last executing test programs: 30m9.140892284s ago: executing program 1 (id=668): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) syz_create_resource$binfmt(0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0x9, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3, 0xfff6, 0x64, 0x15, 0x1, 0x0, 0x3, @local, @loopback}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x10000085}, 0x3c) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd0, &(0x7f0000000240), 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r5, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xff7fffff}, 0x1c) 30m7.171495352s ago: executing program 1 (id=675): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) sendfile(r1, r0, 0x0, 0x80008) (fail_nth: 7) 30m6.986076808s ago: executing program 1 (id=676): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000cc0)={'syz1\x00', {}, 0x0, [0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) clock_gettime(0x0, 0x0) readv(r1, &(0x7f0000002140)=[{&(0x7f0000002080)=""/145, 0x91}], 0x1) ioctl$UI_DEV_DESTROY(r1, 0x5502) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) timerfd_create(0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1, 0x8000) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r7) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r8, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x1000000000000f, &(0x7f00000000c0)=0x7fffffff, 0x4) 30m5.864855688s ago: executing program 1 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2638c2, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x212d09b, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x3) 30m5.334124264s ago: executing program 1 (id=681): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) shutdown(r3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x980, 0x8, 0x2, 0xb}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x0, 0x9, 0x466}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) (fail_nth: 4) recvmmsg(r0, 0x0, 0x0, 0x40010003, 0x0) 30m4.7401872s ago: executing program 1 (id=686): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)={'U+', 0x7}, 0x16, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4f23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, 0x24) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2001, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 30m3.735653322s ago: executing program 32 (id=686): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)={'U+', 0x7}, 0x16, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4f23, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, 0x24) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2001, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 19m13.234174073s ago: executing program 4 (id=2967): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x76, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="01002dbd70000000000003000000140001800d0001007564703a73797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) 19m8.969810786s ago: executing program 4 (id=2972): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000406800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) 19m8.754291859s ago: executing program 4 (id=2973): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x1000}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2100020, &(0x7f0000000380)=ANY=[@ANYBLOB="6e7247733d85e005000000000040346d2c74a755e5e57080741ec16c082ae7bf4403e44d852b748d096b9bd9a416020f4f70a7c1168d5d82ba449eb6f3da75046c5163175ed7f10945ea119d27f4bc514572a2b37796cdadbffeed117aed19501bbd19db98889fe3b9becb3ac160dc1e389aa6f8e38afc45b13742bd4d954355d4407c0e000000000000001d9ea3847a84c6f46d6d6440f26b14ca"]) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioperm(0x3, 0x4, 0x1000009) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000200)=0x7fff, 0x4) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x10, 0x2, 0x0) r5 = fanotify_init(0x20, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x71, 0x8000000, r6, 0x0) syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103"], 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001d40)=[{0x9, 0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000040)=""/92, 0x5c}, {&(0x7f0000001e00)=""/195, 0xc3}, {&(0x7f0000000300)=""/135, 0x87}, {&(0x7f0000000240)=""/123, 0x7b}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000540)=""/241, 0xf1}], &(0x7f0000000180)=[0x9, 0xd, 0xfffffffffffffffb]}, {0x8, 0x1, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001740)=""/161, 0xa1}, {&(0x7f0000001800)=""/71, 0x47}, {&(0x7f0000001d80)=""/67, 0x43}, {&(0x7f0000001880)=""/98, 0x62}, {&(0x7f0000001980)=""/185, 0xb9}, {&(0x7f0000001a40)=""/193, 0xc1}, {&(0x7f0000001b40)=""/106, 0x6a}, {&(0x7f0000001bc0)=""/151, 0x97}], &(0x7f0000001d00)=[0x1, 0x6, 0x6, 0xa8, 0x27bd]}], 0x2) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) 19m5.646323119s ago: executing program 4 (id=2983): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) r1 = geteuid() r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @null, r1}) 19m5.523965921s ago: executing program 4 (id=2984): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x69, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57, 0x1, 0x1, 0x0, 0x90, 0x6b, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x6, 0x24, 0x6, 0x0, 0x0, "d0"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7ff, 0xf19, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x51c, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x81, 0x81, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x80, 0x100}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3df, 0xfd, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf7, 0x8, 0x1}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0x23, 0x9, 0x4, 0x40, 0xff}, 0x1f, &(0x7f0000000480)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x840, 0xf000, 0x80, [0x7fbf30]}]}, 0x8, [{0xaf, &(0x7f0000000940)=@string={0xaf, 0x3, "05e9b3e07dd14cd837b49f105efe57fbcc77335af76ade5dc0881debf534388a12541c149c5ddd04db18195c40e4504c0d00e35469ae8c68f61989eb1d2333fce0f3e19cd318291e1230d2f0cc67acc111350663e9d5d684c78a2c55fda6cc24130cde4aa0ba26a22a724857ddef7b33d4bd91d2839809a608a0ae07d993459e97697c6f2429a46aac8ca8e20323c2493bc4452de13392baac6fdeab236fac803340658afd0d98bb3103c53864"}}, {0x52, &(0x7f0000000a00)=@string={0x52, 0x3, "26a1b0251f37331611233471c3a6acb465b5d00f879c979a3af0ed1f3bb0a51d6f1f245d58545e1a94084fd4067bbd3aec0cc9162d3569a6464cae8972020372e37fcf0710d82d2eca15f5bd4c7fb094"}}, {0x68, &(0x7f0000000a80)=@string={0x68, 0x3, "92ec599c5edbaf75f981e10717cf7d2691b8b6fabdeb4b25c7cf5345139b2be63071a0aa23d473c48c26332921c7069e51b53c532cb48db8955c37db91e809382cb15e9b441db2bc94e327110493c6b569f2caacc654720e0a0e789d9b86456cabf242d8108d"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x438}}, {0x5e, &(0x7f0000000580)=@string={0x5e, 0x3, "9e18b77412bc4fdce416f5c273e5520a9522ae47bc365a6d61f67015933b6a55b7863a7d447ea6effb9517a4c13f2d02b4d4274f5be54176cc25e9561ab902d211d19c95eeba7ef7f30fda021185c1f4550e26b3f911d93c31bf51f8"}}, {0xc1, &(0x7f0000000c00)=@string={0xc1, 0x3, "558036a404bcc79d27cf168fc1d2d8f3b4ab193c381255bf16e65cf68a8edfc6c807520abc92ae53896eb289abb7435bd956ed066a022c3ae72f74d9b5efbc99cddaf80f0b3e79c4d8024c344fe1b1b9993b53e0b9d0728edfb6f121dda4fe19c79634b5cb40c0e5278e6c38cd9145d0057811053db76170b0a2358ad90b0f78d227bf1fbc754dd221f0f198f04256e11b7d0e97cdd5ebc0575bf1680615c7d2d462c9491d92da9525cf39969f9072619e318074986d920a10c3ecb12f2974"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x20000004) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r4, &(0x7f0000000180)='1', 0x1) write$UHID_CREATE2(r3, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7ff}, 0x0, &(0x7f00000003c0)={0x3ff, 0x20000, 0x0, 0x4000000000000000, 0x0, 0x0, 0x4, 0xfffffffffffffff9}, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="0800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908000000000055090100000000009500000000000000bf9110000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='mm_khugepaged_scan_pmd\x00', r1}, 0x18) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x0, 0xb, 0x2, {0x2, 0x24}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="000167000000670449f80dee023eafff0300005225252b15c2bc43f406c3b5a81c6b7d3b57e33221890d3b793dc586b165e8740169e917cd272c88b88d1cebafc82e95e943d571f4006652c19ad3e2605a82aa7788c776538e431a304770e4fdcfb1f6ff530af444fb7417bb7a"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x0, 0xb8, "7ed084e4f46571fe7d984d9ac74d6a239c87db747a798b52eb67880be50f719a81f197f78e4426b5e21b23cd6db554440af4ca43e7b3c7fa26efa31ed55041df60a3d2510c8b44cba8fe844eb6fd659290915d507057cab831b8c90f55118d087ab86deff5fad0373b14d307104b916cb4924b0c9904883654accfc07fb3ce137f939cbfa936b02b5336a880b7435af65da9d194b219459dd58964b6ae9dcf211008f22a8e476e959755a1a7eff9e3d25381081c7c7d61b3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x0, 0x8c, {0x8a, "aef81826be133eb8b90b3f77becbe8858ab8d5413df24a1f84ca2c465cb7d7a26a60ded7be213c788db8ff42e7c469829a43c4622dfd0abfdcfe3e550b88932492fd0f0697aa83dec79c006ce42edb64f6a1bc4980d60ce5a78da8a7056507d1aa516b0a1f67daf46e7634f2f0b5e3221cebf5693c68ee36f5b670de6512e241e7c57c32e53bae36dbe2"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x4}}) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000100)=0xffffffff) 19m5.162165568s ago: executing program 4 (id=2986): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x2, 0x0, 0x105) lseek(0xffffffffffffffff, 0x0, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = getpgrp(r3) r5 = syz_pidfd_open(r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002840)=ANY=[@ANYBLOB="14020000170002002abd7000fddbdf2500000000000000000000ffffe0000001000004d36c0000000000000000000000000000000000000000000000000000000000000000000000004e2200094e2100000200009229000000751713bfb433b57944dd33f4c30d19962770e4a4", @ANYRES32=0x0, @ANYBLOB="ff010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffffff000001000000000007000000000000000600000000000000ffffffff00000000030000000000000005000000000000001f290000000000000100000001000000020000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="fc020000000000000000000000000000000004d23c000000fe8800000000000000000000000001010700000000000000040000000000000005000000000000000100000000"], 0x214}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) r6 = epoll_create(0x1) socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r5, &(0x7f0000000040)={r6, r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r7, &(0x7f0000000280)=ANY=[], 0xfce1) ioctl$TCFLSH(r1, 0x540b, 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x0, 0x5, {0x80, 0x1}, {0x4c, 0x2}, @const={0x5, {0x0, 0xd, 0x100, 0x4}}}) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000280)={r11, 0x5928, 0x0, 0x5c7ba2f1, 0x2}, &(0x7f0000000040)=0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e24, 0x9, @local, 0x5}}}, &(0x7f0000000080)=0x84) r13 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r13, &(0x7f0000006500)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="120000000000000008000000040000000800000000060000000000000000000062c10000040000005e00000000000000"], 0x30}}], 0x1, 0x68004) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) 19m4.729604455s ago: executing program 33 (id=2986): r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x2, 0x0, 0x105) lseek(0xffffffffffffffff, 0x0, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = getpgrp(r3) r5 = syz_pidfd_open(r4, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002840)=ANY=[@ANYBLOB="14020000170002002abd7000fddbdf2500000000000000000000ffffe0000001000004d36c0000000000000000000000000000000000000000000000000000000000000000000000004e2200094e2100000200009229000000751713bfb433b57944dd33f4c30d19962770e4a4", @ANYRES32=0x0, @ANYBLOB="ff010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffffff000001000000000007000000000000000600000000000000ffffffff00000000030000000000000005000000000000001f290000000000000100000001000000020000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="fc020000000000000000000000000000000004d23c000000fe8800000000000000000000000001010700000000000000040000000000000005000000000000000100000000"], 0x214}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) r6 = epoll_create(0x1) socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r5, &(0x7f0000000040)={r6, r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r7, &(0x7f0000000280)=ANY=[], 0xfce1) ioctl$TCFLSH(r1, 0x540b, 0x1) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x0, 0x5, {0x80, 0x1}, {0x4c, 0x2}, @const={0x5, {0x0, 0xd, 0x100, 0x4}}}) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000280)={r11, 0x5928, 0x0, 0x5c7ba2f1, 0x2}, &(0x7f0000000040)=0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e24, 0x9, @local, 0x5}}}, &(0x7f0000000080)=0x84) r13 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r13, &(0x7f0000006500)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x1000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="120000000000000008000000040000000800000000060000000000000000000062c10000040000005e00000000000000"], 0x30}}], 0x1, 0x68004) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000000) 3m8.957128065s ago: executing program 2 (id=5496): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20803) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff6900000000000100000018009b3900000200861fa72e5b01504104bfeacdd5a9007d1636f7c0929980d6180d78e9beced88a8de37c26acc8f1aa7733306ffbe33a6e624d3ccaeb39ab3c175948f6d4", 0x58, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x1f, 0x6}) 3m8.654073612s ago: executing program 2 (id=5497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_pidfd_open(0x0, 0x0) process_madvise(r1, &(0x7f00000000c0), 0x0, 0x65, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000040)=0x200001, 0x4) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=0x1050017) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) stat(0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2c, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x19) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0xa, 0x2a, 0x129, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xe}, {0x6}, {0xffff, 0xfff1}}}, 0x24}}, 0x4044895) recvmmsg(r9, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000002c0)=""/227, 0xe3}, {0x0}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 3m6.240332404s ago: executing program 2 (id=5504): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, 0x0, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000090a01040000000000000000070000020900020073797a31000000000900010073797a300000000008000540000000210c001180080001f3626d700014000000100e01000000000000000000300084000a"], 0x68}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000200)}, {&(0x7f0000000600)="154640b6d80fb2eecc81ba60d3bb", 0xe}, {&(0x7f0000000500)="f08b97166e8a0f50b9d35998567ad836af962c407f5a106dda7dd2a8afb008010940b5d9959c5f807d89812477eba3e0046d95aefd0b9e1ba2795af2b8e2f2dc7d678e3dbc0ddd8093fef35740a5c149bd33d516d057c0a392c51f06dd54fc929d216cb715683519993352982b15880c1046174629bd4bee7455584422362815d5d0a463fda98608a321b5eb43c03b0c67", 0x91}, {&(0x7f0000000640)="4257eacef7e82fe55d6beb175da80c538a44d6413f6d5a3b6e8b865d222e30bdb1e7ead77141a36e530a7b3d1a7a508ce50c789cee07609a89939f1c2c2aca44dac8768405128f2221e7a0aa949bac0f6df925a65e16c0c5b70878050871793f1793070f50f0e21420f8f088bff8903b81db48bc34977d32c7c2cb770481c5817645da3e627eb81e9f013fe5ee1e24fa", 0x90}, {&(0x7f00000002c0)="c24538adc00e50cf8c84c8aa8cbb89ffc3a6aa40067e7149097a30c7a834e10214a7f48502629365f7ac92f6a4e24eb884cb6dbdb5e73301ae60783e821ce0fb0715ee0bbd279fe2ce35a36b96b8c1ae4ee2dd192e9ac076eb5cc5584a127362e24ef924b39c847a47", 0x69}, {&(0x7f0000000180)="4fd7315688a8830927adae8a6fa1a45c79f71780e4c1893035d1fcf79b6e059083d8151462abd1fd3f0314368e39a253d47f8ef22bd98c15721b5958", 0x3c}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) sendmsg$key(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)={0x2, 0x14, 0xd, 0x2, 0x3, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x1f}]}, 0x18}}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) socket(0x1e, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000001140)=ANY=[@ANYBLOB="030000000000000002004e23e0000002000000000000000000000000fe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000002000"/138], 0x90) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) 3m1.997749873s ago: executing program 2 (id=5514): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x68d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x18) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x4, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="0880004e155038aad5011e2b"]) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m57.771552806s ago: executing program 2 (id=5523): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105043, 0x110) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x716, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000003740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=""/159, 0x9f}, 0xfffffffa}], 0x1, 0x10140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$can_j1939(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)="0f", 0x1}, 0x1, 0x0, 0x0, 0x4040480}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$tcp_mem(r7, &(0x7f0000000180)={0x5, 0x20, 0x544c, 0x20, 0x100000001}, 0x48) close_range(r0, r7, 0x0) 2m55.263973262s ago: executing program 2 (id=5527): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0) 2m39.069657207s ago: executing program 34 (id=5527): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0) 17.66922909s ago: executing program 0 (id=5918): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12013f0000208018e2010000ff076d2a090581d70000000000000000000000000054ff65d615babb5ef893cf2d24e123e32fa953b3bde3ac79ba87600e0e98ba6dfa331a6c478999f74767c9cb5d776dadd1853586671f726e5e893b65368aca", @ANYBLOB="f895cbb4dad56ac9acf68e4e81c5396bb2437aaf3067cb25e89fe232ac1c6068f4e7a3f3877da38ac20bb4d7e0e0084dc3e649de0dcda7b46bdfdbc7e97c1be90db7c84aa519607f62a735c33f5c0ae6da12fc5c90da7dc5e20a91e8fbbf9608624077f2b44032fb7b467977cd35bb4cea62fc797a11b6dbe342a892dce9e77e0466a35fe7319cff0cfcddd0fef41558e2b8a582de175ec78b0919277cee40ecb17a17ff8cdbe78eab05088901303afae4883ec15cc64504"], 0x0) syz_usb_ep_read(r0, 0x2, 0x35, &(0x7f0000000040)=""/53) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_012={0x2, 0x1, 0x5, "0600"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0xa, "84"}, @local=@item_4={0x3, 0x2, 0x1, "25161119"}]}}, 0x0}, 0x0) 16.845742769s ago: executing program 6 (id=5922): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2011) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2505, 0x220, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x20, 0xe, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x3, 0x8f, {0x9, 0x21, 0xff, 0x3, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xed, 0xff, 0x3c}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xe8, 0x0, 0x95, 0x20, 0x2}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x7, [{0x9c, &(0x7f0000000140)=@string={0x9c, 0x3, "a1cb5ba9a897442611434d9613c1c8cff925da076ec24b49b3310c7e9aeabbe046f1a285688bfb54c35a29d529a25ca3faa3ed27780122fb1ae61ccd79fa65c4089ce2e7c1acdc03a4d0f948438a748a383d0d4f7962b0bca6986f3032c4f25a5db4809ab909818d3d68e71f71a0242bc0c610dac11c56ddb5562729ec0e5d934b939db541869a5abf63fa8a0b9815998c455a2573ce5779b536"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1809}}, {0x7f, &(0x7f0000000400)=@string={0x7f, 0x3, "507cd98b576a9ab608843ddf47a9d1075cdc365cced39207535306e25dd2a201885cf57a51a16a06b3a935b98ac0107df289a4e17099a51ad6343fd8fdc55b5746fcd892f14491d6cdc14036f2857c84de7513e81b860c1e604c462e7e63b42fbc1452f7b5f8ab2cd139576a9a0374df1e3ce79813463cc29fbbd61738"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x140a}}, {0xa1, &(0x7f00000004c0)=@string={0xa1, 0x3, "7b1a8a6edf861e028f8f9a13891e9ceb6fedb7e2e8da1b9a570d1cf56cd4a838d5bdfb82051f1ba82affaa37ebd769ddd8b6978786aa2cf933b3db47d2261dfc2ea4837571a648e4c9e76b1b61c7258b5f6742addbd747e643074a0e2c14f2a263f050804337cbed64a6f1055a8bff56509635244678f44826f31efca47f246ad1e19be9a1edb7f2864aaaf33956e0621569d037c5c7ed84d574b084d3938c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1401}}]}) syz_usb_connect$cdc_ecm(0x3, 0x57, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0xb, {{0x6, 0x24, 0x6, 0x0, 0x0, 'B'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1000, 0x2, 0x9}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x30, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xee, 0x4, 0xb6}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x9, 0x73}}}}}]}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x250, 0x1, 0xf5, 0x0, 0x20, 0xff}, 0x0, 0x0, 0x7, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x42b}}, {0xdf, &(0x7f0000000cc0)=@string={0xdf, 0x3, "c4f90cc4bfa9dd67ece077aca48cc748c0984bd4bc2b6fce185e930c043a44ff7adb6520758c70bc0e44cdc929b7784d9e127c127e17d26b368e5b3de0575026b0c2d25a55eff63c3feaa4d02b1715ac340a5ad9eb73a829c79e5bf5164ab71b69bb39d4c8c5ededa3422c205851c01b17b6e300b9d04a64445d08478119682305fa9120012ae0c1d69ecdb0805d2c7d2aeee83b48dd0f5d835ded30719fac1a68c8a38e460a77955e53aca58ade57ad86f91cd28cd84af4bc5434f479d9b20839c292710f57a32c3b0fe28d6d9f6e35e921883ee71d65a72373d52bc7"}}, {0x98, &(0x7f0000000dc0)=@string={0x98, 0x3, "41f476a9831d300972bc759ecbc5638f82eb6b2b928949d2cff6859bfd63f1379ff3f3d5ffff79077666d8aae44c09b7b05606cd86af0e344d057e06c44c6e64a9da7860a49d9fb8e43578a511d48fc5a4858238939d0aa4b0fb3a78810ee1c6aa3dc09ac78f483770f8c1ad5ace53aa16560189de2ba4d9408f9c0eebe70fadf3b3b7b2f1e82efb8b970fa1addf2638083aef7cd67a"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_ep_write(r0, 0x9, 0xec, &(0x7f00000002c0)="58fd1189a5f3aab3678d4d815ec7bf76b6aa956e22ac918d660aa4748cfae5e853a987952b2e9d718ff05d395d5996c7d0c631cb7d3560b9680426602110eaf53bce1ecf89648d2cd33070ef5fd800ff8daaff97896621f7eb004a6c7096d709e777ed94f8e270dbcd3a34b4aacfb7822382cfe13e4f6ce7b28def4b72c0ad91ab07e64bb261266bc5de183675a5a2710102ef2b8bf90d473f5396247e437e87331738cdbf7b5c6231d675c9b7564872c5df443496d8bde6733c99f7898e6c9ff8a202cf717488f3d94bf734d8aa3118509bda60f54b497049c811cb2ec74eee90536738ab14c33d2ad12992") syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000780)={0x14, &(0x7f0000000640)={0x40, 0x30, 0xc8, {0xc8, 0x7, "01d33fc11a02ca753007dcfb01f68783f9633583725cd25463fc1918e48d8fdc8c13ac36d0bd869bf88f41aedd97dcfd28b2bcd9ae13464e096cee3c60e6aa03de1170dc8935d90dbe43f298f4eb3b7405346514224c087975c910b8138c917160c168516a8b7f967108cee3d58974e266f1de30b6b586c125be1fa83a0dee36284ef60d041cfcc97aa02948719ce9a76bdfe3ce87e9dac28b50680425949c8324eae7d844566f9e662d9c2e5ecfbd9a7ba90b3e60358c4ff2b1ad4bb6bf008276d6635c051c"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000000a80)={0x34, &(0x7f00000007c0)={0x40, 0x9, 0x5e, "f561fd6eec074e88de95d7aa0edf2ca29019cc5db7effff7afe7406e75076f79ef3fa2dedacd38b699cebb508d01fb0489ba8a630d8308d5372f0d95ac091ec837e939cea4f70fdfefde8624dc6385fe99b6a3d8f50b826531f41ccf75d8"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000008c0)={0x20, 0x0, 0xfd, {0xfb, "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"}}, &(0x7f0000000a00)={0x20, 0x1, 0x1, 0x54}, &(0x7f0000000a40)={0x20, 0x0, 0x1, 0x3}}) 16.741794962s ago: executing program 7 (id=5923): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x7e, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x0, 0x90, 0x6b, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x6, 0x24, 0x6, 0x0, 0x0, "d0"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7ff, 0xf19, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x51c, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x81, 0x81, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x80, 0x100}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3df, 0xfd, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf7, 0x8, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x20000004) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000180)='1', 0x1) write$UHID_CREATE2(r2, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7ff}, 0x0, &(0x7f00000003c0)={0x3ff, 0x20000, 0x0, 0x4000000000000000, 0x0, 0x0, 0x4, 0xfffffffffffffff9}, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="0800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908000000000055090100000000009500000000000000bf9110000000000056080000000000008500000007000000b7000000000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x0, 0xb, 0x2, {0x2, 0x24}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="000167000000670449f80dee023eafff0300005225252b15c2bc43f406c3b5a81c6b7d3b57e33221890d3b793dc586b165e8740169e917cd272c88b88d1cebafc82e95e943d571f4006652c19ad3e2605a82aa7788c776538e431a304770e4fdcfb1f6ff530af444fb7417bb7a"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x0, 0xb8, "7ed084e4f46571fe7d984d9ac74d6a239c87db747a798b52eb67880be50f719a81f197f78e4426b5e21b23cd6db554440af4ca43e7b3c7fa26efa31ed55041df60a3d2510c8b44cba8fe844eb6fd659290915d507057cab831b8c90f55118d087ab86deff5fad0373b14d307104b916cb4924b0c9904883654accfc07fb3ce137f939cbfa936b02b5336a880b7435af65da9d194b219459dd58964b6ae9dcf211008f22a8e476e959755a1a7eff9e3d25381081c7c7d61b3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x0, 0x8c, {0x8a, "aef81826be133eb8b90b3f77becbe8858ab8d5413df24a1f84ca2c465cb7d7a26a60ded7be213c788db8ff42e7c469829a43c4622dfd0abfdcfe3e550b88932492fd0f0697aa83dec79c006ce42edb64f6a1bc4980d60ce5a78da8a7056507d1aa516b0a1f67daf46e7634f2f0b5e3221cebf5693c68ee36f5b670de6512e241e7c57c32e53bae36dbe2"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x4}}) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000100)=0xffffffff) 13.549875649s ago: executing program 0 (id=5927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x700, 0x700, 0x8, 0x8000, {{0x5, 0x4, 0x2, 0x11, 0x14, 0x64, 0x0, 0x6, 0x29, 0x0, @broadcast, @private=0xa010101}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="000002008d020600300012800b000100697036746e6c0000200002801400030000000000000000000000ffff640101010500090004000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0x4018aee2, &(0x7f0000000300)) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xff1) unshare(0x40600) mkdir(0x0, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:login_exec_t:s0\x00', 0x22, 0x1) ioprio_set$pid(0x2, 0x0, 0x2007) ioprio_get$pid(0x2, 0x0) socket(0x10, 0x3, 0x0) unshare(0x64000600) 12.95191361s ago: executing program 6 (id=5928): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800068008000200080000003e"], 0x44}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, &(0x7f0000000300)) 12.040931219s ago: executing program 6 (id=5931): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800b00010062726964676500000c0002800500170000000000"], 0x3c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x8cff, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000000) 11.801524747s ago: executing program 7 (id=5932): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vbi(&(0x7f0000000980), 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "00803d2a", "1202000000040030"}, 0x38) 10.035553288s ago: executing program 5 (id=5933): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x80) ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x8000000, 0x0, 0x9, '&\x00', 0x0, 0xd3, 0x4a, 0x0, 0x0, 0x0, 0xe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180008000000000000000000000000f917110000ec6e7d23786f5a6b66de29eabcb0a8c8f8e03951b4819789eca67c78f179c0b57502881ef37f2182624b2b9f", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09008009189e0055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$rds(0x15, 0x5, 0x0) 10.032515433s ago: executing program 6 (id=5934): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x4, &(0x7f0000000180)={0x5, 0x8000000000000001}, &(0x7f00000001c0)) r3 = epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@newsa={0x114, 0x16, 0x1, 0x2000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@lifetime_val={0x24, 0x9, {0x1, 0x9, 0x7fff, 0x8000}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@access_user}, {@msize={'msize', 0x3d, 0x7ff}}, {@cachetag={'cachetag', 0x3d, '/proc/stat\x00'}}, {@cachetag={'cachetag', 0x3d, '9\x9e\x9f'}}, {@access_any}, {@cache_none}, {@nodevmap}, {@cache_none}, {@version_u}]}}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.873636586s ago: executing program 7 (id=5935): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) r2 = syz_io_uring_setup(0x106, &(0x7f00000004c0)={0x0, 0xffffffff, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x118, &(0x7f0000000000)=0x8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x7, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3ffe, 0x184c, 0x2, 0x0, 0x0) 9.554184465s ago: executing program 3 (id=5936): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f5242003"], 0x7) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001e005db706000000000000000700002903b34c26a95b563d84d69fbb51e2ce4a512de31ef8f0997339291bd3ae29b8972f38854d3fe509091fea76847c573babfb8ed85b0dc247", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b80", @ANYRES32=r6, @ANYBLOB="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"], 0x34}}, 0x4004010) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) 8.507488153s ago: executing program 7 (id=5937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x700, 0x700, 0x8, 0x8000, {{0x5, 0x4, 0x2, 0x11, 0x14, 0x64, 0x0, 0x6, 0x29, 0x0, @broadcast, @private=0xa010101}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="000002008d020600300012800b000100697036746e6c0000200002801400030000000000000000000000ffff640101010500090004000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0x4018aee2, &(0x7f0000000300)) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xff1) unshare(0x40600) mkdir(0x0, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:login_exec_t:s0\x00', 0x22, 0x1) ioprio_set$pid(0x2, 0x0, 0x2007) ioprio_get$pid(0x2, 0x0) socket(0x10, 0x3, 0x0) 8.451253433s ago: executing program 6 (id=5938): r0 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0x8c2b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r8, &(0x7f0000001140), 0x700, 0x2, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r9 = syz_io_uring_setup(0x106, &(0x7f00000004c0)={0x0, 0xffffffff, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x118, &(0x7f0000000000)=0x8, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x7, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040095}, 0x840) io_uring_enter(r9, 0x3ffe, 0x184c, 0x2, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x7, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.282707056s ago: executing program 3 (id=5939): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x164, 0x14, 0xf0b, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x210, 0x400000a, 0x1, 0x0, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x1c, 0x3, 0x0, 0x9, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x9, 0x1, 0xfffff522, 0x0, 0x7, 0x8001, 0x4}}, {0xc, 0x2, [0x3ff, 0x101, 0x2402, 0x8]}}, {{0x1c, 0x1, {0x5, 0x4, 0x4, 0x2, 0x2, 0x2, 0x8c46, 0x5}}, {0xe, 0x2, [0xf5, 0x3, 0x4, 0x7ff, 0x5f6]}}, {{0x1c, 0x1, {0x7, 0x9, 0xeef, 0x9, 0x0, 0xf0, 0xc71, 0x3}}, {0xa, 0x2, [0x3, 0x1, 0x1ff]}}, {{0x1c, 0x1, {0x0, 0x6, 0x6, 0x3, 0x1, 0x5, 0x800, 0x2}}, {0x8, 0x2, [0x5, 0x5]}}, {{0x1c, 0x1, {0x6, 0x1, 0x2, 0x5, 0x2, 0xb, 0x4, 0x6}}, {0x10, 0x2, [0x1c0, 0x7f, 0x800, 0x4, 0x8, 0x0]}}, {{0x1c, 0x1, {0x5, 0x8, 0xfffb, 0x8000, 0x0, 0x89, 0x1, 0x7}}, {0x12, 0x2, [0x3, 0x0, 0xfc00, 0x3, 0x327, 0x3, 0x6]}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x4000004) 7.771094315s ago: executing program 0 (id=5940): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000900), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="15000000230e0000040000000200010000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000020100400000000000000000000000000000000000000000000002f75c5e8a8e159e40d689c8dd5fc61b33f7065da2c4b67cf727e0cbf0a097e14b2fef75e213761474306d76fb9a6f65c7c07dbf5"], 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x98e}, 0xe) syz_open_dev$video4linux(&(0x7f0000000240), 0x6000000, 0x10401) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x1c9243, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)="94"}, {0x0}, {&(0x7f00000003c0)="87aaaa21ee84c13012ac58935060433fedffdf5b009ca29b83ab7080c0042e253fc2304a2c8f7e7b3180a6fcb4649977f67283c0afc782b66f4796f22942c00551618fee9ae14a3a7220fd70b6b991fbaf645746f7b404f913af6771a43556b0944333ef3a59f666de42416bf9528a53f50b17bc89c72db30d5d7511266edc5ef0c053854e3ff962e277279a1b1a874481c88e8f200fbd3008250c1d40e1312969d6a874f7c8ded6b22cfda5483721f594874e72fac3edd10c9000fb201e85c81d2dc2d7675450c884f8cdc61aaa8eac3fd7d4f7795f52828a4915e79f61aea2262ff8ffa13d32015027544914", 0xfffffe28}, {&(0x7f0000000500)="09927c896a22222196bb2c9d62aa522029002b138b0087cb0dbdf017ba343bce4d286a93d61723ca89c21e8e7ca802f32cf6ca9d44cb8e73daee97fd2e0c950c15b60208635c146b72e911988cd7403c0a1ec4fc808fd52631ab86", 0x5b}, {&(0x7f0000000580)="20389995fa9df2dc6f5df3bbcbf87af33eff32b8558ad93893b5ef027797853e91c0a6962b9994f8dbc8295c51ddbcbb3b4bd8df0699bbf09ece5a7c7135273e8d411c4735aaeb67736331e2433380962046d8f187dad44350c44d858747af3146868ae423a308f099873fedd97900000000000000000000000800", 0x7b}], 0x56) socket$phonet_pipe(0x23, 0x5, 0x2) listen(0xffffffffffffffff, 0x8003) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x17, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd3000000000000000000000014000780080011400000000005001500000000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e6574"], 0x64}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000b80)={0x8, {"410eaad822c2af52e76401f9932f73ce5e9b71094e94b6e52363a79e2377317d8a4f111f0fafeece6a89f2dc6207b7089f136030a322c2ea2a01f4e416fd39be40a8ed467b4cea76c00b96b89ffe60bb98502457f944effcaa23701914440a9fde3af6bf616afebe9e10dbf1a985cd063a06c7423593fe30ed9e29601edd2898a1a5a5614ae698b1de9a21330ffa456f5f8dc3e4c8a7707a3a1148f553312572f78cbed6f8c706ed723daa49d170d8943b88d8f4ecc611f472ce4136dfee8a1bc662fdb72ce9fdbbc325805b5ec4859da08d0ad3b41cf07226cf44e149542c2ab8d2cc9ac950dc5b57c62871a9ff4dbf4b815fbd3d5858a6b2fbdebcdcda8fba9f18440f77f70e76c6a92f2ed3a917abb89cacb30317e6213f5e6f8aa823c378fdd34a986c3e61e273a61c2e1b8d6285dd94e799793427d45b569c277a495b78e64a537d1027b6805c098fea03140ee9f4b8b98a3c8329ec78af3f413d33b3e8ca55bc8a20dc345465e60d2f93e52dd381d4aa658cdf7385a0d231cbb8967f708308559963d7063a4b67e1b1fc74b70449d4c28d1a66daa24f620efaca82186d01f0c18635d7d9c6d9dde81b23dcd5481a6bdfbcc347fb88526a17d1a58c42d96a0d22e7303c18b97a998f09afd94b47c0877491b25f4a114a31fb30d18daaff90b5527b53d77f642fc0496a3c94ece08c42fbaa00dfc923427efc673c0132b36e6e3048a7f65f34fe20fad647c11695369c2a482e60950cbfb2c7bc5325a881c3bb674032cc0aec468e757989a69a4e04c9ebdb7fdfa46eb701859a8dad846eb1b939a164aea048d5fa2d327c0130a79b4a22d264cc88af3d7fa7c40e3c0250f79f90db4cecd611507aa9d370b10111833c5e0b1ed7c257b70c8430a7c462b72392f3b9157baede0f92af93d26f9e1f84e438f8bc25c2303c3f4bf8af3633f7ad361a3eda04dd9aaee61badf92a3db1bd2647bacb25d484e949f6fd602d7cb483112a4026c2069a982d5cc05672937de0324f577b2e6d0558a3faaee6d771ecec66e8be784a1028ac6c650a2a16fc098c539a1a23c452b97678b69d9b6107e36d4a18f37106cd3c60ecc8ced814956d3c47621d0eb8ebd2034057d9c5d2ddddf8345356322b1b5931400d2580d9c2490fce8f1c5d223e31bb8b6fbeceb6d05221d163b52c5c3bfc35e0722f9ada6ccfef117677f9bc545343b4b70a0d0cbbcfc0e05999ca72434e596cae7b6d26e7baeca45293f3330d166fc00452f73429ffe5ced5ca4980ba36fed43a9fbe0a49404b0a2c6ded3c4f0934abb92adc2ee88469d861492073a61e3acb2a4f0cbd2027af67c057c103f1564aee2858e0ac1308067ab16897ff7a3a6af7798ae28d00fe882d76b6209a47a66ccaf81457d5e3168535ccb32f8169b86d3955f7239ddcbac1aff4022553ed608aba662f8d4284fefa4ddad0f2fc8b2b975f94d97971aa224e4c07dc3b6d8f1fa778bd6d5a1bee007b5e2f93592772656c934907b210199e656cc505b67c3d668a2d71dfb22ad853fe614ae3f3dd876ef105f6ab53ba975d951c7b6395f57f7e7b3247af30cc8dda3e205a1e6e59f153733e8afecc23a2f26cea2888fa607e0301202902a016a7ab7654e58560fd1f54a4e4398ef892822ec8d1aa55aaeeef7237846fc84d4278fbf985ab901b8e85250462dd362b0cd583cf8babc615a923e49ee290398b0e0d18c640420d43981441d0f4c2980ae2be97446585d0405a573246ef27204e454523907ce78c31ce7856381b5dcb84f6f468fbbd2e89d8f2b2a5f8b931042d56958af0dceece0702ee9b47a568605acaf341254208a5f5c78175758e5cf407f6252d33798d2d9e4107284c033814e0ed98ce32cbb6aac2c72dcb0966422fde24fd06044d2b3e4fc7a5e9d3ef389bf6af3465a6997c6da74597fee7a7a2910d5b9e05a8ad10ed6a6232e06b430020c3c63aca22a13d69d7592bf493cb1850d1a9019a26bf415ab316b9b0430e45a9db635fb779067043a89f2edbdf13a30844c9e4a3ff2b86d6b1e5eb2552aab309a2b912680c70fda44d70e1c9d9bb6cea42e6dc96632924753858f87c514d5dfe5f72c9fabc19d4364051ae8302d446b9cc34e2a3651930cf50fa905507818fe52a9885912ebde9d4c980d7ac02f24539f96c7b5d405c074efc7f11ec7123083dc24e7e45f1b134afd1f858388a6ffe490c6ed3fabcd6aa9fa47001eb6cee183f8107f4ae5baa2fadc7e6e874f245188fe9c4041d04fe7ee62b2b809a045e5e65cdbbdebfb5f85050913d272fa33a1fc5de7aae2eb280696f6a32712e5d7b811b03b77ded51af8a4b5af981d95829b15b3bb2c6b5285134979049bf9788ddd2cb61eb486707ecc5f7d7f07c43deb5eef8d4b4b65e18c3e96320300d20e0d5bff6c3db277ac07b8f1bcc316466579a59e4d630945188668e6bfe3ec3550764b9380ee4d948818cb11ed5b75bf99c7a4ffe14071d404ea19f343360a552683c623f4b4f62aa750f6edabe3f6dc8d97649dc28a2937e16d94e05634ea5db0edf287146cef04be9eb221cf71f63afcf015c934cd066448534be7848e63a292c4c08092bcb05175f42a6ebf9fba248db930e6684c62b852a4236617c403d20904f109c86de2cffdb328757d8ddd1785436638cbb6245cf9ba3c657537fd86ed50c9a7a90d2bbd470bb255e37eba7e6bcb96f881228e5b066dfdd298d6221cddd913d9248d381f980dffbf75ebd15c8feca0db1ef5ef14cb4322a15be7cd950331650e4a808195df7953191a9b82ef5c88267cc5161e0cf27d168f97dfe11cfaa57ba1dab10fab6f2c6d065c52933572120b48ae2107f0008c2e765348e679f08e1232b6274bf9646bfe548d3623c85650b44a70830f362d6fce61fc0a964bf728d7fec953b0aa0ef147e9b7545177f967bca6a58226454740e605b75f09bb4fc2dffbc0515cb225e5a6affc9f6693cfd7306d53d0d6f6a318f12f7e68a51a9ca6a7938fe0a5859421317ffe253ec3f12d6890909013c6c5ce38184d6e9ca429c5c7425da39a73680cf539850acb863ded455a7e863cc78ab1b5acacf38d713d4d4f8f19006d6415a968da50f75d71312f62027574df186f8ffc52722df581a275c2fda6dcd1ea7450583bc52e6ac7d8a53db2f5e5737cbde60049cc41ae68c70499e6a83ce4e327eb11cc3f2ffd86af85bb3f5d072c62307275d60af84c0bb35f4ec15762a7786eccebabe55b1d24554f6daf7df18d3d75a30220678e1821c5b250207832faab4dd6618b2512410bb5acc72561c298c93077d807cda399b1ee350b3d94f316be5e0262d3613d1ea382e4b2b14c423551ac4fd8e9e606f48d27860b251249fb8e47a9f6ad03653522a201346a1db92896e3390187b4d882ffb1f3a47cfd7fa4c26587f0079a439999a43f9f0c0f6407e2d6b3f479b7e8ad5e4afe6dd8172ed7a2cba520754c67281b2a7e23b7db8bb8b018490f709e54d9567622393a705834ccdb87f569e04f357ac508be8eb3db29dba4b0b5cd73b2b55828924cd6c02192ba88704bf3b876b00a345e0d1b093697fb5125bdaaa2614cdb5fb35eefcc9516b4702021ebc1ec44dbf8643a6db7467772cb917e3783a2f01065ca5da8300f876ca6d8bc1cbbea7d74b9fc2f1546964fed285465f96b162f3ba1315e91d6617df7e59d7e345a60e91bc3f98db96e9ce3173a8c78b62c57a70f21a52778d8883ba9cd9a94562009cf4aeddbd07bb8217028fe061bf2a7a9b12c4b7a000dbdce6337883b22c8ec06407c676eaa59ff23c4ec134b9da756940ee96c743b5f6d6c163dc87d53e1192e8c6d358b6bb1b8ee158abbccc49edde171c4b1c201b3a871015ce149c8fd95dd18ca83deb2c9ca842f0a9b039042c88cf35f309c5b0c325e5e91d8a9ea4ad83f38e3356dfcbb5cfcf92d6c4e1ce8f745f7fd4783ed161b769aad94ba000ea1ffd27dfab1c5c4549bad86346c82a419b76de741bb61d13a9930ebc313cd4365fe6ac8c5938d538da38c4542b712785e5a43347943e2d7523b7967d84a10a52958acceb16c60bba8f2d3ae7a5b73893ca67c9c6b02bad51c061551e426285e11398c0c5e9f44a56a65b5b14cdfbafbe4483b84fd3e0c58bea2dcce0f5f814104f8a566d9029f61c0569793af6032f07c75c83ea162ac3f4d05d222fe861efed4753781ce2f3577a192cdb27da15749e80daba3f330a07dfbb47c6d34b269d7f4030413c5f62c2f6cd117f495e2d17dc628ccdace385bb0497f5684828b0b2a866216979edf985a703a312545cd13a223758d83e1934603ea24afb4c28cb369401f61226b7b3bb891d426a2f6943a9e537b5658a023fc362c9968890e39c672e34f3232fff04a15bc5464d59c88e130f61b46836b026a4d75205e04b58ebadaff1e648792866eec0dea26da9d85f4b31676240c82105c2d40cfb753ceac474565818265009570722b9388d0e3525dbc010159e1d6bc3774a4e1c26c8a08ec76e661bce5812c4342eefe9ff5126558ec57242456a827a475d33e5e7d312da49d5155818c283f2c0acc302d1cbf774c3b568b846926e5981e0fed3c9b4d12078753a748898fc3bc68af7bdd7a6340a50171b53f4f9dc5f3e9fdd008902fc8bbcd840695344968824ad40e6b79c0203261be954b731bca2ef5c686680992a9be3cc0afe2b30f4d54fef20faf6b71971b814ab1d422e47d3ee439a33107fcbf81d07b7c45da3762fdb6ca4b93f38cae8c9effe6ae72cf4b0c8c640af64d7f86c3b9703f0e8bf157cdc73a6e4dba52d267b210f71bbc0b7fac7a62a897bb849d94a6b2e8e42ece47d4a0c8fe45ebb05140510cc378d4206276ab0b5c7f4bf4a095c3aa6bda1f85540fc51821271523ac814ad139a636396403a57e6866784f331a724503f2e5c318e34d68a6ecc8d8b4a6d143ddf1fc9ee3044810e1820132e7d55d74d297d2f86b8af283b5ae896b081dfbcf8f3c45c78c1c6b1b8c39dcc9f481ba0a272c08523d27c4308563b80052b928334c4546a6e597df50b63159ffef1f16d6f61709924131d0989438e5aaf9f3963a7c53d5f3bfcb40a36e6cd41ddb7f1f844ed5aa2910acabb54197c6fade3d57f9485714028313373610c0268e97c912f1167e4d4257a58cb6a5204c0a9338f73efdc2f01f375ba7ebda131037063bb7c18219873747383e5e895b8e4fbf3bf81209419452ba7df13a2187442586c423a04ef668d47a78230f70221bd4e5e19beef0ff3521ff9174f57635dc93de77806935b138bc9850119f9532f40e33f620e8690074f61f46241d1ffabb65200a0c52c632f2820f553fdb99c275639093d65edec47e9f3fe03fd456222882577ef45d7c74bd721acf0b59ab715c4212e0e8ee2e8dc43006a2fb029f02a4d5a4f01a7dc4d86d75c2e0641f8dc2f0d14c1a65925b5f3dff2a6f41bdd52f85f7a271474d8305d3a9b0187acc80d8c024c2ecf0c4b39e73602d0a9a7bcde1b78fb69bb16e8e7c907c94ddf735919a8046b0f987a84c999a07715d7c032ebec2e5c8c0099711b0d23d64365da79b4594b752977679a5a50df4662b71d18f91583dd18fa77467e378f74071383cde2503e2a225c41a5eb1c5b3e0f6ec3df5bd91a2a89f51daed7ce09cefb6dbe3332088af0b90987774f1bcb85912b2ca2740b79192daa919dc87ceccdac00f22530bbb0ca57106cfdb9a635508aa608c5ae5b71609544e4238fe49c29f0508610b6b45d50392502df3a2ae2175b04d63b023c08f5c9525ecd11450ed13541ba1ef57eb6", 0x1000}}, 0x1006) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) 7.521226371s ago: executing program 3 (id=5941): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffff8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001700)=[{&(0x7f0000000380)="58000000140019234017908a840da2560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffee09000000fff5f20000000800030006010000418e01400004fce3", 0x58}], 0x1) r2 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x820, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x14}], {0x14}}, 0x98}}, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b7080000000000000301090292000301"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b2c, &(0x7f0000000040)) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) 7.485677434s ago: executing program 7 (id=5942): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x7e, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x0, 0x90, 0x6b, [{{0x9, 0x4, 0x0, 0xb, 0x3, 0x2, 0x6, 0x0, 0x8, {{0x6, 0x24, 0x6, 0x0, 0x0, "d0"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7ff, 0xf19, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0x51c, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x81, 0x81, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x80, 0x100}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3df, 0xfd, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf7, 0x8, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x20000004) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000180)='1', 0x1) write$UHID_CREATE2(r2, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7ff}, 0x0, &(0x7f00000003c0)={0x3ff, 0x20000, 0x0, 0x4000000000000000, 0x0, 0x0, 0x4, 0xfffffffffffffff9}, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="0800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0908000000000055090100000000009500000000000000bf9110000000000056080000000000008500000007000000b7000000000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x0, 0xb, 0x2, {0x2, 0x24}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="000167000000670449f80dee023eafff0300005225252b15c2bc43f406c3b5a81c6b7d3b57e33221890d3b793dc586b165e8740169e917cd272c88b88d1cebafc82e95e943d571f4006652c19ad3e2605a82aa7788c776538e431a304770e4fdcfb1f6ff530af444fb7417bb7a"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x0, 0xb8, "7ed084e4f46571fe7d984d9ac74d6a239c87db747a798b52eb67880be50f719a81f197f78e4426b5e21b23cd6db554440af4ca43e7b3c7fa26efa31ed55041df60a3d2510c8b44cba8fe844eb6fd659290915d507057cab831b8c90f55118d087ab86deff5fad0373b14d307104b916cb4924b0c9904883654accfc07fb3ce137f939cbfa936b02b5336a880b7435af65da9d194b219459dd58964b6ae9dcf211008f22a8e476e959755a1a7eff9e3d25381081c7c7d61b3"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x0, 0x8c, {0x8a, "aef81826be133eb8b90b3f77becbe8858ab8d5413df24a1f84ca2c465cb7d7a26a60ded7be213c788db8ff42e7c469829a43c4622dfd0abfdcfe3e550b88932492fd0f0697aa83dec79c006ce42edb64f6a1bc4980d60ce5a78da8a7056507d1aa516b0a1f67daf46e7634f2f0b5e3221cebf5693c68ee36f5b670de6512e241e7c57c32e53bae36dbe2"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x4}}) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000100)=0xffffffff) 6.747834849s ago: executing program 6 (id=5943): socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_kvm_add_vcpu$x86(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000004c0)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x1d, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fsopen(&(0x7f00000000c0)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000280)='tl802154\x00', &(0x7f0000032680)="6bef43af46274e414fa21dab67904af6bf28b7ea1fae21c0ae52fbdb68e17247e2171a62ff7aacaad55e09d999d85af809e61e0252a03d3a2bc95cfe1c3c61b87ef3df788a1a31f0e93352922462b70678bd46d95b9392f7a930d9a897f8434913346abdbfdccce428acb8234aa41735f39dce012a630b2d66c5cb0c15e6e5bba9f0eb27ba585bf006eea8d88b256273ef8812ff9637ba6586ffa7f20f8a00870a93c230ab2b2753d51a358015d2bf5a39258aab13f8fe6ae0a5db24d5ad861914973a51258b6140868985eab9ee859a8e4f494a4199584f376e240cc3d2e052cfab27ba2ae23854b8bfa4bd713657388862f8730bb2000a15ddecb28143a2740fabd421d368ec651deb97f729157e539b0a9b9ea89beca324c2d70424f01e52765947f81792d9bef55db2f6572949befc6424a50375bb77fa35d92544d568d97c07ae4534229b75ae4760363053161fe2cade8346a8647a00d8b9dc2a530cd262b9cc7b07854f609e76f113a4bc4746a9661134d7198c3d8d92f39d89a9e9cb1f0be2313d63459341c9405e2960fc1b1eef1211c9d3af4bf30073daed6173178f02c2055743bb9f163a42f1710ea403ab9d84b23b9bc9f084b85b2fd64e05853b4a49261d435180932c53a9766a04861cc6c17468602f4afee38919eed1a5d5641bb8546460e5ca2e6b74da63ec4eb5bcd6bc7dd60e1dbc77496bc4401aabd741fc37ecf142a885d78d683c5a8e9fb779ef5ed31168a99af77150dc43b6c7e0426b0b2dea96b924a6a3118faad014cfb9796bb45ad47ca8056e39a120a155ff9136abd39a80d22d9da70c1ae676171b446558f42f04dfd5b138a69099bc0b820f267924aa94eab41d1e83206d7549cbfa1aa4ec292945fdb29a525af517042a5ec4c811af83c4619c976b8d75e4a2f2b23d0d34d27a9e715d9ec85c9b8b197b0ffe689c2cfbc4987e4592973ca468ebd5d6db1e99e93a65d0f0e2d9e9b558b837155b448e087ff19d3cdca5d3ee84f823094b73892870b8465f38698f5b25ae7708ee7cccc3513639a6bc143f5145955d771a4e8c1fc66bcad65d8365637358497e0667a8fd61f2d7adca80960075e4fdcba84ae5efad892bb2b13ee9e1a7b44fb441835e72a82f237c5b09cbc851562f8cb54dc642e6f093cbafd4628b23e37be034969793283568a92caad878d9de618aa9b6869b8ae80b895a8e5d88eb27c719862b5d1b6afcc0492fd0a5180fa68cabc521c097380e77f522a8118bc7c0244112bb7e03e83b5a6490a9833fd5008e836acb866bfbbe9775bcb063debd1ffa618241576df04cb9bed4f9b0b2abfc46ee82af449176c5703821bdeb4976caa5a251e3a3e84ad9dbc104879631fb011e494a325d1a460c8391da664ebcb9a304053b88d7cfbcb28286be62c98c76439e8919b74f7b0e4436ac81a976b268d597207d729248bfdda60dc7cf920a661ef5cd31420271eee6ab32dca0cf9c86b02f46f2c58e377040b57e5b27a8ee68c47a1028a9e38ebda713ad964adb719db571e8e11aadac0c145c07a512c0b041dfb9375d0aa4b44fa07fd46e6dc584501bdb98779af82e20617574c6b41cfd40651625ec979407b5616e102573866df9511298d8afb879bcdfb18885cd79255b813a90f66c90faacedaa9306b14ad93e67363a56044b59989866a38fa2277af902845255b2463642a1845f4e6eb5bc35ba23c0122c442f4593e3f4598e32351471e5498e7b0ce9e6fc742d1cfa9e9a5c59c5e65af9b6217ce2a4ef1e4f4af1af6ce1123a0d03754119504be35aeee2078542062546b314148d8ac944be4ede9d3eab733f165bcdad8fcd89e7b184eac29d345011bf4b82628c2287d7b08e5395a9ba7bb97ceeffefb69feee7ea83cd9cdfcc688cf56d35c4f64ed0c2d59b2006fb2d8b376e397418d7eaba8b0b7534098a5ec09f060806a7274e4954056d3a694de783e35c8aa5b84b1327b2af96c4b18f1957a84b0a3c37d9dec91af13bd7c329ddc7e69ff19e694faa615de7599c09d7626e268dffb92f1597d63ede2924b79ff1e0f0dda0d641a422c032ed2b12a1c01b0b7eb3cdb03303eab42ff487c463c165e8e2d3c37c3dbd88069c6b1af9f639b3f7050c7ff524406004d79f39739aebdc30b1e065b1e01357609f812e0810a9cd6454917bf3c2fad72544940c99df4e73c4b66ad729d984c6ac863007c5a942e0fd57e2ffa5a78951d2117de37fece0e67e836fda918fe61dfcee266c48f699aff503914caab1723d5e50b077fa113b68e620dc717b79fba3d07a398804f59e1caafdcab6f851bee5b2891e15dc53fe588f03a277f6ec52592be924a1f4ea9893d9497193fae66dc96f4e5a9dfe882ca042018cd9c7e44b877414f663d98d3412bee1944bfeb3c55750731d989a7bc30ec079cb424f5aafe9054303637a409338687ae90cc038b618e8754eea6b77b8e507a312bb8312a1141027b6618116755a3e979a4c7f5bef450dd31691767b30c9aa6495072be2ced467b5227978dad1253335fd39fe4946b7e703c6fc270a95fc22169ac7bd95465a2694f9514153020e86f1fa991dbdbc791f3bb9651c368e8b6f7863cce5a21bb66dccaf183fd8b2c641783991577333d53b4c38171bb4d8abe90307068dc402bd20b83e937e8054428e2dd3f0850903c4e88ec8172543a1125bc1599864871f48cc640d09d77a874f694f4f24da820eda30db7877369ea5134d56377183b1865bb15ad2273add55952c376ec19dbe331b4a4ab0176ad5bbc0492c1b0864d59e7fe25be952a125d984adc681d1e976a8f83d0ab13eccc727171bc5048fc40c4cdeca970b129cfb90108e52ad4ef25df06a2e02628e24abf43d40dd8839", 0x7f5) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400048c0}, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.661762654s ago: executing program 5 (id=5944): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r3, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) connect$ax25(r3, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 6.576539537s ago: executing program 0 (id=5945): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 5.626522306s ago: executing program 5 (id=5946): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee00) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x10000000) 5.563664516s ago: executing program 0 (id=5947): r0 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) sched_setaffinity(r5, 0x8, &(0x7f0000000200)=0x8c2b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r8, &(0x7f0000001140), 0x700, 0x2, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r9 = syz_io_uring_setup(0x106, &(0x7f00000004c0)={0x0, 0xffffffff, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x118, &(0x7f0000000000)=0x8, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x7, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4040095}, 0x840) io_uring_enter(r9, 0x3ffe, 0x184c, 0x2, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x7, 0x0}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 3.159417232s ago: executing program 5 (id=5948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x7, &(0x7f0000000080)=0x6e) io_uring_setup(0xaab, 0x0) getgroups(0x27, &(0x7f0000002540)) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000080)={0xf0f004, 0x4}) connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r6, 0x1) listen(0xffffffffffffffff, 0x20000005) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009000000d04ebbe99417bf6105ea7f8c1714144b653eb9e8e6e63e45459b3f092265a7461a031cd3bf2d184297425cb57202f5118dc5346f2e7e0665245b031c3820811736fbd9004df498d0b15b7286591811d21cb38ea16fcb1a10c2743a83e08222f18e8aafd494e0e1696a2a8482cd44979d3617e265599faa526daceb3558837def9133"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3f, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050026bd7000a7ea935b17f9c1da00"/25, @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x20000014) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e22, 0x200ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, 0x1c, 0x0, 0x0, 0x0, 0x56}, 0x4006) r8 = socket(0x10, 0xbd0e6e190d015d52, 0x10) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0xe0, 0x2, 0x1}, 0x10) sendmsg$kcm(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) 3.157978231s ago: executing program 3 (id=5949): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) getpeername$l2tp(r3, 0x0, &(0x7f0000000180)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="000070ba2cbdcd139f44ab00e0aa396e"]) sendto$inet(r4, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x8}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) write$sndseq(r0, &(0x7f00000003c0)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @ext={0xb0, &(0x7f0000000400)="541c9db34159f2eab9f7c176e2823da98c6bcdb725a1f1a90c034093a3ef7044c68d50288b21d7499359976417d07ae77ac1ac45c59c0b90c6311c6018e49bed57f613255728869609915fa44bd894ca5a126d51b49d35a613a47db86811fda0d31b1eb71262032e255561b053ae69224b3637708000d8fd49ac290491eabc115db93cbc56bdf3e164b7210d074dd91d05b773030c9e640b9eb3f657a9e9c4526f264fd9f5c758f64ed1a6064e03107c"}}, {0x9, 0x5, 0x6, 0x6, @tick=0x5, {0x4, 0x42}, {0x6d, 0x40}, @quote={{0x8, 0x1}, 0x5, &(0x7f0000000380)={0xfa, 0x9, 0x40, 0x10, @tick=0x9, {0x5, 0x7}, {0x1, 0xf9}, @quote={{0x77, 0xb}, 0x2a, &(0x7f0000000140)={0x0, 0x32, 0x6, 0x85, @time={0x4, 0x2}, {0x9f, 0xe7}, {0x6, 0x6}, @time=@tick=0x8}}}}}], 0x38) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.13703473s ago: executing program 0 (id=5950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x700, 0x700, 0x8, 0x8000, {{0x5, 0x4, 0x2, 0x11, 0x14, 0x64, 0x0, 0x6, 0x29, 0x0, @broadcast, @private=0xa010101}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="000002008d020600300012800b000100697036746e6c0000200002801400030000000000000000000000ffff640101010500090004000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0x4018aee2, &(0x7f0000000300)) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xff1) unshare(0x40600) mkdir(0x0, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:login_exec_t:s0\x00', 0x22, 0x1) ioprio_set$pid(0x2, 0x0, 0x2007) ioprio_get$pid(0x2, 0x0) socket(0x10, 0x3, 0x0) unshare(0x64000600) 3.132876134s ago: executing program 7 (id=5951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r1, r0, 0x4}, 0x10) open(0x0, 0x16543e, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r4], 0x20}}, 0x0) futex(0x0, 0xb, 0x3d, 0x0, 0x0, 0x8000002) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x62040200) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.989885132s ago: executing program 5 (id=5952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x700, 0x700, 0x8, 0x8000, {{0x5, 0x4, 0x2, 0x11, 0x14, 0x64, 0x0, 0x6, 0x29, 0x0, @broadcast, @private=0xa010101}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="000002008d020600300012800b000100697036746e6c0000200002801400030000000000000000000000ffff640101010500090004000000080004"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0x4018aee2, &(0x7f0000000300)) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0xff1) unshare(0x40600) mkdir(0x0, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) lsetxattr$security_selinux(&(0x7f0000000440)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:login_exec_t:s0\x00', 0x22, 0x1) ioprio_set$pid(0x2, 0x0, 0x2007) ioprio_get$pid(0x2, 0x0) socket(0x10, 0x3, 0x0) 1.94990939s ago: executing program 3 (id=5953): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 1.533269843s ago: executing program 5 (id=5954): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 0s ago: executing program 3 (id=5955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000e80)=0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8a646a066d000020000000ccd2ed22cf23a5", @ANYRES16=r3, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = dup(r1) write$binfmt_script(r4, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0x800}, {0x40000, 0x1, 0xae6}, 0x0, 0x0, 0x2, 0x4, 0xfc, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}}, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001080)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001480)={&(0x7f0000001500)={0x374, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2b, 0x4, "67a422df893955947df343b9dcd66c8117e3ef267e4ee40cd896906f32b02fc41dd91a6285f7b6"}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xdc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/ttynull\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/\xea\x9fv/vbi#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/ttynull\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, '/dev/vhost-net\x00`\xb3>\x03\xbf\x9f\x1e'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1a, 0x4, "8b44154433c33c6101bcb79ce5f02e222584bb8df67a"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x200, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3d, 0x5, "f3c3b9721098e16b33d2fbe06c8e4ce194d2ba889819e5973019fc13674313338291a88af926650bbb2c809264b4042d63023ceb42708897fe"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "1a453a51cb28c1bf6bccd9f00bfebc221f2912f284ff488c1ced75db668f7025425fc117ca629a16939585c1c2c18df554dda01be2ba1c76cd3a181219ca69952ed78769bacb7699148db765a6e01c7f8afb6e4c2a34323462a453091b373a57f8d3c8906323c52837aa9d07c4602aca692072b1f7c199f7fb6cc2a2ef964e8b90b22ac119f6bd1a4ee618632dd3315b351c93e109620b30c84e05f109718773f450829763ab46c2a99a4e60bed523e84428141bcef06463e60f9cbe72"}, @ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "bd4f7639c3cfa9f770997d08322bb326f97066aef4c18a7ecf7fe6bca1410cb9204dc12f9c4400a1dd2dbfbc431e5f56f79a961b78d3a63323e47c4267d442d089ec68c30daae5ccfda737f4a6eb2c64db82407ecf253c29853196a2d93ba25dede50f78734ee910ea3d7da9ac44eb3fbefa4fb9807ee42afa8a467bfb6bd08f947dc041fef615784f6cb0e2f7943b81d95743a99f2f92773cf64d977b89ab51dfeb48bbdfbf20dc70a596f939476700d319a9df79192418c78718c3ea0f74edbfb1d08fa864d3510c31598e8e53def80bae3ac55d6f1eac911c086d17ec18d6170630953b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r7 = socket$packet(0x11, 0x3, 0x300) r8 = dup(r7) r9 = fcntl$dupfd(r5, 0x0, r7) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000080)={0x0, r8}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000e40)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000240)={r12, 0xee8}, 0x8) r13 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r13, 0xc0345642, &(0x7f0000000080)={0xffffffff, "498bd9c6c6515f1f455fd0ffff000010cb20fa5e00"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0xa, [@union={0x9, 0x6, 0x0, 0x5, 0x1, 0xb0e, [{0x10, 0x5, 0x3}, {0x10, 0x5, 0x21}, {0x1, 0x2, 0x5}, {0x7, 0x0, 0x7}, {0x8, 0x0, 0x6}, {0x0, 0x4, 0x9}]}, @int={0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x8}, @ptr={0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x30, 0x61, 0x5f, 0x0, 0x5f]}}, 0x0, 0x92, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) r14 = dup(r7) sendmsg$kcm(r14, &(0x7f0000000e00)={&(0x7f0000000400)=@hci={0x1f, 0x3, 0x1}, 0x80, &(0x7f0000000a80), 0x0, &(0x7f0000000b40)=[{0x68, 0x108, 0x4, "c0ea7d0fa1ae1c95c2deb741dc6e8d7955e5b46cb0d71ee96c0e52249caf66e62cc3819ce355e5aaa35ac4cf88b1b0d1e42c593fa80422180fd273f197bf694caf3a8a536981adcdb8308581552897f79e270772"}, {0x78, 0x96168470a7469ba5, 0x9, "794e63352ca1776e60b79a32f5914f338cac0be93c5e2d8841981bbe6e979ab762b2c9c197f8a8b2d0fff1e8237a8e16d877ac93196e5b1472a28d4fe2d9c3f95999c8403ca58d7ebf28cf476819bf994ae8b384fa56123ef3dc07b8caa60041e4d36115353e"}, {0x30, 0x118, 0x6, "8c28dc232ded7cbde32f641079f61e82d4dbbc549f2b20aea5b374bfd092"}, {0xc0, 0x2435b9978c89f59a, 0xf, "ae65e266852461153994cfc891f59a417fc277ed29df1124ac16d74b44640612e5dbe3c6deed1c408b6d371982d51aa2cc8dce4d3691956071d826ce8e9dbe0b05ca385fa2e1e112bf0e69e91c21cc67ed0dd1553638595eb15a28711cd68fa8d228604f0c50805121306e4d451fac4e966e4715b3a663f151a3f2d9aa1d61782f4fd2c730023f4635cfad2cbfb7a0c29ddef98480ed29f92b6d23907480f59a0ae81a01adf339a179e5d5c675bee441"}, {0xc8, 0x116, 0x5, "ec69cd5c17de97402625b9c038648aa7fa41b17ab8c51c13428c0d1c3563c5b31de9559d608fb19209bb34898a95bfcfb277eab0e9752e88eec8bf7c57f6fc311900c6a846316cd477e04473c88524c4329802bdb6a58fb8fc1090fa497ae009a4210389aa06f3103850625a70457c85d831b971cc78b7954343c1d73a79525059f99315deb3bd808439a1871911ba0ec1a74ddd60c7832b43dd8191e6964be40a3860840be2e56c049dad42d4f9b37245"}], 0x298}, 0x84) kernel console output (not intermixed with test programs): s mode [ 1948.727170][T26643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.734474][T26643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.742464][T26643] bridge_slave_1: entered allmulticast mode [ 1948.749913][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1948.761601][T26643] bridge_slave_1: entered promiscuous mode [ 1948.771023][ T5871] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1948.791666][ T5871] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1948.801364][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1948.820526][ T5871] usb 4-1: SerialNumber: syz [ 1948.840453][T26643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1948.853980][T26643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1948.901741][T26643] team0: Port device team_slave_0 added [ 1948.910663][T26643] team0: Port device team_slave_1 added [ 1948.944084][T26643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1948.957762][T26643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1948.984063][T26643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1949.002871][T26643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1949.010739][T26643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1949.063017][T26643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1949.419252][T26643] hsr_slave_0: entered promiscuous mode [ 1949.430953][T26643] hsr_slave_1: entered promiscuous mode [ 1949.443576][T26643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1949.471460][T26643] Cannot create hsr debugfs directory [ 1949.980118][ T5830] Bluetooth: hci2: command tx timeout [ 1950.005053][T26643] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1950.017719][T26643] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1950.030304][T26643] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1950.283812][T26707] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5592'. [ 1950.297179][T26707] syz.6.5592: attempt to access beyond end of device [ 1950.297179][T26707] nbd6: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1950.311700][T26707] qnx6: unable to read the first superblock [ 1950.317858][T26707] syz.6.5592: attempt to access beyond end of device [ 1950.317858][T26707] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1950.330704][T26707] qnx6: unable to read the first superblock [ 1950.336634][T26707] qnx6: unable to read the first superblock [ 1950.392924][T26705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5592'. [ 1950.402023][T26643] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1950.535181][T22784] usb 4-1: USB disconnect, device number 47 [ 1951.555009][T26643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1951.573259][T26643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1951.666604][T22784] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1951.700466][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1951.707674][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1951.722533][T19408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1951.729662][T19408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1952.146600][ T5830] Bluetooth: hci2: command tx timeout [ 1952.197735][T22784] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1952.207152][T22784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.220610][T22784] usb 4-1: Product: syz [ 1952.224885][T22784] usb 4-1: Manufacturer: syz [ 1952.229680][T22784] usb 4-1: SerialNumber: syz [ 1952.292212][T22784] usb 4-1: config 0 descriptor?? [ 1952.352251][ T30] kauditd_printk_skb: 213 callbacks suppressed [ 1952.352273][ T30] audit: type=1400 audit(1749442967.648:30162): avc: denied { recv } for pid=26726 comm="modprobe" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1952.426180][ T30] audit: type=1400 audit(1749442967.648:30163): avc: denied { read write } for pid=20526 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1952.553542][ T30] audit: type=1400 audit(1749442967.648:30164): avc: denied { open } for pid=20526 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1952.596558][ T30] audit: type=1400 audit(1749442967.648:30165): avc: denied { ioctl } for pid=20526 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1952.614355][T26720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1952.622277][ C0] vkms_vblank_simulate: vblank timer overrun [ 1952.700550][T26720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1952.978198][ T30] audit: type=1400 audit(1749442967.657:30166): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1953.003510][T26720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1953.003804][T26720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1953.016955][ T30] audit: type=1400 audit(1749442967.657:30167): avc: denied { read write } for pid=26727 comm="syz.0.5596" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1953.084844][ T30] audit: type=1400 audit(1749442967.657:30168): avc: denied { open } for pid=26727 comm="syz.0.5596" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1953.108848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1953.396505][T26731] lo speed is unknown, defaulting to 1000 [ 1953.678260][ T30] audit: type=1400 audit(1749442967.657:30169): avc: denied { ioctl } for pid=26727 comm="syz.0.5596" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1954.003255][ T30] audit: type=1400 audit(1749442967.676:30170): avc: denied { ioctl } for pid=26727 comm="syz.0.5596" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1954.321889][T26643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1954.329254][ T30] audit: type=1400 audit(1749442967.685:30171): avc: denied { ioctl } for pid=26727 comm="syz.0.5596" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1954.354258][ C0] vkms_vblank_simulate: vblank timer overrun [ 1954.403719][ T5830] Bluetooth: hci2: command tx timeout [ 1955.019001][T26748] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5600'. [ 1956.673214][T26762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5602'. [ 1957.223348][T16782] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1957.235460][T26643] veth0_vlan: entered promiscuous mode [ 1957.249248][ T5878] usb 4-1: USB disconnect, device number 48 [ 1957.253806][T26643] veth1_vlan: entered promiscuous mode [ 1957.306150][T26643] veth0_macvtap: entered promiscuous mode [ 1957.384085][T16782] usb 6-1: Using ep0 maxpacket: 16 [ 1957.391572][T16782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1957.403525][T26643] veth1_macvtap: entered promiscuous mode [ 1957.431836][T16782] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1957.433924][T26643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1957.463719][T16782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.491066][T16782] usb 6-1: config 0 descriptor?? [ 1957.561403][T26643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1957.595508][T26643] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.601705][ T5871] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1957.612804][T26643] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.630014][T26643] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.639319][T26643] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1957.705814][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 1957.705830][ T30] audit: type=1400 audit(1749442972.652:30352): avc: denied { ioctl } for pid=26757 comm="syz.6.5603" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1957.748696][ T30] audit: type=1400 audit(1749442972.652:30353): avc: denied { create } for pid=26643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1957.772272][ T30] audit: type=1400 audit(1749442972.652:30354): avc: denied { write } for pid=26643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1957.863665][ T5871] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.886099][T12121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1957.904760][ T5871] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1957.913962][T12121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1957.916660][T26760] SELinux: failed to load policy [ 1957.926824][ T30] audit: type=1400 audit(1749442972.652:30355): avc: denied { read } for pid=26643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1957.949241][ T5871] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1957.971797][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1957.980796][ T5871] usb 7-1: SerialNumber: syz [ 1958.006746][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1958.020048][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1958.109160][ T30] audit: type=1400 audit(1749442972.783:30356): avc: denied { ioctl } for pid=26757 comm="syz.6.5603" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1958.213862][T16782] mcp2221 0003:04D8:00DD.0055: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1958.231695][ T30] audit: type=1400 audit(1749442972.783:30357): avc: denied { ioctl } for pid=26757 comm="syz.6.5603" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1958.355899][ T30] audit: type=1400 audit(1749442972.793:30358): avc: denied { read } for pid=26643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1958.424637][T26760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1958.477917][T26760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.235592][ T30] audit: type=1400 audit(1749442972.793:30359): avc: denied { load_policy } for pid=26759 comm="syz.5.5604" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1959.256548][ T30] audit: type=1400 audit(1749442972.793:30360): avc: denied { write } for pid=26643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1959.431497][ T30] audit: type=1400 audit(1749442972.811:30361): avc: denied { write } for pid=26643 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1959.485148][T26760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1959.555866][T26760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1959.651658][T22784] usb 6-1: USB disconnect, device number 39 [ 1959.752179][T23500] usb 7-1: USB disconnect, device number 93 [ 1959.853605][ T5899] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1960.069961][ T5899] usb 8-1: Using ep0 maxpacket: 8 [ 1960.263998][T26792] xt_recent: hitcount (2147483647) is larger than allowed maximum (65535) [ 1960.377021][ T5899] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1960.527659][ T5899] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1960.536813][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.546926][ T5899] usb 8-1: config 0 descriptor?? [ 1960.580593][ T5899] iowarrior 8-1:0.0: no interrupt-in endpoint found [ 1961.016851][T26801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5614'. [ 1961.205287][ T5899] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1961.558917][ T5899] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1961.585580][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.612149][ T5899] usb 7-1: Product: syz [ 1961.622513][ T5899] usb 7-1: Manufacturer: syz [ 1961.627154][ T5899] usb 7-1: SerialNumber: syz [ 1961.654642][ T5899] usb 7-1: config 0 descriptor?? [ 1962.291205][ T5871] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1962.451889][T26799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1962.547396][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 1962.601535][T26799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1962.645713][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1962.711923][ T5871] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1962.726022][T26799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1962.741173][T26799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1962.860393][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.880997][ T5871] usb 4-1: config 0 descriptor?? [ 1963.405539][ T5878] usb 8-1: USB disconnect, device number 2 [ 1963.413224][ T30] kauditd_printk_skb: 254 callbacks suppressed [ 1963.413238][ T30] audit: type=1400 audit(1749442977.573:30580): avc: denied { prog_load } for pid=26816 comm="syz.5.5619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1963.448912][ T30] audit: type=1400 audit(1749442977.573:30581): avc: denied { bpf } for pid=26816 comm="syz.5.5619" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1964.701421][T26826] SELinux: policydb magic number 0x112 does not match expected magic number 0xf97cff8c [ 1964.778805][T26826] SELinux: failed to load policy [ 1965.418728][ T5871] mcp2221 0003:04D8:00DD.0056: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1965.499003][T26826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.517453][T22784] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1965.539653][T26832] batadv_slave_0: entered promiscuous mode [ 1965.547757][T26826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.626530][T26832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1965.665829][T26832] audit: audit_lost=244 audit_rate_limit=0 audit_backlog_limit=64 [ 1965.687953][T26826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1965.724193][T26826] audit: audit_lost=245 audit_rate_limit=0 audit_backlog_limit=64 [ 1965.764200][T26832] audit: backlog limit exceeded [ 1965.784518][T26826] audit: backlog limit exceeded [ 1965.803735][T26833] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1965.823757][T26826] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1965.925428][T26826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.034424][T26831] batadv_slave_0: left promiscuous mode [ 1966.571431][T26826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.588809][T23500] usb 7-1: USB disconnect, device number 94 [ 1966.685254][ T5871] usb 4-1: USB disconnect, device number 49 [ 1966.724812][T22784] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.746456][T22784] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1966.764651][T22784] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1966.780297][T22784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1966.943566][T22784] usb 6-1: SerialNumber: syz [ 1967.432863][T23500] usb 6-1: USB disconnect, device number 40 [ 1967.577862][T26850] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5627'. [ 1968.789377][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 1968.789439][ T30] audit: type=1400 audit(1749442983.017:30745): avc: denied { prog_load } for pid=26851 comm="syz.3.5628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1968.917600][ T30] audit: type=1400 audit(1749442983.045:30746): avc: denied { bpf } for pid=26851 comm="syz.3.5628" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1968.963104][ T30] audit: type=1400 audit(1749442983.054:30747): avc: denied { perfmon } for pid=26851 comm="syz.3.5628" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1969.011709][ T30] audit: type=1400 audit(1749442983.073:30748): avc: denied { prog_run } for pid=26851 comm="syz.3.5628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1969.622278][ T30] audit: type=1400 audit(1749442983.082:30749): avc: denied { read write } for pid=20526 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1969.722780][ T30] audit: type=1400 audit(1749442983.082:30750): avc: denied { open } for pid=20526 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1969.789817][ T30] audit: type=1400 audit(1749442983.091:30752): avc: denied { recv } for pid=5802 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1969.838853][ T30] audit: type=1400 audit(1749442983.082:30751): avc: denied { ioctl } for pid=20526 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1969.865420][ T30] audit: type=1400 audit(1749442983.138:30753): avc: denied { read write } for pid=26851 comm="syz.3.5628" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1969.889441][ T30] audit: type=1400 audit(1749442983.138:30754): avc: denied { open } for pid=26851 comm="syz.3.5628" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1970.298607][T23500] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1970.589469][T23500] usb 4-1: Using ep0 maxpacket: 32 [ 1970.600067][T23500] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1970.609510][T23500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.972098][ T5899] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1971.100283][T23500] usb 4-1: Product: syz [ 1971.104523][T23500] usb 4-1: Manufacturer: syz [ 1971.110041][T23500] usb 4-1: SerialNumber: syz [ 1971.292343][ T5899] usb 8-1: Using ep0 maxpacket: 8 [ 1971.300000][ T5899] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1971.334671][ T5899] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1971.376911][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.466734][ T5899] usb 8-1: config 0 descriptor?? [ 1971.482970][T23500] usb 4-1: config 0 descriptor?? [ 1971.532020][ T5899] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1971.677275][ T5930] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1971.792965][T26882] FAULT_INJECTION: forcing a failure. [ 1971.792965][T26882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1971.806692][T26882] CPU: 1 UID: 0 PID: 26882 Comm: syz.0.5636 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 1971.806717][T26882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1971.806728][T26882] Call Trace: [ 1971.806733][T26882] [ 1971.806740][T26882] dump_stack_lvl+0x16c/0x1f0 [ 1971.806771][T26882] should_fail_ex+0x512/0x640 [ 1971.806800][T26882] _copy_from_user+0x2e/0xd0 [ 1971.806828][T26882] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 1971.806861][T26882] snd_rawmidi_write+0x26e/0xc10 [ 1971.806887][T26882] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1971.806906][T26882] ? __import_iovec+0x1dd/0x650 [ 1971.806931][T26882] ? avc_policy_seqno+0x9/0x20 [ 1971.806947][T26882] ? selinux_file_permission+0x126/0x660 [ 1971.806972][T26882] ? __pfx_default_wake_function+0x10/0x10 [ 1971.806997][T26882] ? bpf_lsm_file_permission+0x9/0x10 [ 1971.807023][T26882] ? security_file_permission+0x71/0x210 [ 1971.807048][T26882] ? rw_verify_area+0xcf/0x680 [ 1971.807071][T26882] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 1971.807090][T26882] vfs_writev+0x5df/0xde0 [ 1971.807123][T26882] ? __pfx_vfs_writev+0x10/0x10 [ 1971.807163][T26882] ? __fget_files+0x20e/0x3c0 [ 1971.807183][T26882] ? __fget_files+0x1c0/0x3c0 [ 1971.807211][T26882] ? do_writev+0x28c/0x340 [ 1971.807230][T26882] do_writev+0x28c/0x340 [ 1971.807257][T26882] ? __pfx_do_writev+0x10/0x10 [ 1971.807288][T26882] do_syscall_64+0xcd/0x4c0 [ 1971.807316][T26882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1971.807333][T26882] RIP: 0033:0x7f3d2998e929 [ 1971.807349][T26882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1971.807365][T26882] RSP: 002b:00007f3d2a8aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1971.807382][T26882] RAX: ffffffffffffffda RBX: 00007f3d29bb5fa0 RCX: 00007f3d2998e929 [ 1971.807394][T26882] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000004 [ 1971.807405][T26882] RBP: 00007f3d2a8aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1971.807416][T26882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1971.807426][T26882] R13: 0000000000000000 R14: 00007f3d29bb5fa0 R15: 00007ffe6f43e148 [ 1971.807451][T26882] [ 1972.043728][T16782] usb 4-1: USB disconnect, device number 50 [ 1972.064029][ T5930] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1972.089034][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.196157][ T5930] usb 7-1: Product: syz [ 1972.200469][ T5930] usb 7-1: Manufacturer: syz [ 1972.211364][ T5930] usb 7-1: SerialNumber: syz [ 1972.220583][ T5930] usb 7-1: config 0 descriptor?? [ 1972.877713][T26880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1972.902081][T26880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1972.966575][T26880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1973.022641][T26880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1974.950435][ T30] kauditd_printk_skb: 164 callbacks suppressed [ 1974.950458][ T30] audit: type=1400 audit(1749442988.405:30919): avc: denied { recv } for pid=26879 comm="syz.6.5635" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1975.172063][T16782] usb 8-1: USB disconnect, device number 3 [ 1975.217100][ T30] audit: type=1400 audit(1749442988.423:30920): avc: denied { recv } for pid=18035 comm="kworker/0:1H" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1975.540096][ T30] audit: type=1400 audit(1749442988.891:30921): avc: denied { recv } for pid=18035 comm="kworker/0:1H" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1975.736199][ T30] audit: type=1400 audit(1749442988.975:30922): avc: denied { prog_load } for pid=26897 comm="syz.3.5640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1975.841412][ T30] audit: type=1400 audit(1749442988.975:30923): avc: denied { bpf } for pid=26897 comm="syz.3.5640" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1975.947219][ T30] audit: type=1400 audit(1749442988.985:30924): avc: denied { create } for pid=26896 comm="syz.5.5639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1976.049467][ T30] audit: type=1400 audit(1749442988.985:30925): avc: denied { write } for pid=26896 comm="syz.5.5639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1976.148742][ T5878] usb 7-1: USB disconnect, device number 95 [ 1976.231512][ T30] audit: type=1400 audit(1749442988.985:30926): avc: denied { read } for pid=26896 comm="syz.5.5639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1976.326059][ T30] audit: type=1400 audit(1749442988.985:30927): avc: denied { ioctl } for pid=26896 comm="syz.5.5639" path="socket:[121166]" dev="sockfs" ino=121166 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1977.469457][ T30] audit: type=1400 audit(1749442989.153:30928): avc: denied { create } for pid=26897 comm="syz.3.5640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1977.830671][T26922] netlink: 272 bytes leftover after parsing attributes in process `syz.5.5646'. [ 1977.910777][T26927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1977.948079][T26927] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1977.997352][T26927] fuse: Bad value for 'user_id' [ 1978.006920][T26927] fuse: Bad value for 'user_id' [ 1978.640632][T16782] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1978.884627][T16782] usb 4-1: Using ep0 maxpacket: 32 [ 1978.895479][T16782] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1979.062812][T16782] usb 4-1: config 0 has no interface number 0 [ 1979.077868][T16782] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1979.087633][T16782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.095654][T16782] usb 4-1: Product: syz [ 1979.542186][T16782] usb 4-1: Manufacturer: syz [ 1979.546697][ T5871] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1979.546871][T16782] usb 4-1: SerialNumber: syz [ 1979.569986][T16782] usb 4-1: config 0 descriptor?? [ 1979.580047][T16782] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1979.589020][T16782] usb 4-1: selecting invalid altsetting 1 [ 1979.594726][T16782] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1979.607994][T16782] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1979.619591][T16782] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1979.627887][T16782] usb 4-1: media controller created [ 1979.640517][T16782] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1979.676115][T23500] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1979.729929][ T5871] usb 8-1: config index 0 descriptor too short (expected 63524, got 36) [ 1979.739027][ T5871] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 1979.751909][ T5871] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1979.762572][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.770866][ T5871] usb 8-1: Product: syz [ 1979.775047][ T5871] usb 8-1: Manufacturer: syz [ 1979.779675][ T5871] usb 8-1: SerialNumber: syz [ 1979.786038][ T5871] usb 8-1: config 0 descriptor?? [ 1979.791218][ T24] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1979.813957][T16782] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1979.822976][T16782] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1979.833442][T16782] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1979.850720][T23500] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1979.861020][T23500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.870301][T23500] usb 6-1: Product: syz [ 1979.874735][T23500] usb 6-1: Manufacturer: syz [ 1979.882033][T16782] usb 4-1: USB disconnect, device number 51 [ 1979.885551][T23500] usb 6-1: SerialNumber: syz [ 1979.898720][T23500] usb 6-1: config 0 descriptor?? [ 1979.973862][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1980.005924][ T24] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1980.018188][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1980.043932][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1980.062382][ T24] usb 7-1: SerialNumber: syz [ 1980.068890][ T5871] usb 8-1: USB disconnect, device number 4 [ 1980.110887][T25193] udevd[25193]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1980.172696][T26946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.190955][T26946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1980.201154][T26946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.210071][T26946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1980.313858][ T30] kauditd_printk_skb: 239 callbacks suppressed [ 1980.313883][ T30] audit: type=1400 audit(1749442993.783:31141): avc: denied { read } for pid=26942 comm="syz.6.5653" dev="nsfs" ino=4026533239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1980.357520][ T30] audit: type=1400 audit(1749442993.783:31142): avc: denied { open } for pid=26942 comm="syz.6.5653" path="net:[4026533239]" dev="nsfs" ino=4026533239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1980.599643][ T30] audit: type=1400 audit(1749442993.783:31143): avc: denied { create } for pid=26942 comm="syz.6.5653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1980.719671][ T30] audit: type=1400 audit(1749442993.783:31144): avc: denied { ioctl } for pid=26942 comm="syz.6.5653" path="socket:[122405]" dev="sockfs" ino=122405 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1980.864906][ T30] audit: type=1400 audit(1749442993.839:31145): avc: denied { map_create } for pid=26945 comm="syz.5.5654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1980.980733][ T30] audit: type=1400 audit(1749442993.839:31146): avc: denied { map_read map_write } for pid=26945 comm="syz.5.5654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1981.122381][ T30] audit: type=1400 audit(1749442993.839:31147): avc: denied { prog_load } for pid=26945 comm="syz.5.5654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1981.267793][ T30] audit: type=1400 audit(1749442993.839:31148): avc: denied { bpf } for pid=26945 comm="syz.5.5654" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1981.839847][ T30] audit: type=1400 audit(1749442993.839:31149): avc: denied { perfmon } for pid=26945 comm="syz.5.5654" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1982.740411][ T5871] usb 7-1: USB disconnect, device number 96 [ 1983.382368][ T30] audit: type=1400 audit(1749442994.045:31150): avc: denied { recv } for pid=26945 comm="syz.5.5654" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1983.743336][T26960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5659'. [ 1983.781845][ T24] usb 6-1: USB disconnect, device number 41 [ 1984.182965][ T5871] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1984.184036][T26971] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5660'. [ 1984.361775][T26976] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1984.527127][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 1984.576879][ T5871] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1984.728025][ T5871] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1984.752632][ T5871] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1984.766119][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1984.777712][ T5871] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1984.812543][ T5871] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1984.838558][ T5871] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1984.853513][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.868933][ T5871] usb 7-1: config 0 descriptor?? [ 1985.476099][ T5871] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 97 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1985.506002][ T5871] usb 7-1: USB disconnect, device number 97 [ 1985.525995][ T5871] usblp0: removed [ 1985.677994][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 1985.678009][ T30] audit: type=1400 audit(1749442998.816:31290): avc: denied { recv } for pid=25190 comm="udevd" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1986.411950][ T30] audit: type=1400 audit(1749442998.825:31291): avc: denied { execmem } for pid=26982 comm="syz.5.5664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1986.431501][ T30] audit: type=1400 audit(1749442998.853:31292): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1986.484911][ T30] audit: type=1400 audit(1749442998.853:31293): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1986.561591][ T30] audit: type=1400 audit(1749442998.975:31294): avc: denied { write } for pid=26982 comm="syz.5.5664" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1986.585965][ T30] audit: type=1400 audit(1749442998.984:31295): avc: denied { open } for pid=26982 comm="syz.5.5664" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1986.611038][ T30] audit: type=1400 audit(1749442998.984:31296): avc: denied { ioctl } for pid=26982 comm="syz.5.5664" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1986.654714][ T30] audit: type=1400 audit(1749442999.031:31297): avc: denied { allowed } for pid=26982 comm="syz.5.5664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1986.699711][ T30] audit: type=1400 audit(1749442999.040:31298): avc: denied { create } for pid=26982 comm="syz.5.5664" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1986.728651][ T30] audit: type=1400 audit(1749442999.040:31299): avc: denied { map } for pid=26982 comm="syz.5.5664" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=121273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1986.753331][ T5930] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1986.774125][T26974] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1986.825784][T16782] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1986.932504][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 1986.942857][ T5930] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1986.966294][ T5930] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1986.988682][ T5930] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1987.336471][T26996] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5667'. [ 1987.480050][T16782] usb 8-1: Using ep0 maxpacket: 32 [ 1987.501969][T16782] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1987.513745][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1987.528976][T16782] usb 8-1: config 0 has no interface number 0 [ 1988.014092][ T5930] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1988.023935][ T5930] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1988.080822][ T5930] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1988.091663][T16782] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1988.121936][T16782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.130059][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.140528][T16782] usb 8-1: Product: syz [ 1988.152135][ T5930] usb 7-1: config 0 descriptor?? [ 1988.159289][T16782] usb 8-1: Manufacturer: syz [ 1988.171044][T16782] usb 8-1: SerialNumber: syz [ 1988.176030][ T5930] usb 7-1: can't set config #0, error -71 [ 1988.189598][T27002] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1988.196703][T16782] usb 8-1: config 0 descriptor?? [ 1988.204687][ T5930] usb 7-1: USB disconnect, device number 98 [ 1988.279840][T23500] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1988.280234][T16782] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1988.454876][T23500] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1988.465048][T16782] usb 8-1: selecting invalid altsetting 1 [ 1988.465072][T16782] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1988.734409][T16782] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1988.838070][T23500] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1988.840659][T16782] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1988.932686][T16782] usb 8-1: media controller created [ 1988.934080][T23500] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1989.048829][T27002] lo speed is unknown, defaulting to 1000 [ 1989.162651][T23500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1989.192641][T23500] usb 4-1: SerialNumber: syz [ 1989.216397][T16782] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1989.510373][T16782] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1989.539044][T27003] netlink: 'syz.6.5669': attribute type 16 has an invalid length. [ 1989.547043][T27003] netlink: 'syz.6.5669': attribute type 17 has an invalid length. [ 1989.622504][T16782] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1989.689036][T16782] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1989.945976][T16782] usb 8-1: USB disconnect, device number 5 [ 1990.524714][T16782] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1990.632256][T22784] usb 4-1: USB disconnect, device number 52 [ 1990.723280][T16782] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1990.741092][T16782] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.750080][T27022] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1990.870118][T16782] usb 8-1: Product: syz [ 1990.924725][T16782] usb 8-1: Manufacturer: syz [ 1991.005389][T16782] usb 8-1: SerialNumber: syz [ 1991.016627][T27023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5675'. [ 1991.025718][T16782] usb 8-1: config 0 descriptor?? [ 1991.083885][ T30] kauditd_printk_skb: 197 callbacks suppressed [ 1991.083929][ T30] audit: type=1400 audit(1749443003.876:31497): avc: denied { recv } for pid=27021 comm="syz.6.5676" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1991.241334][ T30] audit: type=1400 audit(1749443003.876:31498): avc: denied { ioctl } for pid=27008 comm="syz.7.5671" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1991.349349][T27010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1991.349743][ T30] audit: type=1400 audit(1749443004.082:31499): avc: denied { read write } for pid=18976 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1991.386883][ T30] audit: type=1400 audit(1749443004.082:31500): avc: denied { open } for pid=18976 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1991.412412][T27010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1991.517665][T27010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1991.523092][ T30] audit: type=1400 audit(1749443004.082:31501): avc: denied { ioctl } for pid=18976 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1991.702913][T27010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1992.124853][ T30] audit: type=1400 audit(1749443004.082:31502): avc: denied { recv } for pid=5802 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1992.317747][T27022] lo speed is unknown, defaulting to 1000 [ 1995.744426][ T30] audit: type=1400 audit(1749443004.082:31503): avc: denied { recv } for pid=18976 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1995.770412][ T30] audit: type=1400 audit(1749443004.119:31504): avc: denied { map_create } for pid=27025 comm="syz.3.5677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1995.790333][ T30] audit: type=1400 audit(1749443004.119:31505): avc: denied { prog_load } for pid=27025 comm="syz.3.5677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1996.872975][T27038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1996.879913][T27038] audit: audit_lost=269 audit_rate_limit=0 audit_backlog_limit=64 [ 1996.887994][T27038] audit: backlog limit exceeded [ 1996.893028][T27038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1996.900184][T27038] audit: audit_lost=270 audit_rate_limit=0 audit_backlog_limit=64 [ 1996.908128][T27038] audit: backlog limit exceeded [ 1996.912082][ T30] audit: type=1400 audit(1749443004.119:31506): avc: denied { bpf } for pid=27025 comm="syz.3.5677" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1996.913314][T27038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5680'. [ 1996.933955][ T30] audit: type=1400 audit(1749443004.119:31507): avc: denied { perfmon } for pid=27025 comm="syz.3.5677" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1996.945606][T27041] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1996.971766][T27041] audit: audit_lost=271 audit_rate_limit=0 audit_backlog_limit=64 [ 1998.189964][ T5878] usb 8-1: USB disconnect, device number 6 [ 1999.188254][ T5871] IPVS: starting estimator thread 0... [ 1999.358664][T27060] IPVS: using max 45 ests per chain, 108000 per kthread [ 2000.766380][ T5930] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2000.806001][T22784] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2001.493477][ T5930] usb 8-1: Using ep0 maxpacket: 16 [ 2001.502864][ T5930] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2001.522908][ T5930] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2001.541233][ T5930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.552648][ T5930] usb 8-1: config 0 descriptor?? [ 2001.590318][T27084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5689'. [ 2001.625397][T27084] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5689'. [ 2001.694006][T22784] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.724464][T22784] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2001.850748][T22784] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2001.924268][T22784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2002.041395][T22784] usb 6-1: SerialNumber: syz [ 2002.098784][T27090] SELinux: policydb magic number 0x112 does not match expected magic number 0xf97cff8c [ 2002.113331][T27090] SELinux: failed to load policy [ 2002.242660][ T30] kauditd_printk_skb: 231 callbacks suppressed [ 2002.242690][ T30] audit: type=1400 audit(1749443014.315:31735): avc: denied { read } for pid=27085 comm="syz.3.5690" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2002.669470][ T30] audit: type=1400 audit(1749443014.315:31736): avc: denied { read open } for pid=27085 comm="syz.3.5690" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2002.694479][ T30] audit: type=1400 audit(1749443014.343:31737): avc: denied { mounton } for pid=27083 comm="syz.0.5689" path="/404/file0" dev="tmpfs" ino=2381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2002.745195][ T30] audit: type=1400 audit(1749443014.399:31738): avc: denied { read } for pid=27058 comm="syz.5.5685" dev="nsfs" ino=4026533009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2002.767765][ T30] audit: type=1400 audit(1749443014.399:31739): avc: denied { read open } for pid=27058 comm="syz.5.5685" path="net:[4026533009]" dev="nsfs" ino=4026533009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2002.792924][ T30] audit: type=1400 audit(1749443014.399:31740): avc: denied { create } for pid=27058 comm="syz.5.5685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2002.813273][ T30] audit: type=1400 audit(1749443014.399:31741): avc: denied { ioctl } for pid=27058 comm="syz.5.5685" path="socket:[122616]" dev="sockfs" ino=122616 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2003.022090][ T30] audit: type=1400 audit(1749443014.437:31742): avc: denied { create } for pid=27088 comm="syz.6.5691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2003.160877][T27089] IPVS: set_ctl: invalid protocol: 136 172.30.1.4:20003 [ 2003.283921][ T30] audit: type=1400 audit(1749443014.437:31743): avc: denied { bind } for pid=27088 comm="syz.6.5691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2003.345592][ T30] audit: type=1400 audit(1749443014.437:31744): avc: denied { node_bind } for pid=27088 comm="syz.6.5691" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2003.639317][T27098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5692'. [ 2003.675050][ T5930] mcp2221 0003:04D8:00DD.0057: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 2003.730384][T22784] usb 6-1: USB disconnect, device number 42 [ 2004.653216][T27074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2005.097216][T27074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2005.849353][ T5930] usb 8-1: USB disconnect, device number 7 [ 2006.449844][T27117] tipc: Resetting bearer [ 2006.455980][T27117] tipc: Resetting bearer [ 2006.494281][T27122] tun0: tun_chr_ioctl cmd 1074025675 [ 2006.503810][T27122] tun0: persist enabled [ 2006.611507][T27122] tun0: tun_chr_ioctl cmd 1074025675 [ 2006.738525][T27122] tun0: persist enabled [ 2007.383793][T27122] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2007.789177][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 2007.789194][ T30] audit: type=1400 audit(1749443019.114:31934): avc: denied { create } for pid=27119 comm="syz.3.5701" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2007.881887][ T30] audit: type=1400 audit(1749443019.114:31935): avc: denied { ioctl } for pid=27119 comm="syz.3.5701" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=122682 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2007.969847][T27132] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2008.060257][ T30] audit: type=1400 audit(1749443019.114:31936): avc: denied { read } for pid=27119 comm="syz.3.5701" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2008.096325][ T30] audit: type=1400 audit(1749443019.114:31937): avc: denied { open } for pid=27119 comm="syz.3.5701" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2008.737841][ T30] audit: type=1400 audit(1749443019.114:31938): avc: denied { ioctl } for pid=27119 comm="syz.3.5701" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2008.963361][ T30] audit: type=1400 audit(1749443019.329:31939): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2009.062273][T22784] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2009.071367][ T30] audit: type=1400 audit(1749443019.497:31940): avc: denied { read write } for pid=16872 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2009.216948][ T30] audit: type=1400 audit(1749443019.497:31941): avc: denied { open } for pid=16872 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2009.332336][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2009.338849][ C0] audit: audit_lost=273 audit_rate_limit=0 audit_backlog_limit=64 [ 2009.352767][T22784] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2009.557815][T22784] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2009.585386][T22784] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2009.595892][T22784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2009.605610][T22784] usb 6-1: SerialNumber: syz [ 2009.669878][T27148] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5706'. [ 2009.685801][T27149] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5706'. [ 2009.700160][T27148] dummy0: entered allmulticast mode [ 2009.795890][T27147] dummy0: left allmulticast mode [ 2011.221413][T22784] usb 6-1: USB disconnect, device number 43 [ 2012.173397][ T5930] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 2012.888095][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 2013.455979][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 2013.455996][ T30] audit: type=1400 audit(1749443024.361:32119): avc: denied { create } for pid=27177 comm="syz.5.5713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2013.580681][ T30] audit: type=1400 audit(1749443024.371:32120): avc: denied { bind } for pid=27177 comm="syz.5.5713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2013.775554][ T30] audit: type=1400 audit(1749443024.371:32121): avc: denied { node_bind } for pid=27177 comm="syz.5.5713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2013.797293][ T30] audit: type=1400 audit(1749443024.371:32122): avc: denied { connect } for pid=27177 comm="syz.5.5713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2013.818653][ T30] audit: type=1400 audit(1749443024.371:32123): avc: denied { write } for pid=27177 comm="syz.5.5713" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2014.015549][T27185] CIFS: Unable to determine destination address [ 2014.298018][ T30] audit: type=1400 audit(1749443024.455:32124): avc: denied { setopt } for pid=27177 comm="syz.5.5713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2014.321932][ T5930] usb 7-1: device descriptor read/all, error -71 [ 2014.329024][ T30] audit: type=1400 audit(1749443024.464:32125): avc: denied { read } for pid=27177 comm="syz.5.5713" dev="nsfs" ino=4026533009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2014.362590][ T30] audit: type=1400 audit(1749443024.464:32126): avc: denied { open } for pid=27177 comm="syz.5.5713" path="net:[4026533009]" dev="nsfs" ino=4026533009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2014.388365][T27186] netlink: 'syz.5.5715': attribute type 25 has an invalid length. [ 2014.424746][ T30] audit: type=1400 audit(1749443024.464:32127): avc: denied { create } for pid=27177 comm="syz.5.5713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2014.445196][ T30] audit: type=1400 audit(1749443024.474:32129): avc: denied { recv } for pid=27177 comm="syz.5.5713" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2016.150422][T27210] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2016.267835][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 2016.658021][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2016.688300][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2016.717250][ T24] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2016.750298][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.778475][ T24] usb 8-1: config 0 descriptor?? [ 2017.635505][ T24] lenovo 0003:17EF:6047.0058: unknown main item tag 0x0 [ 2017.661494][ T24] lenovo 0003:17EF:6047.0058: unknown main item tag 0x0 [ 2017.671749][ T24] lenovo 0003:17EF:6047.0058: unknown main item tag 0x0 [ 2017.685270][ T24] lenovo 0003:17EF:6047.0058: unknown main item tag 0x0 [ 2017.702754][ T24] lenovo 0003:17EF:6047.0058: unknown main item tag 0x0 [ 2017.752664][ T24] lenovo 0003:17EF:6047.0058: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0 [ 2018.332420][T27223] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5721'. [ 2018.991084][ T30] kauditd_printk_skb: 252 callbacks suppressed [ 2018.991097][ T30] audit: type=1400 audit(1749443029.702:32381): avc: denied { execmem } for pid=27222 comm="syz.5.5725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2019.139042][ T30] audit: type=1400 audit(1749443029.805:32382): avc: denied { allowed } for pid=27225 comm="syz.3.5726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2019.300647][ T30] audit: type=1400 audit(1749443029.815:32383): avc: denied { create } for pid=27222 comm="syz.5.5725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2019.329562][ T30] audit: type=1400 audit(1749443029.815:32384): avc: denied { bind } for pid=27222 comm="syz.5.5725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2019.349406][ T30] audit: type=1400 audit(1749443029.815:32385): avc: denied { node_bind } for pid=27222 comm="syz.5.5725" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2019.562518][ T30] audit: type=1400 audit(1749443029.815:32386): avc: denied { connect } for pid=27222 comm="syz.5.5725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2019.901084][T27229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2019.907734][ T30] audit: type=1400 audit(1749443029.815:32387): avc: denied { write } for pid=27222 comm="syz.5.5725" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2019.912425][T20526] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2019.958063][ T30] audit: type=1400 audit(1749443029.824:32388): avc: denied { setopt } for pid=27222 comm="syz.5.5725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2020.284280][T27247] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2021.170342][T27253] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2021.557557][T22784] usb 8-1: USB disconnect, device number 8 [ 2021.913016][T27255] syzkaller1: entered promiscuous mode [ 2022.001859][T27255] syzkaller1: entered allmulticast mode [ 2023.841896][T27284] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5738'. [ 2024.408420][ T30] kauditd_printk_skb: 248 callbacks suppressed [ 2024.408452][ T30] audit: type=1400 audit(1749443034.922:32633): avc: denied { create } for pid=27289 comm="syz.0.5740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2024.654969][ T30] audit: type=1400 audit(1749443034.922:32634): avc: denied { bind } for pid=27289 comm="syz.0.5740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2024.827680][ T30] audit: type=1400 audit(1749443034.922:32635): avc: denied { node_bind } for pid=27289 comm="syz.0.5740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2024.850078][ T30] audit: type=1400 audit(1749443034.931:32636): avc: denied { connect } for pid=27289 comm="syz.0.5740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2024.977383][ T30] audit: type=1400 audit(1749443034.931:32637): avc: denied { write } for pid=27289 comm="syz.0.5740" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2025.040273][ T30] audit: type=1400 audit(1749443035.006:32638): avc: denied { setopt } for pid=27289 comm="syz.0.5740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2025.111920][ T30] audit: type=1400 audit(1749443035.006:32639): avc: denied { read } for pid=27289 comm="syz.0.5740" dev="nsfs" ino=4026532965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2025.148772][ T30] audit: type=1400 audit(1749443035.006:32640): avc: denied { open } for pid=27289 comm="syz.0.5740" path="net:[4026532965]" dev="nsfs" ino=4026532965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2025.176727][T27301] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2025.225458][ T30] audit: type=1400 audit(1749443035.016:32641): avc: denied { create } for pid=27289 comm="syz.0.5740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2025.653296][ T30] audit: type=1400 audit(1749443035.025:32642): avc: denied { accept } for pid=27289 comm="syz.0.5740" laddr=::1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2025.819054][T27310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5745'. [ 2025.832607][T27310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5745'. [ 2027.219473][T27321] bond0: (slave rose0): Error: Device can not be enslaved while up [ 2027.624501][T27304] lo speed is unknown, defaulting to 1000 [ 2029.975227][T22784] Process accounting resumed [ 2030.057246][T27350] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5756'. [ 2030.075599][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 2030.075630][ T30] audit: type=1400 audit(1749443040.123:32836): avc: denied { execute } for pid=27347 comm="syz.6.5756" dev="tmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2030.261774][ T30] audit: type=1400 audit(1749443040.132:32837): avc: denied { execute_no_trans } for pid=27347 comm="syz.6.5756" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2030.288629][ T30] audit: type=1400 audit(1749443040.179:32838): avc: denied { prog_load } for pid=27347 comm="syz.6.5756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2030.542150][ T30] audit: type=1400 audit(1749443040.179:32839): avc: denied { bpf } for pid=27347 comm="syz.6.5756" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2030.620519][ T30] audit: type=1400 audit(1749443040.179:32840): avc: denied { perfmon } for pid=27347 comm="syz.6.5756" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2030.645169][ T30] audit: type=1400 audit(1749443040.207:32841): avc: denied { create } for pid=27347 comm="syz.6.5756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2030.806030][ T30] audit: type=1400 audit(1749443040.301:32842): avc: denied { create } for pid=27347 comm="syz.6.5756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2030.925767][ T30] audit: type=1400 audit(1749443040.394:32843): avc: denied { recv } for pid=27347 comm="syz.6.5756" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2030.954496][ T30] audit: type=1400 audit(1749443040.787:32844): avc: denied { prog_load } for pid=27343 comm="syz.5.5755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2030.977053][ T30] audit: type=1400 audit(1749443040.787:32845): avc: denied { bpf } for pid=27343 comm="syz.5.5755" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2031.556423][T27363] 9pnet_virtio: no channels available for device 127.0.0.1 [ 2031.975736][T27369] fuse: Bad value for 'fd' [ 2032.232249][T27373] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2032.832510][T27363] team0 (unregistering): Port device team_slave_0 removed [ 2032.942505][T27363] team0 (unregistering): Port device team_slave_1 removed [ 2033.275585][T27377] bond0: (slave rose0): Enslaving as an active interface with an up link [ 2034.003434][T22784] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2034.023929][T27391] netlink: 'syz.0.5767': attribute type 25 has an invalid length. [ 2034.035088][T27388] mmap: syz.7.5766 (27388): VmData 37597184 exceed data ulimit 27. Update limits or use boot option ignore_rlimit_data. [ 2034.174451][T22784] usb 6-1: Using ep0 maxpacket: 16 [ 2034.251242][T22784] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2034.271065][T22784] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2034.287115][T22784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2034.368298][T22784] usb 6-1: config 0 descriptor?? [ 2034.402018][T27393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5768'. [ 2035.095909][T22784] usbhid 6-1:0.0: can't add hid device: -71 [ 2035.102641][T22784] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2035.128601][T22784] usb 6-1: USB disconnect, device number 44 [ 2035.444920][ T30] kauditd_printk_skb: 216 callbacks suppressed [ 2035.444936][ T30] audit: type=1400 audit(1749443045.361:33062): avc: denied { read write } for pid=26643 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2035.491679][ T30] audit: type=1400 audit(1749443045.361:33063): avc: denied { open } for pid=26643 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2035.527208][ T30] audit: type=1400 audit(1749443045.361:33064): avc: denied { ioctl } for pid=26643 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2035.593344][T27406] fuse: Bad value for 'fd' [ 2035.595325][ T30] audit: type=1400 audit(1749443045.408:33065): avc: denied { recv } for pid=27232 comm="kworker/u8:8" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2035.630679][ T30] audit: type=1400 audit(1749443045.408:33066): avc: denied { recv } for pid=27232 comm="kworker/u8:8" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2035.778308][ T30] audit: type=1400 audit(1749443045.483:33067): avc: denied { read write } for pid=16872 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2035.820734][ T30] audit: type=1400 audit(1749443045.483:33068): avc: denied { open } for pid=16872 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2036.890396][ T30] audit: type=1400 audit(1749443045.483:33069): avc: denied { ioctl } for pid=16872 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2036.918728][ T30] audit: type=1400 audit(1749443045.492:33070): avc: denied { recv } for pid=16872 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2036.945032][ T30] audit: type=1400 audit(1749443045.501:33071): avc: denied { mounton } for pid=27405 comm="syz.7.5773" path="/26/file0" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2037.225568][T27424] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2038.045390][T27431] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2038.084429][T27427] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5780'. [ 2039.027845][ T5871] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 2039.256273][ T5871] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2039.619566][ T5871] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2039.766480][T27454] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2040.664348][ T5871] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2040.673492][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2040.728297][ T5871] usb 7-1: SerialNumber: syz [ 2040.801361][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 2040.801377][ T30] audit: type=1400 audit(1749443050.375:33278): avc: denied { ioctl } for pid=27433 comm="syz.6.5781" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2040.835942][T27462] FAULT_INJECTION: forcing a failure. [ 2040.835942][T27462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2040.951750][ T30] audit: type=1400 audit(1749443050.412:33279): avc: denied { create } for pid=27459 comm="syz.0.5790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2040.986270][T27462] CPU: 1 UID: 0 PID: 27462 Comm: syz.3.5788 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 2040.986297][T27462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2040.986307][T27462] Call Trace: [ 2040.986312][T27462] [ 2040.986319][T27462] dump_stack_lvl+0x16c/0x1f0 [ 2040.986349][T27462] should_fail_ex+0x512/0x640 [ 2040.986375][T27462] _copy_to_iter+0x29f/0x16f0 [ 2040.986402][T27462] ? do_raw_spin_unlock+0x172/0x230 [ 2040.986421][T27462] ? _raw_spin_unlock+0x28/0x50 [ 2040.986443][T27462] ? __pfx__copy_to_iter+0x10/0x10 [ 2040.986473][T27462] ? __folio_put+0x32e/0x450 [ 2040.986499][T27462] copy_page_to_iter+0x12a/0x1e0 [ 2040.986527][T27462] pipe_to_user+0xb0/0x170 [ 2040.986584][T27462] ? anon_pipe_buf_release+0x3ed/0x500 [ 2040.986610][T27462] __splice_from_pipe+0x39a/0x800 [ 2040.986642][T27462] ? __pfx_pipe_to_user+0x10/0x10 [ 2040.986674][T27462] __do_sys_vmsplice+0x716/0x1180 [ 2040.986713][T27462] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 2040.986749][T27462] ? get_pid_task+0x106/0x250 [ 2040.986778][T27462] ? find_held_lock+0x2b/0x80 [ 2040.986807][T27462] ? find_held_lock+0x2b/0x80 [ 2040.986845][T27462] ? __fget_files+0x20e/0x3c0 [ 2040.986876][T27462] ? fput+0x70/0xf0 [ 2040.986897][T27462] ? ksys_write+0x1ac/0x250 [ 2040.986919][T27462] ? __pfx_ksys_write+0x10/0x10 [ 2040.986948][T27462] ? do_syscall_64+0xcd/0x4c0 [ 2040.986972][T27462] do_syscall_64+0xcd/0x4c0 [ 2040.987000][T27462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2040.987019][T27462] RIP: 0033:0x7fdc8df8e929 [ 2040.987034][T27462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2040.987056][T27462] RSP: 002b:00007fdc8edbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 2040.987074][T27462] RAX: ffffffffffffffda RBX: 00007fdc8e1b6080 RCX: 00007fdc8df8e929 [ 2040.987086][T27462] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 2040.987097][T27462] RBP: 00007fdc8edbc090 R08: 0000000000000000 R09: 0000000000000000 [ 2040.987112][T27462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2040.987122][T27462] R13: 0000000000000001 R14: 00007fdc8e1b6080 R15: 00007ffe90379068 [ 2040.987148][T27462] [ 2041.251334][ T30] audit: type=1400 audit(1749443050.422:33280): avc: denied { setopt } for pid=27459 comm="syz.0.5790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2041.271253][ T30] audit: type=1400 audit(1749443050.422:33281): avc: denied { read } for pid=27459 comm="syz.0.5790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2041.291301][ T30] audit: type=1400 audit(1749443050.431:33282): avc: denied { prog_load } for pid=27459 comm="syz.0.5790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2041.311210][ T30] audit: type=1400 audit(1749443050.431:33283): avc: denied { bpf } for pid=27459 comm="syz.0.5790" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2041.332091][ T30] audit: type=1400 audit(1749443050.431:33284): avc: denied { perfmon } for pid=27459 comm="syz.0.5790" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2041.353367][ T30] audit: type=1400 audit(1749443050.431:33285): avc: denied { read } for pid=27456 comm="syz.5.5789" dev="nsfs" ino=4026533009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2041.375166][ T30] audit: type=1400 audit(1749443050.431:33286): avc: denied { open } for pid=27456 comm="syz.5.5789" path="net:[4026533009]" dev="nsfs" ino=4026533009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2041.486807][ T30] audit: type=1400 audit(1749443050.431:33287): avc: denied { create } for pid=27456 comm="syz.5.5789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2041.623212][T27468] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2042.227145][T27475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5794'. [ 2043.442887][T22784] usb 7-1: USB disconnect, device number 101 [ 2043.542650][T27485] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2044.666144][T27501] overlayfs: overlapping lowerdir path [ 2044.765383][T27502] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2045.237858][T27508] FAULT_INJECTION: forcing a failure. [ 2045.237858][T27508] name failslab, interval 1, probability 0, space 0, times 0 [ 2045.250750][T27508] CPU: 0 UID: 0 PID: 27508 Comm: syz.0.5802 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 2045.250776][T27508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2045.250786][T27508] Call Trace: [ 2045.250793][T27508] [ 2045.250800][T27508] dump_stack_lvl+0x16c/0x1f0 [ 2045.250832][T27508] should_fail_ex+0x512/0x640 [ 2045.250854][T27508] ? fs_reclaim_acquire+0xae/0x150 [ 2045.250874][T27508] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 2045.250899][T27508] should_failslab+0xc2/0x120 [ 2045.250930][T27508] __kmalloc_noprof+0xd2/0x510 [ 2045.250958][T27508] tomoyo_realpath_from_path+0xc2/0x6e0 [ 2045.250985][T27508] ? tomoyo_profile+0x47/0x60 [ 2045.251015][T27508] tomoyo_path_number_perm+0x245/0x580 [ 2045.251034][T27508] ? tomoyo_path_number_perm+0x237/0x580 [ 2045.251058][T27508] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2045.251107][T27508] ? find_held_lock+0x2b/0x80 [ 2045.251128][T27508] ? hook_file_ioctl_common+0x145/0x410 [ 2045.251151][T27508] ? __fget_files+0x20e/0x3c0 [ 2045.251172][T27508] ? fdget+0x30/0x210 [ 2045.251198][T27508] security_file_ioctl+0x9b/0x240 [ 2045.251223][T27508] __x64_sys_ioctl+0xb7/0x210 [ 2045.251245][T27508] do_syscall_64+0xcd/0x4c0 [ 2045.251273][T27508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2045.251290][T27508] RIP: 0033:0x7f3d2998e929 [ 2045.251304][T27508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2045.251321][T27508] RSP: 002b:00007f3d2a889038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2045.251339][T27508] RAX: ffffffffffffffda RBX: 00007f3d29bb6080 RCX: 00007f3d2998e929 [ 2045.251351][T27508] RDX: 0000200000000040 RSI: 00000000000089f0 RDI: 0000000000000006 [ 2045.251361][T27508] RBP: 00007f3d2a889090 R08: 0000000000000000 R09: 0000000000000000 [ 2045.251372][T27508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2045.251383][T27508] R13: 0000000000000000 R14: 00007f3d29bb6080 R15: 00007ffe6f43e148 [ 2045.251407][T27508] [ 2045.251500][T27508] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2046.158533][ T30] kauditd_printk_skb: 230 callbacks suppressed [ 2046.158550][ T30] audit: type=1400 audit(1749443055.389:33518): avc: denied { recv } for pid=27483 comm="syz.6.5798" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2046.318879][ T30] audit: type=1400 audit(1749443055.426:33520): avc: denied { recv } for pid=26643 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2046.469913][ T30] audit: type=1400 audit(1749443055.435:33521): avc: denied { recv } for pid=27483 comm="syz.6.5798" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2046.503478][T27520] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5805'. [ 2046.529765][T27518] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5806'. [ 2046.586333][ T30] audit: type=1400 audit(1749443055.435:33522): avc: denied { read write open } for pid=20526 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2046.937508][ T30] audit: type=1400 audit(1749443055.435:33523): avc: denied { ioctl } for pid=20526 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2047.177998][ T30] audit: type=1400 audit(1749443055.426:33519): avc: denied { read write } for pid=19016 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2047.207932][ T30] audit: type=1400 audit(1749443055.445:33524): avc: denied { read write open } for pid=19016 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2047.713263][ T30] audit: type=1400 audit(1749443055.445:33525): avc: denied { ioctl } for pid=19016 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3876 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2047.779607][T27494] lo speed is unknown, defaulting to 1000 [ 2047.799961][ T30] audit: type=1400 audit(1749443055.482:33526): avc: denied { read } for pid=27517 comm="syz.5.5806" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2047.916286][T19016] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2048.010039][T27534] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2048.481489][T27551] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2050.322305][T27559] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5818'. [ 2051.809086][ T30] kauditd_printk_skb: 240 callbacks suppressed [ 2051.809101][ T30] audit: type=1400 audit(1749443060.243:33744): avc: denied { prog_load } for pid=27583 comm="syz.5.5824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2051.853679][ T30] audit: type=1400 audit(1749443060.243:33745): avc: denied { bpf } for pid=27583 comm="syz.5.5824" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2051.878222][ T30] audit: type=1400 audit(1749443060.253:33746): avc: denied { write } for pid=27583 comm="syz.5.5824" name="fib_trie" dev="proc" ino=4026533043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2051.919970][ T30] audit: type=1400 audit(1749443060.253:33747): avc: denied { write } for pid=27583 comm="syz.5.5824" path="/proc/1352/net/fib_trie" dev="proc" ino=4026533043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2052.123877][ T30] audit: type=1400 audit(1749443060.533:33748): avc: denied { recv } for pid=27583 comm="syz.5.5824" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2052.243921][ T30] audit: type=1400 audit(1749443060.683:33749): avc: denied { read write } for pid=19016 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2052.273642][ T30] audit: type=1400 audit(1749443060.683:33750): avc: denied { open } for pid=19016 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2052.302310][ T30] audit: type=1400 audit(1749443060.683:33751): avc: denied { ioctl } for pid=19016 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3876 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2052.336282][ T5830] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 2052.343904][ T30] audit: type=1400 audit(1749443060.702:33752): avc: denied { recv } for pid=27587 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2052.369966][ T30] audit: type=1400 audit(1749443060.767:33753): avc: denied { create } for pid=27587 comm="syz.7.5825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2052.634072][T27600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5827'. [ 2052.789795][ T5899] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2053.215353][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 2053.230206][ T5899] usb 4-1: config 1 has an invalid interface number: 123 but max is 0 [ 2053.245044][ T5899] usb 4-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 2053.260368][T27613] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2053.272092][ T5899] usb 4-1: config 1 has no interface number 0 [ 2053.278227][ T5899] usb 4-1: config 1 interface 123 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2053.299530][ T5878] Process accounting resumed [ 2053.301048][T27604] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 2053.319806][ T5899] usb 4-1: config 1 interface 123 has no altsetting 0 [ 2053.321526][T27604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5831'. [ 2053.342939][ T5899] usb 4-1: New USB device found, idVendor=0b05, idProduct=4202, bcdDevice=4c.71 [ 2053.352884][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.353485][T27604] veth3: entered promiscuous mode [ 2053.364625][ T5899] usb 4-1: Product: syz [ 2053.370515][ T5899] usb 4-1: Manufacturer: syz [ 2053.378359][ T5899] usb 4-1: SerialNumber: syz [ 2053.768087][T27622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5834'. [ 2055.132379][ T5899] usb 4-1: USB disconnect, device number 53 [ 2055.815500][T27646] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2057.395542][T27657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5845'. [ 2057.425615][ T30] kauditd_printk_skb: 298 callbacks suppressed [ 2057.425640][ T30] audit: type=1400 audit(1749443065.921:34052): avc: denied { recv } for pid=5802 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2057.477746][T27658] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 2057.499863][ T30] audit: type=1400 audit(1749443065.931:34053): avc: denied { read write } for pid=26643 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2057.505449][T27231] Bluetooth: hci6: Frame reassembly failed (-84) [ 2057.524558][ T30] audit: type=1400 audit(1749443065.931:34054): avc: denied { open } for pid=26643 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2057.696504][ T30] audit: type=1400 audit(1749443065.931:34055): avc: denied { ioctl } for pid=26643 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2057.740920][ T30] audit: type=1400 audit(1749443065.968:34056): avc: denied { create } for pid=27656 comm="syz.6.5845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2057.761527][ C0] vkms_vblank_simulate: vblank timer overrun [ 2057.807928][ T30] audit: type=1400 audit(1749443065.996:34057): avc: denied { read } for pid=27656 comm="syz.6.5845" dev="nsfs" ino=4026533239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2057.835357][ T30] audit: type=1400 audit(1749443065.996:34058): avc: denied { open } for pid=27656 comm="syz.6.5845" path="net:[4026533239]" dev="nsfs" ino=4026533239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2057.863876][ T30] audit: type=1400 audit(1749443065.996:34059): avc: denied { create } for pid=27656 comm="syz.6.5845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2057.914987][ T30] audit: type=1400 audit(1749443065.996:34060): avc: denied { create } for pid=27656 comm="syz.6.5845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2057.935523][T22784] Process accounting resumed [ 2057.939203][ T30] audit: type=1400 audit(1749443065.996:34061): avc: denied { write } for pid=27656 comm="syz.6.5845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2057.975435][T27664] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2059.035387][T27676] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5849'. [ 2059.443325][T27687] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2059.747908][T25514] Bluetooth: hci6: command 0x1003 tx timeout [ 2059.754905][ T5830] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 2061.029306][T22784] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 2061.606682][T22784] usb 8-1: Using ep0 maxpacket: 16 [ 2061.659526][T22784] usb 8-1: config 1 has an invalid interface number: 123 but max is 0 [ 2061.673785][T22784] usb 8-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 2061.692140][T22784] usb 8-1: config 1 has no interface number 0 [ 2062.291809][T22784] usb 8-1: config 1 interface 123 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2062.595076][T22784] usb 8-1: config 1 interface 123 has no altsetting 0 [ 2062.632517][T22784] usb 8-1: string descriptor 0 read error: -71 [ 2062.632966][T16782] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2062.664857][T22784] usb 8-1: New USB device found, idVendor=0b05, idProduct=4202, bcdDevice=4c.71 [ 2062.691566][T22784] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.735287][T22784] usb 8-1: can't set config #1, error -71 [ 2062.761122][T22784] usb 8-1: USB disconnect, device number 9 [ 2062.779039][ T30] kauditd_printk_skb: 269 callbacks suppressed [ 2062.779054][ T30] audit: type=1400 audit(1749443070.935:34331): avc: denied { bind } for pid=27713 comm="syz.0.5861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2062.823847][ T5878] Process accounting resumed [ 2062.831566][ T30] audit: type=1400 audit(1749443070.935:34332): avc: denied { connect } for pid=27713 comm="syz.0.5861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2062.856566][T16782] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2062.875132][T16782] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2062.879959][T27720] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2062.897883][ T30] audit: type=1400 audit(1749443070.935:34333): avc: denied { read write } for pid=27715 comm="syz.6.5862" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2062.922904][ T30] audit: type=1400 audit(1749443070.935:34334): avc: denied { open } for pid=27715 comm="syz.6.5862" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2062.946299][ C0] vkms_vblank_simulate: vblank timer overrun [ 2062.988586][T16782] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2062.998368][T16782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.008770][T16782] usb 4-1: Product: syz [ 2063.016169][T16782] usb 4-1: Manufacturer: syz [ 2063.022455][T16782] usb 4-1: SerialNumber: syz [ 2063.029098][ T30] audit: type=1400 audit(1749443070.935:34335): avc: denied { module_request } for pid=27715 comm="syz.6.5862" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2063.074195][ T30] audit: type=1400 audit(1749443071.000:34336): avc: denied { ioctl } for pid=27708 comm="syz.3.5858" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2063.101596][T16782] cdc_mbim 4-1:1.0: skipping garbage [ 2063.166033][ T30] audit: type=1400 audit(1749443071.028:34337): avc: denied { ioctl } for pid=27713 comm="syz.0.5861" path="socket:[123789]" dev="sockfs" ino=123789 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2063.319221][T27709] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2063.327019][ T30] audit: type=1400 audit(1749443071.075:34338): avc: denied { ioctl } for pid=27708 comm="syz.3.5858" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2063.358145][ T30] audit: type=1400 audit(1749443071.150:34339): avc: denied { recv } for pid=5802 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2063.384606][ T30] audit: type=1400 audit(1749443071.178:34340): avc: denied { read write } for pid=26643 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2063.951382][T27727] pim6reg1: entered allmulticast mode [ 2064.935966][T27736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2065.299729][T27746] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2066.036899][T16782] cdc_mbim 4-1:1.0: bind() failure [ 2066.045211][T16782] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 2066.052021][T16782] cdc_ncm 4-1:1.1: bind() failure [ 2066.131459][T16782] usb 4-1: USB disconnect, device number 54 [ 2066.261047][T27755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5872'. [ 2066.989448][T27770] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2067.076300][T16782] Process accounting resumed [ 2067.155026][ T5899] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2067.278428][T27771] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2067.410033][ T5899] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2067.451515][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.591672][ T5899] usb 6-1: Product: syz [ 2067.605767][T27779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5878'. [ 2067.614674][ T5899] usb 6-1: Manufacturer: syz [ 2067.619341][ T5899] usb 6-1: SerialNumber: syz [ 2068.662295][ T30] kauditd_printk_skb: 257 callbacks suppressed [ 2068.662313][ T30] audit: type=1400 audit(1749443075.472:34598): avc: denied { execmem } for pid=27778 comm="syz.0.5878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2068.665927][ T5899] usb 6-1: config 0 descriptor?? [ 2068.690215][ T30] audit: type=1400 audit(1749443075.528:34599): avc: denied { recv } for pid=27775 comm="syz.3.5877" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2069.114274][ T30] audit: type=1400 audit(1749443075.649:34600): avc: denied { create } for pid=27775 comm="syz.3.5877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2069.136588][ T30] audit: type=1400 audit(1749443075.649:34601): avc: denied { prog_load } for pid=27775 comm="syz.3.5877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2069.156096][ T30] audit: type=1400 audit(1749443075.649:34602): avc: denied { bpf } for pid=27775 comm="syz.3.5877" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2069.211536][ T30] audit: type=1400 audit(1749443075.649:34603): avc: denied { write } for pid=27775 comm="syz.3.5877" name="fib_trie" dev="proc" ino=4026533057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2069.258426][T27787] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2069.354756][ T30] audit: type=1400 audit(1749443075.986:34604): avc: denied { recv } for pid=27778 comm="syz.0.5878" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2069.382599][ T30] audit: type=1400 audit(1749443076.444:34605): avc: denied { read write } for pid=16872 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2069.614974][ T30] audit: type=1400 audit(1749443076.444:34606): avc: denied { open } for pid=16872 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2069.742217][ T30] audit: type=1400 audit(1749443076.444:34607): avc: denied { ioctl } for pid=16872 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2070.283648][T27765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2070.324713][T27765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2070.398626][T27765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2070.412174][T27765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2072.696576][ T5899] usb 6-1: USB disconnect, device number 45 [ 2073.495013][T25035] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 2073.654829][T25035] usb 8-1: Using ep0 maxpacket: 16 [ 2073.666983][T25035] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.700369][T25035] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2073.731768][T25035] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.943432][T25035] usb 8-1: config 0 descriptor?? [ 2074.309242][T27817] binder: BINDER_SET_CONTEXT_MGR already set [ 2074.315334][T27817] binder: 27810:27817 ioctl 4018620d 200000000040 returned -16 [ 2074.555353][T27818] mkiss: ax0: crc mode is auto. [ 2074.616335][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 2074.616368][ T30] audit: type=1400 audit(1749443081.477:34733): avc: denied { prog_load } for pid=27810 comm="syz.0.5885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2075.106926][ T30] audit: type=1400 audit(1749443081.477:34734): avc: denied { bpf } for pid=27810 comm="syz.0.5885" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2075.140888][T25035] usbhid 8-1:0.0: can't add hid device: -71 [ 2075.157794][T25035] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2075.188390][T25035] usb 8-1: USB disconnect, device number 10 [ 2075.203982][ T30] audit: type=1400 audit(1749443081.477:34735): avc: denied { perfmon } for pid=27810 comm="syz.0.5885" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2075.247085][ T30] audit: type=1400 audit(1749443081.486:34736): avc: denied { prog_run } for pid=27810 comm="syz.0.5885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2075.350162][ T30] audit: type=1400 audit(1749443081.496:34737): avc: denied { read } for pid=27810 comm="syz.0.5885" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2075.615496][T27823] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2075.686280][ T30] audit: type=1400 audit(1749443081.496:34738): avc: denied { open } for pid=27810 comm="syz.0.5885" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2075.711789][ T30] audit: type=1400 audit(1749443081.505:34739): avc: denied { ioctl } for pid=27810 comm="syz.0.5885" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2075.737935][ T30] audit: type=1400 audit(1749443081.505:34740): avc: denied { set_context_mgr } for pid=27810 comm="syz.0.5885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2075.761913][ T30] audit: type=1400 audit(1749443081.514:34741): avc: denied { write } for pid=27810 comm="syz.0.5885" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2075.786738][T27828] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2075.813935][ T30] audit: type=1400 audit(1749443081.720:34742): avc: denied { ioctl } for pid=27810 comm="syz.0.5885" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2076.594865][T27839] xt_l2tp: missing protocol rule (udp|l2tpip) [ 2076.819468][ T5871] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2077.687326][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.734202][ T5871] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2077.746504][ T5871] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2077.756424][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2077.870371][ T5871] usb 4-1: SerialNumber: syz [ 2078.390888][T27861] binder: BINDER_SET_CONTEXT_MGR already set [ 2078.397458][T27861] binder: 27858:27861 ioctl 4018620d 200000000040 returned -16 [ 2079.230407][ T5871] usb 4-1: USB disconnect, device number 55 [ 2079.426379][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 2079.780002][T16782] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 2080.082522][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 2080.082537][ T30] audit: type=1400 audit(1749443086.977:34961): avc: denied { create } for pid=27876 comm="syz.7.5902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2080.268013][ T30] audit: type=1400 audit(1749443086.977:34962): avc: denied { create } for pid=27876 comm="syz.7.5902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2080.439540][ T30] audit: type=1400 audit(1749443086.977:34963): avc: denied { bind } for pid=27876 comm="syz.7.5902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2080.459572][ T30] audit: type=1400 audit(1749443086.986:34964): avc: denied { accept } for pid=27876 comm="syz.7.5902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2080.519457][T16782] usb 7-1: config 0 has no interfaces? [ 2080.522715][ T30] audit: type=1400 audit(1749443086.986:34965): avc: denied { create } for pid=27876 comm="syz.7.5902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2081.162482][T16782] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2081.173037][T16782] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.181793][T16782] usb 7-1: Product: syz [ 2081.185972][T16782] usb 7-1: Manufacturer: syz [ 2081.208321][T27888] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2081.219361][ T30] audit: type=1400 audit(1749443086.996:34966): avc: denied { module_request } for pid=27876 comm="syz.7.5902" kmod="net-pf-2-proto-0-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2081.248513][ T30] audit: type=1400 audit(1749443087.108:34967): avc: denied { read write } for pid=20526 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2081.277324][ T30] audit: type=1400 audit(1749443087.108:34968): avc: denied { open } for pid=20526 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2081.301963][ T30] audit: type=1400 audit(1749443087.108:34969): avc: denied { ioctl } for pid=20526 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2081.330978][ T30] audit: type=1400 audit(1749443087.117:34970): avc: denied { read write } for pid=18976 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2081.332289][T16782] usb 7-1: SerialNumber: syz [ 2081.386584][T16782] usb 7-1: config 0 descriptor?? [ 2082.770570][T27902] binder: BINDER_SET_CONTEXT_MGR already set [ 2082.777136][T27902] binder: 27899:27902 ioctl 4018620d 200000000040 returned -16 [ 2083.252388][ T5871] usb 7-1: USB disconnect, device number 102 [ 2083.352540][T27906] /dev/nullb0: Can't lookup blockdev [ 2083.564974][T16782] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 2083.595553][T27917] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 2083.693054][T27922] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5916'. [ 2083.852687][T16782] usb 8-1: Using ep0 maxpacket: 16 [ 2083.872316][T16782] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2083.902427][T16782] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2083.934247][T16782] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.953834][T16782] usb 8-1: config 0 descriptor?? [ 2083.990254][T27926] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2084.120483][T27927] tipc: Enabling of bearer rejected, failed to enable media [ 2084.263150][T27904] SELinux: failed to load policy [ 2084.501814][T16782] mcp2221 0003:04D8:00DD.0059: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 2084.712323][T27904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2084.739567][T27904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2084.774112][T27904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2084.787758][T27904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2084.864166][ T5899] usb 8-1: USB disconnect, device number 11 [ 2085.255665][T16782] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2085.416809][T16782] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2085.439835][T16782] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2085.454091][T16782] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2085.461618][ T30] kauditd_printk_skb: 260 callbacks suppressed [ 2085.461633][ T30] audit: type=1400 audit(1749443092.159:35231): avc: denied { read write } for pid=27943 comm="syz.7.5923" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.466410][T16782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.481800][ T30] audit: type=1400 audit(1749443092.159:35232): avc: denied { open } for pid=27943 comm="syz.7.5923" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.521529][T27933] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2085.526531][ T30] audit: type=1400 audit(1749443092.159:35233): avc: denied { ioctl } for pid=27943 comm="syz.7.5923" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.544161][T16782] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2085.557951][T22784] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 2085.581787][ T30] audit: type=1400 audit(1749443092.168:35234): avc: denied { ioctl } for pid=27943 comm="syz.7.5923" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.616122][ T30] audit: type=1400 audit(1749443092.178:35235): avc: denied { ioctl } for pid=27941 comm="syz.6.5922" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.646655][ T30] audit: type=1400 audit(1749443092.197:35236): avc: denied { ioctl } for pid=27932 comm="syz.3.5920" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.673675][ T30] audit: type=1400 audit(1749443092.262:35237): avc: denied { ioctl } for pid=27941 comm="syz.6.5922" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.699739][ T30] audit: type=1400 audit(1749443092.299:35238): avc: denied { ioctl } for pid=27943 comm="syz.7.5923" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.727447][ T30] audit: type=1400 audit(1749443092.337:35239): avc: denied { ioctl } for pid=27941 comm="syz.6.5922" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.735205][T22784] usb 7-1: Using ep0 maxpacket: 16 [ 2085.762022][ T5871] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 2085.763642][ T30] audit: type=1400 audit(1749443092.365:35240): avc: denied { ioctl } for pid=27943 comm="syz.7.5923" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2085.772247][T22784] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.811518][T22784] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2085.821037][T22784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.835150][T22784] usb 7-1: config 0 descriptor?? [ 2085.879301][T27933] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2085.885863][T27933] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2085.897771][T27933] vhci_hcd vhci_hcd.0: Device attached [ 2085.930640][T27945] vhci_hcd: connection closed [ 2085.931034][T27231] vhci_hcd: stop threads [ 2085.946044][T27231] vhci_hcd: release socket [ 2085.951362][T27231] vhci_hcd: disconnect device [ 2085.952667][ T5871] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2085.957579][ T5899] usb 4-1: USB disconnect, device number 56 [ 2085.965463][ T5871] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.985258][ T5871] usb 8-1: Product: syz [ 2086.000375][ T5871] usb 8-1: Manufacturer: syz [ 2086.011718][ T5871] usb 8-1: SerialNumber: syz [ 2086.051038][ T5871] usb 8-1: config 0 descriptor?? [ 2086.190842][T27942] SELinux: failed to load policy [ 2086.293384][T27944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.304114][T27944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.319996][T27944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.330293][T27944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.517815][T22784] mcp2221 0003:04D8:00DD.005A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 2086.579702][ T5899] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2086.743664][T27942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.892241][T27942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2088.096623][T27942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2088.132695][T27942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2088.533452][T23500] usb 7-1: USB disconnect, device number 103 [ 2088.682305][ T5899] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2088.698312][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.733302][ T5899] usb 6-1: Product: syz [ 2088.738479][ T5899] usb 6-1: Manufacturer: syz [ 2088.744246][ T5899] usb 6-1: SerialNumber: syz [ 2088.966358][ T5899] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2088.992453][T16782] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2089.300365][T27962] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2089.741728][T22784] usb 6-1: USB disconnect, device number 46 [ 2089.751604][T23500] usb 8-1: USB disconnect, device number 12 [ 2090.054530][T27960] lo speed is unknown, defaulting to 1000 [ 2090.120495][T16782] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2090.129482][T27974] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2090.139843][T16782] ath9k_htc: Failed to initialize the device [ 2090.171595][T22784] usb 6-1: ath9k_htc: USB layer deinitialized [ 2091.581211][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 2091.581228][ T30] audit: type=1400 audit(1749443096.911:35408): avc: denied { open } for pid=27979 comm="syz.7.5932" path="/dev/vbi0" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2092.095891][ T30] audit: type=1400 audit(1749443096.911:35409): avc: denied { execmem } for pid=27979 comm="syz.7.5932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2092.146830][ T30] audit: type=1400 audit(1749443097.061:35410): avc: denied { recv } for pid=27979 comm="syz.7.5932" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2092.299733][ T30] audit: type=1400 audit(1749443097.416:35411): avc: denied { create } for pid=27976 comm="syz.6.5931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2092.322226][ T30] audit: type=1400 audit(1749443097.416:35412): avc: denied { write } for pid=27976 comm="syz.6.5931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2092.358109][ T30] audit: type=1400 audit(1749443097.528:35413): avc: denied { recv } for pid=27976 comm="syz.6.5931" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2092.496587][ T30] audit: type=1400 audit(1749443097.996:35414): avc: denied { recv } for pid=27976 comm="syz.6.5931" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2092.523025][ T30] audit: type=1400 audit(1749443098.005:35415): avc: denied { prog_load } for pid=27979 comm="syz.7.5932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2092.542607][ T30] audit: type=1400 audit(1749443098.005:35416): avc: denied { bpf } for pid=27979 comm="syz.7.5932" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2092.563940][ T30] audit: type=1400 audit(1749443098.005:35417): avc: denied { perfmon } for pid=27979 comm="syz.7.5932" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2092.692779][T27993] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5934'. [ 2093.297896][T27999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5936'. [ 2095.463576][T23500] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 2095.650639][T23500] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2095.677968][T28030] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2095.759797][ T5871] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2095.772897][T23500] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.787487][T23500] usb 8-1: Product: syz [ 2095.792260][T23500] usb 8-1: Manufacturer: syz [ 2095.797110][T23500] usb 8-1: SerialNumber: syz [ 2095.900172][T28033] overlay: Unknown parameter '/' [ 2096.015189][T28034] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2096.316942][T23500] usb 8-1: config 0 descriptor?? [ 2096.384929][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2096.401057][ T5871] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2096.436326][ T5871] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2096.477349][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2096.501469][ T5871] usb 4-1: SerialNumber: syz [ 2096.600689][T28016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2096.661504][T28016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2096.700732][T28016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2096.771379][T28016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2097.409499][ T30] kauditd_printk_skb: 262 callbacks suppressed [ 2097.409517][ T30] audit: type=1400 audit(1749443102.841:35680): avc: denied { write } for pid=28035 comm="syz.5.5946" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2098.769722][ T30] audit: type=1400 audit(1749443102.841:35681): avc: denied { open } for pid=28035 comm="syz.5.5946" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2098.793474][ T30] audit: type=1400 audit(1749443102.841:35682): avc: denied { ioctl } for pid=28035 comm="syz.5.5946" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2098.899947][T28041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5947'. [ 2098.926285][T23500] usb 4-1: USB disconnect, device number 57 [ 2098.935732][ T30] audit: type=1400 audit(1749443102.916:35683): avc: denied { create } for pid=28035 comm="syz.5.5946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 2099.027262][T16782] usb 8-1: USB disconnect, device number 13 [ 2099.072518][ T30] audit: type=1400 audit(1749443102.954:35684): avc: denied { sys_admin } for pid=28035 comm="syz.5.5946" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 2099.206748][ T30] audit: type=1400 audit(1749443103.141:35685): avc: denied { recv } for pid=28035 comm="syz.5.5946" saddr=10.128.0.169 src=30006 daddr=10.128.0.38 dest=33164 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 2099.975778][ T30] audit: type=1400 audit(1749443103.365:35686): avc: denied { read } for pid=28037 comm="syz.0.5947" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2100.123286][ T30] audit: type=1400 audit(1749443103.365:35687): avc: denied { open } for pid=28037 comm="syz.0.5947" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2100.149360][T28047] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2100.155852][T28047] audit: audit_lost=287 audit_rate_limit=0 audit_backlog_limit=64 [ 2100.994556][T28065] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2101.699894][T28067] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2102.057886][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 2102.357517][T28054] lo speed is unknown, defaulting to 1000 [ 2102.450342][T28073] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2102.667146][T28055] lo speed is unknown, defaulting to 1000 [ 2102.705885][T28079] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5958'. [ 2102.725287][T28079] netlink: 'syz.6.5958': attribute type 2 has an invalid length. [ 2102.733054][T28079] netlink: 'syz.6.5958': attribute type 1 has an invalid length. [ 2102.771441][T28079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5958'. [ 2102.820459][ T30] kauditd_printk_skb: 221 callbacks suppressed [ 2102.820475][ T30] audit: type=1400 audit(1749443108.398:35851): avc: denied { read } for pid=28078 comm="syz.6.5958" dev="nsfs" ino=4026533239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2102.907232][ T30] audit: type=1400 audit(1749443108.398:35852): avc: denied { open } for pid=28078 comm="syz.6.5958" path="net:[4026533239]" dev="nsfs" ino=4026533239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2103.045689][ T30] audit: type=1400 audit(1749443108.398:35853): avc: denied { create } for pid=28078 comm="syz.6.5958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2103.177702][ T30] audit: type=1400 audit(1749443108.426:35854): avc: denied { connect } for pid=28078 comm="syz.6.5958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2103.368589][ T30] audit: type=1400 audit(1749443108.454:35855): avc: denied { read write } for pid=16872 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2103.605249][ T30] audit: type=1400 audit(1749443108.454:35856): avc: denied { open } for pid=16872 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2103.834399][ T30] audit: type=1400 audit(1749443108.454:35857): avc: denied { ioctl } for pid=16872 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2103.887425][ T30] audit: type=1400 audit(1749443108.473:35858): avc: denied { read write } for pid=28084 comm="syz.6.5959" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2103.921686][ T30] audit: type=1400 audit(1749443108.473:35859): avc: denied { open } for pid=28084 comm="syz.6.5959" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2103.944995][ T30] audit: type=1400 audit(1749443108.473:35860): avc: denied { create } for pid=28084 comm="syz.6.5959" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2104.678875][ T5871] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2104.867957][ T5871] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2104.882675][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.891781][ T5871] usb 4-1: Product: syz [ 2104.902599][ T5871] usb 4-1: Manufacturer: syz [ 2104.914084][ T5871] usb 4-1: SerialNumber: syz [ 2104.956867][T23500] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2104.991331][ T5871] usb 4-1: config 0 descriptor?? [ 2105.130624][T23500] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2105.147139][T23500] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 2105.162654][T23500] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2105.173689][T23500] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2105.181993][T23500] usb 6-1: SerialNumber: syz [ 2230.447963][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 2230.447979][ T30] audit: type=1400 audit(1749443227.773:35908): avc: denied { egress } for pid=1167 comm="kworker/u8:6" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 2230.478466][ T30] audit: type=1400 audit(1749443227.773:35909): avc: denied { sendto } for pid=1167 comm="kworker/u8:6" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 2262.600728][ T31] INFO: task syz-executor:5802 blocked for more than 143 seconds. [ 2262.608612][ T31] Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 [ 2262.616056][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2262.624767][ T31] task:syz-executor state:D stack:23216 pid:5802 tgid:5802 ppid:5801 task_flags:0x440100 flags:0x00004002 [ 2262.637361][ T31] Call Trace: [ 2262.640740][ T31] [ 2262.643777][ T31] __schedule+0x116a/0x5de0 [ 2262.648322][ T31] ? __lock_acquire+0x622/0x1c90 [ 2262.653278][ T31] ? __pfx___schedule+0x10/0x10 [ 2262.658211][ T31] ? find_held_lock+0x2b/0x80 [ 2262.662905][ T31] ? schedule+0x2d7/0x3a0 [ 2262.667301][ T31] schedule+0xe7/0x3a0 [ 2262.671419][ T31] io_schedule+0xbf/0x130 [ 2262.675824][ T31] bit_wait_io+0x15/0xe0 [ 2262.680113][ T31] __wait_on_bit+0x65/0x180 [ 2262.684636][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 2262.689606][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 2262.695002][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2262.701006][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 2262.706620][ T31] do_get_write_access+0x93d/0x1320 [ 2262.711988][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 2262.717978][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 2262.724067][ T31] ext4_reserve_inode_write+0x1be/0x340 [ 2262.729779][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 2262.735268][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2262.741288][ T31] ? rcu_is_watching+0x12/0xc0 [ 2262.747062][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 2262.752768][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 2262.757972][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 2262.763674][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 2262.769322][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 2262.774290][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2262.779688][ T31] ext4_dirty_inode+0xd9/0x130 [ 2262.784537][ T31] ? rcu_is_watching+0x12/0xc0 [ 2262.789319][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 2262.794398][ T31] generic_update_time+0xcf/0xf0 [ 2262.799376][ T31] file_update_time+0x17d/0x1c0 [ 2262.804285][ T31] ext4_page_mkwrite+0x35e/0x1760 [ 2262.809382][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2262.814944][ T31] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 2262.820773][ T31] ? vm_normal_page+0x152/0x2e0 [ 2262.825781][ T31] ? find_held_lock+0x2b/0x80 [ 2262.830463][ T31] ? find_held_lock+0x2b/0x80 [ 2262.835155][ T31] do_page_mkwrite+0x174/0x380 [ 2262.839976][ T31] do_wp_page+0xb10/0x4f20 [ 2262.844404][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 2262.849274][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 2262.854977][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2262.860454][ T31] __handle_mm_fault+0x2223/0x5490 [ 2262.865584][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 2262.871072][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2262.876274][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2262.881518][ T31] handle_mm_fault+0x589/0xd10 [ 2262.886281][ T31] ? __pkru_allows_pkey+0x21/0xb0 [ 2262.891367][ T31] do_user_addr_fault+0x60c/0x1370 [ 2262.896503][ T31] ? rcu_is_watching+0x12/0xc0 [ 2262.901319][ T31] exc_page_fault+0x5c/0xb0 [ 2262.905839][ T31] asm_exc_page_fault+0x26/0x30 [ 2262.910725][ T31] RIP: 0033:0x7f72c3e689a5 [ 2262.915161][ T31] RSP: 002b:00007ffd391d8850 EFLAGS: 00010202 [ 2262.921292][ T31] RAX: 00007f72bedc3a28 RBX: 00007ffd391d8950 RCX: 0000000000000000 [ 2262.929675][ T31] RDX: 00007f72bedc3a24 RSI: 0000000000000008 RDI: 00007ffd391d8950 [ 2262.937717][ T31] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 2262.945850][ T31] R10: 00007ffd391d8930 R11: 0000000000000000 R12: 0000000000000000 [ 2262.953909][ T31] R13: 000000000003c5d8 R14: fffffffffffc3a28 R15: 000000000003c5d8 [ 2262.962560][ T31] [ 2262.965706][ T31] INFO: task syz.5.5960:28088 blocked for more than 143 seconds. [ 2262.973441][ T31] Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 [ 2262.980742][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2262.989452][ T31] task:syz.5.5960 state:D stack:25192 pid:28088 tgid:28088 ppid:20526 task_flags:0x440040 flags:0x00004004 [ 2263.001405][ T31] Call Trace: [ 2263.004684][ T31] [ 2263.007669][ T31] __schedule+0x116a/0x5de0 [ 2263.012202][ T31] ? __pfx___schedule+0x10/0x10 [ 2263.017054][ T31] ? find_held_lock+0x2b/0x80 [ 2263.021756][ T31] ? schedule+0x2d7/0x3a0 [ 2263.026083][ T31] schedule+0xe7/0x3a0 [ 2263.030182][ T31] io_schedule+0xbf/0x130 [ 2263.034731][ T31] bit_wait_io+0x15/0xe0 [ 2263.039040][ T31] __wait_on_bit+0x65/0x180 [ 2263.043588][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 2263.048547][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 2263.053945][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2263.059927][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 2263.065533][ T31] do_get_write_access+0x93d/0x1320 [ 2263.071610][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 2263.077633][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 2263.083723][ T31] ext4_reserve_inode_write+0x1be/0x340 [ 2263.089271][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 2263.094774][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2263.100758][ T31] ? rcu_is_watching+0x12/0xc0 [ 2263.105556][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 2263.111203][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 2263.116423][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 2263.122057][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 2263.127779][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 2263.132791][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2263.138244][ T31] ext4_dirty_inode+0xd9/0x130 [ 2263.143025][ T31] ? rcu_is_watching+0x12/0xc0 [ 2263.147939][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 2263.152978][ T31] generic_update_time+0xcf/0xf0 [ 2263.157987][ T31] file_update_time+0x17d/0x1c0 [ 2263.162848][ T31] ext4_page_mkwrite+0x35e/0x1760 [ 2263.167939][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2263.173426][ T31] ? kasan_save_track+0x14/0x30 [ 2263.178540][ T31] ? __kasan_slab_free+0x51/0x70 [ 2263.184118][ T31] ? vm_normal_page+0x152/0x2e0 [ 2263.189076][ T31] ? find_held_lock+0x2b/0x80 [ 2263.193774][ T31] ? find_held_lock+0x2b/0x80 [ 2263.198446][ T31] do_page_mkwrite+0x174/0x380 [ 2263.203232][ T31] do_wp_page+0xb10/0x4f20 [ 2263.207656][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 2263.212563][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 2263.217602][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2263.222998][ T31] __handle_mm_fault+0x2223/0x5490 [ 2263.228116][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 2263.233581][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2263.238775][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2263.244049][ T31] ? __pfx_try_to_wake_up+0x10/0x10 [ 2263.249266][ T31] handle_mm_fault+0x589/0xd10 [ 2263.254277][ T31] ? __pkru_allows_pkey+0x21/0xb0 [ 2263.259328][ T31] do_user_addr_fault+0x60c/0x1370 [ 2263.264508][ T31] ? rcu_is_watching+0x12/0xc0 [ 2263.269291][ T31] exc_page_fault+0x5c/0xb0 [ 2263.273797][ T31] asm_exc_page_fault+0x26/0x30 [ 2263.278661][ T31] RIP: 0033:0x7f6d88c6ea07 [ 2263.283065][ T31] RSP: 002b:00007ffcf3059020 EFLAGS: 00010202 [ 2263.290752][ T31] RAX: 0000001b2de1fe78 RBX: 00007f6d89ae5720 RCX: ffffffff8b7f5230 [ 2263.298891][ T31] RDX: 0000001b2de1fe74 RSI: 0000000000000004 RDI: 00007f6d89ae5720 [ 2263.306944][ T31] RBP: fffffffffffffe78 R08: 00007f6d88fb62d8 R09: 00007f6d88fa2000 [ 2263.314958][ T31] R10: 00007f6d86793008 R11: 0000000000000019 R12: 0000000000000188 [ 2263.322944][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000028686 [ 2263.330942][ T31] ? do_syscall_64+0x1d0/0x4c0 [ 2263.335714][ T31] [ 2263.338784][ T31] INFO: task syz.3.5961:28090 blocked for more than 144 seconds. [ 2263.346548][ T31] Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 [ 2263.353899][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2263.362901][ T31] task:syz.3.5961 state:D stack:28216 pid:28090 tgid:28090 ppid:18976 task_flags:0x440040 flags:0x00004004 [ 2263.374995][ T31] Call Trace: [ 2263.378279][ T31] [ 2263.381241][ T31] __schedule+0x116a/0x5de0 [ 2263.385772][ T31] ? __pfx___schedule+0x10/0x10 [ 2263.390625][ T31] ? find_held_lock+0x2b/0x80 [ 2263.395333][ T31] ? schedule+0x2d7/0x3a0 [ 2263.400305][ T31] schedule+0xe7/0x3a0 [ 2263.404447][ T31] io_schedule+0xbf/0x130 [ 2263.408791][ T31] bit_wait_io+0x15/0xe0 [ 2263.413278][ T31] __wait_on_bit+0x65/0x180 [ 2263.417800][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 2263.422739][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 2263.428126][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2263.434106][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 2263.439595][ T31] do_get_write_access+0x93d/0x1320 [ 2263.444794][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 2263.450785][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 2263.456873][ T31] ext4_reserve_inode_write+0x1be/0x340 [ 2263.462423][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 2263.467936][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2263.474070][ T31] ? rcu_is_watching+0x12/0xc0 [ 2263.478872][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 2263.484504][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 2263.489713][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 2263.495347][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 2263.501048][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 2263.506047][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2263.512057][ T31] ext4_dirty_inode+0xd9/0x130 [ 2263.516850][ T31] ? rcu_is_watching+0x12/0xc0 [ 2263.521632][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 2263.526655][ T31] generic_update_time+0xcf/0xf0 [ 2263.531859][ T31] file_update_time+0x17d/0x1c0 [ 2263.536718][ T31] ext4_page_mkwrite+0x35e/0x1760 [ 2263.541870][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2263.547350][ T31] ? pte_alloc_one+0x2b6/0x3a0 [ 2263.552170][ T31] do_page_mkwrite+0x174/0x380 [ 2263.556959][ T31] __handle_mm_fault+0x3829/0x5490 [ 2263.562073][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 2263.567557][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2263.572756][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2263.578004][ T31] handle_mm_fault+0x589/0xd10 [ 2263.582934][ T31] ? __pkru_allows_pkey+0x21/0xb0 [ 2263.588012][ T31] do_user_addr_fault+0x60c/0x1370 [ 2263.593136][ T31] ? rcu_is_watching+0x12/0xc0 [ 2263.597931][ T31] exc_page_fault+0x5c/0xb0 [ 2263.602440][ T31] asm_exc_page_fault+0x26/0x30 [ 2263.607356][ T31] RIP: 0033:0x7fdc8de6ea07 [ 2263.611797][ T31] RSP: 002b:00007ffe903790a0 EFLAGS: 00010202 [ 2263.618705][ T31] RAX: 0000001b2d220000 RBX: 00007fdc8ece5720 RCX: 0000001b2ce20218 [ 2263.626705][ T31] RDX: 0000001b2d21fffc RSI: 00000000003ffde8 RDI: 00007fdc8ece5700 [ 2263.634989][ T31] RBP: 0000000000000000 R08: 00007fdc8e1b6038 R09: 00007fdc8e1a2000 [ 2263.643038][ T31] R10: 00007fdc8ece5700 R11: 0000000000000000 R12: 0000000000000000 [ 2263.651302][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000235ca [ 2263.659371][ T31] [ 2263.662412][ T31] INFO: task syz.6.5962:28100 blocked for more than 144 seconds. [ 2263.670282][ T31] Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 [ 2263.677582][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2263.686279][ T31] task:syz.6.5962 state:D stack:28456 pid:28100 tgid:28100 ppid:16872 task_flags:0x440040 flags:0x00004004 [ 2263.698422][ T31] Call Trace: [ 2263.701742][ T31] [ 2263.704706][ T31] __schedule+0x116a/0x5de0 [ 2263.709238][ T31] ? __pfx___schedule+0x10/0x10 [ 2263.714110][ T31] ? find_held_lock+0x2b/0x80 [ 2263.718785][ T31] ? schedule+0x2d7/0x3a0 [ 2263.723121][ T31] schedule+0xe7/0x3a0 [ 2263.728051][ T31] io_schedule+0xbf/0x130 [ 2263.732407][ T31] bit_wait_io+0x15/0xe0 [ 2263.736695][ T31] __wait_on_bit+0x65/0x180 [ 2263.741225][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 2263.746175][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 2263.751550][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2263.757603][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 2263.763087][ T31] do_get_write_access+0x93d/0x1320 [ 2263.768425][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 2263.774410][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 2263.780538][ T31] ext4_reserve_inode_write+0x1be/0x340 [ 2263.786472][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 2263.791962][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2263.797998][ T31] ? rcu_is_watching+0x12/0xc0 [ 2263.803043][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 2263.808740][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 2263.813954][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 2263.819621][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 2263.825278][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 2263.830419][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2263.835826][ T31] ext4_dirty_inode+0xd9/0x130 [ 2263.841877][ T31] ? rcu_is_watching+0x12/0xc0 [ 2263.846673][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 2263.851733][ T31] generic_update_time+0xcf/0xf0 [ 2263.856684][ T31] file_update_time+0x17d/0x1c0 [ 2263.861533][ T31] ext4_page_mkwrite+0x35e/0x1760 [ 2263.866611][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2263.872094][ T31] ? pte_alloc_one+0x2b6/0x3a0 [ 2263.876889][ T31] do_page_mkwrite+0x174/0x380 [ 2263.881657][ T31] __handle_mm_fault+0x3829/0x5490 [ 2263.886977][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 2263.892457][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2263.897721][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2263.902950][ T31] handle_mm_fault+0x589/0xd10 [ 2263.907737][ T31] ? __pkru_allows_pkey+0x21/0xb0 [ 2263.912905][ T31] do_user_addr_fault+0x60c/0x1370 [ 2263.918068][ T31] ? rcu_is_watching+0x12/0xc0 [ 2263.922840][ T31] exc_page_fault+0x5c/0xb0 [ 2263.927408][ T31] asm_exc_page_fault+0x26/0x30 [ 2263.932295][ T31] RIP: 0033:0x7fb9d006545b [ 2263.936725][ T31] RSP: 002b:00007ffd1387a7b0 EFLAGS: 00010246 [ 2263.942804][ T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 2263.951444][ T31] RDX: 0000001b32120000 RSI: 0000000000600000 RDI: 00007fb9d0299b90 [ 2263.959494][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 2263.967483][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2263.975529][ T31] R13: 00000000000927c0 R14: 00000000001e3641 R15: 00007ffd1387aa60 [ 2263.983539][ T31] [ 2263.986559][ T31] INFO: task syz.0.5963:28102 blocked for more than 144 seconds. [ 2263.994335][ T31] Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 [ 2264.001896][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2264.010577][ T31] task:syz.0.5963 state:D stack:28456 pid:28102 tgid:28102 ppid:19016 task_flags:0x440040 flags:0x00004004 [ 2264.022667][ T31] Call Trace: [ 2264.025952][ T31] [ 2264.028876][ T31] __schedule+0x116a/0x5de0 [ 2264.033446][ T31] ? __lock_acquire+0x622/0x1c90 [ 2264.038423][ T31] ? __pfx___schedule+0x10/0x10 [ 2264.043274][ T31] ? find_held_lock+0x2b/0x80 [ 2264.047978][ T31] ? schedule+0x2d7/0x3a0 [ 2264.052304][ T31] schedule+0xe7/0x3a0 [ 2264.057221][ T31] io_schedule+0xbf/0x130 [ 2264.061578][ T31] bit_wait_io+0x15/0xe0 [ 2264.065871][ T31] __wait_on_bit+0x65/0x180 [ 2264.070393][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 2264.075331][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 2264.080749][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 2264.086811][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 2264.092315][ T31] do_get_write_access+0x93d/0x1320 [ 2264.097573][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 2264.103591][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 2264.109692][ T31] ext4_reserve_inode_write+0x1be/0x340 [ 2264.115254][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 2264.120845][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 2264.126842][ T31] ? rcu_is_watching+0x12/0xc0 [ 2264.131905][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 2264.137560][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 2264.142776][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 2264.148420][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 2264.154085][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 2264.159031][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 2264.164418][ T31] ext4_dirty_inode+0xd9/0x130 [ 2264.169835][ T31] ? rcu_is_watching+0x12/0xc0 [ 2264.174643][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 2264.179670][ T31] generic_update_time+0xcf/0xf0 [ 2264.184655][ T31] file_update_time+0x17d/0x1c0 [ 2264.189549][ T31] ext4_page_mkwrite+0x35e/0x1760 [ 2264.194666][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 2264.200156][ T31] ? pte_alloc_one+0x2b6/0x3a0 [ 2264.204934][ T31] do_page_mkwrite+0x174/0x380 [ 2264.209707][ T31] __handle_mm_fault+0x3829/0x5490 [ 2264.214912][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 2264.220405][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2264.225648][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 2264.230872][ T31] handle_mm_fault+0x589/0xd10 [ 2264.235631][ T31] ? __pkru_allows_pkey+0x21/0xb0 [ 2264.241123][ T31] do_user_addr_fault+0x60c/0x1370 [ 2264.246495][ T31] ? rcu_is_watching+0x12/0xc0 [ 2264.251305][ T31] exc_page_fault+0x5c/0xb0 [ 2264.255812][ T31] asm_exc_page_fault+0x26/0x30 [ 2264.260677][ T31] RIP: 0033:0x7f3d2986545b [ 2264.265088][ T31] RSP: 002b:00007ffe6f43e2b0 EFLAGS: 00010246 [ 2264.271165][ T31] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 2264.279826][ T31] RDX: 0000001b2fe20000 RSI: 0000000000600000 RDI: 00007f3d29a99b90 [ 2264.287820][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 2264.295815][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2264.303819][ T31] R13: 000055555f242590 R14: 00000000001e2ae6 R15: 00007ffe6f43e560 [ 2264.312994][ T31] [ 2264.316036][ T31] [ 2264.316036][ T31] Showing all locks held in the system: [ 2264.323860][ T31] 2 locks held by kworker/u8:1/13: [ 2264.329022][ T31] 1 lock held by khungtaskd/31: [ 2264.333900][ T31] #0: ffffffff8e5c4840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 2264.343846][ T31] 2 locks held by getty/5579: [ 2264.348670][ T31] #0: ffff888037b520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2264.358595][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 2264.368742][ T31] 3 locks held by syz-executor/5802: [ 2264.374019][ T31] #0: ffff888030f0d1c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 2264.383355][ T31] #1: ffff888034d08520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 [ 2264.393545][ T31] #2: ffff888034d0c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 2264.403226][ T31] 1 lock held by syz-executor/17416: [ 2264.408538][ T31] #0: ffff888031d4e0e0 (&type->s_umount_key#67){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 2264.418907][ T31] 3 locks held by syz.5.5960/28088: [ 2264.424118][ T31] #0: ffff88806534e6c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 2264.433477][ T31] #1: ffff888034d08520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 [ 2264.442984][ T31] #2: ffff888034d0c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 2264.452621][ T31] 3 locks held by syz.3.5961/28090: [ 2264.458053][ T31] #0: ffff88807bda06c8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 2264.467441][ T31] #1: ffff888034d08520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 [ 2264.477032][ T31] #2: ffff888034d0c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 2264.486661][ T31] 3 locks held by syz.6.5962/28100: [ 2264.491849][ T31] #0: ffff888033dc9308 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 2264.501790][ T31] #1: ffff888034d08520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 [ 2264.511368][ T31] #2: ffff888034d0c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 2264.520971][ T31] 3 locks held by syz.0.5963/28102: [ 2264.526169][ T31] #0: ffff8880415d2948 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 2264.535487][ T31] #1: ffff888034d08520 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 [ 2264.545194][ T31] #2: ffff888034d0c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 2264.554799][ T31] [ 2264.557196][ T31] ============================================= [ 2264.557196][ T31] [ 2264.565617][ T31] NMI backtrace for cpu 1 [ 2264.565626][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 2264.565640][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2264.565647][ T31] Call Trace: [ 2264.565651][ T31] [ 2264.565656][ T31] dump_stack_lvl+0x116/0x1f0 [ 2264.565675][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2264.565689][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2264.565705][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2264.565720][ T31] watchdog+0xf70/0x12c0 [ 2264.565735][ T31] ? __pfx_watchdog+0x10/0x10 [ 2264.565746][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2264.565764][ T31] ? __kthread_parkme+0x19e/0x250 [ 2264.565780][ T31] ? __pfx_watchdog+0x10/0x10 [ 2264.565791][ T31] kthread+0x3c5/0x780 [ 2264.565801][ T31] ? __pfx_kthread+0x10/0x10 [ 2264.565812][ T31] ? rcu_is_watching+0x12/0xc0 [ 2264.565825][ T31] ? __pfx_kthread+0x10/0x10 [ 2264.565835][ T31] ret_from_fork+0x5d4/0x6f0 [ 2264.565850][ T31] ? __pfx_kthread+0x10/0x10 [ 2264.565860][ T31] ret_from_fork_asm+0x1a/0x30 [ 2264.565878][ T31] [ 2264.565882][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2264.685277][ C0] NMI backtrace for cpu 0 [ 2264.685292][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 2264.685310][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2264.685323][ C0] RIP: 0010:__kasan_check_byte+0x0/0x50 [ 2264.685347][ C0] Code: 48 8b 43 48 48 8d 50 ff a8 01 48 0f 45 da e9 9c fe ff ff 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 41 54 49 89 f4 55 48 89 fd 53 e8 bd 24 00 00 89 c3 84 [ 2264.685362][ C0] RSP: 0018:ffffc90000007750 EFLAGS: 00000002 [ 2264.685374][ C0] RAX: 0000000000000001 RBX: ffffffff8e5c4840 RCX: 0000000000000002 [ 2264.685383][ C0] RDX: 0000000000000000 RSI: ffffffff816ac8c1 RDI: ffffffff8e5c4840 [ 2264.685393][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2264.685401][ C0] R10: 0000000000000000 R11: 000000000000a882 R12: 0000000000000000 [ 2264.685410][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2264.685419][ C0] FS: 0000000000000000(0000) GS:ffff888124754000(0000) knlGS:0000000000000000 [ 2264.685434][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2264.685443][ C0] CR2: 000055f38b560920 CR3: 000000000e382000 CR4: 00000000003526f0 [ 2264.685452][ C0] Call Trace: [ 2264.685457][ C0] [ 2264.685463][ C0] lock_acquire+0xfc/0x350 [ 2264.685484][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 2264.685506][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2264.685525][ C0] unwind_next_frame+0xd1/0x20a0 [ 2264.685545][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 2264.685565][ C0] ? run_timer_softirq+0x1a/0x40 [ 2264.685587][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2264.685606][ C0] arch_stack_walk+0x94/0x100 [ 2264.685622][ C0] ? run_timer_softirq+0x1a/0x40 [ 2264.685642][ C0] stack_trace_save+0x8e/0xc0 [ 2264.685659][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2264.685678][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 2264.685697][ C0] kasan_save_stack+0x33/0x60 [ 2264.685713][ C0] ? kasan_save_stack+0x33/0x60 [ 2264.685729][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 2264.685744][ C0] ? insert_work+0x36/0x230 [ 2264.685756][ C0] ? __queue_work+0x3f8/0x10f0 [ 2264.685769][ C0] ? call_timer_fn+0x197/0x620 [ 2264.685786][ C0] ? __run_timers+0x569/0x960 [ 2264.685803][ C0] ? run_timer_base+0x114/0x190 [ 2264.685821][ C0] ? run_timer_softirq+0x1a/0x40 [ 2264.685854][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 2264.685868][ C0] insert_work+0x36/0x230 [ 2264.685882][ C0] __queue_work+0x3f8/0x10f0 [ 2264.685898][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2264.685914][ C0] call_timer_fn+0x197/0x620 [ 2264.685931][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2264.685950][ C0] ? __run_timers+0x559/0x960 [ 2264.685970][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 2264.685986][ C0] __run_timers+0x569/0x960 [ 2264.686008][ C0] ? __pfx___run_timers+0x10/0x10 [ 2264.686034][ C0] run_timer_base+0x114/0x190 [ 2264.686052][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 2264.686073][ C0] ? rcu_is_watching+0x12/0xc0 [ 2264.686091][ C0] run_timer_softirq+0x1a/0x40 [ 2264.686109][ C0] handle_softirqs+0x219/0x8e0 [ 2264.686127][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2264.686145][ C0] __irq_exit_rcu+0x109/0x170 [ 2264.686161][ C0] irq_exit_rcu+0x9/0x30 [ 2264.686177][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2264.686196][ C0] [ 2264.686200][ C0] [ 2264.686206][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2264.686222][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2264.686242][ C0] Code: bb 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 50 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2264.686255][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 2264.686266][ C0] RAX: 00000000082a0565 RBX: 0000000000000000 RCX: ffffffff8b7fbc99 [ 2264.686275][ C0] RDX: 0000000000000000 RSI: ffffffff8de18f75 RDI: ffffffff8c157060 [ 2264.686284][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 2264.686293][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 2264.686302][ C0] R13: ffffffff8e297780 R14: ffffffff90a80c50 R15: 0000000000000000 [ 2264.686314][ C0] ? ct_kernel_exit+0x139/0x190 [ 2264.686342][ C0] default_idle+0x13/0x20 [ 2264.686354][ C0] default_idle_call+0x6d/0xb0 [ 2264.686368][ C0] do_idle+0x391/0x510 [ 2264.686386][ C0] ? __pfx_do_idle+0x10/0x10 [ 2264.686402][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 2264.686422][ C0] cpu_startup_entry+0x4f/0x60 [ 2264.686439][ C0] rest_init+0x16b/0x2b0 [ 2264.686453][ C0] ? acpi_subsystem_init+0x133/0x180 [ 2264.686470][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2264.686489][ C0] start_kernel+0x3ee/0x4d0 [ 2264.686507][ C0] x86_64_start_reservations+0x18/0x30 [ 2264.686524][ C0] x86_64_start_kernel+0x130/0x190 [ 2264.686542][ C0] common_startup_64+0x13e/0x148 [ 2264.686560][ C0] [ 2264.687945][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2265.170727][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 2265.182168][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2265.192206][ T31] Call Trace: [ 2265.195472][ T31] [ 2265.198388][ T31] dump_stack_lvl+0x3d/0x1f0 [ 2265.202973][ T31] panic+0x71c/0x800 [ 2265.206857][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 2265.212749][ T31] ? __pfx_panic+0x10/0x10 [ 2265.217162][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2265.222528][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2265.228506][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2265.233874][ T31] ? watchdog+0xdda/0x12c0 [ 2265.238280][ T31] ? watchdog+0xdcd/0x12c0 [ 2265.242690][ T31] watchdog+0xdeb/0x12c0 [ 2265.246932][ T31] ? __pfx_watchdog+0x10/0x10 [ 2265.251608][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2265.256802][ T31] ? __kthread_parkme+0x19e/0x250 [ 2265.261825][ T31] ? __pfx_watchdog+0x10/0x10 [ 2265.266491][ T31] kthread+0x3c5/0x780 [ 2265.270547][ T31] ? __pfx_kthread+0x10/0x10 [ 2265.275141][ T31] ? rcu_is_watching+0x12/0xc0 [ 2265.279904][ T31] ? __pfx_kthread+0x10/0x10 [ 2265.284492][ T31] ret_from_fork+0x5d4/0x6f0 [ 2265.289071][ T31] ? __pfx_kthread+0x10/0x10 [ 2265.293645][ T31] ret_from_fork_asm+0x1a/0x30 [ 2265.298404][ T31] [ 2265.301589][ T31] Kernel Offset: disabled [ 2265.305891][ T31] Rebooting in 86400 seconds..