last executing test programs: 3m28.115587777s ago: executing program 0 (id=185): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000180), 0x0, 0x8cff, 0x1) 3m27.951710629s ago: executing program 0 (id=186): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f0000000440)) r1 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)="020000000980", 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000440)={0x5, 0x8, 0x1}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2) r4 = userfaultfd(0xc0001) ppoll(&(0x7f0000000180)=[{r4, 0x404}], 0x1, 0x0, &(0x7f0000000340)={[0x401]}, 0x8) accept4(r1, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd8, 0x96, 0x6f, 0x8, 0xdba, 0x5000, 0xc1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x7c, 0x0, 0x0, 0xf, 0xe9, 0xd1}}]}}]}}, 0x0) fchdir(r7) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd72000000000004000000080018000bac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3m24.816776792s ago: executing program 0 (id=193): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 3m21.622325785s ago: executing program 0 (id=200): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m21.575685283s ago: executing program 0 (id=202): syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x74, &(0x7f00000005c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 3m18.813397699s ago: executing program 0 (id=212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="a50100000000850000006d00000095bc5138409d9456dce0de05f11b1c44ac628ea52ae339bceecf7b642ad49596911b8b9636390350d552181ab75d6c2e20f6471b38cc1bbe1ea70fd641b4b3d035ac14051181f20008c6c2fcb0ea139580b12ddba193fa"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0xe3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x10000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) r7 = gettid() r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r8, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffb, 0x0, 0x0, @buffer={0x0, 0x7b, &(0x7f0000000040)=""/123}, &(0x7f00000000c0), &(0x7f0000000480)=""/237, 0xc5d0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)}) 3m3.299860957s ago: executing program 32 (id=212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="a50100000000850000006d00000095bc5138409d9456dce0de05f11b1c44ac628ea52ae339bceecf7b642ad49596911b8b9636390350d552181ab75d6c2e20f6471b38cc1bbe1ea70fd641b4b3d035ac14051181f20008c6c2fcb0ea139580b12ddba193fa"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0xe3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x10000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) r7 = gettid() r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r8, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffb, 0x0, 0x0, @buffer={0x0, 0x7b, &(0x7f0000000040)=""/123}, &(0x7f00000000c0), &(0x7f0000000480)=""/237, 0xc5d0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)}) 2m58.801483526s ago: executing program 2 (id=280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, 0x0, 0x20008000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$MSR(&(0x7f0000000180), 0x100000000, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) ptrace(0x10, r2) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000100)={0x7, 0x0, 0x4}, &(0x7f00000013c0)=[{}, {}, {}, {}]) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000003c0)=""/4096, 0x1000) 2m57.629074029s ago: executing program 3 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x240) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x7, @pix={0x9, 0x4, 0xb5315258, 0x9, 0x8, 0xe, 0x8, 0x726c4a97, 0x1, 0x7, 0x2, 0x6}}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x478fc34547a5d886}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="c00100003700000425bd7000fcdbdf251a0000000800e100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2m56.666354493s ago: executing program 3 (id=286): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m56.597149716s ago: executing program 3 (id=288): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) 2m56.563086577s ago: executing program 2 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='team_slave_0\x00', 0x10) syz_emit_ethernet(0xf8, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0xe2, 0x865, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x10, 0xa4, 0x0, 0x5, [0x9, 0x1, 0x5]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}, {"a9ecfb355c81ad68238270051186c7f4eb8cc6b1fb943c3cfd8f6459a5c4f82f3b37226fe6d7353175c6fe4474642c0d9e28d4a19055b65b134e4579435bf28caca12a23e45e0f2031b2f94d55c6eea944bd24974070031eeecae08dd0dd680deff38e9cdcdd14db22ab5324b4add32cf398f055010606c878a4704f73bfb90d02327ed5533509cb8dfb031cf1c5d3b50e8cb8991d7c49e881b9eccfdc038edda3dcf3a2f1f540c9cc65"}}}}}}, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@snap={0xaa, 0xa9, "5cb5", "175d35", 0x8914, "e3a6402d8713f5c3d87e0c366fd383e88da0c81c3c6174d4c239de2695d4c1a54b04b2d8cf4edc91"}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000200)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000001580)=@multiplanar_mmap={0x4, 0x3, 0x4, 0x4000, 0x8, {}, {0x5, 0x8, 0xf7, 0x7, 0x2, 0x49, "311c35f0"}, 0x80000001, 0x1, {&(0x7f00000012c0)=[{0x8, 0x3, {0x1}, 0x8}, {0x7, 0x3, {0x8001}, 0xffffffff}]}, 0xff, 0x0, r2}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000004c0)=0x401) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x4) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m56.481633471s ago: executing program 3 (id=290): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) pipe2$watch_queue(&(0x7f0000001180), 0x80) 2m56.127432341s ago: executing program 2 (id=291): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, 0x0, 0x0) getsockopt(r5, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, 0x0, 0x0) close_range(r4, r4, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x10) 2m56.005934391s ago: executing program 1 (id=292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) process_madvise(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001600)="7fe37052", 0x4}], 0x2, 0x9, 0x0) 2m55.947720518s ago: executing program 1 (id=293): r0 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x64, 0x0, 0x24, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) sched_setscheduler(0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x86}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044103, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffffffffff6e}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='msdos\x00', 0x8, &(0x7f0000000200)='ethtool\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) syz_emit_vhci(&(0x7f0000000fc0)=ANY=[@ANYBLOB="043e1f0a00c90001ed069c62aee27721815f800206197444063c3b1c"], 0x22) 2m55.750988701s ago: executing program 3 (id=294): r0 = socket(0x1e, 0x4, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0x1e, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1, 0x4782, 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) socket$tipc(0x1e, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r7) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r8, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) unshare(0x6a040000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x39000, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) 2m54.726035667s ago: executing program 1 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x240) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x7, @pix={0x9, 0x4, 0xb5315258, 0x9, 0x8, 0xe, 0x8, 0x726c4a97, 0x1, 0x7, 0x2, 0x6}}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x478fc34547a5d886}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="c00100003700000425bd7000fcdbdf251a0000000800e100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2m53.774304319s ago: executing program 1 (id=297): r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r2, 0x7, 0x6, 0x1ff0000000000000}) syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x400502) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, 0x0, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, 0x0, 0x0) write$sndseq(r8, 0x0, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r9 = accept4(r6, 0x0, 0x0, 0x800) syz_emit_ethernet(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0xc0) recvmmsg$unix(r9, &(0x7f0000003700)=[{{0x0, 0x7f0, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2m53.713055451s ago: executing program 2 (id=298): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m53.64545223s ago: executing program 2 (id=299): r0 = getpgid(0x0) listen(0xffffffffffffffff, 0x802) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfff7, 0xe, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x995, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x101, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0xfc74, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xd064, 0x10000005, 0x4, 0x10000, 0xd, 0x0, 0x9, 0x10, 0x4000e, 0x9, 0x87, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7b, 0xa, 0x0, 0x1000, 0xf1, 0x5a56, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x6, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7e2, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3, 0x8, 0x1, 0xffff0002, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) syz_open_procfs(0x0, 0x0) r4 = syz_pidfd_open(r0, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) 2m52.720175981s ago: executing program 3 (id=302): socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)="020000000980", 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000440)={0x5, 0x8, 0x1}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2) r4 = userfaultfd(0xc0001) ppoll(&(0x7f0000000180)=[{r4, 0x404}], 0x1, 0x0, &(0x7f0000000340)={[0x401]}, 0x8) accept4(r1, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd8, 0x96, 0x6f, 0x8, 0xdba, 0x5000, 0xc1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x7c, 0x0, 0x0, 0xf, 0xe9, 0xd1}}]}}]}}, 0x0) fchdir(r7) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd72000000000004000000080018000bac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m52.621924561s ago: executing program 2 (id=304): r0 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x64, 0x0, 0x24, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) sched_setscheduler(0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x86}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044103, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffffffffff6e}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='msdos\x00', 0x8, &(0x7f0000000200)='ethtool\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) syz_emit_vhci(&(0x7f0000000fc0)=ANY=[@ANYBLOB="043e1f0a00c90001ed069c62aee27721815f800206197444063c3b1c"], 0x22) 2m50.695517747s ago: executing program 1 (id=306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x240) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x7, @pix={0x9, 0x4, 0xb5315258, 0x9, 0x8, 0xe, 0x8, 0x726c4a97, 0x1, 0x7, 0x2, 0x6}}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x478fc34547a5d886}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="c00100003700000425bd7000fcdbdf251a0000000800e100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 2m49.526483276s ago: executing program 1 (id=307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 2m37.412985719s ago: executing program 33 (id=304): r0 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x64, 0x0, 0x24, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) sched_setscheduler(0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x86}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044103, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffffffffff6e}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='msdos\x00', 0x8, &(0x7f0000000200)='ethtool\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) syz_emit_vhci(&(0x7f0000000fc0)=ANY=[@ANYBLOB="043e1f0a00c90001ed069c62aee27721815f800206197444063c3b1c"], 0x22) 2m37.369446886s ago: executing program 34 (id=302): socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)="020000000980", 0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000440)={0x5, 0x8, 0x1}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2) r4 = userfaultfd(0xc0001) ppoll(&(0x7f0000000180)=[{r4, 0x404}], 0x1, 0x0, &(0x7f0000000340)={[0x401]}, 0x8) accept4(r1, 0x0, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r5, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd8, 0x96, 0x6f, 0x8, 0xdba, 0x5000, 0xc1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x7c, 0x0, 0x0, 0xf, 0xe9, 0xd1}}]}}]}}, 0x0) fchdir(r7) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd72000000000004000000080018000bac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m34.317931259s ago: executing program 35 (id=307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 21.107282647s ago: executing program 4 (id=710): getpgid(0x0) listen(0xffffffffffffffff, 0x802) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 19.846827093s ago: executing program 4 (id=718): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$sock(r0, &(0x7f0000002580)=[{{&(0x7f0000002380)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, 0x0}}], 0x1, 0x40840) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x9, 0x7, 0x41, @mcast1, @private0, 0x7800, 0x10, 0x7, 0xfffffff3}}) 19.319169589s ago: executing program 4 (id=721): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace(0x10, r0) (async) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) (async) syz_open_procfs$userns(r0, &(0x7f0000000040)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, 0x0, 0x0, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0) (async) r2 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x1d) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xfeffffffffffff) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) 19.163081364s ago: executing program 4 (id=722): syz_open_dev$usbfs(&(0x7f0000000080), 0x66d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chmod(&(0x7f0000000180)='./file0/file1\x00', 0x5d375b36851b5d76) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) timer_settime(0x0, 0x0, 0x0, 0x0) mq_open(0x0, 0x40, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 18.106964259s ago: executing program 4 (id=728): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x28f8, &(0x7f00000003c0)={0x0, 0xc8a2, 0xc000, 0x1, 0x2b1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x1, 0x0, &(0x7f00000004c0)='c', 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="3800000040001901feffffff00000000017c0000140042800f000a002e2425d42a7b2b2e4e2e00000c0001800600060065310000040008"], 0x38}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x2, 0xd94}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000018c0)=""/102400, 0x19000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x4021) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r5, &(0x7f0000000740), &(0x7f00000006c0)=""/46}, 0x20) r6 = memfd_create(&(0x7f0000000800)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc\xca\x02\xc7.\x8e$\x8d\xc5dan\xaaH\xdd\xaa\xbe\x0f\xe2\xf5\xcf\xcd\xe5\xd3\xdf\xb1~\xb4\xcc\x90\xe32>6\xc7\xaf~S:\xa4\x91\xfd\xc3\x14\xeeJ*\xb8\xba\xd7D\r\xe6\xe7\x02X\xfa\xbbR\xc8\x064\x95\xcd\xadi,\x11z,H\x97\xadZ\x96\xa0\xf5uYz', 0x0) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RLOPEN(r4, &(0x7f0000000140)={0xffde, 0xd, 0x4, {{0x1, 0x0, 0x7}, 0x3}}, 0x13) syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) 17.600782862s ago: executing program 4 (id=734): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x50}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6bba9"], 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000200)=[{0x18, 0x84, 0x0, '\x00'}], 0x18}, 0xd1) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x4, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x0, &(0x7f0000000280)) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000002c0), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109028efc5e41bfdeeb52159c9a9b46f11b0001000000000904010008e911bd000905f936"], 0x0) 17.484670007s ago: executing program 36 (id=734): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x50}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6bba9"], 0x2c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000200)=[{0x18, 0x84, 0x0, '\x00'}], 0x18}, 0xd1) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x4, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x0, &(0x7f0000000280)) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000002c0), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000380)={{0x6, @null, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109028efc5e41bfdeeb52159c9a9b46f11b0001000000000904010008e911bd000905f936"], 0x0) 9.599394141s ago: executing program 7 (id=757): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r3 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x700) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='percpu_alloc_percpu\x00', r5}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x5) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x24) syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x8482) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x8080) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0xc040128b, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00002b2000/0x1000)=nil, &(0x7f00005ce000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000922000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r1}, 0x68) 8.282553807s ago: executing program 5 (id=758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000", @ANYRES32], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x240) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x7, @pix={0x9, 0x4, 0xb5315258, 0x9, 0x8, 0xe, 0x8, 0x726c4a97, 0x1, 0x7, 0x2, 0x6}}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x478fc34547a5d886}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="c00100003700000425bd7000fcdbdf251a0000000800e100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 8.28203958s ago: executing program 8 (id=759): socket$kcm(0x10, 0x400000002, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x33ac98ac, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) epoll_create1(0x0) r1 = epoll_create1(0x0) io_setup(0x41, &(0x7f0000000000)=0x0) io_submit(r2, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980902, 0x3, @name="136a94406c8b58227bf97c8ce1260c5422a4fad5015e5aab13ee2822be741dd5"}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x2}, 0x18, 0x3) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000080)={0x2, r1}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, 0xffffffffffffffff) 8.281774065s ago: executing program 6 (id=760): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="0521c6877fdc4f12ea7403e424a0990d41498e3595039f26a42a89976177b2797fb9836fc0cde2c1cd86e8dc0ad5a040c2e1f1050e130723c1f60ede7d730c3ee634ade39b8b0862eed3c994f5c9bfd3b532", @ANYRESOCT, @ANYRESDEC=r0], 0x0) 8.279477446s ago: executing program 7 (id=761): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) faccessat(0xffffffffffffffff, 0x0, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r0, &(0x7f0000002180)=""/4103, 0x1007, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x2, 0x0, &(0x7f0000000740)=""/4096, &(0x7f0000000280)=""/182, &(0x7f0000000380)=""/190, 0xc000}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x6, &(0x7f0000000500)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x2005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x6}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x34}, 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) openat$cgroup_ro(r4, &(0x7f0000000480)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000700)={0x7, 0x8296, &(0x7f00000000c0)=[0x401], &(0x7f0000000040)=[0x2, 0x4, 0x7ff, 0x4], &(0x7f0000000000)=[0x1, 0x21], &(0x7f0000000100)}) ioctl$RNDADDENTROPY(r1, 0x40045201, 0xffffffffffffffff) 6.823209901s ago: executing program 5 (id=762): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0xc6100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='i2c_write\x00', r0, 0x0, 0x2000}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r2, r1}}, 0x18) 6.821691309s ago: executing program 8 (id=763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={0x0}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$audion(0x0, 0x7, 0x171c02) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = dup(r0) write$binfmt_elf32(r5, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x7fffffff, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}], "84269064e02f"}, 0x5e) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.821430932s ago: executing program 6 (id=764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffff12, [{0x0, 0x2, 0xf}]}]}, {0x0, [0x0, 0x4f]}}, 0x0, 0x34, 0x0, 0x1, 0x40}, 0x28) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r5, 0x2, 0x6}, 0xfffffffffffffdd9) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r6, &(0x7f00000007c0), &(0x7f00000000c0)=""/79}, 0x20) r7 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x0, 0x5, 0x8, 0x0, 0x8, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_idx={0x18, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0xb7e3, 0x0, 0x0, 0x41100, 0x12, '\x00', r3, 0x0, r1, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xf, 0x0, 0x6bfbe962}, 0x10, 0x213e7, r0, 0xa, &(0x7f0000000500)=[r6, r6, r4, r6, r6, r4], &(0x7f0000000540)=[{0x3, 0x1, 0x0, 0xb}, {0x3, 0x5, 0x9, 0xc}, {0x5, 0x1, 0x1, 0xd}, {0x0, 0x5, 0xa, 0xb}, {0x0, 0x4, 0x3, 0x4}, {0x2, 0x5, 0x4, 0x4}, {0x2, 0x4, 0xa, 0xb}, {0x0, 0x5, 0x1, 0x4}, {0x4, 0x5, 0x6, 0xb}, {0x4, 0x1, 0xc, 0x2}], 0x10, 0x100}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x1}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x9}}]}}) 6.821142099s ago: executing program 7 (id=765): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x40000) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) sendmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa, 0x8800}, 0x4000080) close(r0) 5.261803503s ago: executing program 5 (id=766): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 5.259242059s ago: executing program 8 (id=767): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2b, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xe, 0x12}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000840)=@IORING_OP_SHUTDOWN={0x22, 0x4, 0x0, r4, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) close(r1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r10 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r10) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x3f, [], [0x2b8]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r1, 0x24, 0x0, 0xda, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.258491352s ago: executing program 6 (id=768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000180), 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) (fail_nth: 6) 5.258138732s ago: executing program 7 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='fd', 0x0, r1) close_range(r0, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r6, 0x3b82, &(0x7f0000000000)={0x18, r7, 0x3, 0x0, &(0x7f0000000280)=[{0x7, 0xe}, {0x800, 0xa454}, {0x9, 0x200055d}]}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r9, 0x40085112, &(0x7f0000000080)=@echo=0x1ff) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xfffffffc, 0xc, 0x8}, &(0x7f0000000340)=0x14) setsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000380)={r10, 0xc, 0x8, 0x1000, 0x2, 0x81}, 0x14) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000002c0)=@fd={0xadce, 0x6, 0x4, 0x2000, 0x3, {}, {0x1, 0x0, 0x4, 0x40, 0x8, 0xf, "a52f703a"}, 0xa9, 0x4, {}, 0x10001, 0x0, r12}) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 3.61156457s ago: executing program 5 (id=770): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty=0xff91}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) 3.599433832s ago: executing program 8 (id=771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000", @ANYRES32], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x240) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000340)={0x7, @pix={0x9, 0x4, 0xb5315258, 0x9, 0x8, 0xe, 0x8, 0x726c4a97, 0x1, 0x7, 0x2, 0x6}}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x478fc34547a5d886}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="c00100003700000425bd7000fcdbdf251a0000000800e100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 3.599223163s ago: executing program 6 (id=772): r0 = socket$kcm(0xf, 0x3, 0x2) accept4(r0, 0x0, 0x0, 0x0) (fail_nth: 1) 3.598882916s ago: executing program 7 (id=773): socket$kcm(0x10, 0x400000002, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x33ac98ac, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) epoll_create1(0x0) r1 = epoll_create1(0x0) io_setup(0x41, &(0x7f0000000000)=0x0) io_submit(r2, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x980902, 0x3, @name="136a94406c8b58227bf97c8ce1260c5422a4fad5015e5aab13ee2822be741dd5"}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r3, &(0x7f0000000840)=[{&(0x7f0000000380)='\f', 0xfff5}], 0x1, 0x5, 0xb2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x2}, 0x18, 0x3) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000080)={0x2, r1}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, 0xffffffffffffffff) 1.84254069s ago: executing program 5 (id=774): socket$kcm(0xf, 0x5, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) socketpair(0x22, 0x1, 0xd, &(0x7f00000000c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010101, @in=@loopback, 0x0, 0x20, 0x2001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0xfffffffffffffff9, 0x3, 0x0, 0xffffffffffffffff, 0x40000, 0xffffffff}, {}, 0x0, 0x4}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3507, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x3}}, 0xe8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x3, 0x2, '\x00', 0x2}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x5000, 0x8563, 0x9, 0xffff, 0x0, [{0x80, 0x7, 0x0, '\x00', 0x5}, {0x10, 0x1, 0xc, '\x00', 0xee}, {0x2, 0x4, 0x7, '\x00', 0x4}, {0x5, 0x9, 0x6, '\x00', 0x3}, {0x2d, 0x9, 0x5, '\x00', 0x5}, {0x0, 0x1, 0xa3}, {0x2, 0x8, 0x8, '\x00', 0x5}, {0xfb, 0x3, 0xfb, '\x00', 0x7}, {0x1, 0x2, 0x7, '\x00', 0x76}, {0xa5, 0x5e, 0x42, '\x00', 0x1}, {0x7, 0x5, 0x5, '\x00', 0xf8}, {0x6f, 0x40, 0x2, '\x00', 0x3}, {0xb8, 0x7, 0x8, '\x00', 0xd}, {0xc, 0x5, 0xf, '\x00', 0x6}, {0x6, 0xad, 0x0, '\x00', 0x9}, {0x4, 0x4, 0xfb, '\x00', 0xc7}, {0x40, 0xe, 0x7d, '\x00', 0x6}, {0x7, 0x8, 0x6, '\x00', 0x5}, {0x29, 0xb, 0xd, '\x00', 0x8}, {0x8, 0x9, 0x9, '\x00', 0xd}, {0x7, 0x3, 0x7f, '\x00', 0x80}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0xda, 0x7, 0x2, '\x00', 0x2}, {0x2, 0xf8, 0xd, '\x00', 0x6}]}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x3, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000002c0)=@req3={0x970, 0xcbf, 0x1ff, 0x80000001, 0x999, 0x9, 0x54}, 0x1c) setsockopt$packet_int(r5, 0x107, 0x7, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, r8}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4044845}, 0x4050) socket$kcm(0x2, 0xa, 0x2) 1.8421689s ago: executing program 8 (id=775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f00000002c0)=0x4, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000300090c100000000000224e0000", 0x58}], 0x1) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) keyctl$read(0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80003, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000015c0)=@delsa={0x28, 0x11, 0x1, 0x70bd25, 0x25dfdbfe, {@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4d4, 0x2, 0xff}}, 0x28}}, 0x4000) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, {0x8000000000000001, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x7e5e}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f017a00bad104b000eeec360fc7310f1ad50f01c80f01c80f01c9f30faeeb0f0107", 0x22}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.841954999s ago: executing program 6 (id=776): r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500003000640000002100907812000228250000090000000000000000e0000002e000000100"/62], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}]}}) syncfs(0xffffffffffffffff) ioctl$HIDIOCGVERSION(r4, 0x80044801, &(0x7f0000000000)) setsockopt(r3, 0x84, 0x24, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "b4dd412d6878b771", "11ea75812160f5c7885a4706d0ebe7da", "59549dd9", "c7bb85e8c1987149"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d7de9e20aa142602"], 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0) 1.840982662s ago: executing program 7 (id=777): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8b, 0xffffffff, 0x40}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) fchmod(r7, 0x80) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$COMEDI_UNLOCK(0xffffffffffffffff, 0x6406) bind$nfc_llcp(r8, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004c40)={&(0x7f0000004a80)={0x18, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004880}, 0x20040084) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) ioctl$IOC_PR_RELEASE(r9, 0x401070ca, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) 4.077679ms ago: executing program 5 (id=778): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbf8}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x48, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x24604, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x48}}, 0x20040850) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbf8}, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x48, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x24604, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x48}}, 0x20040850) (async) 688.418µs ago: executing program 8 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 32) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) (async, rerun: 64) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x250480) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40420c0}, 0x20004010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) (async) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) (async) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000380)=@multiplanar_fd={0x0, 0xa, 0x4, 0x20, 0x87, {}, {0x4, 0x1, 0x3c, 0x2, 0x43, 0x2, "352fc590"}, 0x10000004, 0x4, {&(0x7f0000000300)=[{0xffff, 0x1, {}, 0x7}, {0xc, 0x5, {}, 0x5}]}, 0x3ff}) (async, rerun: 64) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) (async, rerun: 64) mount(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0, &(0x7f00000004c0)='\x91NQA\x8b\xc9\xa6\xeb\x81\v\x9dC\xbf\x8fU\x8c\x94\xcd\xe6\x93\x96\x18\xbf~\xb5\xedK\xb5\x04\xa6\xb3\x18\xe2\x9a_\xd9\x17(\x0fJ\x92\x1d6\a>\xe2\x90\xa2\xf3w~C\xd8\xdf,Y\xbcZst\'\x9f\x9eA\xd2\x03c\xc8\xbe\xe9Z\xa1\n\xa8\xb9 s\x1d<\xea\xf4\xab\x1c\'`\xac\x92\x13v\xece\xbeu\xb4\x81]\xb2)\xb8T\xa4x\x85\xc7\xac\x1b@\tHp\r\xc8\xb4\xc88\x80\x01\x88\xe3G\xa0\xd4\xfc\xf2<\xc8\xa2B\xe9\x92\x06\x04\xa6\xd7B\x19\xbcc\xb7\xd8\xf7\xe3\x82\x81\xbdnJ\x93\xabv\x92\xaak\x14}a\xea\x89\xc5\x9e\xda\xdeTC\x9b\x9b\xbfj\xb7U\xa9\t\x06\xdb;\xf9j\x10\xa3\x9a\xaa[\b\t\x00\x93<\x96}o\xf0\xbc\x87FaM\xbe01<\xda\xf9\x19\x05UE\xe0\xb7)\x13\x93\xe9\xa1\xcf%\x91\x03\xc6\x99P\xb4\x8d\xda\xde\xb4\xbe;\xc5\x98}\x9e\xbaHPW\xaa\x97\xec\x19m\xad\x1c>g\x80Z6\xd00tt5\x96:\x82 x\xfe\x19\xdeT5r\x0f\x17sMW') (async) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 0s ago: executing program 6 (id=780): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 88] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.521749][ T6688] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.535597][ T7284] veth0_macvtap: entered promiscuous mode [ 213.545080][ T7118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.555043][ T6688] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.577056][ T7284] veth1_macvtap: entered promiscuous mode [ 213.595087][ T7285] veth0_vlan: entered promiscuous mode [ 213.616042][ T6688] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.632518][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 213.642422][ T5955] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 213.658263][ T5955] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 213.678691][ T6688] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.687845][ T5955] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 213.699718][ T6688] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.703780][ T5955] usb 5-1: config 1 has no interface number 0 [ 213.727291][ T7285] veth1_vlan: entered promiscuous mode [ 213.734391][ T5955] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.739590][ T6688] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.755946][ T5955] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 213.774462][ T5955] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 213.785393][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.800628][ T3679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.809913][ T3679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.811595][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.865779][ T5955] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 213.918501][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.960405][ T6688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.964898][ T7285] veth0_macvtap: entered promiscuous mode [ 213.974155][ T6688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.981611][ T3686] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.006515][ T3686] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.018289][ T3686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.033142][ T7285] veth1_macvtap: entered promiscuous mode [ 214.039080][ T30] audit: type=1400 audit(1765207329.060:456): avc: denied { mounton } for pid=7298 comm="syz-executor" path="/root/syzkaller.Dx9xzL/syz-tmp" dev="sda1" ino=2050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 214.067813][ T3686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.080050][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.090877][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.094481][ T3686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.100378][ T30] audit: type=1400 audit(1765207329.060:457): avc: denied { mount } for pid=7298 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 214.121283][ T3686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.295834][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.324232][ T30] audit: type=1400 audit(1765207329.060:458): avc: denied { mounton } for pid=7298 comm="syz-executor" path="/root/syzkaller.Dx9xzL/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 214.329938][ T3679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.350574][ T30] audit: type=1400 audit(1765207329.060:459): avc: denied { mount } for pid=7298 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 214.368308][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.380926][ T30] audit: type=1400 audit(1765207329.070:460): avc: denied { mounton } for pid=7298 comm="syz-executor" path="/root/syzkaller.Dx9xzL/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 214.390582][ T3679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.475735][ T5955] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 214.823713][ T5884] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 214.872230][ T5991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.883883][ T3679] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.894746][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.915708][ T3679] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.943760][ T3679] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.972731][ T3679] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.994545][ T5884] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 215.007215][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.016102][ T5884] usb 9-1: Product: syz [ 215.039353][ T5884] usb 9-1: Manufacturer: syz [ 215.051906][ T5884] usb 9-1: SerialNumber: syz [ 215.059898][ T3786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.083715][ T3786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.223422][ T6247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.236193][ T6247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.413478][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.423984][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.523689][ T116] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 215.942452][ T5955] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 216.096936][ T5955] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.120009][ T5955] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 216.147516][ T5955] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 216.283708][ T5944] usb 5-1: USB disconnect, device number 14 [ 216.291076][ T5944] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 216.360244][ T5955] usb 7-1: Product: syz [ 216.369514][ T5955] usb 7-1: Manufacturer: syz [ 216.734724][ T5955] usb 7-1: SerialNumber: syz [ 217.270860][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 217.270878][ T30] audit: type=1400 audit(1765207332.290:487): avc: denied { create } for pid=7601 comm="syz.7.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.323212][ T5955] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 217.421261][ T30] audit: type=1400 audit(1765207332.440:488): avc: denied { map } for pid=7601 comm="syz.7.344" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 217.579492][ T30] audit: type=1400 audit(1765207332.440:489): avc: denied { read write } for pid=7601 comm="syz.7.344" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 217.692863][ T30] audit: type=1400 audit(1765207332.540:490): avc: denied { setopt } for pid=7601 comm="syz.7.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.693052][ T116] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 217.785588][ T30] audit: type=1400 audit(1765207332.810:491): avc: denied { read write } for pid=7613 comm="syz.5.345" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 217.849740][ T30] audit: type=1400 audit(1765207332.860:492): avc: denied { open } for pid=7613 comm="syz.5.345" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 217.962694][ T116] usb 5-1: Using ep0 maxpacket: 16 [ 217.974530][ T30] audit: type=1400 audit(1765207333.000:493): avc: denied { read } for pid=7613 comm="syz.5.345" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 217.975538][ T116] usb 5-1: config 0 has an invalid interface number: 71 but max is 1 [ 217.998180][ T30] audit: type=1400 audit(1765207333.000:494): avc: denied { open } for pid=7613 comm="syz.5.345" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 218.393002][ T5987] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 218.403293][ T116] usb 5-1: config 0 has an invalid interface number: 220 but max is 1 [ 218.456202][ T116] usb 5-1: config 0 has no interface number 0 [ 218.470066][ T116] usb 5-1: config 0 has no interface number 1 [ 218.485697][ T116] usb 5-1: config 0 interface 71 has no altsetting 0 [ 218.498399][ T30] audit: type=1400 audit(1765207333.520:495): avc: denied { read write } for pid=7562 comm="syz.8.312" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 218.529196][ T30] audit: type=1400 audit(1765207333.520:496): avc: denied { open } for pid=7562 comm="syz.8.312" path="/0/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 218.564858][ T116] usb 5-1: config 0 interface 220 has no altsetting 0 [ 218.575508][ T5987] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 218.587763][ T5884] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 218.610822][ T5884] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 218.621125][ T5987] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 218.630501][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.639919][ T5987] usb 6-1: Product: syz [ 218.666411][ T116] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=1b.69 [ 218.670644][ T5884] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 218.685698][ T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.688950][ T5987] usb 6-1: Manufacturer: syz [ 218.717932][ T116] usb 5-1: Product: syz [ 218.720165][ T5987] usb 6-1: SerialNumber: syz [ 218.731852][ T5884] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 218.733781][ T116] usb 5-1: Manufacturer: syz [ 218.747666][ T116] usb 5-1: SerialNumber: syz [ 218.768008][ T116] usb 5-1: config 0 descriptor?? [ 218.788403][ T5884] usb 9-1: USB disconnect, device number 2 [ 218.974715][ T5819] Bluetooth: hci5: Unknown advertising packet type: 0x1e [ 218.974762][ T5819] Bluetooth: hci5: Malformed LE Event: 0x0d [ 218.989208][ T5987] as10x_usb: device has been detected [ 218.996001][ T5987] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 219.020488][ T5987] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 219.051548][ T5987] as10x_usb: error during firmware upload part1 [ 219.061440][ T5987] Registered device Elgato EyeTV DTT Deluxe [ 219.069582][ T5987] usb 6-1: USB disconnect, device number 2 [ 219.147162][ T5987] Unregistered device Elgato EyeTV DTT Deluxe [ 219.149602][ T5987] as10x_usb: device has been disconnected [ 219.191295][ T7563] orangefs_mount: mount request failed with -4 [ 219.464304][ T5987] usb 7-1: USB disconnect, device number 2 [ 219.492412][ T5987] usblp0: removed [ 219.492987][ T7638] affs: No valid root block on device nullb0 [ 219.635195][ T116] usb 5-1: USB disconnect, device number 15 [ 219.754540][ T7536] udevd[7536]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.71/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.919743][ T7651] trusted_key: encrypted_key: insufficient parameters specified [ 220.852637][ T7662] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 221.031103][ T7648] kvm: apic: phys broadcast and lowest prio [ 221.130766][ T7669] netlink: 'syz.6.351': attribute type 10 has an invalid length. [ 221.260342][ T7669] team0: Device veth1_macvtap failed to register rx_handler [ 222.549624][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 222.549641][ T30] audit: type=1400 audit(1765207337.570:517): avc: denied { read } for pid=7673 comm="syz.4.354" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 222.634220][ T30] audit: type=1400 audit(1765207337.610:518): avc: denied { open } for pid=7673 comm="syz.4.354" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 222.730658][ T30] audit: type=1400 audit(1765207337.610:519): avc: denied { ioctl } for pid=7673 comm="syz.4.354" path="socket:[17459]" dev="sockfs" ino=17459 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 222.757736][ T5954] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 222.832917][ T30] audit: type=1400 audit(1765207337.610:520): avc: denied { ioctl } for pid=7673 comm="syz.4.354" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 222.912255][ T5954] usb 9-1: Using ep0 maxpacket: 8 [ 222.919998][ T5954] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 222.933521][ T5954] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 222.961046][ T5954] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.984847][ T5954] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.028362][ T5954] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.041586][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.115664][ T30] audit: type=1400 audit(1765207338.140:521): avc: denied { create } for pid=7703 comm="syz.5.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.168496][ T30] audit: type=1400 audit(1765207338.190:522): avc: denied { create } for pid=7703 comm="syz.5.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.216504][ T30] audit: type=1400 audit(1765207338.240:523): avc: denied { getopt } for pid=7703 comm="syz.5.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.265161][ T30] audit: type=1400 audit(1765207338.290:524): avc: denied { ioctl } for pid=7703 comm="syz.5.359" path="socket:[16246]" dev="sockfs" ino=16246 ioctlcmd=0x5658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.299360][ T5954] usb 9-1: usb_control_msg returned -32 [ 223.310489][ T5954] usbtmc 9-1:16.0: can't read capabilities [ 223.312249][ T5884] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 223.348347][ T30] audit: type=1400 audit(1765207338.290:525): avc: denied { connect } for pid=7703 comm="syz.5.359" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.431597][ T30] audit: type=1400 audit(1765207338.410:526): avc: denied { write } for pid=7703 comm="syz.5.359" path="socket:[16243]" dev="sockfs" ino=16243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.621999][ T5884] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.714704][ T5884] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 223.753831][ T7717] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -71 [ 224.207792][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 224.240470][ T5884] usb 5-1: Product: syz [ 224.258451][ T5884] usb 5-1: Manufacturer: syz [ 224.264269][ T5884] usb 5-1: SerialNumber: syz [ 224.529664][ T5884] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 224.747295][ C0] usbtmc 9-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 224.759978][ T7696] usbtmc 9-1:16.0: Unable to send data, error -71 [ 225.159290][ T6229] usb 5-1: USB disconnect, device number 16 [ 225.245065][ T6229] usblp1: removed [ 225.653923][ T5939] usb 9-1: USB disconnect, device number 3 [ 225.762671][ T7756] netlink: 16 bytes leftover after parsing attributes in process `syz.5.366'. [ 226.142949][ T7759] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 227.862727][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 227.862744][ T30] audit: type=1400 audit(1765207342.890:540): avc: denied { read } for pid=7782 comm="syz.5.371" name="mouse0" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 228.174472][ T30] audit: type=1400 audit(1765207342.920:541): avc: denied { open } for pid=7782 comm="syz.5.371" path="/dev/input/mouse0" dev="devtmpfs" ino=961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 228.585523][ T7792] fuse: Unknown parameter '0x0000000000000005' [ 231.396818][ T7823] XFS (nbd4): SB validate failed with error -5. [ 231.593511][ T7838] netlink: 'syz.8.382': attribute type 10 has an invalid length. [ 231.771437][ T30] audit: type=1400 audit(1765207346.790:542): avc: denied { append } for pid=7839 comm="syz.4.384" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 231.813872][ T7838] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 231.972055][ T7841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.141670][ T7838] bond_slave_0: entered promiscuous mode [ 232.147694][ T7838] bond_slave_1: entered promiscuous mode [ 232.153522][ T7838] syz_tun: entered promiscuous mode [ 232.161405][ T7838] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 232.178236][ T7838] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 232.188523][ T7838] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 232.203493][ T7838] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 232.992966][ T49] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 233.337291][ T30] audit: type=1400 audit(1765207348.360:543): avc: denied { create } for pid=7871 comm="syz.8.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.398866][ T49] usb 5-1: Using ep0 maxpacket: 8 [ 233.408721][ T49] usb 5-1: config 16 has an invalid interface number: 124 but max is 0 [ 233.421505][ T49] usb 5-1: config 16 has no interface number 0 [ 233.435485][ T49] usb 5-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= c.1b [ 233.456512][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.579684][ T30] audit: type=1400 audit(1765207348.530:544): avc: denied { create } for pid=7871 comm="syz.8.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 233.619604][ T49] usb 5-1: MBOX3: Invalid descriptor size=18. [ 233.622276][ T30] audit: type=1400 audit(1765207348.530:545): avc: denied { write } for pid=7871 comm="syz.8.390" path="socket:[18512]" dev="sockfs" ino=18512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 233.677724][ T30] audit: type=1400 audit(1765207348.550:546): avc: denied { read } for pid=7871 comm="syz.8.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 233.717460][ T6229] libceph: connect (1)[c::]:6789 error -101 [ 233.731178][ T6229] libceph: mon0 (1)[c::]:6789 connect error [ 233.825429][ T30] audit: type=1400 audit(1765207348.550:547): avc: denied { read write } for pid=7871 comm="syz.8.390" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 233.861027][ T30] audit: type=1400 audit(1765207348.550:548): avc: denied { open } for pid=7871 comm="syz.8.390" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 233.888739][ T30] audit: type=1400 audit(1765207348.550:549): avc: denied { ioctl } for pid=7871 comm="syz.8.390" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 233.963106][ T30] audit: type=1400 audit(1765207348.550:550): avc: denied { read write } for pid=7871 comm="syz.8.390" dev="sockfs" ino=18502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 234.140140][ T6229] libceph: connect (1)[c::]:6789 error -101 [ 234.221965][ T6229] libceph: mon0 (1)[c::]:6789 connect error [ 234.269237][ T30] audit: type=1400 audit(1765207348.690:551): avc: denied { map } for pid=7871 comm="syz.8.390" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 234.485593][ T30] audit: type=1400 audit(1765207348.690:552): avc: denied { execute } for pid=7871 comm="syz.8.390" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 234.530686][ T7874] ceph: No mds server is up or the cluster is laggy [ 234.662389][ T5944] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 234.753684][ T49] libceph: connect (1)[c::]:6789 error -101 [ 234.858482][ T5944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.101867][ T5944] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 235.320962][ T49] libceph: mon0 (1)[c::]:6789 connect error [ 235.347736][ T5944] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 235.393185][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.456950][ T5944] usb 6-1: config 0 descriptor?? [ 235.497465][ T5944] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 235.534327][ T5944] dvb-usb: bulk message failed: -22 (3/0) [ 235.570494][ T5944] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 235.585405][ T5944] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 235.601955][ T5944] usb 6-1: media controller created [ 235.613592][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.649094][ T5954] usb 5-1: USB disconnect, device number 17 [ 235.697395][ T7889] dibusb: i2c wr: len=8192 is too big! [ 235.697395][ T7889] [ 235.741693][ T5944] dvb-usb: bulk message failed: -22 (6/0) [ 235.782262][ T5944] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 235.817107][ T5944] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 235.864976][ T7908] vivid-004: ================= START STATUS ================= [ 235.879550][ T5944] dvb-usb: schedule remote query interval to 150 msecs. [ 235.898795][ T5944] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 235.954068][ T7908] vivid-004: Radio HW Seek Mode: Bounded [ 235.981790][ T7908] vivid-004: Radio Programmable HW Seek: false [ 236.002079][ T7908] vivid-004: RDS Rx I/O Mode: Block I/O [ 236.032251][ T7919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16152 sclass=netlink_route_socket pid=7919 comm=syz.7.399 [ 236.087569][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 236.218769][ T7908] vivid-004: Generate RBDS Instead of RDS: false [ 236.221333][ T5944] dvb-usb: error while querying for an remote control event. [ 236.237729][ T7908] vivid-004: RDS Reception: true [ 236.457759][ T7908] vivid-004: RDS Program Type: 0 inactive [ 236.511016][ T7908] vivid-004: RDS PS Name: inactive [ 236.523334][ T7908] vivid-004: RDS Radio Text: inactive [ 236.531078][ T7908] vivid-004: RDS Traffic Announcement: false inactive [ 236.572256][ T116] dvb-usb: bulk message failed: -22 (1/0) [ 236.582363][ T7908] vivid-004: RDS Traffic Program: false inactive [ 236.588787][ T7908] vivid-004: RDS Music: false inactive [ 236.612225][ T7908] vivid-004: ================== END STATUS ================== [ 236.615508][ T116] dvb-usb: error while querying for an remote control event. [ 236.925288][ T116] dvb-usb: bulk message failed: -22 (1/0) [ 236.931060][ T116] dvb-usb: error while querying for an remote control event. [ 237.112407][ T116] dvb-usb: bulk message failed: -22 (1/0) [ 237.118982][ T116] dvb-usb: error while querying for an remote control event. [ 237.305849][ T7952] netlink: 'syz.4.405': attribute type 10 has an invalid length. [ 237.325673][ T7952] netlink: 'syz.4.405': attribute type 10 has an invalid length. [ 237.333613][ T7952] netlink: 40 bytes leftover after parsing attributes in process `syz.4.405'. [ 237.342592][ T116] dvb-usb: bulk message failed: -22 (1/0) [ 237.348371][ T116] dvb-usb: error while querying for an remote control event. [ 237.486777][ T116] usb 6-1: USB disconnect, device number 3 [ 237.534458][ T116] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 237.867156][ T7930] capability: warning: `syz.6.402' uses 32-bit capabilities (legacy support in use) [ 238.629435][ T7982] netlink: 'syz.4.409': attribute type 10 has an invalid length. [ 238.688910][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 238.688923][ T30] audit: type=1400 audit(1765207353.710:564): avc: denied { append } for pid=7984 comm="syz.6.411" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 238.863004][ T30] audit: type=1400 audit(1765207353.750:565): avc: denied { create } for pid=7984 comm="syz.6.411" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.299882][ T7982] netlink: 'syz.4.409': attribute type 10 has an invalid length. [ 239.327113][ T30] audit: type=1400 audit(1765207353.750:566): avc: denied { write } for pid=7984 comm="syz.6.411" name="file0" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.366039][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.8.410'. [ 239.398683][ T7982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.409'. [ 239.477407][ T30] audit: type=1400 audit(1765207353.750:567): avc: denied { open } for pid=7984 comm="syz.6.411" path="/14/file0" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.707902][ T30] audit: type=1400 audit(1765207353.970:568): avc: denied { ioctl } for pid=7984 comm="syz.6.411" path="/14/file0" dev="tmpfs" ino=90 ioctlcmd=0x1276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 239.818297][ T30] audit: type=1400 audit(1765207354.390:569): avc: denied { map } for pid=7980 comm="syz.8.410" path="socket:[18794]" dev="sockfs" ino=18794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 239.872223][ T30] audit: type=1400 audit(1765207354.390:570): avc: denied { execute } for pid=7980 comm="syz.8.410" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 239.937227][ T30] audit: type=1400 audit(1765207354.400:571): avc: denied { nlmsg_write } for pid=7980 comm="syz.8.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.989842][ T30] audit: type=1400 audit(1765207354.600:572): avc: denied { unlink } for pid=7284 comm="syz-executor" name="file0" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 240.082302][ T30] audit: type=1400 audit(1765207355.040:573): avc: denied { create } for pid=7999 comm="syz.7.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 240.176908][ T8004] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 245.453130][ T8090] netlink: 'syz.8.428': attribute type 10 has an invalid length. [ 245.514157][ T8090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.652895][ T8091] netlink: 'syz.8.428': attribute type 10 has an invalid length. [ 245.653736][ T8090] batadv0: entered promiscuous mode [ 245.666357][ T8091] netlink: 40 bytes leftover after parsing attributes in process `syz.8.428'. [ 245.666794][ T8090] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 245.837081][ T8097] syz.6.429 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 245.847914][ T8091] batadv0: entered allmulticast mode [ 245.866159][ T8097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.880811][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 245.880826][ T30] audit: type=1400 audit(1765207360.900:580): avc: denied { create } for pid=8093 comm="syz.6.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 246.053381][ T8091] bond0: (slave batadv0): Releasing backup interface [ 246.202494][ T8091] bridge0: port 3(batadv0) entered blocking state [ 246.212447][ T8091] bridge0: port 3(batadv0) entered disabled state [ 246.584160][ T1139] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 246.593657][ T1139] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 246.982769][ T30] audit: type=1400 audit(1765207361.770:581): avc: denied { setopt } for pid=8103 comm="syz.4.427" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.751850][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.436'. [ 247.965112][ T8126] netlink: 32 bytes leftover after parsing attributes in process `syz.7.435'. [ 248.067574][ T30] audit: type=1400 audit(1765207363.090:582): avc: denied { ioctl } for pid=8133 comm="syz.8.437" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.184352][ T30] audit: type=1400 audit(1765207363.210:583): avc: denied { ioctl } for pid=8139 comm="syz.4.438" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18992 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 248.290871][ T30] audit: type=1400 audit(1765207363.260:584): avc: denied { write } for pid=8139 comm="syz.4.438" path="socket:[18995]" dev="sockfs" ino=18995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.330103][ T8144] netlink: 'syz.4.439': attribute type 11 has an invalid length. [ 248.424360][ T30] audit: type=1400 audit(1765207363.290:585): avc: denied { unlink } for pid=8116 comm="syz.5.433" name="#7" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 248.650223][ T30] audit: type=1400 audit(1765207363.290:586): avc: denied { mount } for pid=8116 comm="syz.5.433" name="/" dev="overlay" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 248.706906][ T8154] FAULT_INJECTION: forcing a failure. [ 248.706906][ T8154] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 248.716221][ T30] audit: type=1400 audit(1765207363.700:587): avc: denied { execute_no_trans } for pid=8147 comm="syz.4.440" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 248.756612][ T8154] CPU: 1 UID: 0 PID: 8154 Comm: syz.5.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.756645][ T8154] Tainted: [L]=SOFTLOCKUP [ 248.756651][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.756662][ T8154] Call Trace: [ 248.756669][ T8154] [ 248.756676][ T8154] dump_stack_lvl+0x16c/0x1f0 [ 248.756712][ T8154] should_fail_ex+0x512/0x640 [ 248.756738][ T8154] _copy_from_user+0x2e/0xd0 [ 248.756760][ T8154] comedi_unlocked_ioctl+0x1514/0x2eb0 [ 248.756806][ T8154] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 248.756840][ T8154] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 248.756864][ T8154] ? do_vfs_ioctl+0x128/0x14f0 [ 248.756886][ T8154] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 248.756906][ T8154] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 248.756945][ T8154] ? hook_file_ioctl_common+0x144/0x410 [ 248.756973][ T8154] ? selinux_file_ioctl+0x180/0x270 [ 248.756999][ T8154] ? selinux_file_ioctl+0xb4/0x270 [ 248.757027][ T8154] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 248.757057][ T8154] __x64_sys_ioctl+0x18e/0x210 [ 248.757079][ T8154] do_syscall_64+0xcd/0xf80 [ 248.757107][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.757125][ T8154] RIP: 0033:0x7f740078f749 [ 248.757141][ T8154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.757158][ T8154] RSP: 002b:00007f7401560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.757174][ T8154] RAX: ffffffffffffffda RBX: 00007f74009e5fa0 RCX: 00007f740078f749 [ 248.757186][ T8154] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 248.757197][ T8154] RBP: 00007f7401560090 R08: 0000000000000000 R09: 0000000000000000 [ 248.757208][ T8154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.757219][ T8154] R13: 00007f74009e6038 R14: 00007f74009e5fa0 R15: 00007ffcc00dbdc8 [ 248.757245][ T8154] [ 250.677476][ T116] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 251.193978][ T116] usb 7-1: Using ep0 maxpacket: 16 [ 251.215699][ T116] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 251.255761][ T116] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 251.403481][ T116] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=1f.2e [ 251.442450][ T116] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.450484][ T116] usb 7-1: Product: syz [ 251.490240][ T116] usb 7-1: Manufacturer: syz [ 251.506006][ T116] usb 7-1: SerialNumber: syz [ 251.534593][ T116] usb 7-1: config 0 descriptor?? [ 251.578795][ T116] opticon 7-1:0.0: opticon converter detected [ 251.599636][ T116] usb 7-1: opticon converter now attached to ttyUSB0 [ 251.932327][ T6229] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 251.940354][ T5996] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 252.149468][ T116] usb 7-1: USB disconnect, device number 3 [ 252.174735][ T116] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 252.209329][ T116] opticon 7-1:0.0: device disconnected [ 252.345050][ T6229] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.364168][ T5996] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.391139][ T30] audit: type=1400 audit(1765207367.410:588): avc: denied { write } for pid=8220 comm="syz.7.456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 252.455039][ T6229] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 252.528737][ T5987] IPVS: starting estimator thread 0... [ 252.544276][ T5996] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 252.553659][ T6229] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 252.572968][ T5996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 252.585602][ T6229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.603179][ T5996] usb 5-1: Product: syz [ 252.612522][ T5996] usb 5-1: Manufacturer: syz [ 252.619927][ T6229] usb 9-1: config 0 descriptor?? [ 252.629264][ T5996] usb 5-1: SerialNumber: syz [ 252.640601][ T6229] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 252.653516][ T8226] IPVS: using max 43 ests per chain, 103200 per kthread [ 252.667276][ T6229] dvb-usb: bulk message failed: -22 (3/0) [ 252.708190][ T6229] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 252.730039][ T6229] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 252.752221][ T6229] usb 9-1: media controller created [ 252.758912][ T6229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.786507][ T6229] dvb-usb: bulk message failed: -22 (6/0) [ 252.795346][ T6229] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 252.825096][ T6229] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input16 [ 252.888379][ T8213] dibusb: i2c wr: len=8192 is too big! [ 252.888379][ T8213] [ 253.078072][ T6229] dvb-usb: schedule remote query interval to 150 msecs. [ 253.100654][ T6229] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 253.552464][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 253.558945][ T5987] dvb-usb: error while querying for an remote control event. [ 253.569913][ T5996] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 253.594903][ T5996] usb 5-1: USB disconnect, device number 18 [ 253.606185][ T5996] usblp0: removed [ 253.622723][ T5954] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 253.745207][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 253.762815][ T5987] dvb-usb: error while querying for an remote control event. [ 253.834788][ T5954] usb 7-1: Using ep0 maxpacket: 8 [ 253.850130][ T5954] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 253.861742][ T5954] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.891953][ T5954] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.902086][ T5954] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 253.912075][ T5954] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.948930][ T5954] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 253.974430][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.049838][ T5996] dvb-usb: bulk message failed: -22 (1/0) [ 254.056023][ T8257] nfs: Unknown parameter '' [ 254.061105][ T5996] dvb-usb: error while querying for an remote control event. [ 254.149208][ T8257] No source specified [ 254.215449][ T5954] usb 7-1: usb_control_msg returned -32 [ 254.222208][ T5996] dvb-usb: bulk message failed: -22 (1/0) [ 254.230636][ T5954] usbtmc 7-1:16.0: can't read capabilities [ 254.236810][ T5996] dvb-usb: error while querying for an remote control event. [ 254.422261][ T5996] dvb-usb: bulk message failed: -22 (1/0) [ 254.436645][ T5996] dvb-usb: error while querying for an remote control event. [ 254.828297][ T5996] dvb-usb: bulk message failed: -22 (1/0) [ 254.834150][ T5996] dvb-usb: error while querying for an remote control event. [ 254.875122][ T5954] usb 9-1: USB disconnect, device number 4 [ 254.952380][ T5954] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 255.167805][ T8281] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 255.227517][ T8291] syz.8.467 uses obsolete (PF_INET,SOCK_PACKET) [ 255.302284][ T30] audit: type=1400 audit(1765207370.300:589): avc: denied { bind } for pid=8290 comm="syz.8.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 255.380322][ T116] usb 7-1: USB disconnect, device number 4 [ 255.925662][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.933252][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.376375][ T30] audit: type=1400 audit(1765207372.380:590): avc: denied { append } for pid=8331 comm="syz.5.475" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.682287][ T977] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 258.138881][ T977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.584214][ T977] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.609548][ T977] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 258.626834][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.637274][ T977] usb 9-1: config 0 descriptor?? [ 258.660210][ T977] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 258.699201][ T977] dvb-usb: bulk message failed: -22 (3/0) [ 259.036452][ T977] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 259.063966][ T977] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 259.081197][ T977] usb 9-1: media controller created [ 259.103260][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.135236][ T977] dvb-usb: bulk message failed: -22 (6/0) [ 259.153806][ T977] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 259.181335][ T977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input17 [ 259.219569][ T977] dvb-usb: schedule remote query interval to 150 msecs. [ 259.255645][ T977] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 259.412926][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 259.418886][ T977] dvb-usb: error while querying for an remote control event. [ 259.695631][ T5987] dvb-usb: bulk message failed: -22 (1/0) [ 259.701571][ T5987] dvb-usb: error while querying for an remote control event. [ 259.958550][ T5996] dvb-usb: bulk message failed: -22 (1/0) [ 260.168175][ T5996] dvb-usb: error while querying for an remote control event. [ 260.356378][ T5996] dvb-usb: bulk message failed: -22 (1/0) [ 260.378041][ T5996] dvb-usb: error while querying for an remote control event. [ 260.393472][ T977] usb 9-1: USB disconnect, device number 5 [ 260.549353][ T8379] netlink: 16 bytes leftover after parsing attributes in process `syz.7.485'. [ 261.078005][ T977] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 262.189660][ T30] audit: type=1400 audit(1765207377.210:591): avc: denied { ioctl } for pid=8410 comm="syz.7.490" path="socket:[19261]" dev="sockfs" ino=19261 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.129749][ T30] audit: type=1400 audit(1765207378.150:592): avc: denied { read } for pid=8421 comm="syz.8.493" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 263.342273][ T30] audit: type=1400 audit(1765207378.150:593): avc: denied { open } for pid=8421 comm="syz.8.493" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 263.741179][ T30] audit: type=1400 audit(1765207378.150:594): avc: denied { read } for pid=8421 comm="syz.8.493" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.990757][ T30] audit: type=1400 audit(1765207378.250:595): avc: denied { getopt } for pid=8425 comm="syz.7.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.102281][ T30] audit: type=1400 audit(1765207378.700:596): avc: denied { block_suspend } for pid=8421 comm="syz.8.493" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 264.262260][ T30] audit: type=1400 audit(1765207378.910:597): avc: denied { ioctl } for pid=8421 comm="syz.8.493" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 264.273420][ T5939] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 264.362833][ T8440] netlink: 28 bytes leftover after parsing attributes in process `syz.8.496'. [ 264.371931][ T30] audit: type=1400 audit(1765207378.980:598): avc: denied { ioctl } for pid=8430 comm="syz.6.495" path="socket:[19300]" dev="sockfs" ino=19300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 264.454081][ T30] audit: type=1400 audit(1765207378.990:599): avc: denied { write } for pid=8430 comm="syz.6.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 264.515354][ T5939] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 264.534428][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.573283][ T5939] usb 7-1: Product: syz [ 264.591138][ T5939] usb 7-1: Manufacturer: syz [ 264.611102][ T5939] usb 7-1: SerialNumber: syz [ 264.647229][ T5939] usb 7-1: config 0 descriptor?? [ 264.868064][ T5939] airspy 7-1:0.0: usb_control_msg() failed -71 request 09 [ 264.886568][ T5939] airspy 7-1:0.0: Could not detect board [ 264.908592][ T5939] airspy 7-1:0.0: probe with driver airspy failed with error -71 [ 264.961876][ T5939] usb 7-1: USB disconnect, device number 5 [ 264.986847][ T8448] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 265.308411][ T30] audit: type=1400 audit(1765207380.320:600): avc: denied { ioctl } for pid=8453 comm="syz.5.498" path="socket:[19505]" dev="sockfs" ino=19505 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 267.752540][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 267.752555][ T30] audit: type=1400 audit(1765207382.780:602): avc: denied { read write } for pid=8486 comm="syz.6.506" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 267.978882][ T30] audit: type=1400 audit(1765207382.820:603): avc: denied { open } for pid=8486 comm="syz.6.506" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 268.053681][ T30] audit: type=1400 audit(1765207382.820:604): avc: denied { ioctl } for pid=8486 comm="syz.6.506" path="/dev/sg0" dev="devtmpfs" ino=752 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 268.132257][ T30] audit: type=1400 audit(1765207382.880:605): avc: denied { read write } for pid=8486 comm="syz.6.506" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 268.265852][ T30] audit: type=1400 audit(1765207382.880:606): avc: denied { open } for pid=8486 comm="syz.6.506" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 268.324366][ T30] audit: type=1400 audit(1765207382.890:607): avc: denied { ioctl } for pid=8486 comm="syz.6.506" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 268.403872][ T30] audit: type=1400 audit(1765207383.380:608): avc: denied { connect } for pid=8491 comm="syz.5.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 268.431816][ T30] audit: type=1400 audit(1765207383.380:609): avc: denied { write } for pid=8491 comm="syz.5.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 268.630854][ T30] audit: type=1400 audit(1765207383.380:610): avc: denied { getopt } for pid=8491 comm="syz.5.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 270.881411][ T30] audit: type=1400 audit(1765207385.900:611): avc: denied { create } for pid=8548 comm="syz.5.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 272.459103][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.6.523'. [ 272.793548][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 272.793560][ T30] audit: type=1400 audit(1765207387.820:624): avc: denied { allowed } for pid=8582 comm="syz.8.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 272.842762][ T30] audit: type=1400 audit(1765207387.860:625): avc: denied { create } for pid=8582 comm="syz.8.525" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 272.866005][ T30] audit: type=1400 audit(1765207387.860:626): avc: denied { read write } for pid=8582 comm="syz.8.525" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.889841][ T30] audit: type=1400 audit(1765207387.860:627): avc: denied { open } for pid=8582 comm="syz.8.525" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.946250][ T30] audit: type=1400 audit(1765207387.860:628): avc: denied { ioctl } for pid=8582 comm="syz.8.525" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.086878][ T30] audit: type=1400 audit(1765207388.110:629): avc: denied { create } for pid=8587 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 273.092208][ T116] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 273.174247][ T30] audit: type=1400 audit(1765207388.200:630): avc: denied { read } for pid=8587 comm="syz.4.527" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 273.208151][ T5815] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 273.386954][ T5815] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.405556][ T30] audit: type=1400 audit(1765207388.220:631): avc: denied { open } for pid=8587 comm="syz.4.527" path="net:[4026532801]" dev="nsfs" ino=4026532801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 273.488051][ T5815] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 273.507489][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 273.528085][ T30] audit: type=1400 audit(1765207388.220:632): avc: denied { create } for pid=8587 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 273.570642][ T5815] usb 7-1: Product: syz [ 273.598318][ T5815] usb 7-1: Manufacturer: syz [ 273.625250][ T5815] usb 7-1: SerialNumber: syz [ 273.897204][ T30] audit: type=1400 audit(1765207388.920:633): avc: denied { create } for pid=8592 comm="syz.5.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 274.077832][ T116] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.129372][ T8594] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.528'. [ 274.140285][ T8594] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 274.283822][ T116] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 274.314058][ T116] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 274.363956][ T116] usb 9-1: Product: syz [ 274.368535][ T116] usb 9-1: Manufacturer: syz [ 274.373678][ T116] usb 9-1: SerialNumber: syz [ 274.375121][ T5815] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 274.640573][ T116] usblp 9-1:1.0: usblp1: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 275.004325][ T116] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 275.156924][ C0] usblp0: nonzero write bulk status received: -71 [ 275.157174][ T977] usb 7-1: USB disconnect, device number 6 [ 275.189237][ T116] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.206349][ T8585] usblp0: removed [ 275.210345][ T116] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 275.224712][ T116] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 275.235124][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.249969][ T116] usb 5-1: config 0 descriptor?? [ 275.258730][ T116] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 275.266067][ T116] dvb-usb: bulk message failed: -22 (3/0) [ 275.287312][ T5815] usb 9-1: USB disconnect, device number 6 [ 275.293986][ T116] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 275.305511][ T116] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 275.314597][ T116] usb 5-1: media controller created [ 275.315022][ T5815] usblp1: removed [ 275.321053][ T116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.356569][ T116] dvb-usb: bulk message failed: -22 (6/0) [ 275.368496][ T116] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 275.386505][ T116] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 275.418452][ T116] dvb-usb: schedule remote query interval to 150 msecs. [ 275.425637][ T116] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 275.460846][ T8612] dibusb: i2c wr: len=8192 is too big! [ 275.460846][ T8612] [ 275.582917][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 275.588816][ T5955] dvb-usb: error while querying for an remote control event. [ 275.752740][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 275.772337][ T5955] dvb-usb: error while querying for an remote control event. [ 275.933623][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 275.939567][ T5955] dvb-usb: error while querying for an remote control event. [ 276.112342][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 276.118348][ T5955] dvb-usb: error while querying for an remote control event. [ 276.641744][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 276.650376][ T116] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 276.658046][ T5955] dvb-usb: error while querying for an remote control event. [ 276.823862][ T116] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.839783][ T116] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 276.849240][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 276.855135][ T5955] dvb-usb: error while querying for an remote control event. [ 276.866911][ T116] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 276.883963][ T116] usb 9-1: Product: syz [ 276.888327][ T116] usb 9-1: Manufacturer: syz [ 276.894006][ T116] usb 9-1: SerialNumber: syz [ 277.052561][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 277.058729][ T5944] dvb-usb: error while querying for an remote control event. [ 277.112101][ T116] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 277.284652][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 277.290440][ T5944] dvb-usb: error while querying for an remote control event. [ 277.299878][ T8629] affs: No valid root block on device nullb0 [ 277.465252][ T116] dvb-usb: bulk message failed: -22 (1/0) [ 277.471069][ T116] dvb-usb: error while querying for an remote control event. [ 277.635217][ T5944] dvb-usb: bulk message failed: -22 (1/0) [ 277.641247][ T5944] dvb-usb: error while querying for an remote control event. [ 277.812036][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 277.926268][ T30] audit: type=1400 audit(1765207392.760:664): avc: denied { mounton } for pid=8632 comm="syz.7.539" path="/47/file0" dev="tmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 278.156444][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 278.162589][ T5954] dvb-usb: error while querying for an remote control event. [ 278.195448][ T5815] usb 5-1: USB disconnect, device number 19 [ 278.201524][ T30] audit: type=1400 audit(1765207392.810:665): avc: denied { map } for pid=8632 comm="syz.7.539" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 278.276557][ T5815] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 278.313712][ T30] audit: type=1400 audit(1765207392.820:666): avc: denied { read write } for pid=8632 comm="syz.7.539" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 278.341703][ T30] audit: type=1400 audit(1765207393.270:667): avc: denied { create } for pid=8640 comm="syz.5.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 278.363692][ T30] audit: type=1400 audit(1765207393.270:668): avc: denied { setopt } for pid=8640 comm="syz.5.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 278.384201][ T30] audit: type=1400 audit(1765207393.270:669): avc: denied { write } for pid=8640 comm="syz.5.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.425284][ T30] audit: type=1400 audit(1765207393.270:670): avc: denied { read } for pid=8640 comm="syz.5.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 278.734560][ T30] audit: type=1400 audit(1765207393.630:671): avc: denied { name_bind } for pid=8645 comm="syz.4.541" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 278.892075][ T30] audit: type=1400 audit(1765207393.630:672): avc: denied { node_bind } for pid=8645 comm="syz.4.541" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 278.927063][ T30] audit: type=1400 audit(1765207393.910:673): avc: denied { create } for pid=8649 comm="syz.5.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 280.429471][ T7279] usb 9-1: USB disconnect, device number 7 [ 280.461596][ T7279] usblp0: removed [ 282.277453][ T8704] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 282.456571][ T8708] 9p: Bad value for 'rfdno' [ 282.645446][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.7.557'. [ 283.077617][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 283.077636][ T30] audit: type=1400 audit(1765207398.010:710): avc: denied { bind } for pid=8719 comm="syz.7.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.724231][ T30] audit: type=1400 audit(1765207398.140:711): avc: denied { write } for pid=8719 comm="syz.7.559" path="socket:[20637]" dev="sockfs" ino=20637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.266531][ T30] audit: type=1400 audit(1765207399.290:712): avc: denied { create } for pid=8731 comm="syz.6.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 284.403522][ T8738] ALSA: mixer_oss: invalid OSS volume 'SPE' [ 284.531434][ T30] audit: type=1400 audit(1765207399.380:713): avc: denied { accept } for pid=8731 comm="syz.6.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 284.875566][ T30] audit: type=1400 audit(1765207399.430:714): avc: denied { read } for pid=8735 comm="syz.4.563" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 284.992481][ T116] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 285.082203][ T5955] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 285.206305][ T30] audit: type=1400 audit(1765207399.430:715): avc: denied { open } for pid=8735 comm="syz.4.563" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.272297][ T116] usb 7-1: Using ep0 maxpacket: 8 [ 285.296322][ T116] usb 7-1: config 16 has an invalid interface number: 124 but max is 0 [ 285.307224][ T30] audit: type=1400 audit(1765207399.430:716): avc: denied { ioctl } for pid=8735 comm="syz.4.563" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.336677][ T116] usb 7-1: config 16 has no interface number 0 [ 285.346691][ T5955] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.369553][ T116] usb 7-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= c.1b [ 285.389624][ T116] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.402702][ T5955] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 285.520975][ T8749] netlink: 'syz.4.567': attribute type 10 has an invalid length. [ 285.540120][ T8749] netlink: 'syz.4.567': attribute type 10 has an invalid length. [ 285.548206][ T8749] netlink: 40 bytes leftover after parsing attributes in process `syz.4.567'. [ 285.557660][ T5955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 286.007708][ T30] audit: type=1400 audit(1765207400.650:717): avc: denied { read } for pid=8745 comm="syz.7.566" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 286.053302][ T5955] usb 9-1: Product: syz [ 286.058030][ T116] usb 7-1: MBOX3: Invalid descriptor size=18. [ 286.066635][ T5955] usb 9-1: Manufacturer: syz [ 286.077170][ T5955] usb 9-1: SerialNumber: syz [ 286.083395][ T30] audit: type=1400 audit(1765207400.650:718): avc: denied { open } for pid=8745 comm="syz.7.566" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 286.134931][ T30] audit: type=1400 audit(1765207400.670:719): avc: denied { ioctl } for pid=8745 comm="syz.7.566" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 286.330430][ T5955] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 287.113370][ T8764] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 288.295415][ T5955] usb 7-1: USB disconnect, device number 7 [ 288.426285][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 288.426301][ T30] audit: type=1400 audit(1765207403.450:721): avc: denied { read } for pid=8771 comm="syz.5.575" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.508188][ T30] audit: type=1400 audit(1765207403.500:722): avc: denied { open } for pid=8771 comm="syz.5.575" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 288.822417][ T5955] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 288.983738][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.009872][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.254454][ T5955] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 289.279624][ T5955] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 289.298331][ T5955] usb 7-1: Manufacturer: syz [ 289.763704][ T5955] usb 7-1: config 0 descriptor?? [ 289.945051][ T30] audit: type=1400 audit(1765207404.970:723): avc: denied { setattr } for pid=8783 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 289.981836][ T8791] affs: No valid root block on device nullb0 [ 290.194441][ T5955] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 290.201401][ T5955] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 290.222310][ T5955] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 290.253276][ T5955] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 290.272572][ T5955] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 290.279461][ T5955] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 290.305785][ T5955] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 290.332074][ T5955] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 290.419023][ T8798] affs: No valid root block on device nullb0 [ 290.971413][ T5955] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 290.979023][ T5955] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 290.989310][ T5955] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 291.001801][ T5955] usb 7-1: USB disconnect, device number 8 [ 291.165197][ T8801] fido_id[8801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 292.032907][ T30] audit: type=1400 audit(1765207407.060:724): avc: denied { write } for pid=8806 comm="syz.7.588" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 292.061103][ T5819] Bluetooth: Unexpected continuation frame (len 4) [ 292.688818][ T8813] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 292.702177][ T30] audit: type=1400 audit(1765207407.340:725): avc: denied { execute_no_trans } for pid=8809 comm="syz.6.586" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 292.762676][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.588'. [ 292.961986][ T8811] sctp: [Deprecated]: syz.4.587 (pid 8811) Use of int in max_burst socket option. [ 292.961986][ T8811] Use struct sctp_assoc_value instead [ 293.039748][ T30] audit: type=1400 audit(1765207407.780:726): avc: denied { connect } for pid=8806 comm="syz.7.588" lport=134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 293.084307][ T30] audit: type=1400 audit(1765207407.890:727): avc: denied { accept } for pid=8806 comm="syz.7.588" lport=134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 293.132519][ T30] audit: type=1400 audit(1765207407.900:728): avc: denied { listen } for pid=8806 comm="syz.7.588" lport=134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 293.312847][ T5879] usb 9-1: USB disconnect, device number 8 [ 293.332587][ T30] audit: type=1400 audit(1765207407.920:729): avc: denied { getopt } for pid=8806 comm="syz.7.588" lport=134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 293.396400][ T5879] usblp0: removed [ 293.412617][ T30] audit: type=1400 audit(1765207407.980:730): avc: denied { create } for pid=8808 comm="syz.4.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 293.551450][ T8834] netlink: 'syz.6.592': attribute type 10 has an invalid length. [ 293.622322][ T7279] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 293.694960][ T8838] ======================================================= [ 293.694960][ T8838] WARNING: The mand mount option has been deprecated and [ 293.694960][ T8838] and is ignored by this kernel. Remove the mand [ 293.694960][ T8838] option from the mount to silence this warning. [ 293.694960][ T8838] ======================================================= [ 293.974332][ T8841] netlink: 'syz.6.592': attribute type 10 has an invalid length. [ 293.982673][ T30] audit: type=1400 audit(1765207408.000:731): avc: denied { ioctl } for pid=8808 comm="syz.4.587" path="socket:[20109]" dev="sockfs" ino=20109 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 294.010907][ T30] audit: type=1400 audit(1765207408.020:732): avc: denied { write } for pid=8817 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 294.033401][ T30] audit: type=1400 audit(1765207408.020:733): avc: denied { nlmsg_write } for pid=8817 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 294.043690][ T8834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.054577][ T30] audit: type=1400 audit(1765207408.760:734): avc: denied { mount } for pid=8830 comm="syz.4.593" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 294.087172][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.6.592'. [ 294.088610][ T8834] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 294.115115][ T7279] usb 6-1: device descriptor read/64, error -71 [ 294.175712][ T30] audit: type=1400 audit(1765207408.760:735): avc: denied { mounton } for pid=8830 comm="syz.4.593" path="/133/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 294.200299][ T30] audit: type=1400 audit(1765207409.010:736): avc: denied { ioctl } for pid=8836 comm="syz.8.595" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 294.291175][ T8841] batadv0: entered promiscuous mode [ 294.297174][ T8841] batadv0: entered allmulticast mode [ 294.306790][ T8841] bond0: (slave batadv0): Releasing backup interface [ 294.317469][ T8841] bridge0: port 3(batadv0) entered blocking state [ 294.333005][ T8841] bridge0: port 3(batadv0) entered disabled state [ 294.457552][ T30] audit: type=1400 audit(1765207409.310:737): avc: denied { create } for pid=8836 comm="syz.8.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.602423][ T7279] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 294.640430][ T30] audit: type=1400 audit(1765207409.350:738): avc: denied { sqpoll } for pid=8845 comm="syz.7.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 294.700640][ T30] audit: type=1400 audit(1765207409.480:739): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 294.752242][ T7279] usb 6-1: device descriptor read/64, error -71 [ 294.872286][ T7279] usb usb6-port1: attempt power cycle [ 294.910805][ T8852] bridge_slave_0: left allmulticast mode [ 294.920041][ T8852] bridge_slave_0: left promiscuous mode [ 294.933458][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.970763][ T8854] netlink: 'syz.4.597': attribute type 10 has an invalid length. [ 294.983291][ T30] audit: type=1400 audit(1765207409.540:740): avc: denied { setopt } for pid=8836 comm="syz.8.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 294.984187][ T8852] bridge_slave_1: left allmulticast mode [ 295.008433][ T8854] netlink: 2 bytes leftover after parsing attributes in process `syz.4.597'. [ 295.023102][ T6781] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 295.032478][ T6781] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 295.076361][ T8852] bridge_slave_1: left promiscuous mode [ 295.106329][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.157148][ T8852] bond0: (slave bond_slave_0): Releasing backup interface [ 295.262280][ T7279] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 295.504916][ T7279] usb 6-1: device descriptor read/8, error -71 [ 295.586485][ T8852] bond0: (slave bond_slave_1): Releasing backup interface [ 295.618687][ T8852] team0: Port device team_slave_0 removed [ 295.641629][ T8852] team0: Port device team_slave_1 removed [ 295.660433][ T8852] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 295.678746][ T8854] team0: entered promiscuous mode [ 295.727080][ T8854] bridge0: port 1(team0) entered blocking state [ 295.750223][ T8854] bridge0: port 1(team0) entered disabled state [ 295.762281][ T7279] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 295.766570][ T8854] team0: entered allmulticast mode [ 295.802702][ T7279] usb 6-1: device descriptor read/8, error -71 [ 295.914915][ T8854] bridge0: port 1(team0) entered blocking state [ 295.921380][ T8854] bridge0: port 1(team0) entered forwarding state [ 295.936703][ T7279] usb usb6-port1: unable to enumerate USB device [ 295.962016][ T34] bridge0: port 1(team0) entered disabled state [ 296.962467][ T5987] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 297.143974][ T5987] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.154878][ T5987] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 297.164431][ T5987] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 297.174241][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.184236][ T5987] usb 5-1: config 0 descriptor?? [ 297.197856][ T5987] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 297.205544][ T5987] dvb-usb: bulk message failed: -22 (3/0) [ 297.214951][ T5987] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 297.225188][ T5987] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 297.232331][ T5987] usb 5-1: media controller created [ 297.238483][ T5987] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.258691][ T5987] dvb-usb: bulk message failed: -22 (6/0) [ 297.264742][ T49] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 297.277780][ T5987] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 297.300292][ T5987] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 297.323146][ T5987] dvb-usb: schedule remote query interval to 150 msecs. [ 297.332164][ T5987] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 297.500437][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 297.506786][ T8875] dibusb: i2c wr: len=8192 is too big! [ 297.506786][ T8875] [ 297.524221][ T5815] dvb-usb: error while querying for an remote control event. [ 297.563580][ T49] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.573763][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 297.601597][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 297.623750][ T49] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 297.648188][ T49] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 297.659286][ T49] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 297.669739][ T49] usb 6-1: Manufacturer: syz [ 297.686427][ T49] usb 6-1: config 0 descriptor?? [ 297.692779][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 297.699080][ T5815] dvb-usb: error while querying for an remote control event. [ 298.172410][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 298.186185][ T5815] dvb-usb: error while querying for an remote control event. [ 298.392385][ T49] rc_core: IR keymap rc-hauppauge not found [ 298.402599][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 298.408650][ T5815] dvb-usb: error while querying for an remote control event. [ 298.702205][ T49] Registered IR keymap rc-empty [ 298.708060][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 298.746356][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 298.787177][ T49] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 298.839096][ T49] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 298.868498][ T5815] dvb-usb: bulk message failed: -22 (1/0) [ 298.879222][ T5815] dvb-usb: error while querying for an remote control event. [ 298.910814][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 298.972505][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 299.002412][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 299.062285][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 299.068280][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 299.075453][ T977] dvb-usb: error while querying for an remote control event. [ 299.103562][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 299.136892][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 299.179178][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 299.186405][ T5815] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 299.212199][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 299.243108][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 299.249678][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 299.261674][ T977] dvb-usb: error while querying for an remote control event. [ 299.292392][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 299.319164][ T49] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 299.329817][ T49] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 299.370705][ T5815] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 299.396377][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.421071][ T5815] usb 7-1: Product: syz [ 299.433853][ T5815] usb 7-1: Manufacturer: syz [ 299.443004][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 299.450381][ T49] dvb-usb: error while querying for an remote control event. [ 299.467735][ T5815] usb 7-1: SerialNumber: syz [ 299.496565][ T5815] usb 7-1: config 0 descriptor?? [ 299.642208][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 299.666806][ T49] dvb-usb: error while querying for an remote control event. [ 299.696919][ T7279] usb 5-1: USB disconnect, device number 20 [ 299.743228][ T5815] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 299.774325][ T7279] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 299.853543][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 299.853555][ T30] audit: type=1400 audit(1765207414.879:749): avc: denied { map } for pid=8909 comm="syz.4.612" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 299.929074][ T8910] netlink: 96 bytes leftover after parsing attributes in process `syz.4.612'. [ 299.939195][ T30] audit: type=1400 audit(1765207414.949:750): avc: denied { setopt } for pid=8909 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.041195][ T30] audit: type=1400 audit(1765207415.059:751): avc: denied { ioctl } for pid=8909 comm="syz.4.612" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 300.152631][ T30] audit: type=1400 audit(1765207415.059:752): avc: denied { create } for pid=8909 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 300.235276][ T30] audit: type=1400 audit(1765207415.129:753): avc: denied { connect } for pid=8909 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 300.301817][ T8872] Process accounting resumed [ 300.316938][ T5954] usb 6-1: USB disconnect, device number 8 [ 300.402228][ T30] audit: type=1400 audit(1765207415.419:754): avc: denied { ioctl } for pid=8909 comm="syz.4.612" path="socket:[21044]" dev="sockfs" ino=21044 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 300.511900][ T30] audit: type=1400 audit(1765207415.419:755): avc: denied { bind } for pid=8909 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.571982][ T30] audit: type=1400 audit(1765207415.589:756): avc: denied { bind } for pid=8914 comm="syz.5.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 300.613395][ T30] audit: type=1400 audit(1765207415.589:757): avc: denied { append } for pid=8914 comm="syz.5.613" name="nbd5" dev="devtmpfs" ino=684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.767363][ T30] audit: type=1400 audit(1765207415.689:758): avc: denied { read } for pid=8914 comm="syz.5.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 300.862237][ T5939] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 301.013572][ T5939] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 301.045093][ T5939] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 301.054405][ T5939] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 301.063836][ T5939] usb 9-1: Product: syz [ 301.068895][ T5939] usb 9-1: Manufacturer: syz [ 301.073607][ T5939] usb 9-1: SerialNumber: syz [ 301.210919][ T8908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.222692][ T8908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.320819][ T5939] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 301.594559][ T5815] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 302.147119][ T5815] usb 7-1: USB disconnect, device number 9 [ 303.681826][ T9] usb 9-1: USB disconnect, device number 9 [ 304.022719][ T9] usblp0: removed [ 304.708566][ T116] IPVS: starting estimator thread 0... [ 304.812271][ T8947] IPVS: using max 46 ests per chain, 110400 per kthread [ 304.862603][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 304.862620][ T30] audit: type=1400 audit(1765207419.889:769): avc: denied { create } for pid=8950 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 304.931092][ T30] audit: type=1400 audit(1765207419.889:770): avc: denied { bind } for pid=8950 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 304.980316][ T30] audit: type=1400 audit(1765207419.889:771): avc: denied { setopt } for pid=8950 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 305.044959][ T30] audit: type=1400 audit(1765207419.889:772): avc: denied { write } for pid=8950 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 305.388661][ T30] audit: type=1400 audit(1765207419.889:773): avc: denied { connect } for pid=8950 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 305.422031][ T30] audit: type=1400 audit(1765207419.929:774): avc: denied { mount } for pid=8952 comm="syz.8.623" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 305.461690][ T30] audit: type=1400 audit(1765207420.169:775): avc: denied { map } for pid=8950 comm="syz.4.622" path="socket:[21506]" dev="sockfs" ino=21506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 305.510145][ T30] audit: type=1400 audit(1765207420.169:776): avc: denied { read } for pid=8950 comm="syz.4.622" path="socket:[21506]" dev="sockfs" ino=21506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 305.544062][ T8963] overlayfs: missing 'lowerdir' [ 305.599628][ T30] audit: type=1400 audit(1765207420.169:777): avc: denied { write } for pid=8950 comm="syz.4.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 305.640838][ T30] audit: type=1400 audit(1765207420.369:778): avc: denied { unmount } for pid=7298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 306.718537][ T8977] netlink: 'syz.4.629': attribute type 10 has an invalid length. [ 306.728197][ T8977] netlink: 'syz.4.629': attribute type 10 has an invalid length. [ 306.736072][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.4.629'. [ 307.043577][ T5815] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 307.182223][ T5815] usb 7-1: device descriptor read/64, error -71 [ 307.422257][ T5815] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 307.612229][ T5815] usb 7-1: device descriptor read/64, error -71 [ 307.725191][ T5815] usb usb7-port1: attempt power cycle [ 308.062323][ T5815] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 308.165632][ T5815] usb 7-1: device descriptor read/8, error -71 [ 308.237618][ T6229] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 308.442623][ T5815] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 308.594787][ T5815] usb 7-1: device descriptor read/8, error -71 [ 308.717224][ T5815] usb usb7-port1: unable to enumerate USB device [ 308.741054][ T6229] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 308.781156][ T6229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.805297][ T6229] usb 5-1: config 0 descriptor?? [ 308.833565][ T6229] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 309.450434][ T6229] usb 5-1: USB disconnect, device number 21 [ 309.663057][ T5815] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 309.842563][ T5815] usb 6-1: Using ep0 maxpacket: 8 [ 309.855686][ T5815] usb 6-1: config 8 has an invalid interface number: 3 but max is 0 [ 309.882510][ T5815] usb 6-1: config 8 has no interface number 0 [ 309.891423][ T5815] usb 6-1: config 8 interface 3 has no altsetting 0 [ 309.962464][ T5815] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1101, bcdDevice= b.85 [ 309.978852][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.007590][ T5815] usb 6-1: Product: syz [ 310.198777][ T5815] usb 6-1: Manufacturer: syz [ 310.223683][ T5815] usb 6-1: SerialNumber: syz [ 310.437117][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 310.437133][ T30] audit: type=1400 audit(1765207425.459:788): avc: denied { bind } for pid=9014 comm="syz.4.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 310.673522][ T30] audit: type=1400 audit(1765207425.699:789): avc: denied { write } for pid=9012 comm="syz.6.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 310.707066][ T30] audit: type=1400 audit(1765207425.699:790): avc: denied { getopt } for pid=9012 comm="syz.6.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 311.370748][ T30] audit: type=1400 audit(1765207426.389:791): avc: denied { write } for pid=9021 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 311.470481][ T9025] FAULT_INJECTION: forcing a failure. [ 311.470481][ T9025] name failslab, interval 1, probability 0, space 0, times 0 [ 311.484182][ T9025] CPU: 1 UID: 0 PID: 9025 Comm: syz.8.642 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.484218][ T9025] Tainted: [L]=SOFTLOCKUP [ 311.484224][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 311.484236][ T9025] Call Trace: [ 311.484243][ T9025] [ 311.484249][ T9025] dump_stack_lvl+0x16c/0x1f0 [ 311.484282][ T9025] should_fail_ex+0x512/0x640 [ 311.484302][ T9025] ? kmem_cache_alloc_noprof+0x62/0x770 [ 311.484325][ T9025] should_failslab+0xc2/0x120 [ 311.484349][ T9025] kmem_cache_alloc_noprof+0x83/0x770 [ 311.484367][ T9025] ? vm_area_dup+0x27/0x8d0 [ 311.484398][ T9025] ? vm_area_dup+0x27/0x8d0 [ 311.484422][ T9025] vm_area_dup+0x27/0x8d0 [ 311.484451][ T9025] __split_vma+0x18e/0x1050 [ 311.484482][ T9025] ? __pfx___split_vma+0x10/0x10 [ 311.484510][ T9025] ? look_up_lock_class+0x59/0x130 [ 311.484552][ T9025] vma_modify+0x1069/0x2310 [ 311.484589][ T9025] ? __pfx_vma_modify+0x10/0x10 [ 311.484625][ T9025] vma_modify_flags+0x235/0x3a0 [ 311.484644][ T9025] ? __pfx_vma_modify_flags+0x10/0x10 [ 311.484671][ T9025] ? mtree_range_walk+0x718/0xc00 [ 311.484693][ T9025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 311.484720][ T9025] madvise_vma_behavior+0x437/0x29e0 [ 311.484750][ T9025] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 311.484780][ T9025] ? __pfx_mt_find+0x10/0x10 [ 311.484804][ T9025] ? find_vma_prev+0xd3/0x150 [ 311.484836][ T9025] ? __pfx_find_vma+0x10/0x10 [ 311.484857][ T9025] ? __lock_acquire+0x436/0x2890 [ 311.484880][ T9025] madvise_walk_vmas+0x31f/0xac0 [ 311.484911][ T9025] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 311.484944][ T9025] madvise_do_behavior+0x1e2/0x530 [ 311.484970][ T9025] ? __pfx___might_resched+0x10/0x10 [ 311.484988][ T9025] ? __pfx_madvise_do_behavior+0x10/0x10 [ 311.485023][ T9025] ? find_held_lock+0x2b/0x80 [ 311.485049][ T9025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 311.485075][ T9025] do_madvise+0x176/0x240 [ 311.485100][ T9025] ? __pfx_do_madvise+0x10/0x10 [ 311.485130][ T9025] ? __mutex_unlock_slowpath+0x161/0x790 [ 311.485166][ T9025] ? __fget_files+0x20e/0x3c0 [ 311.485201][ T9025] ? __pfx_ksys_write+0x10/0x10 [ 311.485229][ T9025] __x64_sys_madvise+0xa9/0x110 [ 311.485252][ T9025] ? lockdep_hardirqs_on+0x7c/0x110 [ 311.485277][ T9025] do_syscall_64+0xcd/0xf80 [ 311.485306][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.485325][ T9025] RIP: 0033:0x7f083a18f749 [ 311.485341][ T9025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.485359][ T9025] RSP: 002b:00007f083b035038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 311.485377][ T9025] RAX: ffffffffffffffda RBX: 00007f083a3e5fa0 RCX: 00007f083a18f749 [ 311.485389][ T9025] RDX: 000000000000000c RSI: 0000000000400000 RDI: 0000200000000000 [ 311.485400][ T9025] RBP: 00007f083b035090 R08: 0000000000000000 R09: 0000000000000000 [ 311.485410][ T9025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.485421][ T9025] R13: 00007f083a3e6038 R14: 00007f083a3e5fa0 R15: 00007ffdd8ba8d18 [ 311.485447][ T9025] [ 311.812046][ T9022] nfs: Bad value for 'source' [ 311.935869][ T30] audit: type=1400 audit(1765207426.959:792): avc: denied { create } for pid=9027 comm="syz.6.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 311.957270][ T30] audit: type=1400 audit(1765207426.959:793): avc: denied { connect } for pid=9027 comm="syz.6.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 312.345319][ T5815] qmi_wwan 6-1:8.3: probe with driver qmi_wwan failed with error -22 [ 312.366077][ T5815] usb 6-1: USB disconnect, device number 9 [ 312.465880][ T30] audit: type=1400 audit(1765207427.489:794): avc: denied { ioctl } for pid=9033 comm="syz.5.645" path="socket:[21700]" dev="sockfs" ino=21700 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 312.532924][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.540287][ T9029] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.553295][ T30] audit: type=1400 audit(1765207427.579:795): avc: denied { create } for pid=9035 comm="syz.8.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 312.891062][ T9029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.907310][ T9029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.682422][ T2936] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.691363][ T2936] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.706405][ T2936] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.716539][ T2936] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.032312][ T6229] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 314.259692][ T5815] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 314.288451][ T30] audit: type=1400 audit(1765207429.309:796): avc: denied { ioctl } for pid=9064 comm="syz.6.653" path="socket:[21372]" dev="sockfs" ino=21372 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 314.433762][ T9069] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 314.483530][ T6229] usb 9-1: device descriptor read/64, error -71 [ 314.504540][ T5815] usb 6-1: config 113 has an invalid descriptor of length 103, skipping remainder of the config [ 314.515358][ T5815] usb 6-1: config 113 has 0 interfaces, different from the descriptor's value: 1 [ 314.524769][ T5815] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 314.534173][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.741952][ T9071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.832746][ T6229] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 314.879489][ T5815] usb 6-1: string descriptor 0 read error: -71 [ 314.958925][ T5815] usb 6-1: USB disconnect, device number 10 [ 315.092482][ T6229] usb 9-1: device descriptor read/64, error -71 [ 315.212743][ T6229] usb usb9-port1: attempt power cycle [ 315.276385][ T9076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 315.467439][ T9085] affs: No valid root block on device nullb0 [ 315.569084][ T5815] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 315.622203][ T6229] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 315.642854][ T6229] usb 9-1: device descriptor read/8, error -71 [ 315.735813][ T9087] affs: No valid root block on device nullb0 [ 315.742220][ T5815] usb 6-1: Using ep0 maxpacket: 32 [ 315.748861][ T5815] usb 6-1: config 113 has an invalid descriptor of length 103, skipping remainder of the config [ 315.760047][ T5815] usb 6-1: config 113 has 0 interfaces, different from the descriptor's value: 1 [ 315.769505][ T5815] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 315.778996][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.892331][ T6229] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 315.912984][ T6229] usb 9-1: device descriptor read/8, error -71 [ 316.106451][ T6229] usb usb9-port1: unable to enumerate USB device [ 317.152979][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.168295][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.593327][ T5815] usb 6-1: string descriptor 0 read error: -71 [ 317.632921][ T5815] usb 6-1: USB disconnect, device number 11 [ 317.663991][ T9105] macvlan3: entered promiscuous mode [ 317.827547][ T9112] macvlan4: entered promiscuous mode [ 317.841235][ T30] audit: type=1400 audit(1765207432.859:797): avc: denied { shutdown } for pid=9101 comm="syz.8.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 318.280616][ T30] audit: type=1400 audit(1765207432.889:798): avc: denied { read } for pid=9101 comm="syz.8.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 319.122210][ T5820] Bluetooth: hci5: command 0x0406 tx timeout [ 319.122297][ T5825] Bluetooth: hci7: command 0x0406 tx timeout [ 319.128304][ T5136] Bluetooth: hci6: command 0x0406 tx timeout [ 320.002780][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 320.193144][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 320.210801][ T9] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 320.219728][ T9] usb 6-1: config 1 has no interface number 0 [ 320.227512][ T9] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 320.243107][ T9] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 1224, setting to 1024 [ 320.689448][ T9] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 320.708621][ T9] usb 6-1: config 1 interface 105 has no altsetting 0 [ 320.761353][ T9] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 320.793800][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.819551][ T9] usb 6-1: Product: syz [ 320.832235][ T9] usb 6-1: Manufacturer: syz [ 320.836976][ T9] usb 6-1: SerialNumber: syz [ 320.860799][ T9133] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 320.973463][ T9133] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 321.399314][ T9133] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 321.412573][ T9133] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 322.345884][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.671'. [ 322.475972][ T9] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 322.526032][ T9] aqc111 6-1:1.105: probe with driver aqc111 failed with error -71 [ 322.567289][ T9] usb 6-1: USB disconnect, device number 12 [ 325.402186][ T5815] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 325.585752][ T5815] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.774217][ T5815] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 325.785729][ T5815] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 325.795534][ T5815] usb 9-1: Product: syz [ 325.799703][ T5815] usb 9-1: Manufacturer: syz [ 325.804752][ T5815] usb 9-1: SerialNumber: syz [ 326.316100][ T5815] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 326.612807][ T30] audit: type=1400 audit(1765207441.619:799): avc: denied { remount } for pid=9201 comm="syz.5.695" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 327.552875][ T9223] netlink: 'syz.6.698': attribute type 10 has an invalid length. [ 327.577284][ T9223] batadv0: left allmulticast mode [ 328.090246][ T9223] batadv0: left promiscuous mode [ 328.133732][ T9223] bridge0: port 3(batadv0) entered disabled state [ 328.263026][ T9223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.271314][ T9223] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 328.299707][ T30] audit: type=1400 audit(1765207443.319:800): avc: denied { setopt } for pid=9227 comm="syz.7.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 328.451435][ T9226] netlink: 'syz.6.698': attribute type 10 has an invalid length. [ 328.462845][ T9226] netlink: 40 bytes leftover after parsing attributes in process `syz.6.698'. [ 328.608815][ T30] audit: type=1400 audit(1765207443.559:801): avc: denied { ioctl } for pid=9232 comm="syz.5.700" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 328.648769][ T9226] batadv0: entered promiscuous mode [ 328.767017][ T9226] batadv0: entered allmulticast mode [ 328.859466][ T9226] bond0: (slave batadv0): Releasing backup interface [ 328.949537][ T9226] bridge0: port 3(batadv0) entered blocking state [ 328.966305][ T9226] bridge0: port 3(batadv0) entered disabled state [ 329.059003][ T5815] usb 9-1: USB disconnect, device number 14 [ 329.070619][ T5815] usblp0: removed [ 329.142333][ T6012] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 329.151575][ T6012] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 329.303198][ T30] audit: type=1400 audit(1765207444.329:802): avc: denied { create } for pid=9243 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 329.402263][ T30] audit: type=1400 audit(1765207444.379:803): avc: denied { getopt } for pid=9243 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 329.451958][ T30] audit: type=1400 audit(1765207444.399:804): avc: denied { write } for pid=9245 comm="syz.8.705" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 329.516291][ T30] audit: type=1400 audit(1765207444.399:805): avc: denied { open } for pid=9245 comm="syz.8.705" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 329.842480][ T977] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 329.958549][ T30] audit: type=1400 audit(1765207444.979:806): avc: denied { ioctl } for pid=9256 comm="syz.6.709" path="ipc:[4026532891]" dev="nsfs" ino=4026532891 ioctlcmd=0xb705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 330.013961][ T977] usb 9-1: unable to get BOS descriptor or descriptor too short [ 330.111135][ T977] usb 9-1: not running at top speed; connect to a high speed hub [ 330.116494][ T30] audit: type=1400 audit(1765207445.139:807): avc: denied { read write } for pid=9256 comm="syz.6.709" name="sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 330.143959][ T977] usb 9-1: config 2 has an invalid interface number: 248 but max is 0 [ 330.188373][ T977] usb 9-1: config 2 has no interface number 0 [ 330.199682][ T977] usb 9-1: config 2 interface 248 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 330.220619][ T30] audit: type=1400 audit(1765207445.169:808): avc: denied { open } for pid=9256 comm="syz.6.709" path="/dev/sg0" dev="devtmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 330.226115][ T977] usb 9-1: config 2 interface 248 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 330.332482][ T977] usb 9-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=11.e3 [ 330.341572][ T977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.367136][ T977] usb 9-1: Product: syz [ 330.378888][ T977] usb 9-1: Manufacturer: syz [ 330.388875][ T977] usb 9-1: SerialNumber: syz [ 330.623559][ T977] usb 9-1: bad CDC descriptors [ 330.637302][ T977] ni6501 9-1:2.248: driver 'ni6501' failed to auto-configure device. [ 330.655198][ T977] usb 9-1: USB disconnect, device number 15 [ 330.938502][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.713'. [ 330.963273][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.6.713'. [ 331.030250][ T9272] netlink: 40 bytes leftover after parsing attributes in process `syz.6.714'. [ 331.475975][ T9286] netlink: 'syz.6.719': attribute type 10 has an invalid length. [ 331.484288][ T9286] batadv0: left allmulticast mode [ 331.489393][ T9286] batadv0: left promiscuous mode [ 331.496176][ T9286] bridge0: port 3(batadv0) entered disabled state [ 331.614916][ T9286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.622865][ T9288] netlink: 'syz.6.719': attribute type 10 has an invalid length. [ 331.624424][ T9286] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 331.660295][ T9288] netlink: 40 bytes leftover after parsing attributes in process `syz.6.719'. [ 331.670450][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 331.670465][ T30] audit: type=1400 audit(1765207446.689:812): avc: denied { write } for pid=9284 comm="syz.8.720" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 331.712855][ T9288] batadv0: entered promiscuous mode [ 331.718167][ T9288] batadv0: entered allmulticast mode [ 331.779307][ T30] audit: type=1400 audit(1765207446.799:813): avc: denied { append } for pid=9290 comm="syz.4.721" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 331.866357][ T9297] evm: overlay not supported [ 331.873145][ T9288] bond0: (slave batadv0): Releasing backup interface [ 331.899094][ T9288] bridge0: port 3(batadv0) entered blocking state [ 331.908046][ T9288] bridge0: port 3(batadv0) entered disabled state [ 331.942536][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 332.252522][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 332.284341][ T10] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 332.294376][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.305295][ T10] usb 9-1: config 0 descriptor?? [ 332.343318][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 332.374970][ T30] audit: type=1400 audit(1765207447.399:814): avc: denied { read } for pid=9302 comm="syz.7.723" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 332.412333][ T3686] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 332.421932][ T3686] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 332.498537][ T30] audit: type=1400 audit(1765207447.429:815): avc: denied { open } for pid=9302 comm="syz.7.723" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 332.582037][ T10] gspca_vc032x: reg_r err -71 [ 332.582050][ T30] audit: type=1404 audit(1765207447.479:816): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 332.619962][ T30] audit: type=1400 audit(1765207447.509:817): avc: denied { name_bind } for pid=9307 comm="syz.5.724" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 332.632136][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.662126][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.667596][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.682154][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.713850][ T30] audit: type=1400 audit(1765207447.549:818): avc: denied { module_request } for pid=9302 comm="syz.7.723" kmod="net-pf-2-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 332.782379][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.792232][ T30] audit: type=1400 audit(1765207447.559:819): avc: denied { prog_load } for pid=9302 comm="syz.7.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 332.820481][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.826391][ T30] audit: type=1400 audit(1765207447.559:820): avc: denied { create } for pid=9302 comm="syz.7.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 332.826438][ T30] audit: type=1400 audit(1765207447.559:821): avc: denied { create } for pid=9302 comm="syz.7.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 332.920686][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.937190][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.955312][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.971774][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.995438][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.000838][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.007561][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.013084][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.018457][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.023912][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.034876][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.045750][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.052191][ T10] gspca_vc032x: Unknown sensor... [ 333.057406][ T10] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 333.144563][ T10] usb 9-1: USB disconnect, device number 16 [ 334.255491][ T9346] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 334.413211][ T149] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.424932][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 334.504858][ T149] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.603771][ T149] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.685100][ T149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.813062][ T149] team0: left allmulticast mode [ 334.818928][ T149] bridge0: port 1(team0) entered disabled state [ 335.426013][ T9360] netlink: 'syz.6.741': attribute type 10 has an invalid length. [ 335.485087][ T9362] netlink: 'syz.6.741': attribute type 10 has an invalid length. [ 335.493264][ T9362] netlink: 40 bytes leftover after parsing attributes in process `syz.6.741'. [ 335.545645][ T149] bond0 (unregistering): Released all slaves [ 335.643035][ T9360] batadv0: left allmulticast mode [ 335.649023][ T9360] batadv0: left promiscuous mode [ 335.703622][ T9360] bridge0: port 3(batadv0) entered disabled state [ 335.816974][ T9360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.886131][ T9360] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 335.924800][ T9362] batadv0: entered promiscuous mode [ 335.933314][ T9362] batadv0: entered allmulticast mode [ 335.961292][ T9362] bond0: (slave batadv0): Releasing backup interface [ 336.008626][ T9362] bridge0: port 3(batadv0) entered blocking state [ 336.015671][ T9362] bridge0: port 3(batadv0) entered disabled state [ 336.513736][ T149] hsr_slave_0: left promiscuous mode [ 336.550905][ T149] hsr_slave_1: left promiscuous mode [ 336.614521][ T149] veth1_macvtap: left promiscuous mode [ 336.620785][ T149] veth0_macvtap: left promiscuous mode [ 336.627567][ T149] veth1_vlan: left promiscuous mode [ 336.633790][ T149] veth0_vlan: left promiscuous mode [ 336.672218][ T30] kauditd_printk_skb: 6361 callbacks suppressed [ 336.672234][ T30] audit: type=1400 audit(1765207451.689:4522): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 336.726182][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 336.726382][ T30] audit: type=1400 audit(1765207451.699:4523): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 336.745056][ T5480] audit: audit_lost=890 audit_rate_limit=0 audit_backlog_limit=64 [ 336.778093][ T5480] audit: backlog limit exceeded [ 336.780799][ T30] audit: type=1400 audit(1765207451.699:4524): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 336.785694][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 336.808553][ T30] audit: type=1400 audit(1765207451.699:4525): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 336.811118][ T5480] audit: audit_lost=891 audit_rate_limit=0 audit_backlog_limit=64 [ 336.840765][ T30] audit: type=1400 audit(1765207451.699:4526): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 337.976239][ T9382] capability: warning: `syz.8.746' uses deprecated v2 capabilities in a way that may be insecure [ 339.043973][ T9391] vxcan1: entered promiscuous mode [ 341.537554][ T9407] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (aio_iiro_16) [ 341.701693][ T30] kauditd_printk_skb: 19867 callbacks suppressed [ 341.701714][ T30] audit: type=1400 audit(1765207456.719:24393): avc: denied { prog_load } for pid=9404 comm="syz.6.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 341.729609][ T30] audit: type=1400 audit(1765207456.719:24394): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 341.808382][ T30] audit: type=1400 audit(1765207456.719:24395): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 341.810287][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 341.851579][ T30] audit: type=1400 audit(1765207456.719:24396): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 341.873407][ T5480] audit: audit_lost=892 audit_rate_limit=0 audit_backlog_limit=64 [ 341.873630][ T30] audit: type=1400 audit(1765207456.729:24397): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 341.881217][ T5480] audit: backlog limit exceeded [ 341.881561][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 341.914044][ T30] audit: type=1400 audit(1765207456.729:24398): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 345.872292][ T9443] netlink: 2 bytes leftover after parsing attributes in process `syz.8.767'. [ 345.895169][ T9439] FAULT_INJECTION: forcing a failure. [ 345.895169][ T9439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.922012][ T9439] CPU: 1 UID: 0 PID: 9439 Comm: syz.6.768 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.922039][ T9439] Tainted: [L]=SOFTLOCKUP [ 345.922045][ T9439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.922055][ T9439] Call Trace: [ 345.922061][ T9439] [ 345.922068][ T9439] dump_stack_lvl+0x16c/0x1f0 [ 345.922103][ T9439] should_fail_ex+0x512/0x640 [ 345.922125][ T9439] _copy_to_user+0x32/0xd0 [ 345.922147][ T9439] snd_pcm_oss_read2+0x294/0x410 [ 345.922167][ T9439] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 345.922183][ T9439] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 345.922206][ T9439] ? snd_pcm_oss_prepare+0x11e/0x240 [ 345.922236][ T9439] snd_pcm_oss_read+0x5d2/0x760 [ 345.922257][ T9439] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 345.922275][ T9439] vfs_read+0x1e4/0xcf0 [ 345.922303][ T9439] ? __pfx_vfs_read+0x10/0x10 [ 345.922322][ T9439] ? find_held_lock+0x2b/0x80 [ 345.922351][ T9439] ? __fget_files+0x204/0x3c0 [ 345.922379][ T9439] ? __fget_files+0x20e/0x3c0 [ 345.922410][ T9439] ksys_read+0x12a/0x250 [ 345.922429][ T9439] ? __pfx_ksys_read+0x10/0x10 [ 345.922455][ T9439] do_syscall_64+0xcd/0xf80 [ 345.922481][ T9439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.922499][ T9439] RIP: 0033:0x7f382df8f749 [ 345.922514][ T9439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.922531][ T9439] RSP: 002b:00007f382edae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 345.922548][ T9439] RAX: ffffffffffffffda RBX: 00007f382e1e5fa0 RCX: 00007f382df8f749 [ 345.922558][ T9439] RDX: 00000000200021d5 RSI: 00002000000011c0 RDI: 0000000000000003 [ 345.922568][ T9439] RBP: 00007f382edae090 R08: 0000000000000000 R09: 0000000000000000 [ 345.922577][ T9439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.922587][ T9439] R13: 00007f382e1e6038 R14: 00007f382e1e5fa0 R15: 00007ffda04ca198 [ 345.922612][ T9439] [ 346.180540][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.187855][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.231841][ T9443] bond_slave_0: left promiscuous mode [ 346.238447][ T9443] bond_slave_1: left promiscuous mode [ 346.296356][ T9443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.309856][ T9443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.428163][ T9443] macvlan3: left promiscuous mode [ 346.443194][ T5991] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.488094][ T5991] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.497820][ T5991] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.508692][ T5991] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.704955][ T30] kauditd_printk_skb: 21967 callbacks suppressed [ 346.704972][ T30] audit: type=1400 audit(1765207461.729:46346): avc: denied { read write } for pid=7298 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 346.721313][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 346.735976][ T30] audit: type=1400 audit(1765207461.729:46347): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 346.744611][ T5480] audit: audit_lost=900 audit_rate_limit=0 audit_backlog_limit=64 [ 346.765913][ T30] audit: type=1400 audit(1765207461.729:46348): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 346.772027][ T5480] audit: backlog limit exceeded [ 346.795526][ T30] audit: type=1400 audit(1765207461.729:46349): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 346.799447][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 346.819317][ T30] audit: type=1400 audit(1765207461.729:46350): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 346.825923][ T5480] audit: audit_lost=901 audit_rate_limit=0 audit_backlog_limit=64 [ 347.502685][ T9462] FAULT_INJECTION: forcing a failure. [ 347.502685][ T9462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.542294][ T9462] CPU: 0 UID: 0 PID: 9462 Comm: syz.6.772 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.542331][ T9462] Tainted: [L]=SOFTLOCKUP [ 347.542338][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.542348][ T9462] Call Trace: [ 347.542354][ T9462] [ 347.542361][ T9462] dump_stack_lvl+0x16c/0x1f0 [ 347.542392][ T9462] should_fail_ex+0x512/0x640 [ 347.542415][ T9462] _copy_to_user+0x32/0xd0 [ 347.542436][ T9462] simple_read_from_buffer+0xcb/0x170 [ 347.542463][ T9462] proc_fail_nth_read+0x197/0x240 [ 347.542483][ T9462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.542503][ T9462] ? rw_verify_area+0xcf/0x6c0 [ 347.542522][ T9462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.542540][ T9462] vfs_read+0x1e4/0xcf0 [ 347.542561][ T9462] ? __pfx___mutex_lock+0x10/0x10 [ 347.542590][ T9462] ? __pfx_vfs_read+0x10/0x10 [ 347.542619][ T9462] ? __fget_files+0x20e/0x3c0 [ 347.542648][ T9462] ksys_read+0x12a/0x250 [ 347.542669][ T9462] ? __pfx_ksys_read+0x10/0x10 [ 347.542698][ T9462] do_syscall_64+0xcd/0xf80 [ 347.542727][ T9462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.542746][ T9462] RIP: 0033:0x7f382df8e15c [ 347.542761][ T9462] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 347.542779][ T9462] RSP: 002b:00007f382edae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.542796][ T9462] RAX: ffffffffffffffda RBX: 00007f382e1e5fa0 RCX: 00007f382df8e15c [ 347.542808][ T9462] RDX: 000000000000000f RSI: 00007f382edae0a0 RDI: 0000000000000003 [ 347.542820][ T9462] RBP: 00007f382edae090 R08: 0000000000000000 R09: 0000000000000000 [ 347.542831][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.542842][ T9462] R13: 00007f382e1e6038 R14: 00007f382e1e5fa0 R15: 00007ffda04ca198 [ 347.542869][ T9462] [ 351.087421][ T9474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.156737][ T9474] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 351.175257][ T9480] netlink: 16 bytes leftover after parsing attributes in process `syz.6.780'. [ 351.712286][ T30] kauditd_printk_skb: 26144 callbacks suppressed [ 351.712301][ T30] audit: type=1400 audit(1765207466.729:72494): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 351.740582][ T30] audit: type=1400 audit(1765207466.739:72495): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 351.762320][ T30] audit: type=1400 audit(1765207466.739:72496): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 351.784761][ T30] audit: type=1400 audit(1765207466.739:72497): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 351.787637][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 351.813309][ T5480] audit: audit_lost=902 audit_rate_limit=0 audit_backlog_limit=64 [ 351.821111][ T5480] audit: backlog limit exceeded [ 351.826062][ T30] audit: type=1400 audit(1765207466.739:72498): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 351.826582][ T5480] audit: audit_backlog=65 > audit_backlog_limit=64 [ 351.847274][ T30] audit: type=1400 audit(1765207466.739:72499): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 352.162838][ T31] INFO: task syz.1.163:6738 blocked for more than 143 seconds. [ 352.170412][ T31] Tainted: G L syzkaller #0 [ 352.178866][ T31] Blocked by coredump. [ 352.184083][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.192804][ T31] task:syz.1.163 state:D stack:27544 pid:6738 tgid:6738 ppid:5808 task_flags:0x40044c flags:0x00080003 [ 352.204821][ T31] Call Trace: [ 352.208096][ T31] [ 352.211028][ T31] ? __schedule+0x10b9/0x6150 [ 352.215799][ T31] __schedule+0x1139/0x6150 [ 352.220337][ T31] ? __pfx___schedule+0x10/0x10 [ 352.225237][ T31] ? find_held_lock+0x2b/0x80 [ 352.229923][ T31] ? schedule+0x2d7/0x3a0 [ 352.234326][ T31] schedule+0xe7/0x3a0 [ 352.238401][ T31] schedule_timeout+0x257/0x290 [ 352.244302][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 352.249701][ T31] ? rcu_is_watching+0x12/0xc0 [ 352.254574][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 352.259780][ T31] __wait_for_common+0x2fc/0x4e0 [ 352.264961][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 352.270337][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 352.275825][ T31] ? find_held_lock+0x2b/0x80 [ 352.281474][ T31] ? __flush_work+0x938/0xcc0 [ 352.286273][ T31] ? __flush_work+0x4d0/0xcc0 [ 352.290963][ T31] __flush_work+0x7d7/0xcc0 [ 352.295563][ T31] ? __pfx___flush_work+0x10/0x10 [ 352.300590][ T31] ? try_to_grab_pending+0x450/0x850 [ 352.305942][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 352.311248][ T31] ? __pfx___might_resched+0x10/0x10 [ 352.316578][ T31] cancel_work_sync+0xd1/0xf0 [ 352.321263][ T31] hci_cmd_sync_clear+0x33/0x100 [ 352.326339][ T31] hci_unregister_dev+0x1cc/0x680 [ 352.331375][ T31] vhci_release+0x17d/0x230 [ 352.335960][ T31] ? __pfx_vhci_release+0x10/0x10 [ 352.340992][ T31] __fput+0x402/0xb70 [ 352.345041][ T31] task_work_run+0x150/0x240 [ 352.349636][ T31] ? __pfx_task_work_run+0x10/0x10 [ 352.354992][ T31] do_exit+0x87f/0x2bd0 [ 352.359155][ T31] ? __pfx_do_exit+0x10/0x10 [ 352.364628][ T31] ? cgroup_update_frozen_flag+0x107/0x210 [ 352.370447][ T31] ? find_held_lock+0x2b/0x80 [ 352.376192][ T31] do_group_exit+0xd3/0x2a0 [ 352.380704][ T31] get_signal+0x2671/0x26d0 [ 352.386560][ T31] ? __pfx_get_signal+0x10/0x10 [ 352.391425][ T31] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 352.397081][ T31] arch_do_signal_or_restart+0x8f/0x7e0 [ 352.404157][ T31] ? get_timespec64+0x147/0x240 [ 352.409020][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 352.415382][ T31] ? __x64_sys_clock_nanosleep+0x35e/0x4a0 [ 352.421196][ T31] exit_to_user_mode_loop+0x8c/0x540 [ 352.426681][ T31] do_syscall_64+0x4ee/0xf80 [ 352.431282][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.438160][ T31] RIP: 0033:0x7f8a31fc2005 [ 352.442734][ T31] RSP: 002b:00007f8a32ebff80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 352.451147][ T31] RAX: fffffffffffffdfc RBX: 00007f8a321e5fa0 RCX: 00007f8a31fc2005 [ 352.459344][ T31] RDX: 00007f8a32ebffc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.467446][ T31] RBP: 00007f8a32013f91 R08: 0000000000000000 R09: 0000000000000000 [ 352.478818][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 352.496076][ T31] R13: 00007f8a321e6038 R14: 00007f8a321e5fa0 R15: 00007ffc359d6e68 [ 352.504242][ T31] [ 352.507301][ T31] [ 352.507301][ T31] Showing all locks held in the system: [ 352.515232][ T31] 1 lock held by khungtaskd/31: [ 352.520075][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 352.530164][ T31] 2 locks held by getty/5572: [ 352.534978][ T31] #0: ffff88814e2f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 352.545217][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 352.555461][ T31] 3 locks held by kworker/u9:2/5816: [ 352.560736][ T31] #0: ffff88803339e948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 352.571688][ T31] #1: ffffc900043dfc90 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 352.588291][ T31] #2: ffff888021320ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x470 [ 352.600018][ T31] [ 352.602502][ T31] ============================================= [ 352.602502][ T31] [ 352.610907][ T31] NMI backtrace for cpu 1 [ 352.610922][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 352.610946][ T31] Tainted: [L]=SOFTLOCKUP [ 352.610952][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.610963][ T31] Call Trace: [ 352.610969][ T31] [ 352.610977][ T31] dump_stack_lvl+0x116/0x1f0 [ 352.611010][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 352.611032][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 352.611053][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 352.611076][ T31] sys_info+0x133/0x180 [ 352.611094][ T31] watchdog+0xe66/0x1180 [ 352.611120][ T31] ? rcu_is_watching+0x12/0xc0 [ 352.611138][ T31] ? __pfx_watchdog+0x10/0x10 [ 352.611156][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 352.611184][ T31] ? __kthread_parkme+0x19e/0x250 [ 352.611204][ T31] ? __pfx_watchdog+0x10/0x10 [ 352.611223][ T31] kthread+0x3c5/0x780 [ 352.611245][ T31] ? __pfx_kthread+0x10/0x10 [ 352.611267][ T31] ? rcu_is_watching+0x12/0xc0 [ 352.611284][ T31] ? __pfx_kthread+0x10/0x10 [ 352.611305][ T31] ret_from_fork+0x983/0xb10 [ 352.611326][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 352.611348][ T31] ? __switch_to+0x7af/0x10d0 [ 352.611371][ T31] ? __pfx_kthread+0x10/0x10 [ 352.611394][ T31] ret_from_fork_asm+0x1a/0x30 [ 352.611432][ T31] [ 352.611439][ T31] Sending NMI from CPU 1 to CPUs 0: [ 352.752591][ C0] NMI backtrace for cpu 0 [ 352.752609][ C0] CPU: 0 UID: 0 PID: 5167 Comm: syslogd Tainted: G L syzkaller #0 PREEMPT(full) [ 352.752630][ C0] Tainted: [L]=SOFTLOCKUP [ 352.752635][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 352.752644][ C0] RIP: 0010:__unix_dgram_recvmsg+0xd7/0xc30 [ 352.752667][ C0] Code: 84 24 d0 00 00 00 00 00 00 00 48 c1 e8 03 48 c7 84 24 d8 00 00 00 00 00 00 00 48 c7 84 24 e0 00 00 00 00 00 00 00 80 3c 28 00 <0f> 85 46 0a 00 00 44 8b 74 24 04 31 ff 48 8b 83 a0 01 00 00 48 c7 [ 352.752681][ C0] RSP: 0018:ffffc9000416fa38 EFLAGS: 00000246 [ 352.752693][ C0] RAX: 1ffff110065385ac RBX: ffff8880329c2bc0 RCX: 0000000000000000 [ 352.752703][ C0] RDX: ffff88807ccb0000 RSI: ffffffff8a1665a5 RDI: ffff8880329c2d60 [ 352.752712][ C0] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 352.752721][ C0] R10: 0000000000000000 R11: 0000000000000003 R12: 00000000000000ff [ 352.752729][ C0] R13: 0000000000000000 R14: ffffffff903148a0 R15: 00000000000000ff [ 352.752739][ C0] FS: 00007f61ffe60c80(0000) GS:ffff888124909000(0000) knlGS:0000000000000000 [ 352.752754][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.752764][ C0] CR2: 00007f083a3b42f8 CR3: 000000007cc02000 CR4: 00000000003526f0 [ 352.752773][ C0] Call Trace: [ 352.752778][ C0] [ 352.752785][ C0] ? sock_has_perm+0x258/0x2f0 [ 352.752804][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 352.752820][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 352.752842][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 352.752857][ C0] sock_recvmsg+0x1f9/0x250 [ 352.752879][ C0] sock_read_iter+0x2b9/0x3b0 [ 352.752902][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 352.752927][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 352.752942][ C0] ? security_file_permission+0x71/0x210 [ 352.752956][ C0] ? rw_verify_area+0xcf/0x6c0 [ 352.752973][ C0] vfs_read+0xa98/0xcf0 [ 352.752992][ C0] ? __pfx_vfs_read+0x10/0x10 [ 352.753011][ C0] ? __irq_exit_rcu+0x109/0x170 [ 352.753032][ C0] ? lockdep_softirqs_on+0xbb/0x130 [ 352.753050][ C0] ksys_read+0x1f8/0x250 [ 352.753066][ C0] ? __pfx_ksys_read+0x10/0x10 [ 352.753085][ C0] do_syscall_64+0xcd/0xf80 [ 352.753106][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.753121][ C0] RIP: 0033:0x7f61fffb0407 [ 352.753131][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 352.753144][ C0] RSP: 002b:00007ffcccf86fb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 352.753157][ C0] RAX: ffffffffffffffda RBX: 00007f61ffe60c80 RCX: 00007f61fffb0407 [ 352.753167][ C0] RDX: 00000000000000ff RSI: 0000559a21636300 RDI: 0000000000000000 [ 352.753176][ C0] RBP: 0000559a216362c0 R08: 0000000000000000 R09: 0000000000000000 [ 352.753184][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559a2163633f [ 352.753194][ C0] R13: 0000000000000000 R14: 0000559a21636300 R15: 00005599f8a0cd98 [ 352.753209][ C0] [ 353.054003][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 353.060854][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 353.071527][ T31] Tainted: [L]=SOFTLOCKUP [ 353.075840][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.085887][ T31] Call Trace: [ 353.089148][ T31] [ 353.092057][ T31] dump_stack_lvl+0x3d/0x1f0 [ 353.096643][ T31] vpanic+0x640/0x6f0 [ 353.100611][ T31] panic+0xca/0xd0 [ 353.104315][ T31] ? __pfx_panic+0x10/0x10 [ 353.108711][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 353.114673][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 353.120811][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 353.126947][ T31] ? watchdog+0xe83/0x1180 [ 353.131344][ T31] ? watchdog+0xe76/0x1180 [ 353.135742][ T31] watchdog+0xe94/0x1180 [ 353.139969][ T31] ? rcu_is_watching+0x12/0xc0 [ 353.144713][ T31] ? __pfx_watchdog+0x10/0x10 [ 353.149368][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 353.154554][ T31] ? __kthread_parkme+0x19e/0x250 [ 353.159559][ T31] ? __pfx_watchdog+0x10/0x10 [ 353.164233][ T31] kthread+0x3c5/0x780 [ 353.168293][ T31] ? __pfx_kthread+0x10/0x10 [ 353.172868][ T31] ? rcu_is_watching+0x12/0xc0 [ 353.177610][ T31] ? __pfx_kthread+0x10/0x10 [ 353.182183][ T31] ret_from_fork+0x983/0xb10 [ 353.186769][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 353.191867][ T31] ? __switch_to+0x7af/0x10d0 [ 353.196531][ T31] ? __pfx_kthread+0x10/0x10 [ 353.201103][ T31] ret_from_fork_asm+0x1a/0x30 [ 353.205866][ T31] [ 353.209066][ T31] Kernel Offset: disabled [ 353.213388][ T31] Rebooting in 86400 seconds..