edc1d29ad8b53577b17390cc9a0337bb508f03b2ac4a282daa6890f69cfc7777674a0a85d1285722cceb188a8f5eb19df3cc142b55d3e2053584e56555ac4086b124062c4a5b775a0aafa1861864f2e080bdc30f5295ed7e31206635f8fc993e9f5a1ec3a19547eb3818832ece40a2ed35a4937a2c9d27518cce54d7b7e9e5dcff679f6a414d4472b49e6431b4d744f24b18052ca8bc0bee7170d9fcde30030b89723282c7d0f3c6f2379a84378312f0727aeace32493b6ccfc1742227f9cfc09e62bbabefb303dd1da4be8460e996fbf8db9449d0b239e302a440664e1703d0172503be3f4a941d68add5a1be4a78d22737b0a8a7de121d946f0a80ec4f977eaf62021f57b8d3372d16cebcc7ca0a3323cb2576866e974bdcbdc525ab3a72966d9f2917bc06cec57271d12ddc5a7d9d3bbae9d492555e11670b47fa8c6dd95c1b53743583b574140885b73725658c7543469f7df2ffce36b45f3127c63a1959c20906e4481069bc491cc4ecdb1f35861e60266b79493663de726d408125581ca53977186aec6bf230bd7447a08838bd10cbc19276585b2e51b21168bea05f4d7ff443957a35d767ae6773a0e75041a77d7486ec47d221764fb0d64453afdcd6fa0db164fb2cf1a6ab90879f0ce2370441829d1c2948a34ad07a25039e169e8449cc478cffbdf5195ff8b43538e5ec09b0eddcf94107c2d98ac91769a827431bb3fe704281972607af27ce8fc97417a763761a23fa2fb1068dc076a5d04fcd2a7a6840b4cf9ffc5217ad54a45b6c0160dc7387379c1052bed865d58005a7902c1bab0cbfd645aff5dca00ef5f610adfb5d695561e8485c4a3b1e24315c98897a3725e1682338777fba451bcb3afdf569e8c5cbb33e603e0414da0351d952969cc018f5f793d06c034ee70cecaf32b34be8c954ccfc5ce191771622d9e3f10ee9d116f80bfdedb255cdf34829cda190effb3303962b57a40888149d6cad708ed1019c4838819fbd599ec2dfa495069d128b9d87ee02227e7e74f0783f88f2bf267bd0fcde597dcb57e944bbd9eae318d99c4ee8e038fb9c769a39f592654bf1658bf37094ca34dec501254d4eecbb27c5969ecca28bcd03f5d91359f6799944a61a2f1209d6fe0cdeab3c54d79f774bc6060ea21166f9830ef6681392bb6f3c2895e021b682203dbb5cbe0793da7e89c763cc53b49df8534464e730eb359d9f5d5d5f88bd1acb7f8950f9caec0b66cbad356c9c77d6ca74442d7f7ac705bd9462f911ed87ba0d25b085f607efbc46ffd247b9fd984ce1f1c31e96e1995a789ece9f5cfed8727060fa273e4d483f706652307094fb0bbc2466b50f2b0e63e70b52f902274bb69513ed254cf1688bd306ad412807c171c7f38bdc0c0360c9ed23424bf2b5e2ca6e14af2be93818b7b1afdff24d736326b49c2d09fabd6a8a4a2098dddfd4532600534ade0ddadce2a6f37eea02efb866fbbb1e85e779a0fec99221d35803b7cf7d73af8650b256d8a0ad8638a73b4b527a48ed58d04ff2fe2dfb85824d8ba1cf6c12d2f7ba9d5c889768fd0662d972ce54f9b8846417afcb1d9a3db5d40ee54bc3fff27c2366fa6f5d44f2c3777372ecdbc20d49c7afab3bd891460586115c17d32c9bf18213d623171e70d6704979a81ccbfe165b760d974c730b8d5469c3ddecd7de731d9ce7b9f873fc27e4bee710debaac084b6fa9d0b8ea9d7821e8c823833bdebbc0ca55fc5940e418b4b565bbe4a928c738aedacb127fd6c6471f9ba1edcb4262d8f8a2938d290c0ba0bfa23fbc0f8bb54eb32c09c69b80e6fa596150d91a6a1042147b0c1b2a2bdbe1760fbada08eb5f6b6a884d7187f50b323b6158244549e1658c0ea78bec2dcf5b3615ea4dfbe8affe903b4997d71967357594b92dc2222204ba2ad6070787c46b3db49d6bd2bd1ced4cf2a87a0ce4f0870793a79d2a0aedc1b3046ae2e330dc72869ab24fb9c915c629e093a4035f11e5815a70e9ba7d499eaf3f12779ea744b7a788559ad222f41524df356f3fb4510836db99d5d818ac2dff508c2103d6c7d10907cc31313cc5b3f8d2854945c14bb0a1d9a290580ba5d3377b10ac66200a1499bf82a7d7694e2697d00390bc49f5f64c7f62d1952f2ecf185b21bae4b780b3df6c8d93a0d9d95472432b324bc8590a793212a0a626ba0296f29c7028dc017be5652d754fcf793b507852077e132df32d2c94cec73e2850d3e65b441ed92d1303bd394ba01145e4c655fbdace2810754e0083feed17d1e81757ecf967d966ea98ac49554adc2cdf6f4465069fd567a8ce53c4f0a6b0baf7ca2fa99be8f6f7d04f7e9f52bbafe25762a1ce0d04b698e03a560825ff4029c81cf291313a4bf65d20d3c4c9c7035d8981ad6d0dfd10f4d05966e4787dd9dd8161ad76ae6c46272a7af520939e5c8cc3ddba6e166ec9bac6c654cbbc33ad603cae582fca4c0948cf238eb574ad91d3457e6343a1e27ba61b70a192bf33c8fb620ccae7220192ca4f6fe49c2edfbb8aa4ccafa794b6721bea87bd59557223f7763c2c3b9f2e73bd17f19a00cd5cbe6229ac77bb871da0fdea3418e869540b9043915cd1a2fb86c7e358d9113df78e66d73b9f08cb1ad5203caea59b048e12fa3e9769d324d6d9d8d0178dbc838aa2669514211e887a5ec3c04bf98553bf6b2e315a6b6f9f326bb6eda8893dddec061c257017913190e42933419792e49c9d057e661a3dba2ad411cef61493f40eaf4eba03668a785a91717be1da0196fbf91807b467a46495c18c2294f6d2c7258ac71a840a1783835ccd2ece12924aae7c2e4fc838ad41573b4c316178a4758549638a1d420c33196deeca29a4786fe1e730828490eae24937235d93c63c64d227ee1041322a16d6629af11b09ca64478bd979f558c0bb7b7e4314e243fe8a9237d7e048b16581607a245ee1942a58d8f281a9a4bd2411b717b587a9c6b0bfd2a232281394ed8decf18d1462cbbab66d264d7f225d49fd82ab990fa92c494bee67676c71c29c1eed3fe442023a3e62ba44a50d87b09147647bdab925797ec51328967eb9bc72dda2606ee40a4d47f50c0466f01bcb6bb00abe072cf07ad34305e281cbd451e4fbe23b495fcf8a13811bd0975601e05ff241c17c1a182b2f4c7318c8775c297e444a0d6a4a8669f78977d072814a3da6007a8b2d1cad5d654dea80c390e19635b207e02b7697799ea3c5bf11808cae73367f1fbb1fadee6e4f733f60c22fe19ee7f34e078cb4784eaa3eafb95fcdb7d0965d0d9d05f64bad58c0c44fb734637f2f7526451969be00222802648648787bb19aa94957ed9718c7fabc48000cf86f169d6d2326393c85f488ce143ef2fab6ff10a730fd08feea9a61e7cb1a1ec9f2006f9e8620bcf281cb7fd5dd9388bd61ca929a47d5dc03078b112c7e41754337aee852661ec21dd2c2c0b36c27cb9b5f6e547a53c7cd1b8b4f7362db929f149676853afaa5d28b7f6165f0212935a786cbd5bb0b60ed8c0d9e238275ab872078da410581c8139d8eeea7915a22e2bbb8a0bff0eb12c3b437d38f83f5e298eb6f36e493ce7eb4404201eaf00f29bb2f40608619bf219b2b7dad43047924e70716ddd7f08b9ce9af856a388b472529d44634a97f60ac83973f6434f5ba4d69d53b63e32a3c5b2888864bc4ff0417efe1b4c66ab167a6820e33957b8b8c81c844ab851f797362fc6606fabf3b3ecc90e7dab84db0bab6fc6591581c76ee55612d019d61bba85c06c36322164b61b062ef757d7eb2b37864ab7d23f347b61644fe3ec234b6f9397a066be08da2c6230ea964fec6adea0fe572dda574f2db7fccb9294c6fe18eb68377c1e865c0d20dffd90229222e3a93d21bd75dc8cd6ca2ebd1c663fbb9fd1d9b1beeb7e2c88ffd5c2877dd562bbea731826292174e1003df65895b012ee4e5501ba933e7f68411bdf49b79f4fbc0bee9878347f46ccbd38ba02b229bcf798eabbebc898dea6a8b0546f9689f541a93b818ebf8730102934e9828903213c9f7067b10b744a787047b0fd5b5ff1046d9b89dc670dc989ff5be2593bcb686380f1020a1f9549d1c09304b8b2a94ca9911516aa58a3a1ffd6ebe3fcfddf6554d7f3f3b1fdff7d5c6ac1d41b36eaafec19e97a41c33f665f2a613d20efa93c3cc1d3674dd952667de0e9ec0afc97b8e0ed6d082de669cd5a2c31b7dbff25be9d4134c6b6766738931de7a83b839f390de97b56e0233c020daf0c7e1e971c7a84ef78663d747239660f5505d9c590e439fd92092a70fe4511a054093c7503fbc3a80b5144523557375ebaf3ec3edd554e6a200db6b2ca6b3891326447b20a4ef91933a68f8e9381595f17b026bf0eda730571aa94cd00bf385e1ab8e214a7e112c2e3146f79399cd33e54ef748e8811d269dbb4e4ea04b4a9a2fefda46ca49bd8efb19faafb160dbb24b150e8629d665b7d33a9dddf50dcdb1f3105719632b205782b0d6d4ee15813527330464795d6701c1067eaf44d5b213208158b59698d759ea172dffe132fa7de287d8a879bc0b7a5e2b6a1a4920b2e996533a55cf42fee10b4ce78d8d91db9243baf625fdb306a0d088edb383dd51dea2fb8c2119f59bfcd55b2890288f31e14dd04d5f68247b20b3a30387da9ee9bcb5f39f1fd11ff77d09ef9c8334a2aa7428aea5828e0e19cc1ff392b9ca2630f33294c88b33cf641b7a29d2b3c0ed88c178fc387d9d4eef8373bf11b6b1b6a4b881c3417667badac4cb72f9613f989bf0e20a136b77662cb86da093d91ed1a9d1134ad8525a07760276b964723696cf5c48148b543bb61a6c78729d42941e3cbf4dfb303121f94ff45381e7176bdf6848c74a19bfb8b735b41f9baccf47ff182483cf6b94a68d175e083c1725e3fc6cb68e20570ea4b6dfa11287edaecc79c2f03c181", &(0x7f0000000180)="ff41a9a8edd536ed63ccc19e1ee64fa89ec003275e261b7ad8f4a50738ac41c52f075d00ba8bdab6993fdfbe4aefacc08b72a9489776c868e81d8051fef37f32bf098572880a8ae426cf84b7693689b5f2ede4d8cbdf3100a557d9f966e97de77d23d087b6af93d43680f7dc64cf27ed49dfbd0e83c1683f1c879996ad5aa35458de709d79658ea58279a18df6faa84ab4ab3e56e1a095580b2913175d1739b33a0ad7d71f5c73e82479570421eb637befe281352148128fa1fe2829c9fac091b57bda6d16b867ab9b42e2a5057311ed929a70f0cdeb7236f6559f4456b642dc9d363e5569330590522fd738b08442", 0x1, 0x0, 0x88}, 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000040)={@mcast2, 0x2, 0x1, 0x3, 0x2, 0x0, 0x8}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'caif0\x00'}) 5.092614769s ago: executing program 7 (id=3403): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000280)=""/232, 0xe8}, 0x0, 0xb}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) 4.954964246s ago: executing program 1 (id=3404): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000280)=""/232, 0xe8}, 0x0, 0xb}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) 4.361702633s ago: executing program 2 (id=3405): r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x8, 0x4000) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000000), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000300)={0xffffffffffffffff, 0x40000, 0x2}) r11 = eventfd2(0x8, 0x80001) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000140)={r11, 0x7, 0x2, r10}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f00000000c0)={r11, 0x0, 0x2, r10}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x28, 0x0, 0x0, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) 4.337101035s ago: executing program 3 (id=3406): socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) syz_socket_connect_nvme_tcp() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x10042) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000002400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x107, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x24004080) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sched_setscheduler(0x0, 0x6, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x4a}) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) 3.598771798s ago: executing program 7 (id=3407): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x4, 0x4, 0x0, 0x0, @sint}]}) eventfd2(0x8, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000080)=0xfff, 0x4) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0xffffff7e, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r7) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) 3.21528768s ago: executing program 1 (id=3408): r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(r0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$sndpcmp(&(0x7f0000000180), 0x4, 0x402800) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, r7, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETMODE(r8, 0x4b3a, 0x1) ioctl$TCXONC(r8, 0x4b3a, 0x2) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f00000000c0)={{0x1, 0x2, 0x5, 0x3}, 0x51, 0x4}) 1.700152905s ago: executing program 2 (id=3409): unshare(0x24020400) socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 1.319895906s ago: executing program 3 (id=3410): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x6, 0x4) 1.186019634s ago: executing program 7 (id=3411): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x7, 0x6, 0xffffffff, 0x14dd, 0x0, 0xff, 0x1000000, 0x81}, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@local, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60100000023b510ba42ff13482864280a9c1f4eb5", 0x1, 0x0, 0x0, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) r4 = syz_clone(0x38800, &(0x7f00000004c0)="ce6c21ee23995e760cf0ea262d7a25d4bf336e15dd8906a93c2aacad74a32323c3b52bd251a39ddd44219b2111783adf475deaa4ff9ae8ad0f8d55b7230cb36fb26503fa7f23f3844c337fd18cdc2bbba78af943debdfa8c45d75cba1a8225228e6af7909981e888a9942e4334d16bfb17f7f9146826fb38194fd78df46d96a6cec667d30ab0e30b53ea260bb2d3b6939a66c53afb7b26660000000044ce65f2f3f72bee0510b76d3eeafd78feac767ad9bec8a1d724e4c4eb08e5a99b207dbf6775e783006b2db9b120b211b45e91364a4893b3", 0xd4, &(0x7f0000000280), &(0x7f0000000480), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x4010, 0xffffffffffffffff, 0x0) unshare(0x22020600) syz_io_uring_setup(0x1614, &(0x7f0000000400)={0x0, 0x7749, 0x80, 0x1, 0x1352}, &(0x7f0000000200), &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000006c0)=ANY=[@ANYBLOB="66643dd9870c20c5f77681d718b7d82bfeb5a20d4b50bea1c073adb0593686269d44f8fadd285274641d04bdb97f239cf119159992faf2e0e2db77f81d75178d74e5927d29a6ca41c4bd269abffee24f9b366a64cbaf1d7ee8ab66d87742d52cfc2b1609493dbf7d29b56a06cdec75298d5896ede92c60d59d9a1a0a885fc0d347a86e373b4fafcb8b8d494867730801f54cc6a3faad175679", @ANYRESHEX=r5, @ANYBLOB, @ANYBLOB="5244e55f23c5e31cb9068268e5dfc0d498dd8608a37843f3f15dac5a5ff6f17e4cfb342c65472cf1282150c728a41d5ab09fd2be46b93e9edd0bedf61eb590e43e3faa316e5699a853ebdbd053057ec606ab652ae5cbb1e789de125bc9c11c687e02e765d2713cd125777cf78a5d85c7ce73cff07d47d306813f81db21d47471c25df7791f9b0643dba004910538a2f87efa74d4a4cd89187b15e6d2721a", @ANYRESDEC=r3]) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60122d9200103afffe8000000000000000000000000000bbff0200e1e3edfa57000000000000000000000000018800907801010000ffffff"], 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x18c) syz_open_procfs(0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) r7 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5202) 971.641563ms ago: executing program 2 (id=3412): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380), 0xa, 0x4004000}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000300), 0x2, 0x800) read$hiddev(r6, &(0x7f0000000740)=""/4096, 0x1000) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r7, &(0x7f0000000700)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1, 0x4782, 0x7) utimensat(r7, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}}, 0x100) 921.413998ms ago: executing program 3 (id=3413): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0x5, 0x34524742, 0x5, 0x4, [{0x8, 0x9}, {0x7, 0x9}, {0x3}, {0xd, 0x8}, {0xd, 0xe0}, {0x200, 0x7ff}, {0x2, 0x3}, {0xfffffffc, 0xa}], 0xff, 0x28, 0x8, 0x1, 0x5}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d0000090401010202"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x8, 0x446, 0x814, 0x2, 0xd, 0x1, 0x9, 0x0, 0x6, 0x1, 0x6, 0x100}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x6, 0x141102) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000000)={0xffff}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x8001, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1e8) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f0000000100)) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200) connect$802154_dgram(r4, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg(r4, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 0s ago: executing program 2 (id=3414): mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(0xffffffffffffffff) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_RMID(0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r8, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r8, 0x60}], 0x1, 0x0, 0x0, 0x0) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$TCFLSH(r6, 0x400455c8, 0x0) kernel console output (not intermixed with test programs): t_lost=398 audit_rate_limit=0 audit_backlog_limit=64 [ 1316.318231][T18626] audit: backlog limit exceeded [ 1316.324098][T18626] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1316.330585][T18626] audit: audit_lost=399 audit_rate_limit=0 audit_backlog_limit=64 [ 1316.345871][ T1316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.353047][ T1316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.402048][T11869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.409190][T11869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1316.601856][ T5962] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1316.647808][ T5962] usb 2-1: device descriptor read/8, error -71 [ 1317.186277][T18270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.200747][ T49] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1317.360209][T18270] veth0_vlan: entered promiscuous mode [ 1317.388060][ T49] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 1317.423540][ T49] usb 4-1: config 0 has no interface number 0 [ 1317.429678][ T49] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1317.450557][T18270] veth1_vlan: entered promiscuous mode [ 1317.469082][ T49] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1317.496208][ T49] usb 4-1: config 0 interface 11 has no altsetting 0 [ 1317.513243][ T49] usb 4-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 1317.576055][T18270] veth0_macvtap: entered promiscuous mode [ 1317.582779][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.612754][ T49] usb 4-1: config 0 descriptor?? [ 1317.623100][T18658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1317.624552][T18270] veth1_macvtap: entered promiscuous mode [ 1317.663467][ T49] keyspan 4-1:0.11: Keyspan 4 port adapter converter detected [ 1317.702456][ T49] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 1317.710321][ T49] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 1317.748561][T18270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1317.923148][ T49] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1318.325810][T14885] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1318.337715][T18677] IPVS: Error connecting to the multicast addr [ 1318.349121][T18658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3079'. [ 1318.364759][ T49] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 1318.391780][ T49] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 1318.403824][ T49] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1318.423886][ T49] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 1318.427763][T18270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1318.438434][ T49] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 1318.506486][ T49] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1318.525670][ T49] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 1318.547354][ T49] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 1318.560314][T10341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.578759][ T49] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1318.600204][T10341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.678543][T10341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.711564][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3081'. [ 1318.722700][ T49] usb 4-1: USB disconnect, device number 58 [ 1318.758793][ T49] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1318.787137][T10341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.827565][ T49] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1318.884764][ T49] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1318.907294][ T49] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1318.923786][ T49] keyspan 4-1:0.11: device disconnected [ 1319.219229][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.252900][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.311158][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.320286][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.724825][ T30] kauditd_printk_skb: 786 callbacks suppressed [ 1321.724838][ T30] audit: type=1400 audit(1765683414.500:21428): avc: denied { execmem } for pid=18719 comm="syz.2.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1321.851728][T18723] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1321.861647][T18701] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1321.868174][T18701] audit: audit_lost=409 audit_rate_limit=0 audit_backlog_limit=64 [ 1321.876416][ T30] audit: type=1400 audit(1765683414.790:21429): avc: denied { read } for pid=18719 comm="syz.2.3085" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1321.899603][T18723] audit: audit_lost=410 audit_rate_limit=0 audit_backlog_limit=64 [ 1321.912704][T18701] audit: backlog limit exceeded [ 1321.917702][T18723] audit: backlog limit exceeded [ 1321.935405][T18723] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1321.942721][ T30] audit: type=1400 audit(1765683414.790:21430): avc: denied { read open } for pid=18719 comm="syz.2.3085" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1322.420695][T14885] Bluetooth: hci0: command 0x0406 tx timeout [ 1322.885479][T18739] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1322.885479][T18739] program syz.1.3088 not setting count and/or reply_len properly [ 1324.871510][ T789] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1325.291756][ T789] usb 3-1: device descriptor read/64, error -71 [ 1325.530787][ T789] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1325.600917][ T5962] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1325.687120][T14885] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1325.698058][T14885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1325.710780][ T789] usb 3-1: device descriptor read/64, error -71 [ 1325.720697][T14885] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1325.738574][T14885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1325.746287][T14885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1325.775446][ T5962] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1325.800681][ T5962] usb 7-1: config 9 has an invalid interface descriptor of length 8, skipping [ 1325.811018][ T5962] usb 7-1: config 9 has an invalid descriptor of length 64, skipping remainder of the config [ 1325.821482][ T5962] usb 7-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1325.836258][ T5962] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=1e.21 [ 1325.845531][ T5962] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.853686][ T5962] usb 7-1: Product: syz [ 1325.853821][ T789] usb usb3-port1: attempt power cycle [ 1325.857980][ T5962] usb 7-1: Manufacturer: syz [ 1325.868083][ T5962] usb 7-1: SerialNumber: syz [ 1326.098382][T18753] Process accounting resumed [ 1326.472478][T18777] chnl_net:caif_netlink_parms(): no params data found [ 1326.563912][T17412] usb 7-1: USB disconnect, device number 3 [ 1326.694881][T18777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.716915][T18777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.742714][ T30] kauditd_printk_skb: 573 callbacks suppressed [ 1326.742730][ T30] audit: type=1400 audit(1765683420.380:21969): avc: denied { create } for pid=18794 comm="syz.3.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1326.751104][T18777] bridge_slave_0: entered allmulticast mode [ 1326.774079][ T30] audit: type=1400 audit(1765683420.380:21970): avc: denied { bind } for pid=18794 comm="syz.3.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1326.796684][ T30] audit: type=1400 audit(1765683420.380:21971): avc: denied { setopt } for pid=18794 comm="syz.3.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1326.817325][ T30] audit: type=1400 audit(1765683420.380:21972): avc: denied { accept } for pid=18794 comm="syz.3.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1326.944444][T18777] bridge_slave_0: entered promiscuous mode [ 1326.954925][T18777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.962857][T18777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.971156][T18777] bridge_slave_1: entered allmulticast mode [ 1326.977481][ T30] audit: type=1400 audit(1765683420.380:21973): avc: denied { execmem } for pid=18794 comm="syz.3.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1327.064295][T18777] bridge_slave_1: entered promiscuous mode [ 1327.141584][ T30] audit: type=1400 audit(1765683420.660:21974): avc: denied { read } for pid=18795 comm="syz.1.3098" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1327.393481][ T30] audit: type=1400 audit(1765683420.660:21975): avc: denied { open } for pid=18795 comm="syz.1.3098" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1327.427355][ T30] audit: type=1400 audit(1765683420.680:21976): avc: denied { ioctl } for pid=18795 comm="syz.1.3098" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1327.469211][T18777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.488500][T18777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.498946][ T30] audit: type=1400 audit(1765683421.060:21977): avc: denied { read write } for pid=17848 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1327.539216][ T30] audit: type=1400 audit(1765683421.060:21978): avc: denied { read write open } for pid=17848 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1327.711291][T18777] team0: Port device team_slave_0 added [ 1327.723914][T18777] team0: Port device team_slave_1 added [ 1327.780739][T14885] Bluetooth: hci2: command tx timeout [ 1327.972439][T18807] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1328.346129][T18777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.384582][T18777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.483801][T18777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.625713][T18777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.660899][T18777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1328.729140][T18777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.969174][T14885] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1329.298706][T18777] hsr_slave_0: entered promiscuous mode [ 1329.317520][T18777] hsr_slave_1: entered promiscuous mode [ 1329.330776][T17571] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1329.341248][T18777] debugfs: 'hsr0' already exists in 'hsr' [ 1329.371442][T18777] Cannot create hsr debugfs directory [ 1329.530726][T17571] usb 3-1: Using ep0 maxpacket: 16 [ 1329.831608][T17571] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1329.872718][T14885] Bluetooth: hci2: command tx timeout [ 1330.917558][T17571] usb 3-1: config 1 has an invalid interface number: 102 but max is 0 [ 1330.931489][T17571] usb 3-1: config 1 has no interface number 0 [ 1330.960946][T17571] usb 3-1: config 1 interface 102 has no altsetting 0 [ 1330.984260][T17571] usb 3-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=51.e8 [ 1331.000776][T17571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.030753][T17571] usb 3-1: Product: syz [ 1331.034948][T17571] usb 3-1: Manufacturer: syz [ 1331.057151][T17571] usb 3-1: SerialNumber: syz [ 1331.190814][ T5987] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1331.314028][T17571] s2255 3-1:1.102: Could not find bulk-in endpoint [ 1331.350730][ T5987] usb 2-1: device descriptor read/64, error -71 [ 1331.357592][T17571] Sensoray 2255 driver load failed: 0xfffffff4 [ 1331.389239][T17571] s2255 3-1:1.102: probe with driver s2255 failed with error -12 [ 1332.773011][T14885] Bluetooth: hci2: command tx timeout [ 1332.791988][T17571] usb 3-1: USB disconnect, device number 60 [ 1332.852070][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 1332.852082][ T30] audit: type=1400 audit(1765683425.060:22109): avc: denied { execmem } for pid=18832 comm="syz.6.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1332.894625][ T30] audit: type=1400 audit(1765683425.810:22110): avc: denied { read } for pid=18832 comm="syz.6.3106" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1332.900690][ T5987] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1332.920894][ T30] audit: type=1400 audit(1765683425.810:22111): avc: denied { open } for pid=18832 comm="syz.6.3106" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1333.035203][ T30] audit: type=1400 audit(1765683425.960:22112): avc: denied { read } for pid=18832 comm="syz.6.3106" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1333.139027][T18827] Process accounting resumed [ 1333.146992][ T30] audit: type=1400 audit(1765683425.960:22113): avc: denied { read open } for pid=18832 comm="syz.6.3106" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1333.180802][ T5987] usb 2-1: device descriptor read/64, error -71 [ 1333.237765][ T30] audit: type=1400 audit(1765683425.970:22114): avc: denied { map_create } for pid=18832 comm="syz.6.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1333.268111][ T30] audit: type=1400 audit(1765683425.980:22115): avc: denied { map_read map_write } for pid=18832 comm="syz.6.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1333.319721][ T30] audit: type=1400 audit(1765683425.980:22116): avc: denied { prog_load } for pid=18832 comm="syz.6.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1333.360708][ T30] audit: type=1400 audit(1765683425.990:22117): avc: denied { bpf } for pid=18832 comm="syz.6.3106" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1333.390823][ T5987] usb usb2-port1: attempt power cycle [ 1333.500170][ T30] audit: type=1400 audit(1765683426.000:22118): avc: denied { perfmon } for pid=18832 comm="syz.6.3106" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1334.820743][T14885] Bluetooth: hci2: command tx timeout [ 1335.770107][T18777] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1335.846035][T18777] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1335.916671][T18777] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1336.083524][T18777] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1336.791633][ T5987] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1337.480870][T18890] 9p: Bad value for 'rfdno' [ 1337.867533][ T30] kauditd_printk_skb: 321 callbacks suppressed [ 1337.867549][ T30] audit: type=1400 audit(1765683431.500:22437): avc: denied { ioctl } for pid=18874 comm="syz.6.3115" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1338.004340][ T5987] usb 7-1: device descriptor read/64, error -71 [ 1338.031533][T18777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.076104][ T30] audit: type=1400 audit(1765683431.570:22438): avc: denied { ioctl } for pid=18874 comm="syz.6.3115" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1338.147712][T18777] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.177018][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.184224][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.220730][ T30] audit: type=1400 audit(1765683431.590:22439): avc: denied { write } for pid=18885 comm="syz.3.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1338.244035][T18886] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1338.244035][T18886] program syz.3.3111 not setting count and/or reply_len properly [ 1338.262467][ T5987] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1338.284631][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.291763][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.324195][ T30] audit: type=1400 audit(1765683431.760:22440): avc: denied { ioctl } for pid=18874 comm="syz.6.3115" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1338.484664][ T30] audit: type=1400 audit(1765683431.800:22441): avc: denied { write } for pid=18885 comm="syz.3.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1338.530272][T18777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1338.617259][ T5987] usb 7-1: device descriptor read/64, error -71 [ 1338.753045][ T5987] usb usb7-port1: attempt power cycle [ 1338.791682][T18902] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1338.792351][T18880] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1338.805022][T18902] audit: audit_lost=424 audit_rate_limit=0 audit_backlog_limit=64 [ 1338.820392][T18777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1338.834604][T18902] audit: backlog limit exceeded [ 1338.834681][ T30] audit: type=1400 audit(1765683431.800:22442): avc: denied { create } for pid=18885 comm="syz.3.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1338.937465][T18903] 9p: Bad value for 'wfdno' [ 1339.188667][ T5987] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1339.484666][ T5987] usb 7-1: device descriptor read/8, error -71 [ 1340.558247][T18917] Process accounting resumed [ 1340.900805][ T5987] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1340.949444][ T5987] usb 7-1: device descriptor read/8, error -71 [ 1341.094016][ T5987] usb usb7-port1: unable to enumerate USB device [ 1341.212221][T18777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.880662][ T30] kauditd_printk_skb: 199 callbacks suppressed [ 1342.880677][ T30] audit: type=1400 audit(1765683435.510:22598): avc: denied { execmem } for pid=18930 comm="syz.3.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1342.979140][ T30] audit: type=1400 audit(1765683435.870:22599): avc: denied { read } for pid=18930 comm="syz.3.3123" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1343.060754][ T30] audit: type=1400 audit(1765683435.870:22600): avc: denied { open } for pid=18930 comm="syz.3.3123" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1343.149877][ T30] audit: type=1400 audit(1765683436.020:22601): avc: denied { read } for pid=18930 comm="syz.3.3123" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1343.300798][ T30] audit: type=1400 audit(1765683436.020:22602): avc: denied { read open } for pid=18930 comm="syz.3.3123" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1343.768910][ T30] audit: type=1400 audit(1765683436.050:22603): avc: denied { map_create } for pid=18930 comm="syz.3.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1344.080710][ T30] audit: type=1400 audit(1765683436.060:22604): avc: denied { map_read map_write } for pid=18930 comm="syz.3.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1344.185269][ T30] audit: type=1400 audit(1765683436.090:22605): avc: denied { prog_load } for pid=18930 comm="syz.3.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1344.256702][ T30] audit: type=1400 audit(1765683436.090:22606): avc: denied { bpf } for pid=18930 comm="syz.3.3123" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1344.313819][ T30] audit: type=1400 audit(1765683436.090:22607): avc: denied { perfmon } for pid=18930 comm="syz.3.3123" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1344.416471][T18947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3126'. [ 1344.892776][T18777] veth0_vlan: entered promiscuous mode [ 1344.934707][T18777] veth1_vlan: entered promiscuous mode [ 1345.079785][T18777] veth0_macvtap: entered promiscuous mode [ 1345.120575][T18777] veth1_macvtap: entered promiscuous mode [ 1345.184826][T18777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.244163][T18777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1346.217977][ T1316] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.412800][ T1316] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.436195][T18957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3131'. [ 1346.450177][ T1316] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1346.477621][ T1316] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.491361][T18966] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1347.491361][T18966] program syz.6.3127 not setting count and/or reply_len properly [ 1347.959823][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 1347.959840][ T30] audit: type=1400 audit(1765683441.590:22763): avc: denied { read write } for pid=16911 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1349.600059][T18990] Process accounting resumed [ 1349.609879][ T4180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.701976][ T4180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.704683][ T30] audit: type=1400 audit(1765683441.590:22764): avc: denied { open } for pid=16911 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1349.774634][T18982] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1349.774634][T18982] program syz.3.3136 not setting count and/or reply_len properly [ 1349.802108][ T30] audit: type=1400 audit(1765683441.590:22765): avc: denied { ioctl } for pid=16911 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1349.851046][ T30] audit: type=1400 audit(1765683441.660:22766): avc: denied { read write } for pid=17848 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1349.863550][ T4180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.886270][ T30] audit: type=1400 audit(1765683441.660:22767): avc: denied { open } for pid=17848 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1349.913134][T18996] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1349.915678][T18997] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1349.919693][T18996] audit: audit_lost=440 audit_rate_limit=0 audit_backlog_limit=64 [ 1349.928068][ T4180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.935964][ T5822] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1349.943186][T18997] audit: audit_lost=441 audit_rate_limit=0 audit_backlog_limit=64 [ 1349.965443][T18991] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1350.110928][ T5822] usb 7-1: device descriptor read/64, error -71 [ 1350.370924][ T5822] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1350.531839][ T5822] usb 7-1: device descriptor read/64, error -71 [ 1350.970718][ T5822] usb usb7-port1: attempt power cycle [ 1353.282494][ T30] kauditd_printk_skb: 204 callbacks suppressed [ 1353.282509][ T30] audit: type=1400 audit(1765683446.920:22953): avc: denied { mount } for pid=19023 comm="syz.3.3146" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1355.276221][ T30] audit: type=1400 audit(1765683446.950:22954): avc: denied { create } for pid=19023 comm="syz.3.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1355.298705][ T30] audit: type=1400 audit(1765683446.950:22955): avc: denied { setopt } for pid=19023 comm="syz.3.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1355.326388][ T30] audit: type=1400 audit(1765683447.020:22956): avc: denied { allowed } for pid=19023 comm="syz.3.3146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1355.349817][ T30] audit: type=1400 audit(1765683447.020:22957): avc: denied { create } for pid=19023 comm="syz.3.3146" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1355.373141][ T30] audit: type=1400 audit(1765683447.030:22958): avc: denied { map } for pid=19023 comm="syz.3.3146" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=75696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1355.400312][ T30] audit: type=1400 audit(1765683447.030:22959): avc: denied { read write } for pid=19023 comm="syz.3.3146" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=75696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1355.426661][ T30] audit: type=1400 audit(1765683447.040:22960): avc: denied { read } for pid=19023 comm="syz.3.3146" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1355.482207][ T30] audit: type=1400 audit(1765683447.040:22961): avc: denied { open } for pid=19023 comm="syz.3.3146" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1355.524091][ T30] audit: type=1400 audit(1765683447.040:22962): avc: denied { ioctl } for pid=19023 comm="syz.3.3146" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1357.147212][T19052] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1357.147212][T19052] program syz.7.3153 not setting count and/or reply_len properly [ 1358.260982][T11292] Bluetooth: hci3: command 0x0406 tx timeout [ 1358.371544][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3158'. [ 1358.697947][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 1358.697965][ T30] audit: type=1400 audit(1765683452.000:23095): avc: denied { read } for pid=19065 comm="syz.1.3158" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1358.735848][ T30] audit: type=1400 audit(1765683452.000:23096): avc: denied { read open } for pid=19065 comm="syz.1.3158" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1358.763971][ T30] audit: type=1400 audit(1765683452.000:23097): avc: denied { write } for pid=19065 comm="syz.1.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1359.068634][ T30] audit: type=1400 audit(1765683452.680:23098): avc: denied { read write } for pid=12320 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1359.142965][ T30] audit: type=1400 audit(1765683452.680:23099): avc: denied { read write open } for pid=12320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1359.221128][ T30] audit: type=1400 audit(1765683452.680:23100): avc: denied { ioctl } for pid=12320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1359.319258][ T30] audit: type=1400 audit(1765683452.940:23101): avc: denied { create } for pid=19072 comm="syz.1.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1359.389847][ T30] audit: type=1400 audit(1765683452.940:23102): avc: denied { read } for pid=19072 comm="syz.1.3159" dev="nsfs" ino=4026533908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1359.741177][ T30] audit: type=1400 audit(1765683452.950:23103): avc: denied { open } for pid=19072 comm="syz.1.3159" path="net:[4026533908]" dev="nsfs" ino=4026533908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1360.600753][ T30] audit: type=1400 audit(1765683453.030:23104): avc: denied { read write } for pid=18270 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1361.271693][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.304835][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.993772][T19084] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1361.993772][T19084] program syz.3.3161 not setting count and/or reply_len properly [ 1362.572223][T17324] kernel read not supported for file /vga_arbiter (pid: 17324 comm: kworker/1:2) [ 1363.552340][T19114] xt_socket: unknown flags 0x4c [ 1363.704426][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 1363.704441][ T30] audit: type=1400 audit(1765683457.340:23245): avc: denied { execmem } for pid=19108 comm="syz.7.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1363.864713][ T30] audit: type=1400 audit(1765683457.370:23246): avc: denied { sys_module } for pid=19106 comm="syz.3.3169" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1364.107417][T19097] syzkaller0: entered promiscuous mode [ 1364.151645][T19097] syzkaller0: entered allmulticast mode [ 1364.174076][ T30] audit: type=1400 audit(1765683457.370:23247): avc: denied { module_request } for pid=19106 comm="syz.3.3169" kmod="wg0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1365.405839][ T30] audit: type=1400 audit(1765683457.470:23248): avc: denied { write } for pid=19103 comm="syz.1.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1365.587856][ T30] audit: type=1400 audit(1765683457.490:23249): avc: denied { read write } for pid=16911 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1365.750762][ T30] audit: type=1400 audit(1765683457.490:23250): avc: denied { open } for pid=16911 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1365.896200][T19137] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1365.902859][T19137] audit: audit_lost=448 audit_rate_limit=0 audit_backlog_limit=64 [ 1365.910749][T19137] audit: backlog limit exceeded [ 1365.916843][T19137] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1368.711959][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 1368.711969][ T30] audit: type=1400 audit(1765683462.350:23333): avc: denied { ioctl } for pid=19150 comm="syz.7.3179" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1368.804427][ T30] audit: type=1400 audit(1765683462.340:23332): avc: denied { ioctl } for pid=12320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1368.855345][T19152] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1368.891752][ T30] audit: type=1400 audit(1765683462.520:23334): avc: denied { ioctl } for pid=19142 comm="syz.3.3177" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1368.949225][ T30] audit: type=1400 audit(1765683462.520:23335): avc: denied { read write } for pid=19142 comm="syz.3.3177" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1369.012006][ T30] audit: type=1400 audit(1765683462.520:23336): avc: denied { open } for pid=19142 comm="syz.3.3177" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1369.056126][ T30] audit: type=1400 audit(1765683462.520:23337): avc: denied { create } for pid=19154 comm="syz.1.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1369.146204][T17412] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1369.169814][ T30] audit: type=1400 audit(1765683462.520:23338): avc: denied { ioctl } for pid=19142 comm="syz.3.3177" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1369.196356][ T30] audit: type=1400 audit(1765683462.520:23339): avc: denied { write } for pid=19154 comm="syz.1.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1369.233425][ T30] audit: type=1400 audit(1765683462.530:23340): avc: denied { read } for pid=19154 comm="syz.1.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1369.370787][T17412] usb 4-1: Using ep0 maxpacket: 16 [ 1369.650946][ T30] audit: type=1400 audit(1765683462.530:23341): avc: denied { read } for pid=19154 comm="syz.1.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1369.705016][T17412] usb 4-1: config 10 has an invalid interface number: 93 but max is 0 [ 1369.739029][T17412] usb 4-1: config 10 has no interface number 0 [ 1369.809527][T17412] usb 4-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08 [ 1369.843125][T17412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.852758][T17412] usb 4-1: Product: syz [ 1369.865853][T17412] usb 4-1: Manufacturer: syz [ 1369.965846][T17412] usb 4-1: SerialNumber: syz [ 1369.992421][T17412] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 1370.012422][T17412] dvb-usb: bulk message failed: -22 (2/0) [ 1370.019745][T17412] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1370.032533][T17412] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 1370.054528][T17412] usb 4-1: media controller created [ 1370.082235][T17412] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1370.959983][T17412] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 1370.972879][T17412] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1371.220687][T19141] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1371.267856][T17412] rc_core: IR keymap rc-dtt200u not found [ 1371.298788][T17412] Registered IR keymap rc-empty [ 1371.311855][T17412] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 1371.374849][T17412] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input27 [ 1371.400213][T19141] usb 8-1: Using ep0 maxpacket: 32 [ 1371.419065][T17412] dvb-usb: schedule remote query interval to 300 msecs. [ 1371.419190][T19141] usb 8-1: config index 0 descriptor too short (expected 255, got 27) [ 1371.450869][T17412] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 1371.486949][T19141] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.530943][T19141] usb 8-1: config 0 has no interfaces? [ 1371.557726][T19141] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1371.617401][T19141] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.672416][T19141] usb 8-1: Product: syz [ 1371.704433][T19141] usb 8-1: Manufacturer: syz [ 1371.762442][ T789] dvb-usb: bulk message failed: -22 (1/0) [ 1371.768489][ T789] dvb-usb: error -22 while querying for an remote control event. [ 1371.778082][T19141] usb 8-1: SerialNumber: syz [ 1371.803236][T19141] usb 8-1: config 0 descriptor?? [ 1372.242238][T19182] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1372.242238][T19182] program syz.6.3181 not setting count and/or reply_len properly [ 1373.190998][T17412] dvb-usb: bulk message failed: -22 (1/0) [ 1373.198082][T17412] dvb-usb: error -22 while querying for an remote control event. [ 1373.210428][T19167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.229280][T19167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.438081][T17324] usb 8-1: USB disconnect, device number 2 [ 1373.512316][T17412] dvb-usb: bulk message failed: -22 (1/0) [ 1373.528769][T17412] dvb-usb: error -22 while querying for an remote control event. [ 1374.087794][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 1374.087870][ T30] audit: type=1400 audit(1765683467.720:23494): avc: denied { read write } for pid=18777 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1374.126054][T17412] dvb-usb: bulk message failed: -22 (1/0) [ 1374.140920][T17412] dvb-usb: error -22 while querying for an remote control event. [ 1374.205687][ T30] audit: type=1400 audit(1765683467.760:23495): avc: denied { read write open } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1374.282890][ T30] audit: type=1400 audit(1765683467.760:23496): avc: denied { ioctl } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1374.314779][ T30] audit: type=1400 audit(1765683467.900:23497): avc: denied { create } for pid=19192 comm="syz.7.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1374.339829][ T30] audit: type=1400 audit(1765683467.920:23498): avc: denied { read } for pid=19192 comm="syz.7.3187" dev="nsfs" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1374.463105][T17412] dvb-usb: bulk message failed: -22 (1/0) [ 1374.474412][T17412] dvb-usb: error -22 while querying for an remote control event. [ 1374.642722][ T30] audit: type=1400 audit(1765683467.920:23499): avc: denied { read open } for pid=19192 comm="syz.7.3187" path="net:[4026532833]" dev="nsfs" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1374.681601][ T30] audit: type=1400 audit(1765683467.970:23500): avc: denied { read } for pid=19192 comm="syz.7.3187" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1374.705306][ T30] audit: type=1400 audit(1765683467.970:23501): avc: denied { read open } for pid=19192 comm="syz.7.3187" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1374.730134][ T30] audit: type=1400 audit(1765683468.070:23502): avc: denied { create } for pid=19192 comm="syz.7.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1374.752404][ T30] audit: type=1400 audit(1765683468.080:23503): avc: denied { create } for pid=19192 comm="syz.7.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1374.850704][T17412] dvb-usb: bulk message failed: -22 (1/0) [ 1374.866171][T17412] dvb-usb: error -22 while querying for an remote control event. [ 1375.220818][T17412] dvb-usb: bulk message failed: -22 (1/0) [ 1375.226584][T17412] dvb-usb: error -22 while querying for an remote control event. [ 1375.396968][T19203] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3188'. [ 1375.510171][T17412] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1375.529224][T19200] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1375.529224][T19200] program syz.2.3185 not setting count and/or reply_len properly [ 1375.587016][T17412] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1375.661790][T17412] dvb-usb: bulk message failed: -22 (1/0) [ 1375.686396][T17412] dvb-usb: error -22 while querying for an remote control event. [ 1375.703095][T19209] fido_id[19209]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1376.045815][T17412] dvb-usb: bulk message failed: -22 (1/0) [ 1376.052091][T17412] dvb-usb: error -22 while querying for an remote control event. [ 1376.360805][T17412] dvb-usb: bulk message failed: -22 (1/0) [ 1376.366580][T17412] dvb-usb: error -22 while querying for an remote control event. [ 1376.680772][T17412] dvb-usb: bulk message failed: -22 (1/0) [ 1376.686564][T17412] dvb-usb: error -22 while querying for an remote control event. [ 1376.950549][T19197] veth0_vlan: entered allmulticast mode [ 1377.000939][T17412] dvb-usb: bulk message failed: -22 (1/0) [ 1377.027984][T17412] dvb-usb: error -22 while querying for an remote control event. [ 1377.069484][T17412] usb 4-1: USB disconnect, device number 59 [ 1377.364605][T17412] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 1379.091173][T17412] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1379.146392][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 1379.146402][ T30] audit: type=1400 audit(1765683472.780:23669): avc: denied { ioctl } for pid=19229 comm="syz.1.3194" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1379.368279][ T30] audit: type=1400 audit(1765683472.820:23670): avc: denied { ioctl } for pid=19229 comm="syz.1.3194" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1379.396593][T17412] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1379.435287][T17412] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1379.523560][T17412] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1379.559082][ T30] audit: type=1400 audit(1765683472.910:23671): avc: denied { read write } for pid=18777 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1379.608862][T17412] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1379.620268][T17412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.648681][ T30] audit: type=1400 audit(1765683472.910:23672): avc: denied { open } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1379.676466][T17412] usb 2-1: Product: syz [ 1379.684729][T17412] usb 2-1: Manufacturer: syz [ 1379.690035][T17412] usb 2-1: SerialNumber: syz [ 1379.710541][T19244] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1379.720879][ T30] audit: type=1400 audit(1765683472.910:23673): avc: denied { ioctl } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1379.761304][T19244] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1379.779374][ T30] audit: type=1400 audit(1765683472.920:23674): avc: denied { ioctl } for pid=19229 comm="syz.1.3194" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1379.807988][ T30] audit: type=1400 audit(1765683473.000:23675): avc: denied { ioctl } for pid=19229 comm="syz.1.3194" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1379.920928][ T30] audit: type=1400 audit(1765683473.000:23676): avc: denied { ioctl } for pid=19229 comm="syz.1.3194" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1380.064883][ T30] audit: type=1400 audit(1765683473.000:23677): avc: denied { ioctl } for pid=19229 comm="syz.1.3194" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1380.201452][T19257] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3202'. [ 1380.519668][ T30] audit: type=1400 audit(1765683473.030:23678): avc: denied { ioctl } for pid=19229 comm="syz.1.3194" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1380.624933][ T2110] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.816892][T17412] rtl8150 2-1:1.0: couldn't reset the device [ 1381.067968][T17412] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1381.100446][T17412] usb 2-1: USB disconnect, device number 61 [ 1381.257572][ T2110] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.575505][T19263] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1381.575505][T19263] program syz.7.3204 not setting count and/or reply_len properly [ 1381.982343][ T2110] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.193195][ T2110] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.753881][ T2110] bridge_slave_1: left allmulticast mode [ 1382.773626][ T2110] bridge_slave_1: left promiscuous mode [ 1382.780711][ T2110] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.882498][ T2110] bridge_slave_0: left allmulticast mode [ 1382.914232][ T2110] bridge_slave_0: left promiscuous mode [ 1382.972577][ T2110] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.151277][ T30] kauditd_printk_skb: 254 callbacks suppressed [ 1384.151319][ T30] audit: type=1400 audit(1765683477.790:23933): avc: denied { read } for pid=19300 comm="syz.2.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1384.184689][T17571] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1384.520822][T17571] usb 3-1: Using ep0 maxpacket: 16 [ 1384.742937][T17571] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1384.754576][ T30] audit: type=1400 audit(1765683477.920:23934): avc: denied { ioctl } for pid=19300 comm="syz.2.3215" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1384.966435][T17571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.147292][T17571] usb 3-1: Product: syz [ 1385.231021][T17571] usb 3-1: Manufacturer: syz [ 1385.321136][ T30] audit: type=1400 audit(1765683477.960:23935): avc: denied { ioctl } for pid=19300 comm="syz.2.3215" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1385.352016][T19303] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1385.369425][T17571] usb 3-1: SerialNumber: syz [ 1385.408917][T19303] audit: audit_lost=469 audit_rate_limit=0 audit_backlog_limit=64 [ 1385.418239][T19313] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1385.424834][T19313] audit: audit_lost=470 audit_rate_limit=0 audit_backlog_limit=64 [ 1385.432738][T19313] audit: backlog limit exceeded [ 1385.529717][T19311] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1386.181081][T19311] audit: audit_lost=471 audit_rate_limit=0 audit_backlog_limit=64 [ 1388.180671][T18993] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1388.360657][T18993] usb 8-1: device descriptor read/64, error -71 [ 1388.612425][T18993] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1388.715490][ T2110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.728403][ T2110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.742357][ T2110] bond0 (unregistering): Released all slaves [ 1388.750683][T18993] usb 8-1: device descriptor read/64, error -71 [ 1388.872383][T18993] usb usb8-port1: attempt power cycle [ 1388.872705][T17571] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1389.243505][ T30] kauditd_printk_skb: 385 callbacks suppressed [ 1389.243522][ T30] audit: type=1400 audit(1765683482.880:24211): avc: denied { map_create } for pid=19347 comm="syz.1.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1389.250451][T17571] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 1389.320671][T18993] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1389.919677][T17571] usb 3-1: USB disconnect, device number 61 [ 1389.990977][T18993] usb 8-1: device descriptor read/8, error -71 [ 1390.040219][ T30] audit: type=1400 audit(1765683482.880:24212): avc: denied { map_read map_write } for pid=19347 comm="syz.1.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1390.180240][ T30] audit: type=1400 audit(1765683482.910:24213): avc: denied { ioctl } for pid=19323 comm="syz.7.3218" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1390.471225][ T30] audit: type=1400 audit(1765683482.920:24214): avc: denied { read write } for pid=19344 comm="syz.3.3222" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1390.573029][T18315] udevd[18315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1390.620182][ T30] audit: type=1400 audit(1765683482.920:24215): avc: denied { read write open } for pid=19344 comm="syz.3.3222" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1390.782263][T19364] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1390.784502][ T30] audit: type=1400 audit(1765683482.930:24216): avc: denied { ioctl } for pid=19344 comm="syz.3.3222" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1390.788814][T19364] audit: audit_lost=508 audit_rate_limit=0 audit_backlog_limit=64 [ 1390.912118][ T30] audit: type=1400 audit(1765683482.990:24217): avc: denied { prog_load } for pid=19344 comm="syz.3.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1390.921970][T19368] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1391.746150][T19373] syzkaller0: entered promiscuous mode [ 1391.790720][T19373] syzkaller0: entered allmulticast mode [ 1394.220850][T18993] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1394.505635][ T30] kauditd_printk_skb: 556 callbacks suppressed [ 1394.558331][ T30] audit: type=1400 audit(1765683487.970:24651): avc: denied { create } for pid=19405 comm="syz.3.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1394.748100][ T30] audit: type=1400 audit(1765683487.980:24652): avc: denied { create } for pid=19405 comm="syz.3.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1394.817160][T18993] usb 8-1: device descriptor read/64, error -71 [ 1394.876434][ T30] audit: type=1400 audit(1765683487.980:24653): avc: denied { write } for pid=19405 comm="syz.3.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1394.903328][ T30] audit: type=1400 audit(1765683487.980:24654): avc: denied { nlmsg_write } for pid=19405 comm="syz.3.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1394.929748][ T30] audit: type=1400 audit(1765683488.000:24655): avc: denied { create } for pid=19405 comm="syz.3.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1394.949489][ T30] audit: type=1400 audit(1765683488.000:24656): avc: denied { write } for pid=19405 comm="syz.3.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1394.979809][ T30] audit: type=1400 audit(1765683488.030:24657): avc: denied { create } for pid=19405 comm="syz.3.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1395.001225][ T30] audit: type=1400 audit(1765683488.310:24658): avc: denied { ioctl } for pid=19398 comm="syz.7.3233" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1395.028966][ T30] audit: type=1400 audit(1765683488.600:24659): avc: denied { ioctl } for pid=19398 comm="syz.7.3233" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1395.062314][ T30] audit: type=1400 audit(1765683488.690:24660): avc: denied { ioctl } for pid=19398 comm="syz.7.3233" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1395.100661][T18993] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1395.270707][T18993] usb 8-1: device descriptor read/64, error -71 [ 1395.398344][T18993] usb usb8-port1: attempt power cycle [ 1395.752976][T18993] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1395.795615][T18993] usb 8-1: device descriptor read/8, error -71 [ 1397.561672][ T2110] hsr_slave_0: left promiscuous mode [ 1397.573391][ T2110] hsr_slave_1: left promiscuous mode [ 1397.579341][ T2110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1397.592379][ T2110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.602698][ T2110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.610094][ T2110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.646795][ T2110] veth1_macvtap: left promiscuous mode [ 1397.707042][ T2110] veth0_macvtap: left promiscuous mode [ 1397.765725][ T2110] veth1_vlan: left promiscuous mode [ 1397.857487][ T2110] veth0_vlan: left promiscuous mode [ 1399.666493][T11292] Bluetooth: hci4: command 0x0406 tx timeout [ 1399.675076][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 1399.677240][ T30] audit: type=1400 audit(1765683493.300:24751): avc: denied { create } for pid=19439 comm="syz.3.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1399.760774][ T30] audit: type=1400 audit(1765683493.350:24752): avc: denied { read } for pid=19437 comm="syz.6.3241" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1399.784757][ T30] audit: type=1400 audit(1765683493.350:24753): avc: denied { open } for pid=19437 comm="syz.6.3241" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1399.810043][ T30] audit: type=1400 audit(1765683493.400:24754): avc: denied { read } for pid=19439 comm="syz.3.3243" dev="nsfs" ino=4026533393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1400.046996][ T30] audit: type=1400 audit(1765683493.400:24755): avc: denied { read open } for pid=19439 comm="syz.3.3243" path="net:[4026533393]" dev="nsfs" ino=4026533393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1400.123693][ T30] audit: type=1400 audit(1765683493.430:24756): avc: denied { read } for pid=19439 comm="syz.3.3243" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1400.159177][ T30] audit: type=1400 audit(1765683493.430:24757): avc: denied { open } for pid=19439 comm="syz.3.3243" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1400.200016][ T30] audit: type=1400 audit(1765683493.610:24758): avc: denied { create } for pid=19439 comm="syz.3.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1400.253951][ T30] audit: type=1400 audit(1765683493.620:24759): avc: denied { create } for pid=19439 comm="syz.3.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1400.278812][ T30] audit: type=1400 audit(1765683493.620:24760): avc: denied { write } for pid=19439 comm="syz.3.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1401.502256][ T2110] team0 (unregistering): Port device team_slave_1 removed [ 1401.734634][ T2110] team0 (unregistering): Port device team_slave_0 removed [ 1402.587060][T19469] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3249'. [ 1402.661977][T19471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3249'. [ 1404.726038][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 1404.726049][ T30] audit: type=1400 audit(1765683498.230:24946): avc: denied { write } for pid=19487 comm="syz.6.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1405.096178][ T30] audit: type=1400 audit(1765683498.290:24947): avc: denied { write } for pid=19487 comm="syz.6.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1405.225699][T19501] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1405.235333][ T30] audit: type=1400 audit(1765683498.410:24948): avc: denied { create } for pid=19492 comm="syz.1.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1405.238614][T19503] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1405.272190][T19501] audit: audit_lost=550 audit_rate_limit=0 audit_backlog_limit=64 [ 1405.280033][T19501] audit: backlog limit exceeded [ 1405.292609][T16911] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1405.299146][T16911] audit: audit_lost=551 audit_rate_limit=0 audit_backlog_limit=64 [ 1405.345874][T19501] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1405.658041][T19512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1406.585086][T18182] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1407.380867][T18182] usb 3-1: Using ep0 maxpacket: 32 [ 1407.388263][T18182] usb 3-1: config index 0 descriptor too short (expected 255, got 27) [ 1407.409934][T18182] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.593656][T18182] usb 3-1: config 0 has no interfaces? [ 1407.618553][T18182] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1407.658889][T18182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.709724][T18182] usb 3-1: Product: syz [ 1407.743776][T18182] usb 3-1: Manufacturer: syz [ 1407.748490][T18182] usb 3-1: SerialNumber: syz [ 1407.792428][T18182] usb 3-1: config 0 descriptor?? [ 1408.082440][T19538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3263'. [ 1408.513385][T18182] usb 3-1: USB disconnect, device number 62 [ 1409.745235][ T30] kauditd_printk_skb: 682 callbacks suppressed [ 1409.745250][ T30] audit: type=1400 audit(1765683503.380:25299): avc: denied { read write open } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1409.890780][ T30] audit: type=1400 audit(1765683503.430:25300): avc: denied { ioctl } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1410.060666][ T30] audit: type=1400 audit(1765683503.510:25301): avc: denied { read write } for pid=18270 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1410.140822][ T30] audit: type=1400 audit(1765683503.510:25302): avc: denied { read write open } for pid=18270 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1411.460025][ T30] audit: type=1400 audit(1765683503.510:25303): avc: denied { ioctl } for pid=18270 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1412.377994][ T30] audit: type=1400 audit(1765683503.600:25304): avc: denied { read } for pid=19554 comm="syz.3.3267" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1412.555396][ T30] audit: type=1400 audit(1765683503.600:25305): avc: denied { read open } for pid=19554 comm="syz.3.3267" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1412.624058][ T30] audit: type=1400 audit(1765683503.600:25306): avc: denied { ioctl } for pid=19554 comm="syz.3.3267" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1412.757371][ T30] audit: type=1400 audit(1765683503.610:25307): avc: denied { search } for pid=19553 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1412.819966][T19568] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1413.991868][ T5822] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1415.090025][ T30] kauditd_printk_skb: 384 callbacks suppressed [ 1415.090043][ T30] audit: type=1400 audit(1765683508.150:25588): avc: denied { read } for pid=19583 comm="syz.6.3275" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1415.280737][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 1415.301332][ T30] audit: type=1400 audit(1765683508.150:25589): avc: denied { read open } for pid=19583 comm="syz.6.3275" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1415.341031][ T5822] usb 2-1: config index 0 descriptor too short (expected 255, got 27) [ 1415.373637][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.414689][ T5822] usb 2-1: config 0 has no interfaces? [ 1415.428357][T19586] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1415.430669][ T30] audit: type=1400 audit(1765683508.300:25590): avc: denied { map_create } for pid=19583 comm="syz.6.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1415.446492][T19599] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1415.485899][T19586] audit: audit_lost=698 audit_rate_limit=0 audit_backlog_limit=64 [ 1415.505956][ T30] audit: type=1400 audit(1765683508.310:25591): avc: denied { map_read map_write } for pid=19583 comm="syz.6.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1415.553487][T19586] audit: backlog limit exceeded [ 1415.580060][T19601] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1415.586750][T19601] audit: audit_lost=699 audit_rate_limit=0 audit_backlog_limit=64 [ 1415.703344][ T5822] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1416.020708][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.050955][ T5822] usb 2-1: Product: syz [ 1416.067854][ T5822] usb 2-1: Manufacturer: syz [ 1416.089157][ T5822] usb 2-1: SerialNumber: syz [ 1416.117779][ T5822] usb 2-1: config 0 descriptor?? [ 1416.369239][T19586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.390505][T19611] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3280'. [ 1416.840680][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3280'. [ 1416.859320][T19586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.036967][T18182] usb 2-1: USB disconnect, device number 62 [ 1417.515552][T19612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3281'. [ 1417.526379][T19612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=19612 comm=syz.2.3281 [ 1417.539189][T19612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=19612 comm=syz.2.3281 [ 1417.561221][T17412] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1417.710682][T17412] usb 8-1: device descriptor read/64, error -71 [ 1417.960808][T17412] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1418.096244][T19606] Process accounting resumed [ 1418.644892][T19634] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1418.644892][T19634] program syz.3.3285 not setting count and/or reply_len properly [ 1420.091349][ T30] kauditd_printk_skb: 311 callbacks suppressed [ 1420.091360][ T30] audit: type=1400 audit(1765683513.730:25868): avc: denied { read write open } for pid=18270 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1420.218258][ T30] audit: type=1400 audit(1765683513.760:25869): avc: denied { ioctl } for pid=18270 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1420.285800][ T30] audit: type=1400 audit(1765683513.780:25870): avc: denied { ioctl } for pid=19639 comm="syz.1.3288" path="socket:[80412]" dev="sockfs" ino=80412 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1420.326057][T19643] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1420.345154][ T30] audit: type=1400 audit(1765683513.800:25871): avc: denied { read write } for pid=19639 comm="syz.1.3288" name="virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1420.590714][ T30] audit: type=1400 audit(1765683513.800:25872): avc: denied { search } for pid=19651 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1420.717378][ T30] audit: type=1400 audit(1765683513.810:25873): avc: denied { read write open } for pid=19639 comm="syz.1.3288" path="/dev/virtual_nci" dev="devtmpfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1420.862552][ T30] audit: type=1400 audit(1765683513.840:25874): avc: denied { execmem } for pid=19648 comm="syz.3.3289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1420.960746][ T30] audit: type=1400 audit(1765683513.910:25875): avc: denied { search } for pid=19655 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1421.095123][ T30] audit: type=1400 audit(1765683514.060:25876): avc: denied { prog_load } for pid=19652 comm="syz.2.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1421.185497][ T30] audit: type=1400 audit(1765683514.060:25877): avc: denied { bpf } for pid=19652 comm="syz.2.3283" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1421.630876][ T5981] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1421.812450][ T5981] usb 4-1: device descriptor read/64, error -71 [ 1422.170660][ T5981] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1422.321933][T19673] mkiss: ax0: crc mode is auto. [ 1422.540696][ T5981] usb 4-1: device descriptor read/64, error -71 [ 1422.661675][ T5981] usb usb4-port1: attempt power cycle [ 1422.664739][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.674860][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.061308][ T5981] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1423.632938][T19664] Process accounting resumed [ 1423.655536][ T5981] usb 4-1: device descriptor read/8, error -71 [ 1423.995660][T19692] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3300'. [ 1424.008183][T19692] netlink: 67 bytes leftover after parsing attributes in process `syz.7.3300'. [ 1425.207788][ T30] kauditd_printk_skb: 216 callbacks suppressed [ 1425.207799][ T30] audit: type=1400 audit(1765683518.840:26094): avc: denied { ioctl } for pid=17848 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.430657][ T30] audit: type=1400 audit(1765683519.060:26095): avc: denied { read write } for pid=18777 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.574830][ T30] audit: type=1400 audit(1765683519.060:26096): avc: denied { read write open } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1425.909801][T19714] syz.2.3302 (19714): drop_caches: 2 [ 1426.000697][ T30] audit: type=1400 audit(1765683519.060:26097): avc: denied { ioctl } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1426.100779][ T6214] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1426.139036][ T30] audit: type=1400 audit(1765683519.160:26098): avc: denied { read write } for pid=12320 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1426.221238][ T30] audit: type=1400 audit(1765683519.180:26099): avc: denied { read write open } for pid=12320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1426.263685][ T30] audit: type=1400 audit(1765683519.180:26100): avc: denied { ioctl } for pid=12320 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1426.294446][ T6214] usb 8-1: Using ep0 maxpacket: 8 [ 1426.319442][ T30] audit: type=1400 audit(1765683519.430:26101): avc: denied { read write } for pid=19711 comm="syz.7.3305" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1426.345430][ T6214] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1426.357050][ T6214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.392761][ T6214] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1426.408546][ T30] audit: type=1400 audit(1765683519.480:26102): avc: denied { read write open } for pid=19711 comm="syz.7.3305" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1426.445189][ T6214] pvrusb2: ********** [ 1426.452386][ T6214] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1426.477452][ T6214] pvrusb2: Important functionality might not be entirely working. [ 1426.488026][ T30] audit: type=1400 audit(1765683519.480:26103): avc: denied { ioctl } for pid=19711 comm="syz.7.3305" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1426.522100][ T6214] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1426.552943][ T6214] pvrusb2: ********** [ 1426.608464][ T2339] pvrusb2: Invalid write control endpoint [ 1428.449785][ T2339] pvrusb2: Invalid write control endpoint [ 1428.506779][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1428.568999][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1428.570686][ T5987] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1428.634908][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1428.691226][ T2339] pvrusb2: Device being rendered inoperable [ 1428.709373][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1428.737780][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1428.784275][ T2339] pvrusb2: Attached sub-driver cx25840 [ 1428.817797][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1428.840704][ T5987] usb 2-1: device descriptor read/64, error -71 [ 1428.863489][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1429.141182][T17412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.149629][T17412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.158053][ T5987] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1429.307425][T19724] Process accounting resumed [ 1429.320716][ T5987] usb 2-1: device descriptor read/64, error -71 [ 1429.450854][ T5987] usb usb2-port1: attempt power cycle [ 1429.480660][ T6214] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1429.491999][T19755] loop8: detected capacity change from 0 to 1 [ 1429.524738][T19755] Dev loop8: unable to read RDB block 1 [ 1429.538914][T19755] loop8: unable to read partition table [ 1429.549462][T19755] loop8: partition table beyond EOD, truncated [ 1429.562882][T19755] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1429.660689][ T6214] usb 3-1: Using ep0 maxpacket: 32 [ 1429.821879][T19759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.862916][T19759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.902332][T19759] netlink: 'syz.2.3313': attribute type 1 has an invalid length. [ 1430.138718][T17412] usb 8-1: USB disconnect, device number 13 [ 1430.181101][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.259250][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 1430.259292][ T30] audit: type=1400 audit(1765683523.890:26269): avc: denied { create } for pid=19760 comm="syz.1.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1430.781369][ T5880] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1430.818306][ T30] audit: type=1400 audit(1765683523.920:26270): avc: denied { write } for pid=19760 comm="syz.1.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1431.162944][ T5880] usb 2-1: config index 0 descriptor too short (expected 8228, got 36) [ 1431.241431][ T30] audit: type=1400 audit(1765683523.930:26271): avc: denied { read } for pid=19760 comm="syz.1.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1431.348495][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.554095][ T5880] usb 2-1: config 0 has no interfaces? [ 1431.676028][ T5880] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1431.725708][ T30] audit: type=1400 audit(1765683523.940:26272): avc: denied { read } for pid=19760 comm="syz.1.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1431.949935][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.094376][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.212387][T17412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1432.235179][ T30] audit: type=1400 audit(1765683523.980:26273): avc: denied { read write open } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1432.268103][ T5880] usb 2-1: config 0 descriptor?? [ 1432.486211][ T30] audit: type=1400 audit(1765683524.010:26274): avc: denied { ioctl } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1433.291083][ T5880] usb 2-1: string descriptor 0 read error: -71 [ 1433.583626][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1433.788600][ T6214] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1433.979576][ T6214] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1434.052046][ T5880] usb 2-1: USB disconnect, device number 66 [ 1434.070783][ T30] audit: type=1400 audit(1765683524.020:26275): avc: denied { ioctl } for pid=19760 comm="syz.1.3315" path="socket:[79681]" dev="sockfs" ino=79681 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1434.130688][ T30] audit: type=1400 audit(1765683524.030:26276): avc: denied { write } for pid=19760 comm="syz.1.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1434.170647][ T6214] usb 3-1: can't read configurations, error -71 [ 1434.214603][ T30] audit: type=1400 audit(1765683524.040:26277): avc: denied { write } for pid=19760 comm="syz.1.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1434.242078][T19776] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1434.795217][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.225482][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.262440][ T30] kauditd_printk_skb: 497 callbacks suppressed [ 1435.262456][ T30] audit: type=1400 audit(1765683528.900:26528): avc: denied { map_read map_write } for pid=19792 comm="syz.1.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1435.289893][ T5962] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1435.297919][ T30] audit: type=1400 audit(1765683528.900:26527): avc: denied { search } for pid=19789 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1435.348948][ T30] audit: type=1400 audit(1765683528.900:26529): avc: denied { read } for pid=19789 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1435.445747][ T30] audit: type=1400 audit(1765683528.900:26530): avc: denied { open } for pid=19789 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1435.490644][ T5962] usb 4-1: Using ep0 maxpacket: 16 [ 1435.497340][ T5962] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.530481][ T30] audit: type=1400 audit(1765683528.900:26531): avc: denied { getattr } for pid=19789 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1435.556711][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1435.590509][ T5962] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1435.614441][ T5962] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1435.628909][ T30] audit: type=1400 audit(1765683528.920:26532): avc: denied { read write } for pid=19792 comm="syz.1.3321" name="radio6" dev="devtmpfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1435.661474][ T5962] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1435.700647][ T5962] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1435.728661][ T30] audit: type=1400 audit(1765683528.920:26533): avc: denied { open } for pid=19792 comm="syz.1.3321" path="/dev/radio6" dev="devtmpfs" ino=996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1435.762290][ T5962] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1435.791906][ T5962] usb 4-1: Manufacturer: syz [ 1435.811148][ T5962] usb 4-1: config 0 descriptor?? [ 1435.842237][ T30] audit: type=1400 audit(1765683528.930:26534): avc: denied { search } for pid=19794 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1435.865116][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.929915][ T30] audit: type=1400 audit(1765683528.930:26535): avc: denied { search } for pid=19794 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1435.945450][T19769] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1436.040828][T19803] netlink: 'syz.7.3323': attribute type 1 has an invalid length. [ 1437.345843][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.383787][T17571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.796566][ T5962] rc_core: IR keymap rc-hauppauge not found [ 1437.836757][ T5962] Registered IR keymap rc-empty [ 1437.869973][ T5962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1437.950675][ T5962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1438.014237][ T5962] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1438.028633][T17571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.107584][ T5962] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input28 [ 1438.238515][ T5962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1438.275470][T17412] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1438.295337][ T5987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.355632][ T5962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1438.417305][ T5962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1438.432245][T17324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.450881][T17412] usb 2-1: Using ep0 maxpacket: 32 [ 1439.151005][T17412] usb 2-1: config index 0 descriptor too short (expected 255, got 27) [ 1439.228302][T17412] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.360108][T17412] usb 2-1: config 0 has no interfaces? [ 1439.473865][T17216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1439.589218][T17412] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1439.686054][T17412] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.914519][T17412] usb 2-1: Product: syz [ 1440.050739][ T5962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1440.072494][ T5962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1440.075764][T17412] usb 2-1: Manufacturer: syz [ 1440.090748][ T5962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1440.110803][ T5962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1440.131097][ T5962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1440.150504][T17412] usb 2-1: SerialNumber: syz [ 1440.150757][ T5962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1440.180731][ T5962] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1440.219821][ T5962] mceusb 4-1:0.0: Registered 栢瀇蹝첺⊅７뮾糘 with mce emulator interface version 1 [ 1440.240360][T17412] usb 2-1: config 0 descriptor?? [ 1440.280928][ T5962] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1440.321976][ T30] kauditd_printk_skb: 269 callbacks suppressed [ 1440.321993][ T30] audit: type=1400 audit(1765683533.960:26797): avc: denied { ioctl } for pid=19819 comm="syz.1.3326" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1440.469393][ T30] audit: type=1400 audit(1765683533.960:26798): avc: denied { ioctl } for pid=19819 comm="syz.1.3326" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1440.512585][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.594894][T19822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.614832][T19838] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.650807][T19822] audit: audit_lost=798 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.658741][T19838] audit: audit_lost=799 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.711010][T19822] audit: backlog limit exceeded [ 1440.716906][T19822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.724549][T18270] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.726264][T19838] audit: backlog limit exceeded [ 1440.772379][T19822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.827768][T19822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.259412][T17412] usb 2-1: USB disconnect, device number 67 [ 1441.302779][T17571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.335005][ T5962] usb 4-1: USB disconnect, device number 64 [ 1441.471782][T18315] udevd[18315]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1441.553504][T17324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.848419][T19866] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1442.991701][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.194201][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.212939][T17718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.221913][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.235967][T17412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.375342][T19878] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3338'. [ 1443.580856][T17571] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1443.821010][T17571] usb 2-1: Using ep0 maxpacket: 16 [ 1443.861187][T17571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.945812][T17324] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1443.945882][T17571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1443.964435][T17571] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1443.982135][T17571] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1443.992412][T17571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.021727][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.022428][T17571] usb 2-1: config 0 descriptor?? [ 1444.142075][T17324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.159391][T17324] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1444.187272][T17324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.216880][T17324] usb 3-1: config 0 descriptor?? [ 1444.237964][T17324] pwc: Askey VC010 type 2 USB webcam detected. [ 1444.340775][T17412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.814525][T17571] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0013/input/input29 [ 1444.875713][T17324] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1444.884514][T17571] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1444.932600][T17324] pwc: recv_control_msg error -32 req 02 val 2700 [ 1444.972313][T17324] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1445.017888][T17324] pwc: recv_control_msg error -32 req 04 val 1000 [ 1445.039443][T17324] pwc: recv_control_msg error -32 req 04 val 1300 [ 1445.123039][T17324] pwc: recv_control_msg error -32 req 04 val 1400 [ 1445.161112][T17324] pwc: recv_control_msg error -32 req 02 val 2000 [ 1445.348569][ T30] kauditd_printk_skb: 752 callbacks suppressed [ 1445.348584][ T30] audit: type=1400 audit(1765683538.980:27541): avc: denied { prog_load } for pid=19862 comm="syz.1.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1445.385534][ T30] audit: type=1400 audit(1765683538.980:27542): avc: denied { bpf } for pid=19862 comm="syz.1.3337" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1445.413751][T17324] pwc: recv_control_msg error -32 req 04 val 1500 [ 1445.424961][ T30] audit: type=1400 audit(1765683538.980:27543): avc: denied { perfmon } for pid=19862 comm="syz.1.3337" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1445.454301][ T30] audit: type=1400 audit(1765683538.980:27544): avc: denied { perfmon } for pid=19862 comm="syz.1.3337" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1445.480318][T17324] pwc: recv_control_msg error -32 req 02 val 2500 [ 1445.482221][ T30] audit: type=1400 audit(1765683538.990:27545): avc: denied { perfmon } for pid=19862 comm="syz.1.3337" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1445.504085][T17324] pwc: recv_control_msg error -32 req 02 val 2400 [ 1445.553148][ T30] audit: type=1400 audit(1765683538.990:27546): avc: denied { bpf } for pid=19862 comm="syz.1.3337" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1445.562529][T17324] pwc: recv_control_msg error -32 req 02 val 2600 [ 1445.627322][ T30] audit: type=1400 audit(1765683538.990:27547): avc: denied { prog_run } for pid=19862 comm="syz.1.3337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1445.636930][T17324] pwc: recv_control_msg error -32 req 02 val 2900 [ 1445.691220][T17324] pwc: recv_control_msg error -32 req 02 val 2800 [ 1445.709238][ T30] audit: type=1400 audit(1765683539.040:27548): avc: denied { search } for pid=19905 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1445.725953][T17324] pwc: recv_control_msg error -32 req 04 val 1100 [ 1445.739220][ T30] audit: type=1400 audit(1765683539.040:27549): avc: denied { search } for pid=19905 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1445.768102][ T30] audit: type=1400 audit(1765683539.040:27550): avc: denied { search } for pid=19905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1445.794477][T17324] pwc: recv_control_msg error -32 req 04 val 1200 [ 1445.912772][T17324] pwc: Registered as video103. [ 1445.949694][T17324] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 1446.102616][ T6214] net_ratelimit: 1 callbacks suppressed [ 1446.102633][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.225137][T19916] overlayfs: failed to resolve './file0': -2 [ 1446.460630][T17324] usb 2-1: USB disconnect, device number 68 [ 1446.836081][ T6214] usb 3-1: USB disconnect, device number 65 [ 1447.141657][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.176323][T19930] xt_cgroup: xt_cgroup: no path or classid specified [ 1447.840046][T13298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.182267][T19937] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3348'. [ 1448.322720][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.330871][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.347267][T19933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.355739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.555964][T19951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3351'. [ 1448.567238][T19951] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3351'. [ 1448.662415][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.721677][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1448.773941][T13298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1449.740669][ T6214] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1449.872494][T19975] futex_wake_op: syz.2.3357 tries to shift op by -1; fix this program [ 1449.900953][ T6214] usb 8-1: Using ep0 maxpacket: 32 [ 1450.145209][ T6214] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1450.158615][ T6214] usb 8-1: config 0 has no interface number 0 [ 1450.200367][ T6214] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1450.226988][ T6214] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.248529][ T6214] usb 8-1: Product: syz [ 1450.266051][ T6214] usb 8-1: Manufacturer: syz [ 1450.275062][ T6214] usb 8-1: SerialNumber: syz [ 1450.294295][ T6214] usb 8-1: config 0 descriptor?? [ 1450.309344][ T6214] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1450.340882][T14885] Bluetooth: hci2: command 0x0406 tx timeout [ 1450.440522][ T30] kauditd_printk_skb: 640 callbacks suppressed [ 1450.440534][ T30] audit: type=1400 audit(1765683544.070:28189): avc: denied { read write } for pid=18270 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1450.505227][ T30] audit: type=1400 audit(1765683544.110:28190): avc: denied { read write open } for pid=18270 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1450.612187][ T30] audit: type=1400 audit(1765683544.110:28191): avc: denied { ioctl } for pid=18270 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1450.662037][ T30] audit: type=1400 audit(1765683544.170:28192): avc: denied { map_create } for pid=19981 comm="syz.2.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1450.684098][ T30] audit: type=1400 audit(1765683544.170:28193): avc: denied { map_read map_write } for pid=19981 comm="syz.2.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1450.707279][ T30] audit: type=1400 audit(1765683544.170:28194): avc: denied { prog_load } for pid=19981 comm="syz.2.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1450.729639][ T30] audit: type=1400 audit(1765683544.170:28195): avc: denied { bpf } for pid=19981 comm="syz.2.3358" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1450.753614][ T30] audit: type=1400 audit(1765683544.170:28196): avc: denied { perfmon } for pid=19981 comm="syz.2.3358" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1450.785340][ T30] audit: type=1400 audit(1765683544.170:28197): avc: denied { bpf } for pid=19981 comm="syz.2.3358" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1450.837040][ T30] audit: type=1400 audit(1765683544.180:28198): avc: denied { unmount } for pid=12320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1451.151212][ T6214] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1451.541011][ T5822] net_ratelimit: 2 callbacks suppressed [ 1451.541028][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.559751][T18182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.601862][T19993] ceph: No mds server is up or the cluster is laggy [ 1451.611131][ T5962] libceph: connect (1)[c::]:6789 error -101 [ 1451.619619][ T6214] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1451.630724][ T5962] libceph: mon0 (1)[c::]:6789 connect error [ 1451.632384][T19987] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1451.632384][T19987] program syz.1.3359 not setting count and/or reply_len properly [ 1451.921819][ T6214] libceph: connect (1)[c::]:6789 error -101 [ 1451.930448][ T6214] libceph: mon0 (1)[c::]:6789 connect error [ 1452.523257][ T6214] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1452.583297][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.702912][ T6214] usb 3-1: Using ep0 maxpacket: 16 [ 1452.736876][ T6214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.786541][ T6214] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1452.844140][ T6214] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1452.864413][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1452.877545][ T6214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.894605][ T5822] usb 8-1: USB disconnect, device number 14 [ 1453.010168][ T5822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1453.091658][ T6214] usb 3-1: config 0 descriptor?? [ 1453.241859][ T5822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1453.306434][ T5822] quatech2 8-1:0.51: device disconnected [ 1453.501623][T20008] 9p: Bad value for 'wfdno' [ 1453.688643][T17216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.944111][ T6214] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 1453.988018][ T6214] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0014/input/input31 [ 1454.020248][ T6214] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1454.524317][ T6214] usb 3-1: USB disconnect, device number 66 [ 1454.581213][T17571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.670832][T11292] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1454.923925][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.450981][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 1455.451019][ T30] audit: type=1400 audit(1765683549.080:28402): avc: denied { perfmon } for pid=20026 comm="syz.1.3370" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1455.677465][ T30] audit: type=1400 audit(1765683549.140:28403): avc: denied { mounton } for pid=20025 comm="syz.7.3369" path="/54/bus" dev="tmpfs" ino=316 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1455.742033][ T30] audit: type=1400 audit(1765683549.230:28404): avc: denied { perfmon } for pid=20026 comm="syz.1.3370" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1455.770725][ T30] audit: type=1400 audit(1765683549.230:28405): avc: denied { perfmon } for pid=20026 comm="syz.1.3370" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1455.792365][ T30] audit: type=1400 audit(1765683549.230:28406): avc: denied { bpf } for pid=20026 comm="syz.1.3370" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1455.835907][ T30] audit: type=1400 audit(1765683549.240:28407): avc: denied { write } for pid=20017 comm="syz.3.3367" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1455.863164][ T30] audit: type=1400 audit(1765683549.240:28408): avc: denied { open } for pid=20017 comm="syz.3.3367" path="/dev/sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1455.927761][ T30] audit: type=1400 audit(1765683549.260:28409): avc: denied { map_create } for pid=20025 comm="syz.7.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1455.949092][T17216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.972321][T20040] netlink: 112 bytes leftover after parsing attributes in process `syz.7.3374'. [ 1456.954448][T20041] netlink: 'syz.1.3372': attribute type 5 has an invalid length. [ 1456.962455][T20041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3372'. [ 1456.973060][ T30] audit: type=1400 audit(1765683549.260:28410): avc: denied { map_read map_write } for pid=20025 comm="syz.7.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1456.994969][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1457.013534][ T30] audit: type=1400 audit(1765683549.260:28411): avc: denied { prog_load } for pid=20025 comm="syz.7.3369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1457.731004][T11292] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1457.998598][T17571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.008200][T17412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.021477][T17216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.501448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.512841][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.522215][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.531264][T17412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.541925][ T6214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.150962][T17216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.977686][T14885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1459.988964][T14885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1460.004098][T14885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1460.060417][T14885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1460.071402][T14885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1460.465228][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 1460.465246][ T30] audit: type=1400 audit(1765683554.100:28599): avc: denied { create } for pid=20094 comm="syz.2.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1460.494526][T20095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3387'. [ 1460.549822][ T30] audit: type=1400 audit(1765683554.110:28600): avc: denied { read write } for pid=16911 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1460.615002][ T30] audit: type=1400 audit(1765683554.110:28601): avc: denied { open } for pid=16911 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1460.727866][ T30] audit: type=1400 audit(1765683554.110:28602): avc: denied { ioctl } for pid=16911 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1460.958244][ T30] audit: type=1400 audit(1765683554.130:28603): avc: denied { ioctl } for pid=20094 comm="syz.2.3387" path="socket:[81512]" dev="sockfs" ino=81512 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1461.074366][T20099] netlink: 'syz.2.3387': attribute type 5 has an invalid length. [ 1461.171023][ T30] audit: type=1400 audit(1765683554.130:28604): avc: denied { bind } for pid=20094 comm="syz.2.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1461.260705][ T30] audit: type=1400 audit(1765683554.130:28605): avc: denied { setopt } for pid=20094 comm="syz.2.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1461.326401][ T30] audit: type=1400 audit(1765683554.170:28606): avc: denied { execmem } for pid=20092 comm="syz.7.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1461.500711][ T30] audit: type=1400 audit(1765683554.230:28607): avc: denied { prog_load } for pid=20094 comm="syz.2.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1462.575630][T11292] Bluetooth: hci0: command tx timeout [ 1462.578274][T17412] net_ratelimit: 2 callbacks suppressed [ 1462.578289][T17412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.595040][T17412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.676122][ T30] audit: type=1400 audit(1765683554.230:28608): avc: denied { bpf } for pid=20094 comm="syz.2.3387" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1462.950754][ T6214] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1463.120743][ T6214] usb 2-1: device descriptor read/64, error -71 [ 1463.438672][T20115] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1463.438672][T20115] program syz.7.3391 not setting count and/or reply_len properly [ 1463.458496][ T6214] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1463.466358][ T5822] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1463.611074][ T5822] usb 4-1: device descriptor read/64, error -71 [ 1463.617383][ T6214] usb 2-1: device descriptor read/64, error -71 [ 1463.646264][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.811847][T20111] Process accounting resumed [ 1463.915249][ T6214] usb usb2-port1: attempt power cycle [ 1464.050901][ T5822] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1464.189798][T20062] Process accounting resumed [ 1464.304526][ T5822] usb 4-1: device descriptor read/64, error -71 [ 1464.319807][ T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.336877][T17324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.348192][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.390129][T20084] chnl_net:caif_netlink_parms(): no params data found [ 1464.720754][T11292] Bluetooth: hci0: command tx timeout [ 1464.750839][ T5822] usb usb4-port1: attempt power cycle [ 1464.759327][T17324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.201425][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 1465.273762][T20143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3398'. [ 1465.492593][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 1465.492605][ T30] audit: type=1400 audit(1765683559.130:28770): avc: denied { read } for pid=20144 comm="syz.1.3396" dev="nsfs" ino=4026533908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1465.530415][ T30] audit: type=1400 audit(1765683559.160:28771): avc: denied { open } for pid=20144 comm="syz.1.3396" path="net:[4026533908]" dev="nsfs" ino=4026533908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1465.557773][ T30] audit: type=1400 audit(1765683559.160:28772): avc: denied { create } for pid=20144 comm="syz.1.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1465.589279][ T30] audit: type=1400 audit(1765683559.160:28773): avc: denied { create } for pid=20144 comm="syz.1.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1465.615506][ T30] audit: type=1400 audit(1765683559.160:28774): avc: denied { write } for pid=20144 comm="syz.1.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1465.687398][ T30] audit: type=1400 audit(1765683559.160:28775): avc: denied { read } for pid=20144 comm="syz.1.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1465.748140][ T30] audit: type=1400 audit(1765683559.220:28776): avc: denied { write } for pid=20144 comm="syz.1.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1465.771902][ T30] audit: type=1400 audit(1765683559.220:28777): avc: denied { write } for pid=20144 comm="syz.1.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1465.786841][T17324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1465.813995][ T30] audit: type=1400 audit(1765683559.250:28778): avc: denied { read write } for pid=18777 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1465.841669][T20152] veth0_vlan: entered allmulticast mode [ 1465.847913][T20084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.856448][ T30] audit: type=1400 audit(1765683559.250:28779): avc: denied { open } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1465.885212][T20084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.930873][T20084] bridge_slave_0: entered allmulticast mode [ 1465.938235][T20084] bridge_slave_0: entered promiscuous mode [ 1465.998234][T20084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.088816][T20084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.750650][T11292] Bluetooth: hci0: command tx timeout [ 1466.835105][T17324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.846328][T20084] bridge_slave_1: entered allmulticast mode [ 1466.903244][T20084] bridge_slave_1: entered promiscuous mode [ 1467.509217][T20113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.546322][T20084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.735477][T20084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1468.288846][ T49] net_ratelimit: 1 callbacks suppressed [ 1468.288862][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.821194][T11292] Bluetooth: hci0: command tx timeout [ 1469.995024][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.021415][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.032975][T17412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.043620][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.044749][T20084] team0: Port device team_slave_0 added [ 1470.177412][T20084] team0: Port device team_slave_1 added [ 1470.644730][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 1470.644746][ T30] audit: type=1400 audit(1765683564.280:28919): avc: denied { read write } for pid=16911 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1470.734694][T20084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1470.757530][T20084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1470.757554][ T30] audit: type=1400 audit(1765683564.370:28920): avc: denied { read write } for pid=18777 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1470.810204][T20084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1470.878053][ T30] audit: type=1400 audit(1765683564.380:28921): avc: denied { read write open } for pid=16911 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1470.904999][ T30] audit: type=1400 audit(1765683564.380:28922): avc: denied { ioctl } for pid=16911 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1470.930864][ T30] audit: type=1400 audit(1765683564.390:28923): avc: denied { create } for pid=20190 comm="syz.2.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1470.956934][ T30] audit: type=1400 audit(1765683564.420:28924): avc: denied { read write open } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1471.036387][ T30] audit: type=1400 audit(1765683564.420:28925): avc: denied { ioctl } for pid=18777 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1471.062601][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.076457][T20084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.188917][ T30] audit: type=1400 audit(1765683564.500:28926): avc: denied { read } for pid=20193 comm="syz.3.3410" dev="nsfs" ino=4026533393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1471.214616][ T30] audit: type=1400 audit(1765683564.500:28927): avc: denied { open } for pid=20193 comm="syz.3.3410" path="net:[4026533393]" dev="nsfs" ino=4026533393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1471.238794][ T30] audit: type=1400 audit(1765683564.500:28928): avc: denied { create } for pid=20193 comm="syz.3.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1471.272606][T20084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1471.347020][T20084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1471.591036][T17412] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1471.760895][ T1316] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.863018][T17412] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.936558][T17412] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1471.952912][T17412] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1471.978119][T17412] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1472.016765][ T1316] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.053719][T17412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.087448][T17412] usb 4-1: Product: syz [ 1472.100777][T17324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.118932][T17412] usb 4-1: Manufacturer: syz [ 1472.130719][T17412] usb 4-1: SerialNumber: syz [ 1472.190005][T17412] cdc_mbim 4-1:1.0: skipping garbage [ 1472.209932][ T1316] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.285916][T20084] hsr_slave_0: entered promiscuous mode [ 1472.295648][T20084] hsr_slave_1: entered promiscuous mode [ 1472.321533][T20084] debugfs: 'hsr0' already exists in 'hsr' [ 1472.675446][T11292] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1472.685378][T11292] CPU: 0 UID: 0 PID: 11292 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1472.685417][T11292] Tainted: [L]=SOFTLOCKUP [ 1472.685424][T11292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1472.685437][T11292] Workqueue: hci4 hci_rx_work [ 1472.685472][T11292] Call Trace: [ 1472.685481][T11292] [ 1472.685490][T11292] dump_stack_lvl+0x16c/0x1f0 [ 1472.685512][T11292] sysfs_warn_dup+0x7f/0xa0 [ 1472.685534][T11292] sysfs_create_dir_ns+0x24b/0x2b0 [ 1472.685555][T11292] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1472.685575][T11292] ? find_held_lock+0x2b/0x80 [ 1472.685609][T11292] ? do_raw_spin_unlock+0x172/0x230 [ 1472.685637][T11292] kobject_add_internal+0x2c4/0x9d0 [ 1472.685666][T11292] kobject_add+0x16e/0x240 [ 1472.685688][T11292] ? __pfx_kobject_add+0x10/0x10 [ 1472.685712][T11292] ? kobject_put+0xaf/0x6f0 [ 1472.685727][T11292] ? _raw_spin_unlock+0x28/0x50 [ 1472.685758][T11292] device_add+0x288/0x1980 [ 1472.685787][T11292] ? __pfx_dev_set_name+0x10/0x10 [ 1472.685806][T11292] ? __pfx_device_add+0x10/0x10 [ 1472.685832][T11292] ? mgmt_send_event_skb+0x2fb/0x460 [ 1472.685867][T11292] hci_conn_add_sysfs+0x1a8/0x260 [ 1472.685886][T11292] le_conn_complete_evt+0x11ed/0x1fa0 [ 1472.685919][T11292] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1472.685954][T11292] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1472.685987][T11292] hci_le_meta_evt+0x357/0x610 [ 1472.686003][T11292] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1472.686033][T11292] hci_event_packet+0x685/0x1210 [ 1472.686061][T11292] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1472.686079][T11292] ? __pfx_hci_event_packet+0x10/0x10 [ 1472.686104][T11292] ? __pfx___sanitizer_cov_trace_switch+0x10/0x10 [ 1472.686127][T11292] ? kfree_skbmem+0xae/0x1f0 [ 1472.686147][T11292] ? sk_skb_reason_drop+0x136/0x1a0 [ 1472.686179][T11292] hci_rx_work+0x2c9/0x1020 [ 1472.686210][T11292] process_one_work+0x9ba/0x1b20 [ 1472.686244][T11292] ? __pfx_process_one_work+0x10/0x10 [ 1472.686274][T11292] ? assign_work+0x1a0/0x250 [ 1472.686298][T11292] worker_thread+0x6c8/0xf10 [ 1472.686333][T11292] ? __pfx_worker_thread+0x10/0x10 [ 1472.686355][T11292] kthread+0x3c5/0x780 [ 1472.686377][T11292] ? __pfx_kthread+0x10/0x10 [ 1472.686407][T11292] ? rcu_is_watching+0x12/0xc0 [ 1472.686424][T11292] ? __pfx_kthread+0x10/0x10 [ 1472.686447][T11292] ret_from_fork+0x983/0xb10 [ 1472.686469][T11292] ? __pfx_ret_from_fork+0x10/0x10 [ 1472.686490][T11292] ? __switch_to+0x7af/0x10d0 [ 1472.686515][T11292] ? __pfx_kthread+0x10/0x10 [ 1472.686538][T11292] ret_from_fork_asm+0x1a/0x30 [ 1472.686582][T11292] [ 1472.686629][T11292] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1472.792363][ T3548] Bluetooth: hci3: Frame reassembly failed (-84) [ 1472.798746][T11292] Bluetooth: hci4: failed to register connection device [ 1472.987383][T11292] ================================================================== [ 1472.995483][T11292] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xe47/0x1010 [ 1473.000591][T20084] Cannot create hsr debugfs directory [ 1473.003480][T11292] Read of size 8 at addr ffff88807aa47480 by task kworker/u9:0/11292 [ 1473.016895][T11292] [ 1473.019228][T11292] CPU: 0 UID: 0 PID: 11292 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1473.019254][T11292] Tainted: [L]=SOFTLOCKUP [ 1473.019261][T11292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1473.019273][T11292] Workqueue: hci4 hci_rx_work [ 1473.019304][T11292] Call Trace: [ 1473.019309][T11292] [ 1473.019317][T11292] dump_stack_lvl+0x116/0x1f0 [ 1473.019337][T11292] print_report+0xcd/0x630 [ 1473.019360][T11292] ? __virt_addr_valid+0x81/0x610 [ 1473.019377][T11292] ? __phys_addr+0xe8/0x180 [ 1473.019395][T11292] ? l2cap_connect_cfm+0xe47/0x1010 [ 1473.019420][T11292] kasan_report+0xe0/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1473.019442][T11292] ? l2cap_connect_cfm+0xe47/0x1010 [ 1473.019476][T11292] l2cap_connect_cfm+0xe47/0x1010 [ 1473.019505][T11292] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1473.019531][T11292] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1473.019556][T11292] le_conn_complete_evt+0x1991/0x1fa0 [ 1473.019584][T11292] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1473.019613][T11292] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1473.019641][T11292] hci_le_meta_evt+0x357/0x610 [ 1473.019657][T11292] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1473.019685][T11292] hci_event_packet+0x685/0x1210 [ 1473.019711][T11292] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1473.019730][T11292] ? __pfx_hci_event_packet+0x10/0x10 [ 1473.019754][T11292] ? __pfx___sanitizer_cov_trace_switch+0x10/0x10 [ 1473.019776][T11292] ? kfree_skbmem+0xae/0x1f0 [ 1473.019795][T11292] ? sk_skb_reason_drop+0x136/0x1a0 [ 1473.019823][T11292] hci_rx_work+0x2c9/0x1020 [ 1473.019851][T11292] process_one_work+0x9ba/0x1b20 [ 1473.019879][T11292] ? __pfx_process_one_work+0x10/0x10 [ 1473.019906][T11292] ? assign_work+0x1a0/0x250 [ 1473.019928][T11292] worker_thread+0x6c8/0xf10 [ 1473.019955][T11292] ? __pfx_worker_thread+0x10/0x10 [ 1473.019977][T11292] kthread+0x3c5/0x780 [ 1473.019998][T11292] ? __pfx_kthread+0x10/0x10 [ 1473.020018][T11292] ? rcu_is_watching+0x12/0xc0 [ 1473.020034][T11292] ? __pfx_kthread+0x10/0x10 [ 1473.020055][T11292] ret_from_fork+0x983/0xb10 [ 1473.020075][T11292] ? __pfx_ret_from_fork+0x10/0x10 [ 1473.020095][T11292] ? __switch_to+0x7af/0x10d0 [ 1473.020117][T11292] ? __pfx_kthread+0x10/0x10 [ 1473.020137][T11292] ret_from_fork_asm+0x1a/0x30 [ 1473.020170][T11292] [ 1473.020176][T11292] [ 1473.240382][T11292] Allocated by task 11292: [ 1473.244774][T11292] kasan_save_stack+0x33/0x60 [ 1473.249427][T11292] kasan_save_track+0x14/0x30 [ 1473.254076][T11292] __kasan_kmalloc+0xaa/0xb0 [ 1473.258640][T11292] l2cap_chan_create+0x44/0x930 [ 1473.263482][T11292] l2cap_sock_alloc.constprop.0+0xf5/0x1d0 [ 1473.269269][T11292] l2cap_sock_new_connection_cb+0x101/0x240 [ 1473.275148][T11292] l2cap_connect_cfm+0x4f0/0x1010 [ 1473.280149][T11292] le_conn_complete_evt+0x1991/0x1fa0 [ 1473.285501][T11292] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1473.291025][T11292] hci_le_meta_evt+0x357/0x610 [ 1473.295761][T11292] hci_event_packet+0x685/0x1210 [ 1473.300679][T11292] hci_rx_work+0x2c9/0x1020 [ 1473.305157][T11292] process_one_work+0x9ba/0x1b20 [ 1473.310068][T11292] worker_thread+0x6c8/0xf10 [ 1473.314641][T11292] kthread+0x3c5/0x780 [ 1473.318680][T11292] ret_from_fork+0x983/0xb10 [ 1473.323246][T11292] ret_from_fork_asm+0x1a/0x30 [ 1473.327992][T11292] [ 1473.330299][T11292] Freed by task 20212: [ 1473.334335][T11292] kasan_save_stack+0x33/0x60 [ 1473.338992][T11292] kasan_save_track+0x14/0x30 [ 1473.343639][T11292] kasan_save_free_info+0x3b/0x60 [ 1473.348638][T11292] __kasan_slab_free+0x5f/0x80 [ 1473.353373][T11292] kfree+0x2f8/0x6e0 [ 1473.357243][T11292] l2cap_chan_put+0x1bb/0x310 [ 1473.361895][T11292] l2cap_sock_cleanup_listen+0x4d/0x2f0 [ 1473.367419][T11292] l2cap_sock_release+0x69/0x280 [ 1473.372330][T11292] __sock_release+0xb3/0x270 [ 1473.376894][T11292] sock_close+0x1c/0x30 [ 1473.381032][T11292] __fput+0x402/0xb70 [ 1473.385002][T11292] task_work_run+0x150/0x240 [ 1473.389590][T11292] exit_to_user_mode_loop+0xfb/0x540 [ 1473.394850][T11292] do_syscall_64+0x4ee/0xf80 [ 1473.399411][T11292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.405284][T11292] [ 1473.407580][T11292] The buggy address belongs to the object at ffff88807aa47000 [ 1473.407580][T11292] which belongs to the cache kmalloc-2k of size 2048 [ 1473.421604][T11292] The buggy address is located 1152 bytes inside of [ 1473.421604][T11292] freed 2048-byte region [ffff88807aa47000, ffff88807aa47800) [ 1473.435546][T11292] [ 1473.437843][T11292] The buggy address belongs to the physical page: [ 1473.444229][T11292] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7aa40 [ 1473.452955][T11292] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1473.461421][T11292] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1473.468938][T11292] page_type: f5(slab) [ 1473.472895][T11292] raw: 00fff00000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 1473.481455][T11292] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1473.490013][T11292] head: 00fff00000000040 ffff88813ff27000 dead000000000100 dead000000000122 [ 1473.498654][T11292] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 1473.507299][T11292] head: 00fff00000000003 ffffea0001ea9001 00000000ffffffff 00000000ffffffff [ 1473.515938][T11292] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1473.524573][T11292] page dumped because: kasan: bad access detected [ 1473.530958][T11292] page_owner tracks the page as allocated [ 1473.536655][T11292] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 994, tgid 994 (kworker/u8:5), ts 416570070813, free_ts 409172414534 [ 1473.555904][T11292] post_alloc_hook+0x1af/0x220 [ 1473.560663][T11292] get_page_from_freelist+0xd0b/0x31a0 [ 1473.566098][T11292] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 1473.571979][T11292] alloc_pages_mpol+0x1fb/0x550 [ 1473.576810][T11292] new_slab+0x2c3/0x430 [ 1473.580939][T11292] ___slab_alloc+0xe18/0x1c90 [ 1473.585590][T11292] __slab_alloc.constprop.0+0x63/0x110 [ 1473.591025][T11292] __kmalloc_noprof+0x4fc/0x910 [ 1473.595851][T11292] ieee802_11_parse_elems_full+0x1db/0x3780 [ 1473.601720][T11292] ieee80211_inform_bss+0x15a/0x1150 [ 1473.606981][T11292] cfg80211_inform_single_bss_data+0x8e9/0x1d30 [ 1473.613203][T11292] cfg80211_inform_bss_data+0x22b/0x3be0 [ 1473.618806][T11292] cfg80211_inform_bss_frame_data+0x26f/0x720 [ 1473.624844][T11292] ieee80211_bss_info_update+0x310/0xab0 [ 1473.630450][T11292] ieee80211_scan_rx+0x4cf/0xb30 [ 1473.635365][T11292] ieee80211_rx_list+0x1c40/0x2ed0 [ 1473.640456][T11292] page last free pid 9033 tgid 9018 stack trace: [ 1473.646752][T11292] __free_frozen_pages+0x7df/0x1170 [ 1473.651926][T11292] __put_partials+0x130/0x170 [ 1473.656580][T11292] qlist_free_all+0x4c/0xf0 [ 1473.661055][T11292] kasan_quarantine_reduce+0x195/0x1e0 [ 1473.666493][T11292] __kasan_slab_alloc+0x69/0x90 [ 1473.671317][T11292] kmem_cache_alloc_noprof+0x25e/0x770 [ 1473.676759][T11292] ptlock_alloc+0x1f/0x70 [ 1473.681063][T11292] pte_alloc_one+0x84/0x3d0 [ 1473.685541][T11292] do_fault+0x8b8/0x1ad0 [ 1473.689763][T11292] __handle_mm_fault+0x1919/0x2bb0 [ 1473.694847][T11292] handle_mm_fault+0x3fe/0xad0 [ 1473.699585][T11292] do_user_addr_fault+0x7a6/0x1370 [ 1473.704668][T11292] exc_page_fault+0x64/0xc0 [ 1473.709142][T11292] asm_exc_page_fault+0x26/0x30 [ 1473.713963][T11292] [ 1473.716268][T11292] Memory state around the buggy address: [ 1473.721864][T11292] ffff88807aa47380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1473.729909][T11292] ffff88807aa47400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1473.738200][T11292] >ffff88807aa47480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1473.746313][T11292] ^ [ 1473.750354][T11292] ffff88807aa47500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1473.758384][T11292] ffff88807aa47580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1473.766412][T11292] ================================================================== [ 1473.776524][T18182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.785944][T11292] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1473.793157][T11292] CPU: 0 UID: 0 PID: 11292 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1473.804254][T11292] Tainted: [L]=SOFTLOCKUP [ 1473.808554][T11292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1473.818592][T11292] Workqueue: hci4 hci_rx_work [ 1473.823259][T11292] Call Trace: [ 1473.826515][T11292] [ 1473.829442][T11292] dump_stack_lvl+0x3d/0x1f0 [ 1473.834031][T11292] vpanic+0x640/0x6f0 [ 1473.838024][T11292] panic+0xca/0xd0 [ 1473.841750][T11292] ? __pfx_panic+0x10/0x10 [ 1473.846163][T11292] ? l2cap_connect_cfm+0xe47/0x1010 [ 1473.851358][T11292] ? preempt_schedule_common+0x44/0xc0 [ 1473.856795][T11292] ? preempt_schedule_thunk+0x16/0x30 [ 1473.862145][T11292] check_panic_on_warn+0xab/0xb0 [ 1473.867072][T11292] end_report+0x107/0x160 [ 1473.871394][T11292] kasan_report+0xee/0x110 [ 1473.875792][T11292] ? l2cap_connect_cfm+0xe47/0x1010 [ 1473.880977][T11292] l2cap_connect_cfm+0xe47/0x1010 [ 1473.885988][T11292] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1473.891432][T11292] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1473.896876][T11292] le_conn_complete_evt+0x1991/0x1fa0 [ 1473.902245][T11292] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1473.907953][T11292] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1473.913484][T11292] hci_le_meta_evt+0x357/0x610 [ 1473.918225][T11292] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1473.924279][T11292] hci_event_packet+0x685/0x1210 [ 1473.929199][T11292] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1473.934472][T11292] ? __pfx_hci_event_packet+0x10/0x10 [ 1473.939862][T11292] ? __pfx___sanitizer_cov_trace_switch+0x10/0x10 [ 1473.946279][T11292] ? kfree_skbmem+0xae/0x1f0 [ 1473.950851][T11292] ? sk_skb_reason_drop+0x136/0x1a0 [ 1473.956052][T11292] hci_rx_work+0x2c9/0x1020 [ 1473.960561][T11292] process_one_work+0x9ba/0x1b20 [ 1473.965495][T11292] ? __pfx_process_one_work+0x10/0x10 [ 1473.970853][T11292] ? assign_work+0x1a0/0x250 [ 1473.975437][T11292] worker_thread+0x6c8/0xf10 [ 1473.980041][T11292] ? __pfx_worker_thread+0x10/0x10 [ 1473.985137][T11292] kthread+0x3c5/0x780 [ 1473.989192][T11292] ? __pfx_kthread+0x10/0x10 [ 1473.993761][T11292] ? rcu_is_watching+0x12/0xc0 [ 1473.998502][T11292] ? __pfx_kthread+0x10/0x10 [ 1474.003073][T11292] ret_from_fork+0x983/0xb10 [ 1474.007645][T11292] ? __pfx_ret_from_fork+0x10/0x10 [ 1474.012737][T11292] ? __switch_to+0x7af/0x10d0 [ 1474.017396][T11292] ? __pfx_kthread+0x10/0x10 [ 1474.021965][T11292] ret_from_fork_asm+0x1a/0x30 [ 1474.026721][T11292] [ 1474.030077][T11292] Kernel Offset: disabled [ 1474.034373][T11292] Rebooting in 86400 seconds..