last executing test programs: 11.916083529s ago: executing program 2 (id=215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x0, 0x51}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x49, 0x0, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xe) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') fcntl$setstatus(r11, 0x4, 0x40800) syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r11, 0x792, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_submit(r10, 0x2, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xb, r9, 0x0, 0x0, 0x3b4, 0x0, 0x2, r11}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x7, r1, &(0x7f0000000600)="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", 0x113, 0x8, 0x0, 0x3, r11}]) syslog(0x2, 0xffffffffffffffff, 0x4b) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 10.762489482s ago: executing program 2 (id=218): socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) recvmsg$can_raw(r5, &(0x7f0000000380)={&(0x7f0000000240)=@nfc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/186, 0xba}], 0x1}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000080)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002fed5a99", @ANYRES16=r7, @ANYBLOB="1b062dbd7000ffdbdf2508000000"], 0x14}}, 0x4000) 10.761660675s ago: executing program 0 (id=219): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xd69a2f78c25132c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x6, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r3, r5, 0x1, 0x0, @void}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="cf6dcad1f5c5c712407a3f1d491539b627c8255f86be020a4f0ff8851dc6d8ab33ec6d10e619ed910e4811af9ee1581a1d0687020937fa7005f26bab6e9591923f5c1086ecd154e9bfbec5afd856afe3429448161089fab21bc7b9ab5158aa219761d845b8307b1fc87605dbaa4cf80fc74737d4d4cfc68fe06c16b87b759a91a368c70b2e05ee4acf0f9111df10f30c4e16b7ee3d1cf380273ab8e6ca382e06022f539c0c4e62b1ad827ff576249375b2231e47038c67b3353242c81baaf90b3645ed12504a4ccf4b0e6419804399f9fe7f60df022a12405093264d225e8003061dd690cd169f922da3507717ade8bfa8ae2c45eccd32e14ffc4e11ae939e90fceb53e0bde3916d9e4e36d1de07fbbdd2dbc24145e1e7bc8f3423f4c3426406fa499a6de404e6827db35840a726a1582be4457f0ce0cde1c414e2f497ff8ff4cb606962f6acac00230b2cbce10b09d2f6b33b9f4edc3839a222c4bc5bb3e552056f8c2b7bc84ab62434bcc61f64b74367a9ec857ec7f5a09ab6b16667bdc846434d22dd95f7b8a47a1246a39d135de1ffc2946cf36034ef8d753b7d692aa00c91fc1636c0be309ef4bf345918a386e76edc3680ee574528bf3369741c9104bd77e61aa72d8b82162bb150d4232e21c8c9453d89467f9e00fd5148bee49da206fbe6357bbc31b111e68f0b95c37063a6c5401a094819e28a2104c37db5624fe075d0b2cc50f7140f4f49396b43d14f93ab9f9649e2dc694cea520cc068a3869a3ea4ec599a995f69d936dd62e2b81499f3ed4879d25b90aff3eae74b28ae35f18f0b457a5af35e2ede43786958b127ef76723d6ffe0e7e3346d5a9f0aabcc0d93fc085316516ef79b3e2400ed2946a0d1b2ace13ea7ed39ac51cb9d98cf70feb30d5bad39f6b5903e8ab654f48bfd7e54dcb502b158f68bd96e6beb4392fa59d3e1048803e4749f3ad522414d3180de3a0da1227bfbb704b66ae6a85b1c2c51e484622eeb169760e9ec50e14c014a0cc05aebbee77f31b62834169cb49bec0c43090506c8f34ca6e108e6328ced7a9f11cb3d57398b0b1d84c9e75d5cdf17766d619dc2658aacb900ca0f93aa248d702039417b558b8ab4a41921154153cdc86d999b2e7932eabb55a4e6c8c03029c851a9e84ef84acd9affdff84ffc063bb1ab6c97e169071edbe524462fef9116edd9fbb5032478cd5ad2b2c5527fdf64223dbc952fb528f7b1d817ca787f8a57992b40202ca124cd27eadd6d70351379a6456b697b317d101514d1d5d61002e4f3bcf7555c6b36c4c1d18cba0fd4fd7b3a246b72d47d7c1908cc9c3a29fbf43019b5179b0975d7680ec15720f7fc8b96b13522d058ef009719580227489ea68062cc735cca0b6a60a10c44f2b75d2895be41a278c50e62f979674c9e507dfa7a0c087c4fd43ccc32357e34c0bcc526fe43bed33e99632c84ea59780f78e7954d8e5430c9acb7d9dd28ac3761515cba6064fe81d3b4541dacfd6fb916735833704a5cb1723f867322fa806a20d5029a608986b5019402035bebf3e099547702409815bd1d3c63072fb0fc216c2186048f1e4ae5288a12a5c9b25f7649899f84c8aedc3721334d7bcdb656f8e3c0f2b7e40b837a15c9d6472b6acb58a39babc65d08e529f2f690ea780f43c35698610351fde4615efafba129b2b619135f8af77c7291483262c5555f4d66173b34c5c7f1c415cd6ab15ae4cef34cf5680e11332c6863d2140f00cc3a337b23afb0080fa54360282086b0c0faaf2bc2a9f7335a96fa8af6a52a1e04eed2e7c337d1e378545ded0d0453b8a16b6d0a90860dfe560528515005ba852a314b4540206a8513e73212c65fb4b35f4ac7050d18bd62a6c720cfda30cb2385d3d5217655db1f344fc34361b83b22d31a040366acbdc28d397254b41c3b1f0d20e0a5db4df6338e78ae09b38f82c71fb0208afbb506461384bf578c607e05ad5a6ddb708b9add5d4d363877659a663827136b4dc1b4012c7035a56bb91e14a3d22b3ac3989f91d78808758d1b5bfdbfc66d3389e3362987e13bf9a9747373c90c0c658b7b832eff19aa2f3667f79bcd073765308fbabf2d612d0445fa1be6280cb9d0ba759d218ae971d3dd5d458c10d14f154109bfb2fd03523ac5748bcd8582dc3be5c28ef4be94cb55fdcb12a6271dbb7f11fd33d61382096588167a2b20b02cc43b88729985073a5b21b8e4bb2c43894d7c88bf111576b3b56f905b1f23f0570c07b475d5f86508c3489f4f2e2d0f3b11bfd6c3c58930483f9345f4f755089848c42361d4b0c0e855935d7f6793f78a68b554358b810cdcdec350376c94486c67fc5d11c0a68873312b40b49bb29aca16e1f3e3ce4da7a9e7aaa6ec1d9932b78d9c12c45e61b5f6faa6ffcb21608fc61bc4180f91d26f9db592c98e532d60c28e9fab794ab8a62c21122397193d8b5b72bf050b07f79df5e14069b56359835e3048f182629328e4a72a1fd0530182c802744611637e93deabc6c3ee30041025026be97ac314eaf7b399b0702cf73848e54f355d766121361398609078057473c2aa46b2fbd7e7a7d6d039615eea23fd223c49a9b5b5fd7b0c6f30c9b0e55fbebced3c90ceb668e6dbd5e6511c19d32c29b5fef7d06cf2ffff7872bd541d0fe70e5991ba3c19e72d5533e6fe9652c21338ced211c7d9e912486b4de29998ef4cca892fe94972b31fa33e781386b75b5d6980a9bfb887d7485d71f6744a6f87bc407ccd03281e10eb1bafd5d9bf279d362e2a49e54187e40abb06e21ed8425135a169ba5b8e1a806951352580ae135dfbbe3395e18ccf67fdb891903934739b56dc0e49e258552dc66d46eadfed9a7ceeabf20d02aee2c8ce4060382474252ccd9bab03d7e8eb77195bb712c19e066153bef5a212f2a450d4a1280d243928f3add450c2544c800b507c8b8ffc5d7f3cd9a4526505d05d04fbfdd0fc1f996ba3f4a797c96b24af37c15859b4bcda9234750fb6acef8dc20893ac5051b3d6aee60f01fc34e3b6753848fdca9b18e461c87f08fb8d67ddce234ca56bbe021f468f964ec1416ba6df0434440140090edd222cb9534830fec026788f43899737771e67552df68fb81d90aa90fcc1149149aaa96c1730829c6856407e5194dd2ec7cfe5fa419c2ea6127039ae188649b2cfccb9faf59f45dc9af76f3cb17c8224e68fb5f81b4556980542a928f9563bebcf3db248cff2183fffff15710432f8691041fa8aceb65b6454e9c375402b599503fb4881a3baa5ba58893cac154575ef0ec8efe35a6eeccb98d081f6d4cf2661b484765ce95bca5bda75fc90e630e355d0dd6d22a5d4c7990931ac160da14f211c33b668edb93cd9c87de3881c47e4b0fab746d0e931600478c9cc2e3cc08eab1ee7cb4e3749ab44e7ab4be15e5b031e58d59b294fbe794fb5760a2ceedd1cfc4343b1c2886b0721945a109384cb00fe6e9bdf09e5e406e757a6f24e659495a11a93382d5425d6fcab1d802303aa1531a120b8f30dd17cac7385bb8455503b2ff0daf8b4dc5353f88f34c894fc0b2fd2920c97432aded8b89fba9a9db4c4f3498043f936a1cb0dee7f5d902b1f6d909b637b8e2f05d31a2640eb1ac556ede22006466014d4a407e3486f94ca676ef39be6399ca24bff48b03ab1da71d1a5e3994d0a8723894bfbbc33969923970df3a9fd0b5084a6cbb41f79a0d3338bb61e7dc2cf795f2fa883aa61d7820c4e2215744dd9cf517cc5921850d1d9aaaaede5fb125e663c830c2414655d6af43a90f9b79eccbc2c009b963b503827c7614ab8824b3289ed8e559ed644a163db18fe66789037eb599be39fb66955a27a4831a59322d39b95b6d571d8fffb5352a0297b449719a5246247ec4c24f40b5ace1c8e76fa1029a47065af4adfc03b2732677f81bf9729ba06380a330cb388c9e4f50a0cf4ceb5ea8b6bdda8df0839de274c0c7a57f7a9173d21832b7f19ee8cfc340eea461ce7956f986f828c91697c5a241cb9efec40a1a0f34a2a63821dbd50a111b368a034823191dbd3b7a9fe8bee53cada1902f2a278efe3f10eecbf8279c2f9b2e7bf542076bf0bb41e9f21e766741f3ecfbd5a38158b1ce884255cc227a7b7196f966b631c228fea918d8dfee020dcf4c40231c0ab6fd7ccf4e7444fb360f2be3c1519a577dae770a14cd90df85490995fa8553fb255ee9807e0c7617c582f82ac56a0d902c8cd58244cddcec23cf2a05a79b474c716d9ea92bc28b0132ec48a3c5257dc7e1d9cc3f760d559b5c12ad75c95497962f9a564b0d9ed29f44f63b2c56169b2151d699e8d2d570d94f5f37898d3d8abde9253354fd146af62ccfd171d9014fd4d142e2e390f3ce2370165a01aff0fe566ec44e3084815cecc85540d84d8a11d0504fbd95f2c2709b87083b3cfffe36f611a4a6b9e4237a350d1ad4b1e0239946d86ce535e9f07def01a5e6d2e65ee59f380e55c9f295478c5589425852fd22eec2d6e555828ffb4212b33ad530c38b76254d2baac6bff5f94d3ba19ff4b35cb1c972c0b538e1adb5da70affc99c99c0613bea6111848054b416d26368c90784d845f0507f89fd058381dc7d6c6bb81dae94d11e3a0de778aca82814fec0b63780fb2b4f480da063411cd66356f87e68780448ed0c1f3836a46e536609d672d7cef1cffa0614a4f6286ab7f3fab0baf595b4c3c2e43f979f4f4a89165c24698f71406b4330a333f6c8ee018420b2b47735295043123459fafeb5886fc044a3805b162714a3436f58264c0713a4be82a7550f37f88cd7f61c0ec27d887285da7ecb4eb32963c8205eff6d5bf532b72976c5f0a24d6d4d2bf4030f04a47a15fb4de2631361fe0895aeacd2028401c5c183223647c1e765e6406542eeac4d979e6a493e389a649af7ddb35fadd32cf1edaeaaf0982ae8131084ae4759e2af1dbd007f7ce00900437be6d8d3559210b3011d1fe52e8485cc5c14ad4aab4c03c7dec4302e7f72abb7fcc799899cec17308151a758b810369c4d53c443cb1278709df6336f84fa39e51d208b4507a31e6f06352dbd99d7dadd86215e47ed645a9b89bdce630cf80fc1fe59dc31eae39010a930965b3b0e0f595347158d683de6888f3284c1fd47b3e79e0fcc299cd4f519ce067a007ae7ee906d639789fedc850e60a7b4be9dc525e3e58b01f24b065c4b21b9011e74030aba77931bec74698557b4768ae41eeb4caa2f530578bf1f9379fb623a27561bba03c7623400ef975ca2e2d6881e0f96fe1e7f9ec0e8f6aeac30f70f848399c6dc9c4e58bf50aacbe566965b257943f6c9ffe210af0cb488488d67b09164d98f3254cc313f7cf8dab1f2e1ed3a7e4a86ad85707d4fe0e7fe483c7f311912e92bee9b17819b53a39c374cfbadf8c3641bae4177aafacf3394af12310f222dc0a67eba49c1475da8607c25f3ee7b1e1e0961c7d319b32ab549c002b93852af7146f5e74aab020446d9a446582a2bc19a730bafcca463fbe0cf2664e10746ddbf0966ec1e327e1f8fa6bb67e18cf849fa810c938695de5f8df98d3004065c787181f4bd8324c59b18972ac5ca92f96c51b4a63ea130712d70a51c49def99feb37312fa6a52e188de88f5446fa4688514bf96f195bfdae4b248445ef5a37e5c0169c7ee42a8e613e71793486bfb24e37bd0d9f0cfb3db61b45ed731edd5c4bd7b6b133f5f3f51fb3a12e9e43db5a23a4c6c787c803791341f10aa083760413724031ec83d5d5c03e9d3585e6a6c87f51ad4db6d678cae14936c09e24fba69e90fe4c2ebed615e254b1d2a25c12b07c1226c0e9fa9112a49cffc9238d3303d3a9a293c5bdec80545e76b911aec6f956d2122d0ee2bee424aee05e0a25a7ff72e3e1c10f590380f82f1e693fb45b1466cbc7e8ee741ca97775c2ae15c1ad0f4a8221c55e82b4e4ddbbb3d88516fdc26969707143e3175f56b07ea8a7d40660ee346a511e0985c6cde95b573dab7c53cb9d32eb18bdb67147b562dd99124d744703492a89dc8cf387ad17a992a6870ee683953c70547f2c70ac44ddc4563fb0c0c23ac7b806a0172a3a74db45378568306ab3036b5348f96ddec344a899b6058179c070cb5f3a478a02d94dbd836a0e2223194e406c2296ceb6dd39667ce62b4c191889ea052f382b9c051c272480111fe287b84c10cf7512a6dd0a601a1cb41545915925a63bd09f9d77a1bc156a7d822e204029363b3c713c5cbef590efd01c4ffe00b816745a37d83b27ab05c3a0c2d6ff800276f3fe502bb3bd7b60b38d32376246a3384554072fe63ec409a0182d588b839d319c680f830583db3e4f5071eaa066689e9e19539d9a12fefffe223288b77600dabde9b2bea871cc1ea2b3318a9699d736f02490d76c1e457aaf45ce318445ce10625b43059694e996ace387580589f9f37944b799337fa38ef9292d2276e0f659471134aaef911514212553779be2ba00816187465e278ba2d03e66cd633f9a274ce882ae971f2d07cb4fde38bf88327aea83d5303011b0263f24630916b796d532e5437179882b0470dbf8d693bbae4015ef28b3d57b5e3b643068dc1d1921291f4f1280a8183532298dffc2501cd3ff0bfb6b0e61d2a59c596f21b98db4d730e155936e98c95c96ac6231b1232e4ed89ce65311fe66199e113f9f69084c31444ae9f106e909bc070d83c1cffc514189c1e0b6763c2732a227a6229407af592772c2b843fb944896ff61161449b6df045ba618d117d8361733198f0963850df3e077aa538571efe279f9c7e006e2c882f5301706ee2bbbe769164cf7d9597d0142d0052641eb43a9ffe76d978384ea8c10050a80021d3c9177fcb29652b4906081d926ea23e749c9272731aff7fd0c271ac4859a5829c5b406a1c363752fecb1a76b201a0df467efd6ffe6adc0debe36ec6d1fc84ccebfa07cb136bbea0f1ef74983bdfc087e050430f5aa395cd8786b609941fbce55ab9f304ba11910a0790685cab24847d85f8bc7a5784a4367ba06690cf1a88acfeddcb7cc44c9797f4f0e5daf9d301c6e702652268530c22df26d14da8768a8951f26849fa1e20015878cb6332d033531b8128233e61094cfc5dd71ba9af36ba6aa1c37b24805a45c3dd302bbc1dc8e9348f9a47540e14016bd5357e7978092497b800a97425363a42454eb04c32c9ac959fb37eb00ed6e31f81b2aa67d9f4930eb31dc2260151d845f9865d2b3a301ce3bef54a977492039eb908512a083087961f90ee568c5e5c60d6e726dda2c3f31c072979e09d8fd6f2365f65ef46399a183511904226d8ec72805582107ff5951d2e0d5c028d29e940fa068c0ca1c238420e53297c31d68f70fb543f347d91afb5d66ef1e8460a1431b638a6b0ae259f7fe8eb03aae9ef1ea4cfcfbac7e7b20b5c46ea8b0a2e88527bf54fd866362ab6a99e466bb029259f35711bc376b2f70edd738b48451f20ee404938821419ee5eace0171b3fd73d57bf0a723152933ccb84d567e79737b33e334dab955cdc03298215a2943ee493d815af83d48ee808a5e508903cc574ea4b52de645a18b0f43cd6b81a15a7f089cc7596adde2ea693381c7eaa2e246b9cbec98bb4e8ea3db8b47e57ef8d3a2eace3e2dcc083f6625f4e86bdbe2d6c57fa8ae4902ae9964c847eb292998d485d3326a7076360b85365edd5b733876abb5e26943481a52b10a1c95f34aed88568b873ef481798fbafe036d5d580c7437cb1a651e2a89d98d9002d0bf6418a271f9808df4b2ceaa8508e6c1d7d58e96d87f6db011395a0b74cb39e066411fef6c8ce7942ef8d8bb826be0b06ecada10e46f7ac25eb7ab0e3339752c8d0784659d72a287ea9a5e3a699977456695a6f9fe40eb8f7269b414cda403ba94f512c332fcea82f1927a5695ea2eb2ce7380ae74a0672ffe7fd2c4a19715a984d518b5be67543c31e42962b4c030fbdfedc5977b03d85294db2578d6561fdd9e0f9cfaf7eb1609bfab67105b227ec43189e449c4f2f17b8175b3afb0087f70786673353a3913cd03240761b5ff91a1e6510499c1f4152a759b1ca39ace773a1f27a5a88bb94a4201a91addf5c2c8587547e454d186b562cf89a41a02c36765565c3d753a2d8127d3908853f5ccc1c35346f22284573695c5695a520ace2d0cd13c1138b1fb10f74487b9a2c7a5e01195a1629d3e5d567a77a2aae2e74e24d2936c2618c63eb5cdeb64f5592cb38175d416c05588f03b287c6e16329fee69c8294db5b5bbb81499d7ef18ddb93144c897253e8330cea3be31bab73de42284fce239597ab7cd5b68cfba057b01aaab0f0d4191c31b407fd8f9c7f04eaca31e5d240c7910663bde4ad478f134d09dca902e6acdd292f2745c73cecea2204a56d0098c32da73eeee41b348d5826109ccfd2397bb73a25ebb7e95537df71cce504f14c219ec525795d2fd5027cea9810aadc77e1b874f9fc4e33ed7b90a4007bbc341493302e4e2cbca2a8229fd2c3db7faecec2b8805bde9d92a29f6a7096cfc05ed5b678566e6c079dddfcc0b6c17541047beb477c4493a1588be177490db134d69a225aa6848b27494f17c3882ea2ee436ac1e981256ccaa70ba1f7a621385694b62bda8c4f6b04c61d6798afdc9cec019392d1242a35c3382b09aab4999e1b383714622f2ab80f275ecc8ea67694f020466aef6ed5a4535f32df47f0478e00194b44b9003f6dff232bdecbdf2a06da35246dfbc0d40becfdd5ecf971f0f408913bf094282fa2272cc5683604945e3eba52231f131c81b1035dcbb8a4292059ceaf92f36877aa15049bacc544d2c9bee4eb1bd01d76861557e646082f118454c37bbc7d08a311b4668f2777912cf882439b47e7d3c08bfdefe31e3effcbddf9e5bf175fd7c1ae85f6436cd817580970b3d8303e33ea128d222e8adb1de246fd9583c0385fe89bbf9af2cd82a38083069a997175fc7e96096052d55620554bd723b28de9a177b0aa0a5928d3d991c7da85a3513b1fffb8c75b5bc2874491ac6affc2a71ef1d639a90bb4c53624139ab8764f60e7470592608a520dfa0289c3be27e2a8f6525a31830aaf887213285eeb4286509c4904f2f5c6058e07c9c5c7886e107fc8b6411ea86bef63c88c863c7d7be52424a0126b8642d83946792de32c6150e9ce9be9d20eada4b47bd24fda102ee8cbc3a870743ab1839f979076b79cffac7d2234db5b345de7f994110bbb873a7058e5ad2fe9d9f0527a4a7b3799f81a06c9ee25c1a4a6317c3c454e9b9bb03360775184c37897db2e23dda4fc5cfbbdd477f564ad48416224ab75742d8d2375773c34325b36cead158372821e3db81a2dc99fc4293b39b183f1a71afbd4faa5e66a0d457f15424ca9c39969a85226b03b1ba8a98b0655a4581c7849bad2b1e5eb09236284779235ec2c0f44d547705298a9076bd32cdbb0a1169529a4780629e8cc291bbe25d98eaca72e934b7ef3a26d60dcebb509b8122d9d3de366b1c81c01e1a3f2ec0556d4759917612ba175b48f47534e592293e50e66dfbd0e1d0373cb3f58a43f3c32408ceba4c2614ff35b72a2cc03166f9866904f7ec19650edc06ca73ef63fc759094ae06a8405144dc22a0480155057169e59897eded975544a3e26dc0ba673a803fd35e16f6ef4695fc554e0c92fd97d3287f368b06ebb41e7d9a5956ceac39f27a82dda86f981519e31f544d844109d5ed58c159e7aa1805461149c604f262a1dd0c2f072f8f5b9b9bd4542cff3050c85b981dbf1731805fee07a4f92bb1828842f34395b90b76834a624690bfd431185026fd090c8dce10ac30ea68502dc8d2d85f836eb747c9bb8b6d16da1cb692f33b77f80c05b250496f3a880dca37c6514d5b5e2cf90d0b18bc31fd27a2c96110b9aacbe2afce417c415778e58e0b9ace5f209696980cc45e51bc292b3d5c247e2c8fffecd214d927aab0fecd0f50b359df4971944891fbefd40345e7f14e833486c126df0c1839032e64fa59280d699eed79f03acc206d6a5340cc1c5deb4204cb8780830497f23522b89fc503e6a8a01d11e83de680bbaed65fbd970c71e2087213c3ee64280bcc1f616a274c11d01f0d81f084c3873bc871d50395e05f658a75915118b0da8281a310fc905488ae03aa89726d74d6ed6da76d6dffcdafd7b4d2fa4a867e9b42cdf71db56c542ccf1270974f1efcd80f70fd463d2cfc03c8e111f2d1232bf6e228123c316ecb60eb6d8f650e9281381d540b29b520be3f921bd314eff9ca241b69d95e78256f1bfcbfe37a9f094716d36af6e1ce36184bc6a4dfb88320ee186f52db245dd50d8af51f489f792494c14efffdb88faa1d9ad1d633b327b7ff6523bbfdfe4274b856bbca9e2847499923738207a399dffb514bba855b75d12c9c57aa2e58db0000210f5ad375d3b697f3dda96f5f78c13bfd6d01a5050e01a2e55cc2695a3f2193820286a688cc144fb9043e7c6772bf2cbd7bb5a7a57fee1c18dbdfaadfa5be0d1adfa55dd3a8480807708ee6e11d9f9dfc5bc682e104795928e56af800b42c9c07a25237b092ba1e93a525ed5b5b39ad6e02ac6b41e136c904dd4592370c322f5eb595ed30fa00a277928dfc765930af1c2936f5ad2425c411980b5bb012e0e240c7d50f16ba990540a765cc1fef3809a0344ce6d083ab8705378fabe14a2e63e12eaef453273a78a7d3fabff1fe6a9ba07e208740ab8ed6e50abe2a85b649e1d3ec2f3191e010b50a7ddffdfb25e53e196775655a1ae707daafc4e9709927eb961faaeb1be21ddde0fab9665774086c34af3beac362a5cb712b786a5e1c8811ef574c5b269946939ed530c5bf42306016b69957dd57d83c88cc32a366c0aacc964c693fa7e03c1e89832f2076ec03995f1f9b2cde66acdffa3ca33776b61176369c78e87b2eeb0a14d7cbbaa597c0ae8e1014660baf06e22a6fc4974772975b7d7d003e6bc6a4cdf4cd5f2a95dcfc8194d93b273e59baeb350935aef906bdb94d1fd3c0781aa8fcb17f3f68c9afe090ba059acf599d2934481eae73717c4354c8c2b4d425ef7073968624c5d91e46322cc23091c58643316acff626f160b9cb770e0d9595d33cb6f44915d7efb6747973ffbf34119bba44d074472e661095012ad94af00463520deb45a6b6b7b6a173b23aef637e4cc0363d43c5ddb43c81936143f7db63f7f7771a611930f9f82a12f3c59b0f72de98bbc75ad33f1823fa872be154b19f16f0fba01ac3d64d46cbfc1850d1b4b5790cd86633b1880b86fc34a8b9f31100950ea0bda3abf2b037e21ee348418df67cc1d056d74125f9c73b42b104b6ad322ffebfe658dc3c0a06af44d73324b5ae59e2bd99d4782ec053ea07513a271ecf8651b25bc3e026bc88a4aa1513a2b4d4e173c1e21c77302ce64be8331c4d5b6203bbccd96dfbf9debb29a167753e06c55ca88550ec186bd20b3d94f7c2af719bc638cac3f8cc6c80220fd5f4be03bab9bb975e5effa4c5eac098c531590ec5eeaa90faec3630671d9e1a454577b01b73bfea67456ae187f0e61a9292612f428ab8c5780a3803b7dc2ec8221181db3876f2c00", 0x2000, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) connect$inet6(r7, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r9, &(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10) 9.251382225s ago: executing program 2 (id=222): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001a0000012cbd7000ffdbdf2500000000163e9fac4306bf09070f5117ba84ec6febc7a67a9d1cc627a71a445e0f0be214828665fb0a07"], 0x14}, 0x1, 0xffffffea}, 0x24008044) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000040)=@id, 0x10) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/182, 0xb6}], 0x1, &(0x7f0000001780)=""/4096, 0x1000}, 0x3}], 0x1, 0x40016000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x1, 0x700, 0x5, 0x9, {{0x2a, 0x4, 0x1, 0x16, 0xa8, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010101, @broadcast, {[@rr={0x7, 0x27, 0x5d, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x14}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0xf8, [@local, @local, @dev={0xac, 0x14, 0x14, 0x1f}]}, @timestamp={0x44, 0x8, 0xa, 0x0, 0x8, [0x9]}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x44, 0x3, [{0x2, 0x10, "66f02811a38a369817b4e47e1e78"}, {0x0, 0xb, "c556492203e0f0363a"}, {0x7, 0x11, "33421ccebb3957985357c185ea9685"}, {0x6, 0xe, "ab77c4376653b16b53189dd2"}, {0x7, 0x4, "7cbb"}]}, @noop, @lsrr={0x83, 0x7, 0xcc, [@empty]}]}}}}}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000680), 0x188200, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x103381) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb4b, 0x200000000002, 0x7, 0x8, 0x6}, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x6, 0x4, 0xd, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = dup3(r6, r5, 0x0) r8 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0xffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f0000000540)=[@free_buffer={0x40086303, r8}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/164, 0xa4, 0x2, 0x2f}, @fda={0x66646185, 0x7, 0x2, 0xe}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}, 0x1400}], 0x0, 0x0, 0x0}) fsmount(r4, 0x0, 0x0) 9.225698286s ago: executing program 0 (id=223): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x1, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x4, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7, 0x0, 0x1}}, 0xfffffffc}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0}) r9 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r9, 0x80345631, 0x0) r10 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a44000000001010902440001010000"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r6, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r8, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) 7.761596756s ago: executing program 4 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1, 0xf}}, './file0\x00'}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x3) syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xee) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bind$802154_raw(r1, &(0x7f00000000c0), 0x14) 7.644464988s ago: executing program 2 (id=227): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0x10, 0x0, &(0x7f00000002c0)="2b01574685d04dca3b0297737ea23748", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0xc}}]}}]}, 0x3c}}, 0x24040094) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x63, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) mlockall(0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) 7.285267347s ago: executing program 3 (id=228): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='spi_set_cs\x00', r0, 0x0, 0x7f}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x42) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x23e69000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0xfffffffa}, 0x8) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(0x0, 0x0, 0xc8) syz_open_dev$dri(0x0, 0x1ff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r5, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) r6 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) 6.090588031s ago: executing program 4 (id=229): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x1, 0x6, 0x9, 0x7}, {0xfc00, 0x0, 0xe, 0x5}, {0x3, 0x7, 0x5, 0x4}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc090) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000340)='pkcs7_test\x00', &(0x7f00000003c0)='^#\xa0,\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRES8=r2], 0x50) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f27, 0x0, 0x4, 0x6, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x8001, 0x1, 0x3ffffe, 0x8, 0x101, 0x1ffffffc, 0x743f, 0x3, 0x40000004, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe65, 0x3, 0x8, 0x4086, 0x0, 0xfffffff5]}) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000002c0)={0x0, &(0x7f0000000300)}, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a810c0b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 6.068642905s ago: executing program 3 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) (fail_nth: 12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 5.873526541s ago: executing program 1 (id=231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.400244323s ago: executing program 0 (id=232): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc880}, 0x0) kcmp(0x0, 0x0, 0x4, r2, r9) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x22020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, r8, 0x25, 0x5, @void}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x28) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x4048010) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) 4.779849284s ago: executing program 4 (id=233): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x8cff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(0x0, 0x0) r5 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="8912687fda07042862c4e31ec5fcc2d028d9218814616e4514a7c3a0235cb26af537e60f6f133b1e5a88fef48443942147e18d733acd91", 0x37, 0xfffffffffffffffc) keyctl$read(0xb, r5, &(0x7f00000003c0)=""/119, 0x77) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x8000) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 4.397377843s ago: executing program 3 (id=234): mount$tmpfs(0xa00, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000000), 0x3200841, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x30]}}}}]}) 4.277073855s ago: executing program 1 (id=235): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) r2 = socket$netlink(0x10, 0x3, 0xf) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB='\x00', @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x1d, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={0x0, 0x24c}, 0x1, 0x0, 0x0, 0x44041}, 0x24004000) sendfile(r1, r0, 0x0, 0x80000000) 3.910333528s ago: executing program 3 (id=236): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}}, 0x0) 3.887397321s ago: executing program 2 (id=237): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1400000000000000290000003400000004000000000000001400000000000000290000003400005d326e3bff0000000018010000000000002900000004000000041f00000000000007100000000102099f000800000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a018005000000000000000900000000000000040000000000000006000000000000000400000000000000000400000000000005020a7e00010005020bf4c910fc0200000000000000000000000000009309e80ee304ecb784ec460000140000000000000029000000340000000000000000000000600100000000000029000000360000005e280000000000000001000001000108000000000000000007380000000303000000020000000000000066090000000000000700000000000000f7ffffffffffffff0100000000000000010000000000000007100000000002070600ff7f00000000000008e2c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca46e1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b8101032bdb8600000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000180000000000000029000000390000000000000000000000220c830a1eaff75a472b08d3b2b0bcae4ef62dc3861f2ecc4ec7bcce70f4bcdf5c717f87a314f00d6a990603d22c62dade66095f7456a3b503e619e338d279605bf1061bfacf9d5f503fe3fd7ec9bad68f6829b71f9fe022b0ae58d2e717b7899b56fbb5afa637256697953a4ac8e28dd538342123edba576972491cf6cd4b89ab9b41def4495858e7dfba74ce06d2e3a68afd712ef6f49518a19162d4338e1c429f7aea5761ea5c7994f08052fec037e030c9943549c28e12bfd54f5b3af04857185c44d3bdb91030ac05916e63dc717b52b0e35a2c9bb246"], 0x310}}], 0x1, 0x810) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x800000000002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 3.018194206s ago: executing program 1 (id=238): openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000380)=@isdn, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/39, 0x27}], 0x1, &(0x7f00000032c0)=""/132, 0x84}, 0xc}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000001bc0)=""/205, 0xcd}, {&(0x7f0000003240)=""/112, 0x70}], 0x2, &(0x7f0000000780)=""/146, 0x92}, 0x5}, {{&(0x7f0000000840)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000006c0)=""/98, 0x62}, {&(0x7f0000000940)=""/46, 0x2e}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/27, 0x1b}, {&(0x7f00000019c0)=""/9, 0x9}], 0x5, &(0x7f00000043c0)=""/4105, 0x1009}, 0x401}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002a80)=""/12, 0xc}, {&(0x7f0000002ac0)=""/156, 0x9c}, {&(0x7f0000002b80)=""/90, 0x5a}], 0x3, &(0x7f0000002c40)=""/254, 0xfe}, 0xa2}, {{&(0x7f0000002d40)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002dc0)=""/125, 0x7d}, {&(0x7f0000002e40)=""/74, 0x4a}, {&(0x7f0000002ec0)=""/93, 0x5d}, {&(0x7f0000002f40)=""/223, 0xdf}], 0x4}, 0x80000000}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = inotify_init() chdir(&(0x7f0000000340)='./cgroup\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r5 = memfd_create(0x0, 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540100001000010000001000ffdbdf25fe"], 0x154}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x10200, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r4}}, 0x30) openat$vsock(0xffffffffffffff9c, &(0x7f00000031c0), 0x200, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x0, 0x4e20, 0x40006, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, {0x2, 0xfff9, 0xbfc, @remote, 0xffffffff}, r4, 0x9dff7fff}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000003200)) 2.901558126s ago: executing program 3 (id=239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newtaction={0x18, 0x58, 0x284f, 0x70bd2c, 0x25dfdbfb, {}, [{0x4}]}, 0x18}}, 0x4000) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x0, 0x8, 0x3, [0x0], [0x800000], [0x6, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3fe, 0x34325241, 0x0, [r5, 0x0, 0x0, r5], [0x2b8, 0xffffffff, 0x0, 0xfffffffc], [0x1], [0x0, 0x0, 0x1, 0x8000000000000001]}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) 2.808856879s ago: executing program 4 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xac2b9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1, 0xf}}, './file0\x00'}) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x3) syz_open_procfs(0x0, &(0x7f0000000300)='net/ipv6_route\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xee) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bind$802154_raw(r1, &(0x7f00000000c0), 0x14) 2.806161168s ago: executing program 0 (id=241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4004820) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xda8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0xfff8, 0x7, 0x8, 0x200}, {0x22, 0x1, 0xb, 0x9, 0x9}, 0x3, 0xfffffffb, 0x67}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.649457651s ago: executing program 3 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, 0x0, &(0x7f0000000280)) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b90101000000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x210804, &(0x7f0000001280)=ANY=[@ANYBLOB='huge=always,huge=within', @ANYRESDEC]) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x210804, &(0x7f0000001280)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=']) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x10012, r5, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 2.223490026s ago: executing program 0 (id=243): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = gettid() ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f0000000180)={[0x5]}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x2, 0x10}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) capset(&(0x7f00000000c0)={0x399f1316}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000000)=0x7fff, &(0x7f0000000080)=0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r9, 0x0, 0x3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) 1.791647728s ago: executing program 1 (id=244): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x4) (async) listen(r2, 0x4) connect$vsock_stream(r1, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={0x0}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8}]}}}]}, 0x3c}}, 0x0) 1.558348073s ago: executing program 1 (id=245): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x8}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @multicast2}, &(0x7f0000000580)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0xff, 0x5, 0x7, 0x448d0, r0, 0xa, '\x00', r1, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0xe}, 0x50) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000005c0)={0x94dd, 0x38, '\x00', 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "1692b21f14904e95c56b35c1c6de315f370cd7b7846178a18cd799bac5aee6a6cdc65af6407d57ec0ba4c9ef5164e6646299ee816ee81dab857de164a7945946", 0x28}, 0x48, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000640)="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"/266, 0x10a, r6) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000440)) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800, 0x5) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x8, 0x3, 0x4, 0x8d}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2b}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}}, 0x0) 1.555544487s ago: executing program 0 (id=246): r0 = openat$uinput(0xffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x44, 0x9, 0x0, 0x0, {0x5}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000044) r3 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000a80)='GPL\x00'}, 0x94) syz_usb_control_io(r3, 0x0, &(0x7f0000000c00)={0x84, &(0x7f00000005c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) write(r4, &(0x7f0000000640)="9e", 0x1) ioctl$COMEDI_RANGEINFO(r4, 0x80106408, &(0x7f00000000c0)={0x10, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x21) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r5, 0x4068aea3, &(0x7f0000000a40)) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x3, {0x6, 0x2, 0x6, 0x4, 0x3, 0x10}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 1.169339917s ago: executing program 4 (id=247): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000), 0x1c) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYBLOB='\x00', @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x1d, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r9, @ANYBLOB="08002dbd7000fddbdf253900000088005a80340003801400030006000700050007fc07002400910701000500070001000000140003fda100000008009900ff00050005000700440000801b0001006003603009480c030b010530031201161824031236043600050007000200000005000700000000001200010001600230096c12480b24300c361600000c000180050007000000000064005a80040001805c0000801400050009000e00f0ff0800010005000000ff03140001000403041b2406030c0c1636120605050605000400020000002700020012094e1010243f3f25223b4b00013a29140c4e3f13051840102952163c263c011f0a1600d0005a80740000801400050003007f00fbff0080ff7f0180040009000500070001000000140003000900090001000000140500100800020005000400000000000500070002000000110001000c1605050b18241618026c004800000014000300090002000010090003006ba609000104050004000100000028000380050004000100000014000500730307000100ff0f0400f8ff2d0f09000500060002000000300002800e0002001913511b1f251856382a0000140003002000000205000000800004000080080005000600000000007c005a8014000180070001003004480005000600010000000c0000800500060001000000180001800c000100006c0403063601060500060002000000400001801d00010036180102120b3012000c021b36360b0b040c0b026c3001000900000005000600020000001400"], 0x24c}, 0x1, 0x0, 0x0, 0x44041}, 0x24004000) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r1, r0, 0x0, 0x80000000) 1.161299028s ago: executing program 1 (id=248): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000286000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000b26000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f0000000100)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000009ba3ab138dad301d84e84f981ca7a522e21a4e7978b7306e98cc1dae6e9ab3d5dbae011b2d09014af9fe90d573b7d706a1a511dfe7fcc472712abb249f99f70461966122e4c10100000000000000eaa785d76c0ac035363532e7fc39fc8e1d882e21be6c65481b1bfe7736", @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r6, @ANYBLOB="0500330001000000"], 0x2c}}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="80330000fa22ffff6007620900b5b0edcb6dd24d8113374723fe1619cfccbffc566562356b858e9870d2a59b6ce5575ec17fed393edd1c6a8686e92055b554a122646c17ab8627d74fac70351fc812df51ad2274144e11af7ef54ddc1746e4f97c51197447f5b01a4dd9c807e2589d30ad54fc"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) prctl$PR_GET_TSC(0x43, 0x0) socket(0x6, 0x3, 0x3) 1.26227ms ago: executing program 4 (id=249): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x184) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="02000000000000000000000004000000"], 0x24, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') creat(0x0, 0x248) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00w\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x86c, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]}) (fail_nth: 4) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@iv={0xa0, 0x117, 0x2, 0x8c, "38bad40dfe28116d5b7b46c5e0746d911bf8e870e71d346e7046bed12ee1c5909d0a1c566f67641aeed288e6d592a1f88e955df945ad638cecb8435be29e79e4ffaaded56500f0dac301df4f6f945de7bc654db1e635c8b0f087894c94bff7ec09531a371db3d2118b895b36f33e7c0243ff8a22539b9311e3399ccab448c7f380fff777b1e0d902c0538863"}, @iv={0x68, 0x117, 0x2, 0x51, "f1efdf9a2545c55c695b9c7d48848a41800cbfc5c3c3355e0875f133341f2451af3d65d52f720d29e28a77bad28af7985343cce37a5c1af6f7f3c4fb86d9c185f8f3968bcaf56599231d92a1a273a17903"}], 0x108, 0x40040}], 0x1, 0x8040) 0s ago: executing program 2 (id=250): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0xffffffffffffffff, 0x2, 0x8}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @multicast2}, &(0x7f0000000580)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0xff, 0x5, 0x7, 0x448d0, r0, 0xa, '\x00', r1, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0xe}, 0x50) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000005c0)={0x94dd, 0x38, '\x00', 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r3, 0x4b4d, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "1692b21f14904e95c56b35c1c6de315f370cd7b7846178a18cd799bac5aee6a6cdc65af6407d57ec0ba4c9ef5164e6646299ee816ee81dab857de164a7945946", 0x28}, 0x48, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000640)="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"/266, 0x10a, r6) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000440)) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$inet6(0xa, 0x800, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x8, 0x3, 0x4, 0x8d}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2b}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 339.875525][ T30] audit: type=1400 audit(1762988834.978:63): avc: denied { mounton } for pid=5837 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 339.899103][ T30] audit: type=1400 audit(1762988835.008:64): avc: denied { mount } for pid=5837 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 339.901701][ T5837] cgroup: Unknown subsys name 'net' [ 339.930266][ T30] audit: type=1400 audit(1762988835.038:65): avc: denied { unmount } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 340.069281][ T5837] cgroup: Unknown subsys name 'cpuset' [ 340.077466][ T5837] cgroup: Unknown subsys name 'rlimit' [ 340.223753][ T30] audit: type=1400 audit(1762988835.328:66): avc: denied { setattr } for pid=5837 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 340.247067][ T30] audit: type=1400 audit(1762988835.328:67): avc: denied { create } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.272412][ T30] audit: type=1400 audit(1762988835.328:68): avc: denied { write } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.295148][ T30] audit: type=1400 audit(1762988835.328:69): avc: denied { read } for pid=5837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.316300][ T30] audit: type=1400 audit(1762988835.358:70): avc: denied { read } for pid=5477 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 340.337265][ T30] audit: type=1400 audit(1762988835.358:71): avc: denied { mounton } for pid=5837 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 340.348059][ T5840] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 340.362099][ T30] audit: type=1400 audit(1762988835.358:72): avc: denied { mount } for pid=5837 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 341.328201][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 344.940656][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 344.940672][ T30] audit: type=1400 audit(1762988840.048:78): avc: denied { create } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.006572][ T30] audit: type=1400 audit(1762988840.048:79): avc: denied { read write } for pid=5847 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 345.025456][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.057196][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.064767][ T30] audit: type=1400 audit(1762988840.048:80): avc: denied { open } for pid=5847 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 345.088954][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.126623][ T30] audit: type=1400 audit(1762988840.088:81): avc: denied { ioctl } for pid=5847 comm="syz-executor" path="socket:[5335]" dev="sockfs" ino=5335 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.153459][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.162135][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.170232][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.178504][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.186127][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.231863][ T5133] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.239684][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.239986][ T30] audit: type=1400 audit(1762988840.308:82): avc: denied { read } for pid=5847 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 345.273356][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.280144][ T30] audit: type=1400 audit(1762988840.308:83): avc: denied { open } for pid=5847 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 345.284891][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.303950][ T30] audit: type=1400 audit(1762988840.308:84): avc: denied { mounton } for pid=5847 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 345.312255][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.361867][ T5133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.371235][ T5133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.379729][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.380543][ T5133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.398133][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.416370][ T5133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.423680][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.432151][ T5133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.439587][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.447438][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.456799][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.467091][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.608539][ T30] audit: type=1400 audit(1762988840.718:85): avc: denied { module_request } for pid=5851 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 345.734481][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 345.816076][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 345.939198][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.946762][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.954092][ T5851] bridge_slave_0: entered allmulticast mode [ 345.961082][ T5851] bridge_slave_0: entered promiscuous mode [ 345.977679][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 345.988272][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.995456][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.002790][ T5851] bridge_slave_1: entered allmulticast mode [ 346.009541][ T5851] bridge_slave_1: entered promiscuous mode [ 346.046044][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 346.112181][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.131218][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.138422][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.146018][ T5847] bridge_slave_0: entered allmulticast mode [ 346.153747][ T5847] bridge_slave_0: entered promiscuous mode [ 346.169404][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.194543][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.202868][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.210107][ T5847] bridge_slave_1: entered allmulticast mode [ 346.216837][ T5847] bridge_slave_1: entered promiscuous mode [ 346.255424][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.273744][ T5851] team0: Port device team_slave_0 added [ 346.280958][ T5851] team0: Port device team_slave_1 added [ 346.290834][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 346.305675][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.321863][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.329150][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.336231][ T5862] bridge_slave_0: entered allmulticast mode [ 346.343320][ T5862] bridge_slave_0: entered promiscuous mode [ 346.382643][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.389955][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.397121][ T5862] bridge_slave_1: entered allmulticast mode [ 346.403772][ T5862] bridge_slave_1: entered promiscuous mode [ 346.447576][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.454530][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.481085][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.496213][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.503486][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.510649][ T5855] bridge_slave_0: entered allmulticast mode [ 346.517391][ T5855] bridge_slave_0: entered promiscuous mode [ 346.525381][ T5847] team0: Port device team_slave_0 added [ 346.539695][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.546712][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.572863][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.587342][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.594452][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.601962][ T5855] bridge_slave_1: entered allmulticast mode [ 346.609069][ T5855] bridge_slave_1: entered promiscuous mode [ 346.616589][ T5847] team0: Port device team_slave_1 added [ 346.624035][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.658081][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.720039][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.746161][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.753212][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.779507][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.791873][ T5862] team0: Port device team_slave_0 added [ 346.798431][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.805540][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.812733][ T5859] bridge_slave_0: entered allmulticast mode [ 346.819508][ T5859] bridge_slave_0: entered promiscuous mode [ 346.828168][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.849230][ T5851] hsr_slave_0: entered promiscuous mode [ 346.855334][ T5851] hsr_slave_1: entered promiscuous mode [ 346.862123][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.869245][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.895276][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.907962][ T5862] team0: Port device team_slave_1 added [ 346.919380][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.926964][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.934179][ T5859] bridge_slave_1: entered allmulticast mode [ 346.940873][ T5859] bridge_slave_1: entered promiscuous mode [ 346.956235][ T5855] team0: Port device team_slave_0 added [ 346.997001][ T5855] team0: Port device team_slave_1 added [ 347.010961][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.018169][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.044313][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.057102][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.067384][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.074318][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.100839][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.135623][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.168546][ T5847] hsr_slave_0: entered promiscuous mode [ 347.174699][ T5847] hsr_slave_1: entered promiscuous mode [ 347.180829][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 347.186645][ T5847] Cannot create hsr debugfs directory [ 347.209442][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.216398][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.242806][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.279409][ T5859] team0: Port device team_slave_0 added [ 347.293329][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.300652][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.327076][ T5133] Bluetooth: hci0: command tx timeout [ 347.327132][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.355276][ T5859] team0: Port device team_slave_1 added [ 347.364380][ T5862] hsr_slave_0: entered promiscuous mode [ 347.370684][ T5862] hsr_slave_1: entered promiscuous mode [ 347.376816][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 347.382599][ T5862] Cannot create hsr debugfs directory [ 347.396979][ T5133] Bluetooth: hci1: command tx timeout [ 347.443231][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.450262][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.476677][ T5133] Bluetooth: hci3: command tx timeout [ 347.476726][ T5852] Bluetooth: hci2: command tx timeout [ 347.488311][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.500582][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.507717][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.533665][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.557513][ T5852] Bluetooth: hci4: command tx timeout [ 347.598092][ T5855] hsr_slave_0: entered promiscuous mode [ 347.604162][ T5855] hsr_slave_1: entered promiscuous mode [ 347.610716][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 347.616524][ T5855] Cannot create hsr debugfs directory [ 347.724827][ T5859] hsr_slave_0: entered promiscuous mode [ 347.731647][ T5859] hsr_slave_1: entered promiscuous mode [ 347.737879][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 347.743583][ T5859] Cannot create hsr debugfs directory [ 347.925326][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.948308][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.969856][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.988060][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 348.027612][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.048434][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.058069][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.082537][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.133405][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 348.144307][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 348.171040][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 348.180502][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 348.231289][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.270705][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.281047][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.290941][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.302133][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.313707][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.341820][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.349189][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.380582][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.387705][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.410018][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.467454][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.483662][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.493989][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.504149][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.513846][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.533338][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.540440][ T5880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.570734][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.577879][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.590839][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.615363][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.642542][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.649663][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.704545][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.711284][ T30] audit: type=1400 audit(1762988843.808:86): avc: denied { sys_module } for pid=5851 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 348.711708][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.761438][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.830956][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.855227][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.862410][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.894440][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.901656][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.978178][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.995163][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.054132][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.073923][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.100826][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.107964][ T5934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.158244][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.165348][ T5934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.222403][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.234693][ T5851] veth0_vlan: entered promiscuous mode [ 349.267056][ T5851] veth1_vlan: entered promiscuous mode [ 349.299270][ T5847] veth0_vlan: entered promiscuous mode [ 349.322544][ T5847] veth1_vlan: entered promiscuous mode [ 349.344601][ T5859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.372551][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.399080][ T5852] Bluetooth: hci0: command tx timeout [ 349.421927][ T5851] veth0_macvtap: entered promiscuous mode [ 349.445648][ T5851] veth1_macvtap: entered promiscuous mode [ 349.455163][ T5847] veth0_macvtap: entered promiscuous mode [ 349.477063][ T5852] Bluetooth: hci1: command tx timeout [ 349.484872][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.502253][ T5847] veth1_macvtap: entered promiscuous mode [ 349.556819][ T5852] Bluetooth: hci3: command tx timeout [ 349.557212][ T5133] Bluetooth: hci2: command tx timeout [ 349.577568][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.588569][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.606325][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.636746][ T5133] Bluetooth: hci4: command tx timeout [ 349.649937][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.662355][ T5862] veth0_vlan: entered promiscuous mode [ 349.668714][ T5935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.681222][ T5935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.690114][ T5935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.706883][ T5855] veth0_vlan: entered promiscuous mode [ 349.716328][ T5935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.725450][ T5935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.740161][ T5862] veth1_vlan: entered promiscuous mode [ 349.749844][ T5935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.758756][ T5935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.775199][ T5935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.790965][ T5855] veth1_vlan: entered promiscuous mode [ 349.835697][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.885104][ T5934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.897182][ T5934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.897658][ T5862] veth0_macvtap: entered promiscuous mode [ 349.943959][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.946046][ T5862] veth1_macvtap: entered promiscuous mode [ 349.959106][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.984284][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.016295][ T5934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.017937][ T5855] veth0_macvtap: entered promiscuous mode [ 350.027062][ T5934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.050718][ T5880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.052857][ T5855] veth1_macvtap: entered promiscuous mode [ 350.065394][ T5880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.071820][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.089217][ T30] audit: type=1400 audit(1762988845.198:87): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/root/syzkaller.6k8SYp/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 350.115136][ T5859] veth0_vlan: entered promiscuous mode [ 350.134980][ T30] audit: type=1400 audit(1762988845.228:88): avc: denied { mount } for pid=5851 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 350.145312][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.177026][ T30] audit: type=1400 audit(1762988845.228:89): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/root/syzkaller.6k8SYp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 350.210545][ T30] audit: type=1400 audit(1762988845.228:90): avc: denied { mount } for pid=5851 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 350.236741][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.244010][ T5935] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.254687][ T5935] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.262908][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 350.266157][ T30] audit: type=1400 audit(1762988845.228:91): avc: denied { mount } for pid=5847 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 350.301252][ T5935] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.306636][ T30] audit: type=1400 audit(1762988845.238:92): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/root/syzkaller.6k8SYp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 350.310297][ T5935] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.346298][ T30] audit: type=1400 audit(1762988845.238:93): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/root/syzkaller.6k8SYp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 350.394188][ T30] audit: type=1400 audit(1762988845.238:94): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 350.416235][ T5935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.430338][ T5935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.443171][ T5859] veth1_vlan: entered promiscuous mode [ 350.454231][ T30] audit: type=1400 audit(1762988845.288:95): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 350.506511][ T30] audit: type=1400 audit(1762988845.288:96): avc: denied { mount } for pid=5851 comm="syz-executor" name="/" dev="gadgetfs" ino=7750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 350.551849][ T5935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.574999][ T5935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.576666][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.593607][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.799668][ T5859] veth0_macvtap: entered promiscuous mode [ 350.840209][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.853123][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.928219][ T5859] veth1_macvtap: entered promiscuous mode [ 351.036223][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.087421][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.089216][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.118733][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.130952][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.132475][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.165515][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.236412][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.253027][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.284352][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.497253][ T5133] Bluetooth: hci0: command tx timeout [ 351.557244][ T5133] Bluetooth: hci1: command tx timeout [ 351.607161][ T5908] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 351.636794][ T5133] Bluetooth: hci2: command tx timeout [ 351.647168][ T5133] Bluetooth: hci3: command tx timeout [ 351.680194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 351.717347][ T5133] Bluetooth: hci4: command tx timeout [ 351.765345][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 351.773207][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 351.787864][ T5974] ceph: No mds server is up or the cluster is laggy [ 351.875875][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.883888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 351.889262][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.907410][ T5908] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 351.916656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 351.916957][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.991695][ T5908] usb 2-1: config 0 descriptor?? [ 352.036863][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.066903][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.360114][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.375598][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.716480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 352.730692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 352.745621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 352.756478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 352.886700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 352.916805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 352.946538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 353.525092][ T5992] Process accounting resumed [ 353.798662][ T5133] Bluetooth: hci0: command tx timeout [ 353.798755][ T5852] Bluetooth: hci1: command tx timeout [ 353.804176][ T5133] Bluetooth: hci3: command tx timeout [ 353.809691][ T5852] Bluetooth: hci2: command tx timeout [ 353.809717][ T5852] Bluetooth: hci4: command tx timeout [ 354.178083][ T42] Process accounting resumed [ 355.826381][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 355.826395][ T30] audit: type=1400 audit(1762988850.928:136): avc: denied { read write } for pid=6017 comm="syz.0.11" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 355.873329][ T30] audit: type=1400 audit(1762988850.978:137): avc: denied { ioctl } for pid=6012 comm="syz.3.12" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 356.144972][ T30] audit: type=1400 audit(1762988850.978:138): avc: denied { create } for pid=6008 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 356.226519][ T42] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 356.285617][ T30] audit: type=1400 audit(1762988851.038:139): avc: denied { open } for pid=6017 comm="syz.0.11" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 356.435719][ T30] audit: type=1400 audit(1762988851.088:140): avc: denied { append } for pid=6017 comm="syz.0.11" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.550790][ T30] audit: type=1400 audit(1762988851.088:141): avc: denied { write } for pid=6012 comm="syz.3.12" name="ptype" dev="proc" ino=4026533409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 356.705542][ T30] audit: type=1400 audit(1762988851.168:142): avc: denied { bind } for pid=6017 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 356.843904][ T5908] usbhid 2-1:0.0: can't add hid device: -71 [ 356.845121][ T30] audit: type=1400 audit(1762988851.168:143): avc: denied { name_bind } for pid=6017 comm="syz.0.11" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 357.255588][ T30] audit: type=1400 audit(1762988851.168:144): avc: denied { node_bind } for pid=6017 comm="syz.0.11" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 357.364904][ T6022] loop6: detected capacity change from 0 to 524288000 [ 357.625314][ T30] audit: type=1400 audit(1762988851.178:145): avc: denied { connect } for pid=6017 comm="syz.0.11" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 357.783706][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 357.798262][ T5908] usb 2-1: USB disconnect, device number 2 [ 357.886265][ T42] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 357.909705][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.917836][ T42] usb 4-1: Product: syz [ 357.925881][ T42] usb 4-1: Manufacturer: syz [ 357.930558][ T42] usb 4-1: SerialNumber: syz [ 358.078278][ T6031] Device name not specified. [ 358.078278][ T6031] [ 358.259525][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 358.264919][ T5854] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 358.876293][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 358.987132][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 359.021171][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 359.033709][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'. [ 359.044325][ T6039] Zero length message leads to an empty skb [ 359.177716][ T6039] netlink: 512 bytes leftover after parsing attributes in process `syz.0.15'. [ 359.252781][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 359.372373][ T42] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 359.422713][ T42] usb 4-1: USB disconnect, device number 2 [ 360.845304][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 360.845323][ T30] audit: type=1326 audit(1762988855.938:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e78f6c9 code=0x7ffc0000 [ 360.970448][ T30] audit: type=1326 audit(1762988855.938:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e78f6c9 code=0x7ffc0000 [ 361.153538][ T30] audit: type=1326 audit(1762988856.008:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd95e78f6c9 code=0x7ffc0000 [ 361.240138][ T30] audit: type=1326 audit(1762988856.008:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e78f6c9 code=0x7ffc0000 [ 361.264418][ T6065] ip6erspan0: entered promiscuous mode [ 361.466944][ T30] audit: type=1326 audit(1762988856.008:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e78f6c9 code=0x7ffc0000 [ 361.572480][ T30] audit: type=1326 audit(1762988856.008:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fd95e78f6c9 code=0x7ffc0000 [ 361.913937][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 362.352306][ T30] audit: type=1326 audit(1762988856.038:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e78f6c9 code=0x7ffc0000 [ 362.357555][ T36] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 362.388416][ T30] audit: type=1326 audit(1762988856.038:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e78f6c9 code=0x7ffc0000 [ 362.411899][ T30] audit: type=1326 audit(1762988856.038:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd95e78f6c9 code=0x7ffc0000 [ 362.451128][ T6072] [U]  [ 362.454593][ T30] audit: type=1326 audit(1762988856.038:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95e78f6c9 code=0x7ffc0000 [ 362.979541][ T6073] ip6erspan0: entered promiscuous mode [ 364.146617][ T5973] Process accounting resumed [ 364.201525][ T5880] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 364.712387][ T6096] Device name not specified. [ 364.712387][ T6096] [ 364.802631][ T5854] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 365.681568][ T6103] netlink: 36 bytes leftover after parsing attributes in process `syz.3.30'. [ 365.716520][ T6103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 366.210659][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 366.210675][ T30] audit: type=1400 audit(1762988861.318:237): avc: denied { read write } for pid=6104 comm="syz.1.28" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 366.268656][ T30] audit: type=1400 audit(1762988861.348:238): avc: denied { open } for pid=6104 comm="syz.1.28" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 366.515840][ T6114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.32'. [ 367.220815][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34'. [ 367.918574][ T30] audit: type=1400 audit(1762988862.988:239): avc: denied { append } for pid=6105 comm="syz.0.29" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 368.115268][ T30] audit: type=1400 audit(1762988863.218:240): avc: denied { create } for pid=6128 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 368.781116][ T30] audit: type=1400 audit(1762988863.618:241): avc: denied { setopt } for pid=6128 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 369.349926][ T6150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.40'. [ 369.505245][ T6152] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.733379][ T6141] ip6erspan0: entered promiscuous mode [ 370.416585][ T30] audit: type=1400 audit(1762988865.398:242): avc: denied { read write } for pid=6148 comm="syz.3.41" name="vbi3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 370.845414][ T30] audit: type=1400 audit(1762988865.398:243): avc: denied { open } for pid=6148 comm="syz.3.41" path="/dev/vbi3" dev="devtmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 370.884028][ T30] audit: type=1400 audit(1762988865.398:244): avc: denied { ioctl } for pid=6148 comm="syz.3.41" path="/dev/vbi3" dev="devtmpfs" ino=966 ioctlcmd=0x562f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 370.972108][ T6171] Device name not specified. [ 370.972108][ T6171] [ 371.071978][ T30] audit: type=1400 audit(1762988865.398:245): avc: denied { write } for pid=6148 comm="syz.3.41" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 371.513317][ T9] Process accounting resumed [ 372.187187][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 372.488820][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.505338][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16673, setting to 1024 [ 372.617015][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 372.676758][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.715103][ T9] usb 1-1: config 0 descriptor?? [ 372.720512][ T30] audit: type=1400 audit(1762988867.818:246): avc: denied { create } for pid=6193 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 372.898635][ T6198] capability: warning: `syz.1.49' uses 32-bit capabilities (legacy support in use) [ 373.317594][ T30] audit: type=1400 audit(1762988867.818:247): avc: denied { connect } for pid=6193 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 373.337907][ T30] audit: type=1400 audit(1762988867.888:248): avc: denied { create } for pid=6192 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 373.426645][ T30] audit: type=1400 audit(1762988868.008:249): avc: denied { create } for pid=6193 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 373.489437][ T30] audit: type=1400 audit(1762988868.008:250): avc: denied { shutdown } for pid=6193 comm="syz.1.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 373.533150][ T9] elecom 0003:056E:00E6.0001: hidraw0: USB HID v0.05 Device [HID 056e:00e6] on usb-dummy_hcd.0-1/input0 [ 373.640162][ T30] audit: type=1400 audit(1762988868.008:251): avc: denied { map } for pid=6193 comm="syz.1.49" path="socket:[9430]" dev="sockfs" ino=9430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 373.883199][ T30] audit: type=1400 audit(1762988868.008:252): avc: denied { read } for pid=6193 comm="syz.1.49" path="socket:[9430]" dev="sockfs" ino=9430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 373.906041][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.395965][ T30] audit: type=1400 audit(1762988868.428:253): avc: denied { shutdown } for pid=6192 comm="syz.3.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 374.416716][ T30] audit: type=1400 audit(1762988868.598:254): avc: denied { create } for pid=6199 comm="syz.3.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 374.439931][ T30] audit: type=1400 audit(1762988868.598:255): avc: denied { read } for pid=6199 comm="syz.3.51" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 374.625024][ T9] usb 1-1: USB disconnect, device number 2 [ 375.137149][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 375.985720][ T9] Process accounting resumed [ 376.487456][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 376.864353][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.59'. [ 377.239010][ T6242] capability: warning: `syz.3.60' uses deprecated v2 capabilities in a way that may be insecure [ 377.536712][ T5957] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 377.557450][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 378.273487][ T5958] Process accounting resumed [ 378.315688][ T5957] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 378.343384][ T5957] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 20490, setting to 64 [ 378.367711][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 378.394584][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 378.428174][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.434857][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.484353][ T5957] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.506111][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 378.531333][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 378.550219][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 378.568924][ T5957] usb 5-1: SerialNumber: syz [ 378.587618][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 378.649932][ T6243] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 378.662050][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.727514][ T5957] cdc_acm 5-1:1.0: skipping garbage [ 378.739623][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 378.783754][ T5957] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 378.798682][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.898537][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 378.898547][ T30] audit: type=1400 audit(1762988874.008:267): avc: denied { unmount } for pid=5859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 378.993574][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 379.076503][ T30] audit: type=1400 audit(1762988874.038:268): avc: denied { setopt } for pid=6238 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 379.099303][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 379.105111][ T9] usbtmc 1-1:16.0: can't read capabilities [ 379.117673][ T5958] usb 5-1: USB disconnect, device number 2 [ 379.144706][ T30] audit: type=1400 audit(1762988874.038:269): avc: denied { accept } for pid=6238 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 379.432426][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.453549][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.484772][ T30] audit: type=1400 audit(1762988874.038:270): avc: denied { write } for pid=6238 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 379.555153][ T30] audit: type=1400 audit(1762988874.038:271): avc: denied { read } for pid=6238 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 379.600646][ T977] usb 1-1: USB disconnect, device number 3 [ 379.616758][ T6245] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 379.704685][ T30] audit: type=1400 audit(1762988874.128:272): avc: denied { write } for pid=6238 comm="syz.4.62" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 379.856536][ T30] audit: type=1400 audit(1762988874.638:273): avc: denied { write } for pid=6244 comm="syz.0.63" name="usbtmc0" dev="devtmpfs" ino=2801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 379.974242][ T30] audit: type=1400 audit(1762988875.078:274): avc: denied { read } for pid=6271 comm="syz.2.70" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 380.072078][ T30] audit: type=1400 audit(1762988875.078:275): avc: denied { open } for pid=6271 comm="syz.2.70" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 380.096357][ T30] audit: type=1400 audit(1762988875.078:276): avc: denied { ioctl } for pid=6271 comm="syz.2.70" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 380.638849][ T6287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.969884][ T6292] process 'syz.2.76' launched '/dev/fd/5' with NULL argv: empty string added [ 382.241508][ T6298] fuse: Bad value for 'fd' [ 382.331035][ T6302] ip6erspan0: entered promiscuous mode [ 384.081401][ T6325] lo speed is unknown, defaulting to 1000 [ 384.087771][ T6325] lo speed is unknown, defaulting to 1000 [ 384.094497][ T6325] lo speed is unknown, defaulting to 1000 [ 384.100286][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 384.100296][ T30] audit: type=1400 audit(1762988879.188:285): avc: denied { create } for pid=6322 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 384.150678][ T6325] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 384.165845][ T30] audit: type=1400 audit(1762988879.188:286): avc: denied { write } for pid=6322 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 384.190775][ T6325] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 384.296877][ T6325] lo speed is unknown, defaulting to 1000 [ 384.310334][ T6325] lo speed is unknown, defaulting to 1000 [ 384.328349][ T6325] lo speed is unknown, defaulting to 1000 [ 384.336347][ T6325] lo speed is unknown, defaulting to 1000 [ 384.460702][ T6325] lo speed is unknown, defaulting to 1000 [ 386.102222][ T30] audit: type=1400 audit(1762988881.208:287): avc: denied { ioctl } for pid=6344 comm="syz.3.92" path="socket:[9109]" dev="sockfs" ino=9109 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 386.556885][ T6330] FAULT_INJECTION: forcing a failure. [ 386.556885][ T6330] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 386.741927][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.0.85 Not tainted syzkaller #0 PREEMPT(full) [ 386.741952][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.741961][ T6330] Call Trace: [ 386.741967][ T6330] [ 386.741974][ T6330] dump_stack_lvl+0x16c/0x1f0 [ 386.742008][ T6330] should_fail_ex+0x512/0x640 [ 386.742032][ T6330] _copy_from_user+0x2e/0xd0 [ 386.742055][ T6330] io_uring_setup+0xb4/0x2170 [ 386.742085][ T6330] ? find_held_lock+0x2b/0x80 [ 386.742107][ T6330] ? __pfx_io_uring_setup+0x10/0x10 [ 386.742131][ T6330] ? avc_has_perm_noaudit+0x117/0x3b0 [ 386.742159][ T6330] ? avc_has_perm_noaudit+0x149/0x3b0 [ 386.742194][ T6330] ? xfd_validate_state+0x61/0x180 [ 386.742219][ T6330] ? __pfx_ksys_write+0x10/0x10 [ 386.742241][ T6330] __x64_sys_io_uring_setup+0xc2/0x170 [ 386.742269][ T6330] do_syscall_64+0xcd/0xfa0 [ 386.742286][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.742303][ T6330] RIP: 0033:0x7fd702d8f6c9 [ 386.742317][ T6330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.742331][ T6330] RSP: 002b:00007fd703ba3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 386.742347][ T6330] RAX: ffffffffffffffda RBX: 00007fd702fe5fa0 RCX: 00007fd702d8f6c9 [ 386.742357][ T6330] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000001b7b [ 386.742367][ T6330] RBP: 00007fd703ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 386.742376][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.742385][ T6330] R13: 00007fd702fe6038 R14: 00007fd702fe5fa0 R15: 00007ffd16bfa538 [ 386.742410][ T6330] [ 386.911794][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.759932][ T30] audit: type=1400 audit(1762988882.858:288): avc: denied { write } for pid=6359 comm="syz.4.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 388.140992][ T30] audit: type=1400 audit(1762988883.018:289): avc: denied { write } for pid=6364 comm="syz.0.96" path="socket:[9798]" dev="sockfs" ino=9798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 388.196731][ T977] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 388.771313][ T977] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 388.789414][ T977] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 388.825310][ T977] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 388.872817][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.911052][ T6367] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 388.929009][ T977] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 389.828854][ T30] audit: type=1400 audit(1762988884.938:290): avc: denied { mount } for pid=6380 comm="syz.0.101" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 389.831347][ T6382] overlayfs: workdir and upperdir must be separate subtrees [ 390.052702][ T30] audit: type=1400 audit(1762988885.118:291): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 390.878976][ T5957] usb 5-1: USB disconnect, device number 3 [ 390.916743][ T30] audit: type=1400 audit(1762988885.958:292): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 391.357344][ T30] audit: type=1400 audit(1762988886.458:293): avc: denied { map } for pid=6394 comm="syz.4.105" path="/dev/comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 391.502464][ T30] audit: type=1400 audit(1762988886.458:294): avc: denied { name_bind } for pid=6394 comm="syz.4.105" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 392.711303][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 392.776512][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 393.019770][ T9] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 393.028364][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.099681][ T9] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 393.121249][ T9] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 393.146137][ T9] usb 2-1: Manufacturer: syz [ 393.166277][ T9] usb 2-1: config 0 descriptor?? [ 393.198330][ T5908] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 393.292294][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.468395][ T5908] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 393.481092][ T5908] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 393.493632][ T5908] usb 4-1: Manufacturer: syz [ 393.508783][ T5908] usb 4-1: config 0 descriptor?? [ 393.646710][ T9] rc_core: IR keymap rc-hauppauge not found [ 393.664144][ T9] Registered IR keymap rc-empty [ 393.675895][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 393.698078][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 393.761956][ T5908] rc_core: IR keymap rc-hauppauge not found [ 393.768417][ T5908] Registered IR keymap rc-empty [ 393.776989][ T5908] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 393.790142][ T5908] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input8 [ 393.817323][ T6439] Bluetooth: MGMT ver 1.23 [ 393.821959][ T30] audit: type=1400 audit(1762988888.928:295): avc: denied { bind } for pid=6411 comm="syz.1.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 393.962299][ T30] audit: type=1400 audit(1762988888.928:296): avc: denied { write } for pid=6411 comm="syz.1.109" path="socket:[9922]" dev="sockfs" ino=9922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 395.475950][ T5957] usb 4-1: USB disconnect, device number 3 [ 395.554543][ T5908] usb 2-1: USB disconnect, device number 3 [ 395.923324][ T30] audit: type=1400 audit(1762988891.008:297): avc: denied { connect } for pid=6450 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 396.511239][ T30] audit: type=1400 audit(1762988891.008:298): avc: denied { write } for pid=6450 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 396.919279][ T6469] Device name not specified. [ 396.919279][ T6469] [ 397.038491][ T5854] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 397.628697][ T6475] netlink: 36 bytes leftover after parsing attributes in process `syz.1.119'. [ 397.982193][ T6465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.026341][ T6474] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 398.035084][ T6474] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 398.266767][ T5957] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 398.266788][ T5908] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 398.472545][ T30] audit: type=1400 audit(1762988893.558:299): avc: denied { shutdown } for pid=6476 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 398.556517][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 398.570139][ T5908] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 398.580561][ T5908] usb 1-1: config 0 has no interface number 0 [ 398.588677][ T5908] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.608922][ T5957] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 398.617774][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.628977][ T5908] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 398.651406][ T5957] usb 4-1: config 0 has no interface number 0 [ 398.651935][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.665778][ T5908] usb 1-1: Product: syz [ 398.670065][ T5908] usb 1-1: Manufacturer: syz [ 398.670456][ T5957] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255 [ 398.675197][ T5908] usb 1-1: SerialNumber: syz [ 398.704339][ T5957] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 398.705442][ T5908] usb 1-1: config 0 descriptor?? [ 398.727456][ T5957] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 398.736872][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.744872][ T5957] usb 4-1: Product: syz [ 398.991846][ T5957] usb 4-1: Manufacturer: syz [ 398.997032][ T5957] usb 4-1: SerialNumber: syz [ 399.002070][ T5908] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 399.004241][ T5957] usb 4-1: config 0 descriptor?? [ 399.057614][ T5908] em28xx 1-1:0.132: Video interface 132 found: [ 399.078663][ T6480] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 399.100079][ T5957] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 399.136533][ T977] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 399.145955][ T5957] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 399.186016][ T5908] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 399.216086][ T5957] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 399.327171][ T977] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 399.339181][ T5908] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 399.363360][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.388665][ T5908] em28xx 1-1:0.132: board has no eeprom [ 399.418131][ T977] usb 5-1: config 0 descriptor?? [ 399.454353][ T977] usb 5-1: selecting invalid altsetting 1 [ 399.460392][ T5908] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 399.475982][ T977] flexcop_usb: set interface failed. [ 399.485432][ T6480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.493998][ T5908] em28xx 1-1:0.132: analog set to bulk mode. [ 399.502469][ T977] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 399.513553][ T42] em28xx 1-1:0.132: Registering V4L2 extension [ 399.524947][ T5908] usb 1-1: USB disconnect, device number 4 [ 399.582082][ T6480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.632637][ T6487] fuse: Unknown parameter '00000000000000000000' [ 399.640269][ T5908] em28xx 1-1:0.132: Disconnecting em28xx [ 399.643488][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 399.731137][ T6502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.131'. [ 400.110753][ T5992] usb 5-1: USB disconnect, device number 4 [ 400.182568][ T977] usb 4-1: USB disconnect, device number 4 [ 400.215300][ T977] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 400.282664][ T977] cyberjack 4-1:0.69: device disconnected [ 400.343372][ T42] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 400.353701][ T42] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 400.362864][ T42] em28xx 1-1:0.132: No AC97 audio processor [ 400.372774][ T42] usb 1-1: Decoder not found [ 400.396723][ T42] em28xx 1-1:0.132: failed to create media graph [ 400.417285][ T42] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 400.424075][ T30] audit: type=1400 audit(1762988895.528:300): avc: denied { setopt } for pid=6507 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 400.426024][ T30] audit: type=1400 audit(1762988895.528:301): avc: denied { ioctl } for pid=6507 comm="syz.2.133" path="socket:[10325]" dev="sockfs" ino=10325 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 400.449571][ T42] em28xx 1-1:0.132: Remote control support is not available for this card. [ 400.481382][ T5908] em28xx 1-1:0.132: Closing input extension [ 400.505091][ T5908] em28xx 1-1:0.132: Freeing device [ 400.636932][ T42] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 400.786638][ T5992] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 400.856702][ T5908] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 400.905041][ T42] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 400.915157][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.926057][ T42] usb 2-1: Product: syz [ 400.930801][ T42] usb 2-1: Manufacturer: syz [ 400.938524][ T42] usb 2-1: SerialNumber: syz [ 400.977618][ T5992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 401.040218][ T42] usb 2-1: config 0 descriptor?? [ 401.049487][ T5992] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6 [ 401.066579][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 401.088913][ T5908] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 401.106758][ T5992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 15972, setting to 64 [ 401.123315][ T5908] usb 1-1: config 0 has no interface number 0 [ 401.136767][ T5908] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 401.160202][ T5992] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 401.161401][ T6517] Illegal XDP return value 3493689534 on prog (id 32) dev syz_tun, expect packet loss! [ 401.184677][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.193928][ T5908] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 401.213203][ T5992] usb 3-1: Product: syz [ 401.217738][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.227838][ T5992] usb 3-1: Manufacturer: syz [ 401.232481][ T5992] usb 3-1: SerialNumber: syz [ 401.239095][ T5908] usb 1-1: Product: syz [ 401.243904][ T5908] usb 1-1: Manufacturer: syz [ 401.265703][ T5992] usb 3-1: config 0 descriptor?? [ 401.271458][ T5908] usb 1-1: SerialNumber: syz [ 401.273889][ T5957] usb 2-1: USB disconnect, device number 4 [ 401.300120][ T5908] usb 1-1: config 0 descriptor?? [ 401.306341][ T5992] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 84, bLength 9, bSynchAddress 0c [ 401.330697][ T5908] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 401.348649][ T5908] em28xx 1-1:0.132: Video interface 132 found: [ 401.399348][ T30] audit: type=1400 audit(1762988896.508:302): avc: denied { read } for pid=6514 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 401.436033][ T6522] Device name not specified. [ 401.436033][ T6522] [ 401.573373][ T30] audit: type=1400 audit(1762988896.678:303): avc: denied { write } for pid=6507 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 401.599102][ T5854] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 402.260794][ T5908] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 402.366045][ T5908] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 402.396958][ T5908] em28xx 1-1:0.132: board has no eeprom [ 402.411574][ T5992] usb 3-1: USB disconnect, device number 2 [ 402.503208][ T5908] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 402.986464][ T5908] em28xx 1-1:0.132: analog set to bulk mode. [ 402.993877][ T977] em28xx 1-1:0.132: Registering V4L2 extension [ 403.088150][ T6534] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 403.103188][ T30] audit: type=1400 audit(1762988898.188:304): avc: denied { create } for pid=6528 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 403.133636][ T152] Bluetooth: hci5: Frame reassembly failed (-84) [ 403.217155][ T5908] usb 1-1: USB disconnect, device number 5 [ 403.238582][ T5908] em28xx 1-1:0.132: Disconnecting em28xx [ 403.252918][ T30] audit: type=1400 audit(1762988898.188:305): avc: denied { setopt } for pid=6528 comm="syz.3.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 403.409575][ T6542] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 403.923298][ T30] audit: type=1400 audit(1762988899.028:306): avc: denied { create } for pid=6541 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 404.053245][ T30] audit: type=1400 audit(1762988899.038:307): avc: denied { bind } for pid=6541 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 404.161712][ T30] audit: type=1400 audit(1762988899.238:308): avc: denied { write } for pid=6541 comm="syz.4.142" path="socket:[10094]" dev="sockfs" ino=10094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 404.184892][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.510626][ T977] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 404.872772][ T977] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 404.921293][ T30] audit: type=1400 audit(1762988899.558:309): avc: denied { read } for pid=6541 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 404.922333][ T977] em28xx 1-1:0.132: No AC97 audio processor [ 405.156521][ T5133] Bluetooth: hci5: command 0x1003 tx timeout [ 405.164677][ T5854] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 405.213884][ T977] usb 1-1: Decoder not found [ 405.268512][ T977] em28xx 1-1:0.132: failed to create media graph [ 405.512026][ T977] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 405.531109][ T977] em28xx 1-1:0.132: Remote control support is not available for this card. [ 405.539993][ T5908] em28xx 1-1:0.132: Closing input extension [ 405.586964][ T5908] em28xx 1-1:0.132: Freeing device [ 406.088445][ T30] audit: type=1400 audit(1762988901.178:310): avc: denied { mount } for pid=6573 comm="syz.0.150" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 406.240768][ T6571] Device name not specified. [ 406.240768][ T6571] [ 406.338917][ T5854] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 406.525182][ T6581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.452851][ T5957] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 407.861798][ T6600] netlink: 'syz.3.155': attribute type 29 has an invalid length. [ 407.870136][ T6600] netlink: 'syz.3.155': attribute type 3 has an invalid length. [ 407.878345][ T6600] netlink: 76 bytes leftover after parsing attributes in process `syz.3.155'. [ 408.126512][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 408.139772][ T5957] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 408.150180][ T5957] usb 2-1: config 0 has no interface number 0 [ 408.172650][ T5957] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.202901][ T5957] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 408.234558][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.369756][ T5957] usb 2-1: Product: syz [ 408.383217][ T5957] usb 2-1: Manufacturer: syz [ 408.393755][ T5957] usb 2-1: SerialNumber: syz [ 408.407427][ T5957] usb 2-1: config 0 descriptor?? [ 408.501464][ T6610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.879182][ T5957] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 408.889293][ T5957] em28xx 2-1:0.132: Video interface 132 found: [ 409.471044][ T5957] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 409.506504][ T30] audit: type=1400 audit(1762988904.608:311): avc: denied { read } for pid=6611 comm="syz.4.159" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 409.540867][ T30] audit: type=1400 audit(1762988904.608:312): avc: denied { open } for pid=6611 comm="syz.4.159" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 409.572701][ T5957] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 409.671411][ T6619] netlink: 36 bytes leftover after parsing attributes in process `syz.0.158'. [ 409.683232][ T6619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.141926][ T30] audit: type=1400 audit(1762988904.628:313): avc: denied { ioctl } for pid=6611 comm="syz.4.159" path="socket:[10596]" dev="sockfs" ino=10596 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 410.166441][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.183451][ T5957] em28xx 2-1:0.132: board has no eeprom [ 410.260378][ T30] audit: type=1400 audit(1762988904.778:314): avc: denied { read } for pid=6608 comm="syz.0.158" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.346537][ T5957] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 410.475207][ T5957] em28xx 2-1:0.132: analog set to bulk mode. [ 410.571473][ T30] audit: type=1400 audit(1762988904.778:315): avc: denied { open } for pid=6608 comm="syz.0.158" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.577420][ T5958] em28xx 2-1:0.132: Registering V4L2 extension [ 410.668453][ T5957] usb 2-1: USB disconnect, device number 5 [ 410.687537][ T6633] netlink: 348 bytes leftover after parsing attributes in process `syz.4.162'. [ 410.848805][ T5957] em28xx 2-1:0.132: Disconnecting em28xx [ 411.084120][ T6630] tipc: Enabling of bearer rejected, failed to enable media [ 411.112105][ T30] audit: type=1400 audit(1762988904.778:316): avc: denied { ioctl } for pid=6608 comm="syz.0.158" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 411.136393][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.218330][ T6637] syzkaller0: entered promiscuous mode [ 411.223875][ T6637] syzkaller0: entered allmulticast mode [ 411.346242][ T30] audit: type=1400 audit(1762989161.832:317): avc: denied { ioctl } for pid=6625 comm="syz.4.162" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 411.371500][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.579042][ T5958] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 411.592670][ T5958] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 411.600032][ T5958] em28xx 2-1:0.132: No AC97 audio processor [ 412.028387][ T30] audit: type=1400 audit(1762989162.452:318): avc: denied { sys_module } for pid=6617 comm="syz.2.161" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 412.049289][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.062184][ T5958] usb 2-1: Decoder not found [ 412.066982][ T5958] em28xx 2-1:0.132: failed to create media graph [ 412.074406][ T5958] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 412.092961][ T5958] em28xx 2-1:0.132: Remote control support is not available for this card. [ 412.116757][ T5957] em28xx 2-1:0.132: Closing input extension [ 412.129620][ T5957] em28xx 2-1:0.132: Freeing device [ 412.181087][ T30] audit: type=1800 audit(1762989162.662:319): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.164" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 412.469332][ T6657] Device name not specified. [ 412.469332][ T6657] [ 413.116146][ T30] audit: type=1400 audit(1762989164.212:320): avc: denied { append } for pid=6658 comm="syz.1.167" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 413.816858][ T5854] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 414.086096][ T6678] /dev/nullb0: Can't open blockdev [ 414.343260][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.171'. [ 414.824442][ T6099] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 415.094500][ T6686] FAULT_INJECTION: forcing a failure. [ 415.094500][ T6686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.129239][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.0.172 Not tainted syzkaller #0 PREEMPT(full) [ 415.129261][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.129269][ T6686] Call Trace: [ 415.129275][ T6686] [ 415.129281][ T6686] dump_stack_lvl+0x16c/0x1f0 [ 415.129310][ T6686] should_fail_ex+0x512/0x640 [ 415.129333][ T6686] _copy_from_iter+0x29f/0x1720 [ 415.129356][ T6686] ? __alloc_skb+0x200/0x380 [ 415.129375][ T6686] ? __pfx__copy_from_iter+0x10/0x10 [ 415.129394][ T6686] ? netlink_autobind.isra.0+0x158/0x370 [ 415.129426][ T6686] netlink_sendmsg+0x820/0xdd0 [ 415.129454][ T6686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.129486][ T6686] ____sys_sendmsg+0xa98/0xc70 [ 415.129503][ T6686] ? copy_msghdr_from_user+0x10a/0x160 [ 415.129523][ T6686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.129547][ T6686] ___sys_sendmsg+0x134/0x1d0 [ 415.129571][ T6686] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.129590][ T6686] ? __lock_acquire+0x622/0x1c90 [ 415.129633][ T6686] __sys_sendmsg+0x16d/0x220 [ 415.129668][ T6686] ? __pfx___sys_sendmsg+0x10/0x10 [ 415.129704][ T6686] do_syscall_64+0xcd/0xfa0 [ 415.129722][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.129738][ T6686] RIP: 0033:0x7fd702d8f6c9 [ 415.129752][ T6686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.129767][ T6686] RSP: 002b:00007fd703ba3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.129784][ T6686] RAX: ffffffffffffffda RBX: 00007fd702fe5fa0 RCX: 00007fd702d8f6c9 [ 415.129794][ T6686] RDX: 0000000004000000 RSI: 0000200000007a40 RDI: 0000000000000003 [ 415.129804][ T6686] RBP: 00007fd703ba3090 R08: 0000000000000000 R09: 0000000000000000 [ 415.129813][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.129822][ T6686] R13: 00007fd702fe6038 R14: 00007fd702fe5fa0 R15: 00007ffd16bfa538 [ 415.129847][ T6686] [ 415.326734][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.497968][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 415.497982][ T30] audit: type=1400 audit(1762989166.612:326): avc: denied { write } for pid=6667 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 415.504769][ T6681] netlink: 'syz.3.168': attribute type 1 has an invalid length. [ 415.661802][ T6681] bond1: entered promiscuous mode [ 415.668789][ T6681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.025282][ T30] audit: type=1400 audit(1762989167.132:327): avc: denied { read } for pid=6698 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 416.045605][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.228381][ T30] audit: type=1326 audit(1762989168.342:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7f98f6c9 code=0x7ffc0000 [ 417.272186][ T6712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.179'. [ 417.313787][ T30] audit: type=1326 audit(1762989168.342:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7f98f6c9 code=0x7ffc0000 [ 417.344715][ T30] audit: type=1326 audit(1762989168.342:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8a7f98f6c9 code=0x7ffc0000 [ 417.377399][ T30] audit: type=1326 audit(1762989168.342:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7f98f6c9 code=0x7ffc0000 [ 417.441355][ T30] audit: type=1326 audit(1762989168.342:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7f98f6c9 code=0x7ffc0000 [ 417.464606][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.542885][ T30] audit: type=1326 audit(1762989168.342:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f8a7f98f6c9 code=0x7ffc0000 [ 417.566137][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.583600][ T30] audit: type=1326 audit(1762989168.342:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7f98f6c9 code=0x7ffc0000 [ 417.584260][ T6722] lo speed is unknown, defaulting to 1000 [ 417.635824][ T30] audit: type=1326 audit(1762989168.342:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.4.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a7f98f6c9 code=0x7ffc0000 [ 417.816021][ T6715] netlink: 36 bytes leftover after parsing attributes in process `syz.1.180'. [ 418.647901][ T5916] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 419.094609][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.117394][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.146578][ T5916] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 419.161995][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.201010][ T5916] usb 4-1: config 0 descriptor?? [ 419.519400][ T5916] usbhid 4-1:0.0: can't add hid device: -71 [ 419.527275][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 419.642121][ T5916] usb 4-1: USB disconnect, device number 5 [ 420.177115][ T5916] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 420.318210][ T5992] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 420.384621][ T5916] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 420.400574][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.417072][ T5916] usb 5-1: config 0 descriptor?? [ 420.423798][ T5916] usb 5-1: selecting invalid altsetting 1 [ 420.429772][ T5916] flexcop_usb: set interface failed. [ 420.438297][ T5916] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 420.487741][ T5992] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 420.511055][ T5992] usb 2-1: config 0 interface 0 has no altsetting 0 [ 420.563179][ T5992] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 420.572605][ T5992] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 420.586476][ T5992] usb 2-1: Product: syz [ 420.590659][ T5992] usb 2-1: Manufacturer: syz [ 420.628819][ T6759] fuse: Unknown parameter 'user00000000000000000000' [ 420.640211][ T5992] usb 2-1: SerialNumber: syz [ 420.650489][ T5916] usb 5-1: USB disconnect, device number 5 [ 420.667394][ T5992] usb 2-1: config 0 descriptor?? [ 420.682588][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 420.682601][ T30] audit: type=1400 audit(1762989171.792:420): avc: denied { setopt } for pid=6762 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 420.712716][ T5992] usb 2-1: selecting invalid altsetting 0 [ 420.735029][ T30] audit: type=1400 audit(1762989171.792:421): avc: denied { bind } for pid=6762 comm="syz.3.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 420.877701][ T30] audit: type=1400 audit(1762989171.992:422): avc: denied { append } for pid=6768 comm="syz.2.191" name="media2" dev="devtmpfs" ino=935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 421.040384][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 421.052377][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 421.061795][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 421.485660][ T5958] usb 2-1: USB disconnect, device number 6 [ 421.871342][ T6784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.301541][ T6787] Device name not specified. [ 422.301541][ T6787] [ 422.415429][ T5854] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 424.758046][ T152] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 425.221745][ T6823] netlink: 'syz.4.206': attribute type 10 has an invalid length. [ 425.266098][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 425.274579][ T6816] netlink: 512 bytes leftover after parsing attributes in process `syz.1.203'. [ 425.290144][ T6826] Device name not specified. [ 425.290144][ T6826] [ 425.379925][ T5854] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 425.927851][ T6823] macvlan0: entered promiscuous mode [ 425.949142][ T6823] macvlan0: entered allmulticast mode [ 426.011770][ T6823] veth1_vlan: entered allmulticast mode [ 426.085014][ T6823] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 426.109586][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 426.474581][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.210'. [ 428.531144][ T30] audit: type=1400 audit(1762989179.272:423): avc: denied { map } for pid=6858 comm="syz.2.215" path="socket:[11764]" dev="sockfs" ino=11764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 428.728896][ T6864] netlink: 'syz.0.214': attribute type 142 has an invalid length. [ 428.737666][ T30] audit: type=1400 audit(1762989179.762:424): avc: denied { setopt } for pid=6863 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 428.820202][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.0.214'. [ 430.523348][ T30] audit: type=1400 audit(1762989181.082:425): avc: denied { create } for pid=6875 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 430.598780][ T6878] Device name not specified. [ 430.598780][ T6878] [ 430.612949][ T6874] netlink: 36 bytes leftover after parsing attributes in process `syz.3.216'. [ 430.698822][ T30] audit: type=1400 audit(1762989181.102:426): avc: denied { create } for pid=6875 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 430.830362][ T5854] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 430.839929][ T30] audit: type=1400 audit(1762989181.112:427): avc: denied { connect } for pid=6875 comm="syz.0.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 430.859744][ T30] audit: type=1400 audit(1762989181.122:428): avc: denied { write } for pid=6875 comm="syz.0.219" path="socket:[11810]" dev="sockfs" ino=11810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 430.882951][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.342729][ T30] audit: type=1400 audit(1762989182.442:429): avc: denied { connect } for pid=6891 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 431.384332][ T6874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.396029][ T30] audit: type=1400 audit(1762989182.442:430): avc: denied { read } for pid=6891 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 431.438733][ T6898] binder: 6891:6898 ioctl c0306201 0 returned -14 [ 431.450392][ T6893] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 431.464385][ T6899] syz.1.224 uses obsolete (PF_INET,SOCK_PACKET) [ 431.471916][ T30] audit: type=1400 audit(1762989182.442:431): avc: denied { read write } for pid=6891 comm="syz.2.222" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 431.517197][ T30] audit: type=1400 audit(1762989182.442:432): avc: denied { open } for pid=6891 comm="syz.2.222" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 431.696512][ T5958] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 431.806487][ T5908] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 431.915522][ T5958] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.927116][ T5958] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 431.939286][ T5958] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 431.950951][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 431.959531][ T5958] usb 1-1: SerialNumber: syz [ 432.137334][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 432.145968][ T5908] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 432.218411][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.254965][ T5908] usb 2-1: Product: syz [ 432.260349][ T5908] usb 2-1: Manufacturer: syz [ 432.265050][ T5908] usb 2-1: SerialNumber: syz [ 432.286633][ T5908] usb 2-1: config 0 descriptor?? [ 432.298403][ T5908] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 432.539346][ T5908] gspca_m5602: Failed to find a sensor [ 432.545349][ T5908] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 432.563416][ T5908] usb 2-1: USB disconnect, device number 7 [ 432.766477][ T5916] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 433.663239][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.674307][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.699086][ T5916] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 433.711629][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.722391][ T5916] usb 3-1: config 0 descriptor?? [ 434.002761][ T6922] netlink: 'syz.4.229': attribute type 9 has an invalid length. [ 434.011429][ T6922] netlink: 'syz.4.229': attribute type 11 has an invalid length. [ 434.019947][ T6922] netlink: 'syz.4.229': attribute type 12 has an invalid length. [ 434.027765][ T6922] netlink: 210060 bytes leftover after parsing attributes in process `syz.4.229'. [ 434.037296][ T6922] openvswitch: netlink: Message has 4 unknown bytes. [ 434.422675][ T5908] usb 1-1: USB disconnect, device number 6 [ 434.552721][ T5916] usbhid 3-1:0.0: can't add hid device: -71 [ 434.566951][ T5916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 434.577612][ T5916] usb 3-1: USB disconnect, device number 3 [ 434.673440][ T6930] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 434.728401][ T6930] FAULT_INJECTION: forcing a failure. [ 434.728401][ T6930] name failslab, interval 1, probability 0, space 0, times 1 [ 434.741220][ T6930] CPU: 1 UID: 0 PID: 6930 Comm: syz.3.230 Not tainted syzkaller #0 PREEMPT(full) [ 434.741243][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.741253][ T6930] Call Trace: [ 434.741261][ T6930] [ 434.741268][ T6930] dump_stack_lvl+0x16c/0x1f0 [ 434.741301][ T6930] should_fail_ex+0x512/0x640 [ 434.741326][ T6930] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 434.741355][ T6930] should_failslab+0xc2/0x120 [ 434.741376][ T6930] kmem_cache_alloc_noprof+0x75/0x6e0 [ 434.741401][ T6930] ? make_vfsuid+0xec/0x140 [ 434.741423][ T6930] ? alloc_empty_file+0x55/0x1e0 [ 434.741450][ T6930] ? alloc_empty_file+0x55/0x1e0 [ 434.741469][ T6930] alloc_empty_file+0x55/0x1e0 [ 434.741492][ T6930] dentry_open+0x46/0xd0 [ 434.741514][ T6930] ovl_path_open+0x198/0x1f0 [ 434.741538][ T6930] ovl_dir_read_merged+0x4b8/0x780 [ 434.741565][ T6930] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 434.741592][ T6930] ? __pfx_ovl_fill_merge+0x10/0x10 [ 434.741630][ T6930] ovl_iterate+0x8ae/0x1000 [ 434.741654][ T6930] ? __pfx_down_read_killable+0x10/0x10 [ 434.741677][ T6930] ? __pfx_ovl_iterate+0x10/0x10 [ 434.741699][ T6930] wrap_directory_iterator+0xa2/0xe0 [ 434.741726][ T6930] iterate_dir+0x296/0xaf0 [ 434.741755][ T6930] __x64_sys_getdents64+0x13c/0x2c0 [ 434.741781][ T6930] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 434.741807][ T6930] ? __pfx_filldir64+0x10/0x10 [ 434.741841][ T6930] do_syscall_64+0xcd/0xfa0 [ 434.741859][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.741876][ T6930] RIP: 0033:0x7f645278f6c9 [ 434.741890][ T6930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.741905][ T6930] RSP: 002b:00007f64535df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 434.741921][ T6930] RAX: ffffffffffffffda RBX: 00007f64529e6180 RCX: 00007f645278f6c9 [ 434.741931][ T6930] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000006 [ 434.741941][ T6930] RBP: 00007f64535df090 R08: 0000000000000000 R09: 0000000000000000 [ 434.741951][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.741960][ T6930] R13: 00007f64529e6218 R14: 00007f64529e6180 R15: 00007ffd1ddaa8a8 [ 434.741986][ T6930] [ 434.966142][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.496770][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 435.496783][ T30] audit: type=1400 audit(1762989186.572:435): avc: denied { write } for pid=6932 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 436.536214][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 436.987313][ T6955] netlink: 'syz.3.239': attribute type 1 has an invalid length. [ 437.051151][ T30] audit: type=1400 audit(1762989188.162:436): avc: denied { watch watch_reads } for pid=6951 comm="syz.1.238" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 437.089979][ T6954] netdevsim netdevsim1: Direct firmware load for . [ 437.089979][ T6954] failed with error -2 [ 437.101909][ T6954] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 437.101909][ T6954] [ 437.119912][ T30] audit: type=1400 audit(1762989188.212:437): avc: denied { firmware_load } for pid=6951 comm="syz.1.238" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 437.134593][ T6961] tipc: Started in network mode [ 437.145405][ T6961] tipc: Node identity 06469b47e581, cluster identity 4711 [ 437.154954][ T6961] tipc: Enabled bearer , priority 0 [ 437.195061][ T6961] syzkaller0: entered promiscuous mode [ 437.202317][ T6961] syzkaller0: entered allmulticast mode [ 437.350390][ T30] audit: type=1400 audit(1762989188.422:438): avc: denied { read write } for pid=6962 comm="syz.3.242" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 437.374718][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.457661][ T30] audit: type=1400 audit(1762989188.422:439): avc: denied { open } for pid=6962 comm="syz.3.242" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 437.487170][ T6960] tipc: Resetting bearer [ 437.503215][ T6960] tipc: Disabling bearer [ 437.600000][ T5916] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 437.770485][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.878755][ T5916] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 437.955689][ T30] audit: type=1400 audit(1762989188.882:440): avc: denied { getopt } for pid=6970 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 437.998583][ T5916] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 438.047563][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.071659][ T5916] usb 4-1: config 0 descriptor?? [ 438.101654][ T30] audit: type=1400 audit(1762989189.192:441): avc: denied { bind } for pid=6976 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.163656][ T30] audit: type=1400 audit(1762989189.202:442): avc: denied { listen } for pid=6976 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.201896][ T30] audit: type=1400 audit(1762989189.302:443): avc: denied { write } for pid=6976 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 439.545316][ T6998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.552760][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.721774][ T6998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.729227][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.736811][ T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 439.800495][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.807147][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.851342][ T7002] FAULT_INJECTION: forcing a failure. [ 439.851342][ T7002] name failslab, interval 1, probability 0, space 0, times 0 [ 439.864561][ T7002] CPU: 1 UID: 0 PID: 7002 Comm: syz.4.249 Not tainted syzkaller #0 PREEMPT(full) [ 439.864585][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 439.864595][ T7002] Call Trace: [ 439.864601][ T7002] [ 439.864608][ T7002] dump_stack_lvl+0x16c/0x1f0 [ 439.864639][ T7002] should_fail_ex+0x512/0x640 [ 439.864660][ T7002] ? __kmalloc_cache_noprof+0x5f/0x780 [ 439.864688][ T7002] should_failslab+0xc2/0x120 [ 439.864709][ T7002] __kmalloc_cache_noprof+0x72/0x780 [ 439.864734][ T7002] ? __request_region+0x5c/0xf0 [ 439.864764][ T7002] ? __request_region+0x5c/0xf0 [ 439.864788][ T7002] __request_region+0x5c/0xf0 [ 439.864816][ T7002] comedi_request_region+0x6d/0x1c0 [ 439.864839][ T7002] c6xdigio_attach+0x52/0x4b0 [ 439.864865][ T7002] comedi_device_attach+0x3b3/0x900 [ 439.864893][ T7002] do_devconfig_ioctl+0x1b1/0x710 [ 439.864917][ T7002] ? __mutex_lock+0x1c5/0x1060 [ 439.864934][ T7002] ? __lock_acquire+0xb8a/0x1c90 [ 439.864950][ T7002] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 439.864986][ T7002] ? arch_scale_cpu_capacity+0x15/0xb0 [ 439.865007][ T7002] ? find_held_lock+0x2b/0x80 [ 439.865033][ T7002] comedi_unlocked_ioctl+0x165d/0x2f00 [ 439.865053][ T7002] ? __schedule+0x11a3/0x5de0 [ 439.865082][ T7002] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 439.865110][ T7002] ? __pfx___schedule+0x10/0x10 [ 439.865148][ T7002] ? lockdep_hardirqs_on+0x7c/0x110 [ 439.865173][ T7002] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 439.865199][ T7002] ? rcu_is_watching+0x12/0xc0 [ 439.865221][ T7002] ? irqentry_exit+0x3b/0x90 [ 439.865243][ T7002] ? lockdep_hardirqs_on+0x7c/0x110 [ 439.865267][ T7002] ? __x64_sys_ioctl+0x123/0x210 [ 439.865292][ T7002] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 439.865311][ T7002] __x64_sys_ioctl+0x18e/0x210 [ 439.865337][ T7002] do_syscall_64+0xcd/0xfa0 [ 439.865355][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.865372][ T7002] RIP: 0033:0x7f8a7f98f6c9 [ 439.865389][ T7002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.865404][ T7002] RSP: 002b:00007f8a807f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.865421][ T7002] RAX: ffffffffffffffda RBX: 00007f8a7fbe6090 RCX: 00007f8a7f98f6c9 [ 439.865432][ T7002] RDX: 0000200000000540 RSI: 0000000040946400 RDI: 0000000000000004 [ 439.865442][ T7002] RBP: 00007f8a807f7090 R08: 0000000000000000 R09: 0000000000000000 [ 439.865451][ T7002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.865460][ T7002] R13: 00007f8a7fbe6128 R14: 00007f8a7fbe6090 R15: 00007ffe9a520658 [ 439.865486][ T7002] [ 440.135135][ T7002] comedi comedi0: c6xdigio: I/O port conflict (0x109,3) [ 440.142524][ T7002] ================================================================== [ 440.150662][ T7002] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 440.158643][ T7002] Read of size 8 at addr ffff88807834b430 by task syz.4.249/7002 [ 440.166348][ T7002] [ 440.168663][ T7002] CPU: 1 UID: 0 PID: 7002 Comm: syz.4.249 Not tainted syzkaller #0 PREEMPT(full) [ 440.168685][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.168695][ T7002] Call Trace: [ 440.168703][ T7002] [ 440.168710][ T7002] dump_stack_lvl+0x116/0x1f0 [ 440.168741][ T7002] print_report+0xcd/0x630 [ 440.168760][ T7002] ? __virt_addr_valid+0x81/0x610 [ 440.168784][ T7002] ? __phys_addr+0xe8/0x180 [ 440.168808][ T7002] ? sysfs_remove_file_ns+0x63/0x70 [ 440.168827][ T7002] kasan_report+0xe0/0x110 [ 440.168847][ T7002] ? sysfs_remove_file_ns+0x63/0x70 [ 440.168868][ T7002] sysfs_remove_file_ns+0x63/0x70 [ 440.168887][ T7002] driver_remove_file+0x4a/0x60 [ 440.168908][ T7002] bus_remove_driver+0x224/0x2c0 [ 440.168934][ T7002] driver_unregister+0x76/0xb0 [ 440.168954][ T7002] comedi_device_detach_locked+0x12f/0xa50 [ 440.168978][ T7002] comedi_device_detach+0x67/0xb0 [ 440.168998][ T7002] comedi_device_attach+0x43d/0x900 [ 440.169021][ T7002] do_devconfig_ioctl+0x1b1/0x710 [ 440.169046][ T7002] ? __mutex_lock+0x1c5/0x1060 [ 440.169063][ T7002] ? __lock_acquire+0xb8a/0x1c90 [ 440.169079][ T7002] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 440.169108][ T7002] ? arch_scale_cpu_capacity+0x15/0xb0 [ 440.169127][ T7002] ? find_held_lock+0x2b/0x80 [ 440.169150][ T7002] comedi_unlocked_ioctl+0x165d/0x2f00 [ 440.169168][ T7002] ? __schedule+0x11a3/0x5de0 [ 440.169195][ T7002] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 440.169217][ T7002] ? __pfx___schedule+0x10/0x10 [ 440.169245][ T7002] ? lockdep_hardirqs_on+0x7c/0x110 [ 440.169265][ T7002] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 440.169289][ T7002] ? rcu_is_watching+0x12/0xc0 [ 440.169310][ T7002] ? irqentry_exit+0x3b/0x90 [ 440.169325][ T7002] ? lockdep_hardirqs_on+0x7c/0x110 [ 440.169343][ T7002] ? __x64_sys_ioctl+0x123/0x210 [ 440.169367][ T7002] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 440.169385][ T7002] __x64_sys_ioctl+0x18e/0x210 [ 440.169409][ T7002] do_syscall_64+0xcd/0xfa0 [ 440.169426][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.169443][ T7002] RIP: 0033:0x7f8a7f98f6c9 [ 440.169456][ T7002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.169472][ T7002] RSP: 002b:00007f8a807f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.169488][ T7002] RAX: ffffffffffffffda RBX: 00007f8a7fbe6090 RCX: 00007f8a7f98f6c9 [ 440.169499][ T7002] RDX: 0000200000000540 RSI: 0000000040946400 RDI: 0000000000000004 [ 440.169509][ T7002] RBP: 00007f8a807f7090 R08: 0000000000000000 R09: 0000000000000000 [ 440.169518][ T7002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.169528][ T7002] R13: 00007f8a7fbe6128 R14: 00007f8a7fbe6090 R15: 00007ffe9a520658 [ 440.169545][ T7002] [ 440.169550][ T7002] [ 440.443222][ T7002] Allocated by task 6482: [ 440.447531][ T7002] kasan_save_stack+0x33/0x60 [ 440.452190][ T7002] kasan_save_track+0x14/0x30 [ 440.456873][ T7002] __kasan_kmalloc+0xaa/0xb0 [ 440.461440][ T7002] bus_add_driver+0x92/0x690 [ 440.466015][ T7002] driver_register+0x15c/0x4b0 [ 440.470762][ T7002] c6xdigio_attach+0xa3/0x4b0 [ 440.475423][ T7002] comedi_device_attach+0x3b3/0x900 [ 440.480602][ T7002] do_devconfig_ioctl+0x1b1/0x710 [ 440.485610][ T7002] comedi_unlocked_ioctl+0x165d/0x2f00 [ 440.491061][ T7002] __x64_sys_ioctl+0x18e/0x210 [ 440.495807][ T7002] do_syscall_64+0xcd/0xfa0 [ 440.500300][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.506170][ T7002] [ 440.508492][ T7002] Freed by task 6922: [ 440.512447][ T7002] kasan_save_stack+0x33/0x60 [ 440.517099][ T7002] kasan_save_track+0x14/0x30 [ 440.521751][ T7002] __kasan_save_free_info+0x3b/0x60 [ 440.526932][ T7002] __kasan_slab_free+0x5f/0x80 [ 440.531677][ T7002] kfree+0x2b8/0x6d0 [ 440.535554][ T7002] kobject_put+0x1e7/0x5a0 [ 440.539948][ T7002] bus_remove_driver+0x16e/0x2c0 [ 440.544876][ T7002] driver_unregister+0x76/0xb0 [ 440.549619][ T7002] comedi_device_detach_locked+0x12f/0xa50 [ 440.555408][ T7002] do_devconfig_ioctl+0x555/0x710 [ 440.560414][ T7002] comedi_unlocked_ioctl+0x165d/0x2f00 [ 440.565851][ T7002] __x64_sys_ioctl+0x18e/0x210 [ 440.570600][ T7002] do_syscall_64+0xcd/0xfa0 [ 440.575081][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.580950][ T7002] [ 440.583249][ T7002] The buggy address belongs to the object at ffff88807834b400 [ 440.583249][ T7002] which belongs to the cache kmalloc-256 of size 256 [ 440.597275][ T7002] The buggy address is located 48 bytes inside of [ 440.597275][ T7002] freed 256-byte region [ffff88807834b400, ffff88807834b500) [ 440.610968][ T7002] [ 440.613280][ T7002] The buggy address belongs to the physical page: [ 440.619664][ T7002] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807834be00 pfn:0x7834a [ 440.629700][ T7002] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 440.638179][ T7002] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 440.646652][ T7002] page_type: f5(slab) [ 440.650628][ T7002] raw: 00fff00000000240 ffff88813ffa6b40 ffff88813ffa5708 ffffea0001e70d10 [ 440.659196][ T7002] raw: ffff88807834be00 0000000000100001 00000000f5000000 0000000000000000 [ 440.667762][ T7002] head: 00fff00000000240 ffff88813ffa6b40 ffff88813ffa5708 ffffea0001e70d10 [ 440.676413][ T7002] head: ffff88807834be00 0000000000100001 00000000f5000000 0000000000000000 [ 440.685070][ T7002] head: 00fff00000000001 ffffea0001e0d281 00000000ffffffff 00000000ffffffff [ 440.693717][ T7002] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 440.702361][ T7002] page dumped because: kasan: bad access detected [ 440.708750][ T7002] page_owner tracks the page as allocated [ 440.714445][ T7002] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5182, tgid 5182 (udevd), ts 397992920552, free_ts 397645493846 [ 440.734660][ T7002] post_alloc_hook+0x1c0/0x230 [ 440.739431][ T7002] get_page_from_freelist+0x10a3/0x3a30 [ 440.744969][ T7002] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 440.750847][ T7002] alloc_pages_mpol+0x1fb/0x550 [ 440.755686][ T7002] new_slab+0x24a/0x360 [ 440.759824][ T7002] ___slab_alloc+0xd79/0x1a50 [ 440.764481][ T7002] __slab_alloc.constprop.0+0x63/0x110 [ 440.770183][ T7002] __kmalloc_cache_noprof+0x477/0x780 [ 440.775544][ T7002] inode_doinit_use_xattr+0x54/0x410 [ 440.780818][ T7002] inode_doinit_with_dentry+0x10c8/0x12e0 [ 440.786515][ T7002] selinux_d_instantiate+0x26/0x30 [ 440.791604][ T7002] security_d_instantiate+0x142/0x1a0 [ 440.796954][ T7002] d_splice_alias_ops+0x92/0x840 [ 440.801882][ T7002] kernfs_iop_lookup+0x23f/0x2d0 [ 440.806886][ T7002] __lookup_slow+0x251/0x460 [ 440.811457][ T7002] walk_component+0x353/0x5b0 [ 440.816118][ T7002] page last free pid 5182 tgid 5182 stack trace: [ 440.822415][ T7002] __free_frozen_pages+0x7df/0x1160 [ 440.827592][ T7002] qlist_free_all+0x4d/0x120 [ 440.832173][ T7002] kasan_quarantine_reduce+0x195/0x1e0 [ 440.837606][ T7002] __kasan_slab_alloc+0x69/0x90 [ 440.842431][ T7002] __kmalloc_noprof+0x2e8/0x880 [ 440.847260][ T7002] tomoyo_realpath_from_path+0xc2/0x6e0 [ 440.852782][ T7002] tomoyo_path_perm+0x274/0x460 [ 440.857606][ T7002] security_inode_getattr+0x116/0x290 [ 440.863047][ T7002] vfs_fstat+0x4b/0xe0 [ 440.867095][ T7002] __do_sys_newfstat+0x87/0x100 [ 440.871923][ T7002] do_syscall_64+0xcd/0xfa0 [ 440.876405][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.882281][ T7002] [ 440.884579][ T7002] Memory state around the buggy address: [ 440.890182][ T7002] ffff88807834b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 440.898220][ T7002] ffff88807834b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 440.906259][ T7002] >ffff88807834b400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.914293][ T7002] ^ [ 440.919896][ T7002] ffff88807834b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 440.927932][ T7002] ffff88807834b500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 440.935963][ T7002] ================================================================== [ 440.953993][ T7002] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 440.961221][ T7002] CPU: 1 UID: 0 PID: 7002 Comm: syz.4.249 Not tainted syzkaller #0 PREEMPT(full) [ 440.970409][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.980542][ T7002] Call Trace: [ 440.983812][ T7002] [ 440.986738][ T7002] dump_stack_lvl+0x3d/0x1f0 [ 440.991341][ T7002] vpanic+0x640/0x6f0 [ 440.995320][ T7002] panic+0xca/0xd0 [ 440.999046][ T7002] ? __pfx_panic+0x10/0x10 [ 441.003489][ T7002] ? sysfs_remove_file_ns+0x63/0x70 [ 441.008701][ T7002] ? preempt_schedule_common+0x44/0xc0 [ 441.014189][ T7002] ? preempt_schedule_thunk+0x16/0x30 [ 441.019596][ T7002] ? check_panic_on_warn+0x1f/0xb0 [ 441.024699][ T7002] check_panic_on_warn+0xab/0xb0 [ 441.029616][ T7002] end_report+0x107/0x170 [ 441.033932][ T7002] kasan_report+0xee/0x110 [ 441.038503][ T7002] ? sysfs_remove_file_ns+0x63/0x70 [ 441.043690][ T7002] sysfs_remove_file_ns+0x63/0x70 [ 441.048692][ T7002] driver_remove_file+0x4a/0x60 [ 441.053525][ T7002] bus_remove_driver+0x224/0x2c0 [ 441.058462][ T7002] driver_unregister+0x76/0xb0 [ 441.063217][ T7002] comedi_device_detach_locked+0x12f/0xa50 [ 441.069009][ T7002] comedi_device_detach+0x67/0xb0 [ 441.074015][ T7002] comedi_device_attach+0x43d/0x900 [ 441.079206][ T7002] do_devconfig_ioctl+0x1b1/0x710 [ 441.084223][ T7002] ? __mutex_lock+0x1c5/0x1060 [ 441.088967][ T7002] ? __lock_acquire+0xb8a/0x1c90 [ 441.093884][ T7002] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 441.099419][ T7002] ? arch_scale_cpu_capacity+0x15/0xb0 [ 441.104871][ T7002] ? find_held_lock+0x2b/0x80 [ 441.109544][ T7002] comedi_unlocked_ioctl+0x165d/0x2f00 [ 441.114984][ T7002] ? __schedule+0x11a3/0x5de0 [ 441.119652][ T7002] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 441.125441][ T7002] ? __pfx___schedule+0x10/0x10 [ 441.130274][ T7002] ? lockdep_hardirqs_on+0x7c/0x110 [ 441.135450][ T7002] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 441.141412][ T7002] ? rcu_is_watching+0x12/0xc0 [ 441.146176][ T7002] ? irqentry_exit+0x3b/0x90 [ 441.150745][ T7002] ? lockdep_hardirqs_on+0x7c/0x110 [ 441.155920][ T7002] ? __x64_sys_ioctl+0x123/0x210 [ 441.160840][ T7002] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 441.166624][ T7002] __x64_sys_ioctl+0x18e/0x210 [ 441.171370][ T7002] do_syscall_64+0xcd/0xfa0 [ 441.175848][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.181717][ T7002] RIP: 0033:0x7f8a7f98f6c9 [ 441.186113][ T7002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.205701][ T7002] RSP: 002b:00007f8a807f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.214092][ T7002] RAX: ffffffffffffffda RBX: 00007f8a7fbe6090 RCX: 00007f8a7f98f6c9 [ 441.222044][ T7002] RDX: 0000200000000540 RSI: 0000000040946400 RDI: 0000000000000004 [ 441.229994][ T7002] RBP: 00007f8a807f7090 R08: 0000000000000000 R09: 0000000000000000 [ 441.237941][ T7002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.245887][ T7002] R13: 00007f8a7fbe6128 R14: 00007f8a7fbe6090 R15: 00007ffe9a520658 [ 441.253846][ T7002] [ 441.257066][ T7002] Kernel Offset: disabled [ 441.261366][ T7002] Rebooting in 86400 seconds..