last executing test programs: 14m25.047509324s ago: executing program 4 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x2, 0x9, 0x8, 0x596, 0xf, "83ce0837107462d4f100000000000000001000"}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r2 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x204080, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="1814f043ffffff00"/24, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) memfd_create(&(0x7f0000000000)=',}*\x00', 0x3) socket$netlink(0x10, 0x3, 0x15) openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x200300, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) 14m23.879837929s ago: executing program 4 (id=380): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='task_rename\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x8000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0xc0984124, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) 14m22.515872494s ago: executing program 4 (id=384): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000"], 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={'syz', 0x3}, 0xfffffffffffffff9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000008d0bad96e8763f7f00007910f577792f915ed166219bcf6074fa"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94) (rerun: 64) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 14m22.096097087s ago: executing program 4 (id=385): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 14m18.320045997s ago: executing program 4 (id=396): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0xfffffffffffffffe, 0x0, 0xf4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f00000000c0)) 14m17.972565335s ago: executing program 4 (id=398): r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a010400000000000000000a0000020900010073797a3100f5ffff07000540000000190900020073790000000008000a40fffffffc10001180040001006e756d67656e0000140000001100010000000000000000002f00000aa5ca963aa254e1cbc02bfff5004d0502daa2ea7abb1d90ea8e20730414b74fd454f7780636100dd459e5cccdd4ec4928bf9b5c6dcbf2691365ffd7e432561c03c70d252ab30193781f609d0af11f68e851449186a49f2aef825739f47b06aa91aa5796e15b0000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) sendto$inet(r0, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) shmat(0xffffffffffffffff, &(0x7f0000708000/0x1000)=nil, 0x6000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x31) 14m17.308977679s ago: executing program 32 (id=398): r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a010400000000000000000a0000020900010073797a3100f5ffff07000540000000190900020073790000000008000a40fffffffc10001180040001006e756d67656e0000140000001100010000000000000000002f00000aa5ca963aa254e1cbc02bfff5004d0502daa2ea7abb1d90ea8e20730414b74fd454f7780636100dd459e5cccdd4ec4928bf9b5c6dcbf2691365ffd7e432561c03c70d252ab30193781f609d0af11f68e851449186a49f2aef825739f47b06aa91aa5796e15b0000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) sendto$inet(r0, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) shmat(0xffffffffffffffff, &(0x7f0000708000/0x1000)=nil, 0x6000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x31) 5m25.830746279s ago: executing program 0 (id=2059): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0x1ff, @remote, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000002200)=[@hopopts_2292={{0x520, 0x29, 0x36, {0x3a, 0xa1, '\x00', [@calipso={0x7, 0x10, {0x700, 0x2, 0x5, 0x3, [0xfc]}}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x6f}, @generic={0x1, 0x449, "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"}, @jumbo={0xc2, 0x4, 0x8000}, @generic={0x9f, 0x9d, "995023200637b296b2a36fe2a551831aaae9a58c45166309ad961fc25d974474bb4f03005a6d7161b70e82198adba057d38f831c873a54965faabaecd1d91267c7cfd2f7f3749e2abace51522b0df76210492c42d9c1667302fade998663197432fa2f8a0c35f758ede67c4ce05184e5fb5f63479beb44364471c1f4587ed2463ab43286b7b0b3988b6030af9ea0317282ada4a4b86f3edebcf29f5bb3"}]}}}], 0x520}}], 0x1, 0x20004800) 5m24.506397964s ago: executing program 0 (id=2061): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x4}, {0x0, 0x3, 0x0, 0xffffffffffffffff}}, [@mark={0xc, 0x15, {0x35075d, 0xfffffff6}}]}, 0xc4}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000500)) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}, 0x1, 0x0, 0x0, 0x48040}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) mknodat(r4, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, 0x0) 5m24.137837907s ago: executing program 0 (id=2062): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x0, 0x1e8, 0xd0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x46}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x4}, {0x0, 0x3, 0x0, 0xffffffffffffffff}}, [@mark={0xc, 0x15, {0x35075d, 0xfffffff6}}]}, 0xc4}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000040), 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000500)) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}, 0x1, 0x0, 0x0, 0x48040}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) mknodat(r5, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 5m22.942548677s ago: executing program 0 (id=2066): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$kcm(0xa, 0x2, 0x73) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc9}}}, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000000)={0x20, 0x6, 0x6, "94971e4fdd8a"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x5, 0x2, "1d24"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 5m17.504472561s ago: executing program 0 (id=2086): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15, 0x70bd26, 0x0, {0xa, 0x3d}}, 0x18}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 5m16.958085536s ago: executing program 0 (id=2089): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f0000004380)={0x2020}, 0x2020) write$P9_RGETLOCK(r2, &(0x7f00000094c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r6, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x1f, 0x400) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000000)=0x1) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="428758e2"]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 5m16.20032949s ago: executing program 33 (id=2089): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f0000004380)={0x2020}, 0x2020) write$P9_RGETLOCK(r2, &(0x7f00000094c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r6, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x1f, 0x400) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000000)=0x1) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="428758e2"]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 19.538209847s ago: executing program 6 (id=3020): syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) 17.879904893s ago: executing program 6 (id=3023): gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff020000000000000000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'ipvlan0\x00', &(0x7f0000000300)=@ethtool_regs={0x4, 0xfffffff9, 0xdc, "e9923c5b1d3c7b0e04f58de154df41c1fad04f6b158f7f281cdcfbe3a7df5f947bc065102aa936026d0bb67a4dd6569f2d547038877b643693f9c1d4a3242675e61a4bc9e35f2f101ca7506e4166dfd5ce0c28e563183b8a5e6d40d75128e0741a1efd0faba2f93aa5936947dc0b258cd69dfb125dc19f1f04a9c88318dd3e5f8cbdd89e3d7556dffbf68e46676518e229954b28e5a7437d5c0cec7cc4fac6f3554507e38f57fcd7893b6bd159576c74d9152f87901fc4f3362c596c6422a1b768434899a6f2410df8ea19a34ea3bdc9419ac2902909815dff626345"}}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000040), 0x8) listen(r7, 0x6) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r8, 0x8f63803d9138b813, r9, &(0x7f0000000600)) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r10, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x10000}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) 12.472217861s ago: executing program 2 (id=3035): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$unix(0x1, 0x1, 0x0) r0 = open$dir(&(0x7f0000000200)='./file2\x00', 0x200100, 0x80) getdents(r0, &(0x7f0000000340)=""/80, 0x50) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$afs(&(0x7f00000003c0), &(0x7f0000000400)='./file1\x00', &(0x7f0000000480), 0x800001, &(0x7f0000000640)={[{@flock_strict}, {@flock_write}, {@flock_openafs}, {@flock_openafs}, {@flock_write}], [{@permit_directio}, {@smackfshat={'smackfshat', 0x3d, '\'-$:'}}, {@uid_eq}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x101000, 0x16a) finit_module(r2, 0x0, 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) listxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=""/4096, 0x1000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12) 12.16703986s ago: executing program 6 (id=3036): mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) ioperm(0x0, 0x2, 0x7e) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r0], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x80000000}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket(0x1a, 0x2, 0x1) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000340)='cpu.stat\x00', &(0x7f0000000380)='syzkaller\x00', &(0x7f0000000400)='cpu.stat\x00', &(0x7f0000000440)=',,\'\\\x00', &(0x7f0000000480)='\x00']}, &(0x7f0000000540)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200530000000085000000860000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xc, @loopback, 0xb6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc"], 0x10c}}, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001"], 0xcc}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 10.797518426s ago: executing program 6 (id=3040): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095", @ANYRES32=r0, @ANYRES32], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='task_rename\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x17\xde/\xc7\x9e\xd4Q\xe8\x99\x06(8l\x00') bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000002b45f2ec115234e9ce8d79862fe7dc4b6710f37f9db6e33ec90f7053fc01358ff84ede0f12b7307be1e31f36c77a381514f55f9062f130d49dfe487cb8db556b137487827f2d80385b2f03f779c95c12785de81896d54574bfb209a223a33b5fc4e19"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'macvlan1\x00', 0x8000}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000002c0)=@file={0x1}, 0xa4) 10.794002255s ago: executing program 2 (id=3041): socket$inet(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) readv(r0, &(0x7f0000002c80)=[{&(0x7f0000001ac0)=""/133, 0x85}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, 0x0, &(0x7f0000002b80)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') preadv(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x10000000000002f1, 0x4, 0x0) 9.927661522s ago: executing program 5 (id=3043): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x26c0}}, 0x4010) 9.877989978s ago: executing program 5 (id=3044): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}], 0x1, 0x10002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000880)=0xbc, 0x4) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f00008bf000/0x4000)=nil, 0x4000, 0x3000008, 0x12, 0xffffffffffffffff, 0x3000) rt_sigtimedwait(&(0x7f0000000040)={[0x7492ee36]}, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x8) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000003c0)={'das16m1\x00', [0x6, 0x6, 0x3, 0xc, 0x5, 0x0, 0x6, 0x0, 0x8, 0x2, 0x9b7, 0x5, 0xffff, 0xffff, 0xce3, 0x1, 0xed, 0xf2, 0x6, 0xe, 0xbe9, 0x4, 0x0, 0x6, 0x200, 0x4, 0x4, 0x6, 0x2, 0x5, 0x6, 0x5]}) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) r8 = socket(0xf, 0x3, 0x7fff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, r10, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2001}, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newlink={0x5c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x40c89}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0xe3}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r11, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x2, 0x1}, @mss={0x2, 0x4}], 0x2) 9.766639395s ago: executing program 2 (id=3045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x8001}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x6, 0x80000, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000900)='user\x00', &(0x7f0000000940)={'syz', 0x2}, &(0x7f0000000980)='\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) 8.750536933s ago: executing program 2 (id=3046): syz_emit_vhci(&(0x7f0000000580)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x62}, "981295d4d7beed7eddeb4ed40df97b6d7bc829ed0bbd5d007e08b27b31b4ab53e27c79b4ecb1dd335db200c0a707f780a6efad8c2247a785f61d427ea0b1d14ac2afeb065bb4c5062bdd4b3175291879641b240539c3627bb8637b60cfff896f91fd"}, 0x66) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x80, 0x3, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r0, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000640)) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='virtio_transport_recv_pkt\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) syz_usb_connect$cdc_ncm(0x5, 0x78, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x91, 0x30, 0x35, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "e10a13"}, {0x5, 0x24, 0x0, 0x3705}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x5, 0x5, 0x80}, {0x6, 0x24, 0x1a, 0x5, 0x11}, [@network_terminal={0x7, 0x24, 0xa, 0x40, 0xd, 0x1, 0x71}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x46, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x81, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x6, 0x7, 0xc}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x2, 0x1b, 0x7f, 0x8, 0x7}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xc, 0x40, 0xfffa}]}, 0x6, [{0xa7, &(0x7f0000000180)=@string={0xa7, 0x3, "cd0a0a577d8f30742ef71364c8cf2a1a9f6438a837514d0f60f99478218c53f40def17bf099c2365bb974caf8d4ff648402707fad393a1015a08b0c8296db61e21cfe81e0a5178505cfca8359603b8d43ab6cb1709d0fc300143ae2221dd18585e0b7535a0fb5dcd6c0b57872b453cbe6d9c36b27e6aa3c23319a7657db90631825d31a2a5715165f728f82e54c75533b42a672122e477072f34b915217d28c83fd7054c9c"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x423}}, {0x4d, &(0x7f0000000340)=@string={0x4d, 0x3, "afb07e67fad77f8894d985432328b64fd5a5300c5d7bbe34c6e4fb404e6787320446dc74f024ac2fe553be3b6d53646051a8cc4c53341fa90267a64b75832a390ac4f35cf20957c956d3b1"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x429}}]}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000280)=""/133, 0x85}], 0x1) 8.659879017s ago: executing program 5 (id=3047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x2, 0x9, 0x8, 0x596, 0xf, "83ce0837107462d4f100000000000000001000"}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r2 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x204080, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="1814f043ffffff00"/24, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) memfd_create(&(0x7f0000000000)=',}*\x00', 0x3) socket$netlink(0x10, 0x3, 0x15) openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x200300, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x18, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) 8.228745815s ago: executing program 5 (id=3049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="0a001c008e9381064e81f7a2db44b9b545c7910006007c09", 0x18}], 0x1}, 0x40008c4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r2}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, 0x0, 0x0) syz_emit_ethernet(0x45, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x4fbd818c1878e8de, 0x0) getsockname$llc(r5, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 5.262994683s ago: executing program 5 (id=3055): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x40080c0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x780, 0x0) mknod(0x0, 0x0, 0x7) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0xff, 0x0, 0xee01}, {0x4bd, 0xfff, 0x3, 0xb67, 0x4, 0x3, 0x47c4e462, 0xffffffffa9ce4f30}, {0x8, 0x50, 0x100, 0x8}, 0x7, 0x6e6bb1, 0x1, 0x0, 0xf553a0de0e1028a, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x32}, 0xa, @in6=@private2, 0x3500, 0x3, 0x2, 0x4, 0x80000000, 0x3, 0x8b6}}, 0xe8) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x5) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0xffff, 0x6d7, 0x0, 0x79, 0x3, "5acf8f53872ebc82"}) writev(r8, &(0x7f00000024c0)=[{&(0x7f0000000480)="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", 0x10e}], 0x1) 5.259535001s ago: executing program 6 (id=3056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x300}, 0x0) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x401, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) epoll_create(0x20003fd) eventfd(0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(r1, &(0x7f0000000380)='net/ip6_tables_matches\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x0, 0x5b81, 0xfffffffffffffffc, 0x0, 0x9, 0x2, 0x4, 0x2, 0xde}) 4.249049298s ago: executing program 2 (id=3058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r1, 0x709, 0x0, 0x3, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) 4.245618971s ago: executing program 3 (id=3059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x2, 0x9, 0x8, 0x596, 0xf, "83ce0837107462d4f100000000000000001000"}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r2 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x204080, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="1814f043ffffff00"/24, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) memfd_create(&(0x7f0000000000)=',}*\x00', 0x3) socket$netlink(0x10, 0x3, 0x15) openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x200300, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x18, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) 4.142747715s ago: executing program 6 (id=3060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004001) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getpid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20040442) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403b84f"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fed0b17000000203"]}, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000200)) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="0016100000001a1a8c90addf597c2e63fb4b4a2a0c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x4a, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003ed000000ed03dc"], 0x0, 0x0, 0x0}, 0x0) 3.737362427s ago: executing program 3 (id=3061): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_INIT(r0, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8004000, 0x7, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x10, 0x5}}, 0x50) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x3000492, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cdcache,\x00']) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) 3.735557375s ago: executing program 2 (id=3062): socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79b2, 0x3180, 0x8000, 0x40024f}, 0x0, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc52b390", 0x4}, {&(0x7f0000000100)="7681024fff2eeb9b6e0e02d3aa3c", 0xe}, {&(0x7f0000000a80)='&', 0x1}, {&(0x7f00000001c0)="ca2d", 0x2}, {&(0x7f00000011c0)="b488c5", 0xff07}, {&(0x7f0000001440)="34a4", 0x2}], 0x6, 0x3) 3.629005079s ago: executing program 5 (id=3063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@buf) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 3.615052208s ago: executing program 3 (id=3064): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000500)={{0x2, 0x4e21, @rand_addr=0x64010100}, {0x1, @broadcast}, 0x42, {0x2, 0x4e21, @empty}, 'ip6_vti0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001cd517c26f2650000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002140000001100010000000000000000000000000a"], 0x64}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r5, @ANYRES16=r7, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000001200000002000000", @ANYRES32, @ANYBLOB="0000000000e2ffffffffffffff0000000e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.163039224s ago: executing program 1 (id=3065): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$unix(0x1, 0x1, 0x0) r0 = open$dir(&(0x7f0000000200)='./file2\x00', 0x200100, 0x80) getdents(r0, &(0x7f0000000340)=""/80, 0x50) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) mount$afs(&(0x7f00000003c0), &(0x7f0000000400)='./file1\x00', &(0x7f0000000480), 0x800001, &(0x7f0000000640)={[{@flock_strict}, {@flock_write}, {@flock_openafs}, {@flock_openafs}, {@flock_write}], [{@permit_directio}, {@smackfshat={'smackfshat', 0x3d, '\'-$:'}}, {@uid_eq}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/oops_count', 0x101000, 0x16a) finit_module(r2, 0x0, 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x2, 0x7}, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) listxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=""/4096, 0x1000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r5, &(0x7f0000000000)=0xfe8e, 0x12) 2.065792933s ago: executing program 3 (id=3066): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$yama_ptrace_scope(0xffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r2], 0x2a, 0x0) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) mount$nfs4(0x0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), 0x1012, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @local, 0x5}, 0x1c) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 1.922766629s ago: executing program 1 (id=3067): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x1, 0x5, 0xffffffff}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) 1.469666054s ago: executing program 1 (id=3068): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x1, 0xa}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1.021382109s ago: executing program 1 (id=3069): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) readv(r3, &(0x7f0000000580)=[{0x0}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, 0x0, &(0x7f00000004c0)=@tcp6=r2}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000003c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000100)={0x8}) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="67727071745498ee7b8f25354939ea846af096756f7461df696e6f64"]) 839.991475ms ago: executing program 3 (id=3070): r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) sendto$inet(r0, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c46", 0x13, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) 281.988924ms ago: executing program 1 (id=3071): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r1) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x1, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffc01}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x88}}, 0x40000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)={0xff, {{0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0x4}}, 0x1, 0x3, [{{0xa, 0x4e21, 0x800, @loopback, 0x400}}, {{0xa, 0x4e20, 0x7fff, @local, 0xe019}}, {{0xa, 0x4e22, 0x1, @mcast2, 0xe}}]}, 0x210) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0], 0x0, 0xd2, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1e, 0x10, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xed57}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000640)='GPL\x00', 0x5, 0x79, &(0x7f0000000680)=""/121, 0x1f00, 0xd, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xe, 0x2, 0x3}, 0x10, r2, r0, 0x1, &(0x7f0000000a80)=[r0, r0, r0, r0], &(0x7f0000000ac0)=[{0x5, 0x4, 0x10, 0x9}], 0x10, 0x800}, 0x94) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r3 = dup(r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x8010) sendmsg$kcm(r3, &(0x7f0000001000)={&(0x7f0000000d00)=@x25, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000d80)="24edabc906a263c5ff13ece29a88a9900cc00b29753cea7ea9eca8fd4d57ccc8ba84fbf169470273a38514d7cd1255f24887c562004a9262c2612e1250bf12a4d4b3f386af9047bcf525862adeefe60eae97d49d2714137898d65b31c81a77dafc2a42aef15431ca06d2486abbdfd47b536b481564713e49c24f1f1c82920a2454c1e1cffe71331d8d15de9fe5131d43c80b55b81ec746d38aae90cc1bd98a592b96bc56b6692b7a2b308906996b38c5792eb74d4f113b3121dc8942ad2607f409c4be9733885c704154617bcd0e7f9d8fc6118519dd5ce13699e011f131acdb3cbe428e", 0xe4}, {&(0x7f0000000e80)="fff2ed01a3dca5e62d8e6849e515c0407e1564833f6b2a0ba009701a613405eabd920d53c34e7f41ea48f0df24e11601b0976131b6a124", 0x37}], 0x2, &(0x7f0000000f00)=[{0xe0, 0x110, 0x0, "739a316ef70d223a01e89f2d76708a27f7c22216da23623c39abf32b6b26a3b0c1a8451c0db2f0011ba47a0021adce9cb6786c9afea6759427534c5718e40ec5c0120aaf1d234dd2eb070b328a63182357654a713b248197628f49f1842a28757db3c74eff85a03c1639de286b1ed41137047d341ed0d4ec4126555decddc885d8b50b218f08af2d7a817e2c1b4d43914b91ef585b385ee39bb8fe8e34a6d1e1ca0100a6f0f30fc3e128d19e8e7f2a7bbd238d15448dfd812c024d700a6e510f999e903ffb81de1b3dddd1ac9617aece"}], 0xe0}, 0x2000009c) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, 0x0, 0x700, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10000, 0x8}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000841) setsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f0000001180), 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000011c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000013c0)={{r6, 0xaa9, 0x9, 0x95bf, 0xfffffffffffffffc, 0x9, 0x8001, 0x2, 0x5, 0x7fff, 0x80000000, 0xf7, 0x100, 0x29}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000002400), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002440)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r7, &(0x7f0000002500)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x5000) ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f0000002540)={0xe, "4acdc560ae52b20389fa0c59a24a0a6c8c36652b013dac4b11ee12989da18f2d5ee30291fe7c7279f943a12bab0ba99aefeb17a07bc70dffb596cfde055fa1b23b24dcf55035fec33ed6d23695b8f21bc0b8b550d324991b59ec45567cfc4d13beca84fe195ed729893664baaac005a70e30cbad3c9f4ac6108c6e79520e7f71"}) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000002600)='\'&**^\\\x00', &(0x7f0000002640)='./file0\x00', r0) setxattr(&(0x7f0000002680)='./file0/file0\x00', &(0x7f00000026c0)=@random={'btrfs.', '/selinux/checkreqprot\x00'}, &(0x7f0000002700)='\'&**^\\\x00', 0x7, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002740)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000002780)) 170.329088ms ago: executing program 3 (id=3072): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)=0x8000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000ffff25bd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000410230800000a0001000000000000000000180012800e00010069703667726574617000000004000280"], 0x44}, 0x1, 0x0, 0x0, 0x4044064}, 0x20040000) select(0x40, &(0x7f0000000080)={0xc, 0x2, 0x6, 0x3264, 0x0, 0xce, 0x0, 0xffffffffffffc7d9}, &(0x7f00000000c0)={0x3b97, 0x2, 0xaba40000, 0x400040000000000, 0x1ff, 0x1, 0x8, 0x8000000000000001}, &(0x7f0000000100)={0x3, 0x2, 0xfffffffffffffffc, 0x0, 0x5, 0x8, 0x43, 0x1}, &(0x7f0000000140)) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x26000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r7 = dup(r6) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f00000001c0)={0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0xfffffffe, 0x0, 0x9, 0x10001, 0x0, 0xffffe00000000001, 0x7, 0x1, 0x5, 0x9, 0xfffffffc, 0x5}) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r10, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000040)={0x1, &(0x7f0000169000)=[{0xa000005, 0x0, 0x0, 0x8, 0x9}]}) 0s ago: executing program 1 (id=3073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x8001}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x6, 0x80000, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) socket(0xa, 0x3, 0x3a) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): ct: syz [ 923.903562][T11701] usb 3-1: Manufacturer: syz [ 923.913664][T11701] usb 3-1: SerialNumber: syz [ 923.967706][T11701] usb 3-1: config 0 descriptor?? [ 924.007565][T11701] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 924.038535][T11701] usb 3-1: setting power ON [ 924.056954][T16633] wg1 speed is unknown, defaulting to 1000 [ 924.106236][T11701] dvb-usb: bulk message failed: -22 (2/0) [ 924.119315][T11701] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 924.129840][T11701] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 924.140339][T11701] usb 3-1: media controller created [ 924.190312][T11701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 924.274051][T11701] usb 3-1: selecting invalid altsetting 6 [ 924.274228][T11701] usb 3-1: digital interface selection failed (-22) [ 924.274360][T11701] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 924.275604][T11701] usb 3-1: setting power OFF [ 924.275671][T11701] dvb-usb: bulk message failed: -22 (2/0) [ 924.275711][T11701] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 924.275723][T11701] (NULL device *): no alternate interface [ 924.419857][T11701] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 924.551109][T11701] usb 3-1: USB disconnect, device number 46 [ 924.687407][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2554'. [ 924.877835][ T10] usb 6-1: USB disconnect, device number 37 [ 924.877897][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 924.877936][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 926.127697][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 927.173399][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 927.184771][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.230152][ T10] usb 2-1: config 0 descriptor?? [ 927.245992][ T10] cp210x 2-1:0.0: cp210x converter detected [ 928.541552][T16671] netlink: 'syz.2.2560': attribute type 20 has an invalid length. [ 928.620689][ T10] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 928.677782][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 928.815108][T16678] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2563'. [ 928.825041][T16678] overlayfs: failed to resolve './file1': -2 [ 928.981927][T16680] 9pnet_fd: Insufficient options for proto=fd [ 929.030688][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2566'. [ 929.346211][T16691] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2565'. [ 930.030788][T16698] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2569'. [ 930.855106][T16711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.863985][T16711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.872304][T16711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.880680][T16711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.888892][T16711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.897201][T16711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.905660][T16711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.913944][T16711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.922355][T16711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.930717][T16711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.205177][T16712] sctp_transport_update_pmtu: 44 callbacks suppressed [ 931.205200][T16712] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 931.223289][T16712] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 931.234553][T16712] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 931.247973][T16712] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 931.259358][T16712] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 931.270660][T16712] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 931.281962][T16712] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 931.293043][T16712] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 931.304381][T16712] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 931.315594][T16712] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 932.001760][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.063329][ T5904] usb 2-1: USB disconnect, device number 52 [ 932.070939][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 932.100316][ T5904] cp210x 2-1:0.0: device disconnected [ 932.511738][ T30] audit: type=1400 audit(1752691497.105:910): avc: denied { setopt } for pid=16726 comm="syz.2.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 932.550525][ T5904] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 932.797701][T16731] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2576'. [ 932.845275][ T5904] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 932.941698][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.087379][ T1997] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 933.120735][ T5904] usb 2-1: config 0 descriptor?? [ 933.341328][ T1997] usb 4-1: Using ep0 maxpacket: 8 [ 933.349619][ T1997] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 933.547341][ T1997] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 933.569017][ T1997] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 933.704086][ T1997] usb 4-1: Product: syz [ 933.708815][ T1997] usb 4-1: Manufacturer: syz [ 933.713619][ T1997] usb 4-1: SerialNumber: syz [ 933.739428][ T1997] usb 4-1: config 0 descriptor?? [ 934.396027][T16744] netlink: 'syz.2.2581': attribute type 4 has an invalid length. [ 934.663759][ T1997] usb 4-1: USB disconnect, device number 46 [ 934.714099][ T30] audit: type=1400 audit(1752691499.315:911): avc: denied { associate } for pid=16750 comm="syz.5.2584" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 934.915186][ T30] audit: type=1326 audit(1752691499.515:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16748 comm="syz.6.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3198e929 code=0x7ffc0000 [ 934.942072][ T30] audit: type=1326 audit(1752691499.515:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16748 comm="syz.6.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3198e929 code=0x7ffc0000 [ 934.966245][ T30] audit: type=1326 audit(1752691499.515:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16748 comm="syz.6.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d3198e929 code=0x7ffc0000 [ 934.990586][ T30] audit: type=1326 audit(1752691499.515:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16748 comm="syz.6.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3198e929 code=0x7ffc0000 [ 935.013948][ C0] vkms_vblank_simulate: vblank timer overrun [ 935.025120][ T30] audit: type=1326 audit(1752691499.515:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16748 comm="syz.6.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3198e929 code=0x7ffc0000 [ 935.048531][ C0] vkms_vblank_simulate: vblank timer overrun [ 935.051662][ T5890] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 935.085888][ T30] audit: type=1326 audit(1752691499.525:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16748 comm="syz.6.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5d3198e929 code=0x7ffc0000 [ 935.109331][ C0] vkms_vblank_simulate: vblank timer overrun [ 935.116096][ T30] audit: type=1326 audit(1752691499.525:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16748 comm="syz.6.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d3198e929 code=0x7ffc0000 [ 935.140210][ T30] audit: type=1326 audit(1752691499.525:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16748 comm="syz.6.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d3198e929 code=0x7ffc0000 [ 935.163629][ C0] vkms_vblank_simulate: vblank timer overrun [ 935.220614][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 935.232050][ T5890] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 935.254868][ T5890] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 935.276702][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 935.298597][ T5890] usb 6-1: Product: syz [ 935.307038][ T5890] usb 6-1: Manufacturer: syz [ 935.313835][ T5890] usb 6-1: SerialNumber: syz [ 935.324126][ T5890] usb 6-1: config 0 descriptor?? [ 935.333387][T16752] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 935.464957][ T5904] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 935.472993][ T5904] [drm:udl_init] *ERROR* Selecting channel failed [ 935.495081][ T5904] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 935.502121][ T5904] [drm] Initialized udl on minor 2 [ 935.528714][ T5904] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 935.575554][ T5904] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 935.692160][ T973] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 935.703364][ T5904] usb 2-1: USB disconnect, device number 53 [ 935.721163][ T973] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 936.040286][ T973] usb 6-1: USB disconnect, device number 38 [ 936.310787][ T5904] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 936.480515][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 936.491912][ T5904] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 936.510513][ T5890] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 936.520088][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.530455][ T973] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 936.550089][ T5904] usb 2-1: Product: syz [ 936.589152][ T5904] usb 2-1: Manufacturer: syz [ 936.686824][ T5890] usb 7-1: config 2 has an invalid descriptor of length 146, skipping remainder of the config [ 936.715446][ T5890] usb 7-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 936.848622][ T5890] usb 7-1: config 2 interface 0 has no altsetting 0 [ 936.934202][ T973] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 936.948780][ T5904] usb 2-1: SerialNumber: syz [ 936.954101][ T973] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 936.966209][ T5890] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 936.966607][ T5904] usb 2-1: config 0 descriptor?? [ 936.981859][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.010303][ T5890] usb 7-1: Product: syz [ 937.015507][ T973] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 937.031963][ T5890] usb 7-1: Manufacturer: syz [ 937.033379][ T5904] ipw 2-1:0.0: IPWireless converter converter detected [ 937.036668][ T5890] usb 7-1: SerialNumber: syz [ 937.058576][ T973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 937.084427][ T973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 937.111003][ T973] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 937.120672][ T973] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 937.128699][ T973] usb 4-1: Product: syz [ 937.144155][ T973] usb 4-1: Manufacturer: syz [ 937.168594][ T973] cdc_wdm 4-1:1.0: skipping garbage [ 937.174093][ T973] cdc_wdm 4-1:1.0: skipping garbage [ 937.181350][ T973] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 937.217470][ T973] cdc_wdm 4-1:1.0: Unknown control protocol [ 938.219334][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 938.227879][ T30] audit: type=1400 audit(1752691502.815:922): avc: denied { read write } for pid=16775 comm="syz.3.2590" name="cdc-wdm0" dev="devtmpfs" ino=3652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 938.262549][ T30] audit: type=1400 audit(1752691502.815:923): avc: denied { open } for pid=16775 comm="syz.3.2590" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 938.320699][ T5890] ims_pcu 7-1:2.0: probe with driver ims_pcu failed with error -22 [ 938.452277][T16776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.491411][ T5890] usb 7-1: USB disconnect, device number 7 [ 938.497767][T16776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.550276][T16776] netlink: 320 bytes leftover after parsing attributes in process `syz.3.2590'. [ 938.672491][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 938.672595][T11701] usb 4-1: USB disconnect, device number 47 [ 938.679344][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 938.691131][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 938.701579][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.701606][T16776] cdc_wdm 4-1:1.0: Tx URB error: -19 [ 938.862599][ T5890] usb 2-1: USB disconnect, device number 54 [ 938.882440][ T5890] ipw 2-1:0.0: device disconnected [ 940.550177][T16810] wg1 speed is unknown, defaulting to 1000 [ 941.330904][ T9] net_ratelimit: 142 callbacks suppressed [ 941.330922][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.273760][T16829] /dev/nullb0: Can't open blockdev [ 942.595003][ T30] audit: type=1800 audit(1752691507.195:924): pid=16832 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2605" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 942.670510][ T1997] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 943.063921][ T973] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 943.831181][ T1997] usb 2-1: Using ep0 maxpacket: 16 [ 943.842607][ T1997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.858858][ T1997] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 943.873734][ T1997] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 943.890712][ T973] usb 7-1: Using ep0 maxpacket: 32 [ 943.899289][ T1997] usb 2-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 943.931232][ T973] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 943.951944][ T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.960006][ T973] usb 7-1: Product: syz [ 943.975760][ T30] audit: type=1400 audit(1752691508.575:925): avc: denied { setopt } for pid=16844 comm="syz.3.2610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 943.998919][ T973] usb 7-1: Manufacturer: syz [ 944.004607][ T1997] usb 2-1: Manufacturer: syz [ 944.010884][ T973] usb 7-1: SerialNumber: syz [ 944.048859][ T1997] usb 2-1: config 0 descriptor?? [ 944.057860][ T973] usb 7-1: config 0 descriptor?? [ 944.084422][T16851] misc userio: No port type given on /dev/userio [ 944.092670][ T973] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 944.144080][T16851] misc userio: The device must be registered before sending interrupts [ 944.430582][T11701] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 944.832678][T11701] usb 3-1: config 5 has an invalid interface descriptor of length 4, skipping [ 944.849108][T11701] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 944.874951][T11701] usb 3-1: New USB device found, idVendor=1199, idProduct=6829, bcdDevice=98.59 [ 944.891499][T11701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.228961][T11701] usb 3-1: USB disconnect, device number 47 [ 945.333558][T16839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.380869][T16839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.780927][T11701] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 946.088446][ T973] gspca_ov534_9: reg_w failed -71 [ 946.360468][ T973] gspca_ov534_9: Unknown sensor 0000 [ 946.360765][ T973] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 946.461942][T11701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.486534][ T973] usb 7-1: USB disconnect, device number 8 [ 946.494357][T11701] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 946.522729][T11701] usb 4-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 946.532753][T11701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.541841][T11701] usb 4-1: Product: syz [ 946.546307][T11701] usb 4-1: Manufacturer: syz [ 946.553394][T11701] usb 4-1: SerialNumber: syz [ 946.564785][T11701] cdc_ncm 4-1:1.0: skipping garbage [ 946.987395][T16877] overlay: Unknown parameter '/' [ 946.993562][ T30] audit: type=1400 audit(1752691511.585:926): avc: denied { mounton } for pid=16874 comm="syz.6.2619" path="/96/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 947.016083][ C1] vkms_vblank_simulate: vblank timer overrun [ 947.155542][T16863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2615'. [ 947.430276][T16881] /dev/nullb0: Can't open blockdev [ 947.674599][ T30] audit: type=1400 audit(1752691512.275:927): avc: denied { unmount } for pid=14692 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 948.141737][T11701] cdc_ncm 4-1:1.0: bind() failure [ 948.159295][T11701] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 948.177279][T11701] usb 4-1: USB disconnect, device number 48 [ 948.207481][ T30] audit: type=1800 audit(1752691512.805:928): pid=16889 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2622" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 948.841123][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2624'. [ 948.910946][T16896] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 65280 - 0 [ 948.919918][T16896] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 65280 - 0 [ 948.928864][T16896] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 65280 - 0 [ 948.937797][T16896] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 65280 - 0 [ 948.947596][T16896] geneve2: entered promiscuous mode [ 948.952960][T16896] geneve2: entered allmulticast mode [ 948.966355][ T30] audit: type=1400 audit(1752691513.295:929): avc: denied { bind } for pid=16892 comm="syz.6.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 949.000116][ T30] audit: type=1400 audit(1752691513.355:930): avc: denied { listen } for pid=16892 comm="syz.6.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 949.052739][ T30] audit: type=1400 audit(1752691513.395:931): avc: denied { accept } for pid=16892 comm="syz.6.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 949.083685][ T30] audit: type=1400 audit(1752691513.685:932): avc: denied { bind } for pid=16890 comm="syz.5.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 949.778500][ T1997] usbhid 2-1:0.0: can't add hid device: -32 [ 949.784640][ T1997] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 950.328448][T16907] fuse: Bad value for 'fd' [ 950.355255][T16906] geneve3: entered promiscuous mode [ 950.360882][T16906] geneve3: entered allmulticast mode [ 950.468051][ T1997] usb 2-1: USB disconnect, device number 55 [ 950.563750][ T30] audit: type=1800 audit(1752691515.165:933): pid=16911 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2628" name="bus" dev="overlay" ino=2651 res=0 errno=0 [ 950.585590][ C1] vkms_vblank_simulate: vblank timer overrun [ 950.883910][T16917] sg_write: data in/out 1480/14 bytes for SCSI command 0x0-- guessing data in; [ 950.883910][T16917] program syz.3.2629 not setting count and/or reply_len properly [ 950.930950][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.387522][T16904] wg1 speed is unknown, defaulting to 1000 [ 951.634966][ T30] audit: type=1800 audit(1752691516.225:934): pid=16930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2634" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 953.181066][T16938] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2636'. [ 953.224689][T16938] overlayfs: failed to resolve './file1': -2 [ 953.598833][ T30] audit: type=1400 audit(1752691518.195:935): avc: denied { setopt } for pid=16942 comm="syz.3.2638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 953.799802][T16949] /dev/nullb0: Can't open blockdev [ 953.963812][T16950] netlink: 'syz.2.2639': attribute type 21 has an invalid length. [ 953.973572][T16950] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2639'. [ 954.074492][T16953] netlink: 'syz.2.2639': attribute type 21 has an invalid length. [ 954.083145][T16953] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2639'. [ 954.415302][ T30] audit: type=1400 audit(1752691519.015:936): avc: denied { listen } for pid=16954 comm="syz.1.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 955.927646][T16971] wg1 speed is unknown, defaulting to 1000 [ 956.770627][ T5883] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 956.930534][ T5883] usb 2-1: Using ep0 maxpacket: 8 [ 956.937548][ T5883] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 956.949310][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 956.963912][ T1997] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 957.504922][ T5883] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 957.516841][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 957.529764][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 957.545356][ T5883] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 957.554314][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 957.567795][ T5883] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 957.580223][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 957.597606][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 957.736968][ T5883] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 957.744917][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 957.756311][ T1997] usb 4-1: Using ep0 maxpacket: 8 [ 957.768195][ T5883] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 957.780473][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 957.791983][ T5883] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 957.792086][ T1997] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 957.812888][ T1997] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 957.832070][ T5883] usb 2-1: string descriptor 0 read error: -22 [ 957.839711][ T5883] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 957.870479][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.880653][ T1997] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 957.891914][ T1997] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 957.902103][ T1997] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 957.917564][ T1997] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 957.927902][ T1997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.945972][ T5883] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 958.075104][T17001] wg1 speed is unknown, defaulting to 1000 [ 958.183460][ T1997] usb 4-1: GET_CAPABILITIES returned 0 [ 958.196835][ T1997] usbtmc 4-1:16.0: can't read capabilities [ 958.391434][T16987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2650'. [ 958.433735][T16987] vlan2: entered promiscuous mode [ 958.448173][ T30] audit: type=1400 audit(1752691523.045:937): avc: denied { watch } for pid=16986 comm="syz.3.2650" path="/535/file0" dev="tmpfs" ino=2898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 958.449562][T16987] team0: entered promiscuous mode [ 958.500519][T16987] team_slave_0: entered promiscuous mode [ 958.511898][T16987] team_slave_1: entered promiscuous mode [ 959.318836][ T1997] usb 4-1: USB disconnect, device number 49 [ 959.476130][T17022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.485036][T17022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.493944][T17022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.502826][T17022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.511555][T17022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.520123][T17022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.528840][T17022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.537760][T17022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.546456][T17022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.556414][T17022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.895046][T17023] sctp_transport_update_pmtu: 48 callbacks suppressed [ 959.895070][T17023] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 959.913454][T17023] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 959.924810][T17023] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 959.939660][T17023] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 959.951421][T17023] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 959.962869][T17023] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 959.974103][T17023] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 959.985374][T17023] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 959.996776][T17023] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 960.008252][T17023] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 960.804203][T17032] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2660'. [ 961.700512][ T9] usb 2-1: USB disconnect, device number 56 [ 961.761005][T17047] fuse: Unknown parameter 'f0x0000000000000004' [ 961.801481][T17047] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 962.020516][ T973] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 962.170470][ T5904] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 962.200454][ T973] usb 7-1: Using ep0 maxpacket: 16 [ 962.230192][ T973] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 962.249185][ T973] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.269717][ T973] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 962.579143][ T973] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 962.622960][ T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.634235][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 962.663948][ T5904] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 962.680502][ T973] usb 7-1: Product: syz [ 962.689368][ T973] usb 7-1: Manufacturer: syz [ 962.725489][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 12340, setting to 1024 [ 962.740470][ T973] usb 7-1: SerialNumber: syz [ 962.758849][ T5904] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024 [ 962.823596][ T5904] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 962.862166][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.995880][ T5904] usb 6-1: config 0 descriptor?? [ 962.997216][T17047] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 963.323656][ T5904] hdpvr 6-1:0.0: firmware version 0x0 dated [ 963.329888][ T5904] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 963.753230][ T973] usb 7-1: 0:2 : does not exist [ 963.789408][ T5904] hdpvr 6-1:0.0: Could not setup controls [ 963.817744][ T5904] hdpvr 6-1:0.0: registering videodev failed [ 963.873947][ T5904] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 963.899741][ T5904] usb 6-1: USB disconnect, device number 39 [ 963.968683][ T973] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 963.998258][ T973] usb 7-1: USB disconnect, device number 9 [ 964.162406][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 964.400604][ T1997] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 964.520667][ T5883] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 964.570642][ T1997] usb 2-1: Using ep0 maxpacket: 16 [ 964.632206][ T1997] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 964.655143][ T1997] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 964.684862][ T1997] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.700505][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 964.750476][ T5883] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 964.757926][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 964.771466][ T1997] usb 2-1: Product: syz [ 964.968391][ T30] audit: type=1400 audit(1752691529.525:938): avc: denied { remount } for pid=17081 comm="syz.6.2677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 965.233030][ T1997] usb 2-1: Manufacturer: syz [ 965.237690][ T1997] usb 2-1: SerialNumber: syz [ 965.242419][ T5883] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 965.255402][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 965.267267][ T1997] usb 2-1: config 0 descriptor?? [ 965.272482][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 965.287033][ T5883] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 965.295208][ T1997] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 965.312307][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 965.326772][ T1997] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 965.342068][ T5883] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 965.354537][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 965.379926][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 965.496418][ T30] audit: type=1400 audit(1752691530.095:939): avc: denied { append } for pid=17087 comm="syz.2.2679" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 965.527538][ T5883] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 965.589870][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 965.592991][T17091] overlayfs: failed to resolve './file1': -2 [ 965.603749][ T5883] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 965.622553][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 965.635684][ T5883] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 965.683364][ T5883] usb 6-1: string descriptor 0 read error: -22 [ 965.777493][T17093] net_ratelimit: 142 callbacks suppressed [ 965.777507][T17093] Set syz0 is full, maxelem 0 reached [ 965.870627][ T5883] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 965.909154][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.911834][T17091] ubi31: detaching mtd0 [ 965.951373][ T5883] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 965.966705][T17091] ubi31: mtd0 is detached [ 966.450063][ T1997] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 966.680472][ T5904] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 966.845540][T17110] netlink: 'syz.3.2684': attribute type 10 has an invalid length. [ 966.864699][T17110] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.876519][T17110] bond0: (slave team0): Enslaving as an active interface with an up link [ 966.933078][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 967.016410][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 967.440020][T17110] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 967.469557][T17110] 8021q: VLANs not supported on ipvlan1 [ 967.523390][ T5904] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 967.532736][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.543543][ T5904] usb 3-1: config 0 descriptor?? [ 967.555400][ T1997] em28xx 2-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 967.597222][ T1997] em28xx 2-1:0.0: board has no eeprom [ 967.637046][T17108] [U]  [ 967.871413][ T1997] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 967.881067][ T30] audit: type=1326 audit(1752691532.475:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31858e929 code=0x7ffc0000 [ 967.886669][T17104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 967.949024][ T1997] em28xx 2-1:0.0: dvb set to bulk mode. [ 967.983952][ T5883] em28xx 2-1:0.0: Binding DVB extension [ 968.014948][T17104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.104843][ T1997] usb 2-1: USB disconnect, device number 57 [ 968.511661][ T1997] em28xx 2-1:0.0: Disconnecting em28xx [ 968.518889][T11701] usb 6-1: USB disconnect, device number 40 [ 968.533195][ T30] audit: type=1326 audit(1752691532.485:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31858e929 code=0x7ffc0000 [ 968.574287][ T5883] em28xx 2-1:0.0: Registering input extension [ 968.602955][ T1997] em28xx 2-1:0.0: Closing input extension [ 968.664719][T17104] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 968.702434][ T1997] em28xx 2-1:0.0: Freeing device [ 968.703872][ T30] audit: type=1326 audit(1752691532.485:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fe31858e929 code=0x7ffc0000 [ 968.745481][T17104] team0: Device ipvlan2 is already an upper device of the team interface [ 969.189539][T17133] sctp_transport_update_pmtu: 48 callbacks suppressed [ 969.189606][T17133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 969.207863][T17133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 969.219130][T17133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 969.230565][T17133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 969.241633][T17133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 969.252927][T17133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 969.264169][T17133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 969.275714][T17133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 969.286949][T17133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 969.298120][T17133] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 969.746438][ T30] audit: type=1326 audit(1752691532.485:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31858e929 code=0x7ffc0000 [ 969.770729][ T30] audit: type=1326 audit(1752691532.485:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe31858d290 code=0x7ffc0000 [ 969.798872][ T30] audit: type=1326 audit(1752691532.485:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe31858e52b code=0x7ffc0000 [ 969.830635][ T30] audit: type=1326 audit(1752691532.485:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe31858e52b code=0x7ffc0000 [ 969.863584][ T30] audit: type=1326 audit(1752691533.075:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31858e929 code=0x7ffc0000 [ 969.999374][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 969.999402][ T30] audit: type=1326 audit(1752691534.585:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31858e929 code=0x7ffc0000 [ 970.133866][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.146470][ T30] audit: type=1326 audit(1752691534.585:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17103 comm="syz.2.2682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31858e929 code=0x7ffc0000 [ 971.020507][ T5904] usbhid 3-1:0.0: can't add hid device: -71 [ 971.026524][ T5904] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 971.122352][ T5904] usb 3-1: USB disconnect, device number 48 [ 971.492810][T17156] wg1 speed is unknown, defaulting to 1000 [ 972.883702][T17174] overlayfs: failed to resolve './file0': -2 [ 973.850124][T17184] netlink: 'syz.2.2703': attribute type 1 has an invalid length. [ 974.358647][T17184] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2703'. [ 975.533862][T17204] Falling back ldisc for ttyprintk. [ 975.822265][ T36] bond0: (slave bond_slave_0): interface is now down [ 975.837058][T17210] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 975.897722][ T36] bond0: (slave bond_slave_1): interface is now down [ 975.934368][ T36] bond0: (slave ): interface is now down [ 976.020671][T17210] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2709'. [ 976.069762][ T36] bond0: (slave team0): interface is now down [ 976.557300][T12577] bond0: (slave bond_slave_0): interface is now down [ 976.570445][T12577] bond0: (slave bond_slave_1): interface is now down [ 976.617513][T12577] bond0: (slave ): interface is now down [ 976.648802][T12577] bond0: (slave team0): interface is now down [ 976.658185][T17220] veth1_macvtap: left promiscuous mode [ 976.665008][T17220] macsec0: entered promiscuous mode [ 976.671056][ T13] bond0: (slave bond_slave_0): interface is now down [ 976.703235][ T13] bond0: (slave bond_slave_1): interface is now down [ 976.839261][ T13] bond0: (slave ): interface is now down [ 976.920625][ T5904] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 977.030719][ T1997] libceph: connect (1)[c::]:6789 error -22 [ 977.135418][T17230] ceph: No mds server is up or the cluster is laggy [ 977.176625][ T1997] libceph: mon0 (1)[c::]:6789 connect error [ 977.835789][ T13] bond0: (slave team0): interface is now down [ 978.238364][ T13] bond0: now running without any active interface! [ 978.295462][ T1106] Bluetooth: hci5: Frame reassembly failed (-84) [ 978.306211][T17244] random: crng reseeded on system resumption [ 978.315251][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 978.559258][T11701] libceph: connect (1)[c::]:6789 error -22 [ 978.560031][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.715045][T11701] libceph: mon0 (1)[c::]:6789 connect error [ 978.928809][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 979.007069][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 979.037621][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 979.050884][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 979.101371][ T5904] usb 4-1: string descriptor 0 read error: -71 [ 979.107623][ T5904] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 979.120264][ T5904] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 979.141453][ T5904] usb 4-1: config 0 descriptor?? [ 979.150513][ T5904] usb 4-1: can't set config #0, error -71 [ 979.190595][ T5904] usb 4-1: USB disconnect, device number 50 [ 979.260566][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 979.741904][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.780461][ T5904] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 979.952433][ T5904] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 980.056329][ T5904] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 980.104168][ T5904] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 980.170456][ T5904] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 980.287105][ T5904] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 980.315743][ T5904] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 980.330486][ T30] audit: type=1400 audit(1752691544.925:982): avc: denied { write } for pid=17258 comm="syz.6.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 980.350547][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 980.358621][ T5904] usb 4-1: Product: syz [ 980.377240][ T5904] usb 4-1: Manufacturer: syz [ 980.780174][ T5904] cdc_wdm 4-1:1.0: skipping garbage [ 980.797974][ T5904] cdc_wdm 4-1:1.0: skipping garbage [ 980.822220][ T5904] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 980.828338][ T5904] cdc_wdm 4-1:1.0: Unknown control protocol [ 982.501185][T17290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.560577][T11701] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 982.619489][T17290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.756574][T11701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 982.768337][T11701] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 982.779195][T11701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.927014][T11701] usb 2-1: config 0 descriptor?? [ 982.948870][ T5904] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 983.223801][T17284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2728'. [ 983.267986][T17284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2728'. [ 983.310547][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 983.317713][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 983.329571][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 983.340910][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 983.350840][ T5904] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 983.803728][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.819733][ T5904] usb 3-1: config 0 descriptor?? [ 983.830533][ T5904] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 983.874486][ T1997] usb 4-1: USB disconnect, device number 51 [ 984.036155][ T5904] usb 3-1: USB disconnect, device number 49 [ 984.136357][T11701] ath6kl: Failed to submit usb control message: -110 [ 984.143732][T11701] ath6kl: unable to send the bmi data to the device: -110 [ 984.150953][T11701] ath6kl: Unable to send get target info: -110 [ 984.157857][T11701] ath6kl: Failed to init ath6kl core: -110 [ 984.164874][T11701] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 984.195097][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2735'. [ 985.007483][T11701] usb 2-1: USB disconnect, device number 58 [ 986.382246][T17342] vlan2: entered allmulticast mode [ 987.125315][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2751'. [ 987.155809][T17359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2753'. [ 989.200956][T17380] netlink: zone id is out of range [ 989.365051][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.419389][T17380] netlink: zone id is out of range [ 989.469209][T17380] netlink: zone id is out of range [ 989.584906][T17380] netlink: zone id is out of range [ 989.696060][T17380] netlink: zone id is out of range [ 989.759141][T17380] netlink: zone id is out of range [ 989.815142][T17380] netlink: zone id is out of range [ 989.877374][T17380] netlink: zone id is out of range [ 989.915206][T17380] netlink: zone id is out of range [ 990.673422][T12880] Bluetooth: hci5: Frame reassembly failed (-84) [ 990.700506][T17383] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 991.794456][T17410] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2763'. [ 992.369318][T17416] netlink: 'syz.2.2766': attribute type 1 has an invalid length. [ 992.690553][T11449] Bluetooth: hci5: command 0x1003 tx timeout [ 992.750958][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 995.255281][T17441] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 995.280761][T17437] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 995.838025][T17452] overlayfs: overlapping lowerdir path [ 996.642225][T17464] /dev/nullb0: Can't open blockdev [ 997.702745][T17482] netlink: 'syz.2.2784': attribute type 4 has an invalid length. [ 997.871254][T17484] input: syz0 as /devices/virtual/input/input56 [ 998.401822][T17489] bridge0: port 3() entered blocking state [ 998.402137][ T30] audit: type=1400 audit(1752691563.005:983): avc: denied { ioctl } for pid=17487 comm="syz.6.2785" path="socket:[58259]" dev="sockfs" ino=58259 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 998.432685][ C0] vkms_vblank_simulate: vblank timer overrun [ 998.661571][T17489] bridge0: port 3() entered disabled state [ 999.300617][ T9] net_ratelimit: 4 callbacks suppressed [ 999.300629][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.338864][T17489] netdevsim netdevsim6 : entered allmulticast mode [ 999.407918][T17489] netdevsim netdevsim6 : entered promiscuous mode [ 999.610710][T17500] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 999.621788][T17500] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1000.152050][ T30] audit: type=1400 audit(1752691564.735:984): avc: denied { unmount } for pid=7569 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1000.693760][T17518] FAULT_INJECTION: forcing a failure. [ 1000.693760][T17518] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.706557][T17518] CPU: 0 UID: 0 PID: 17518 Comm: syz.3.2793 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1000.706582][T17518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1000.706593][T17518] Call Trace: [ 1000.706599][T17518] [ 1000.706607][T17518] dump_stack_lvl+0x16c/0x1f0 [ 1000.706637][T17518] should_fail_ex+0x512/0x640 [ 1000.706660][T17518] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1000.706687][T17518] should_failslab+0xc2/0x120 [ 1000.706713][T17518] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1000.706734][T17518] ? __pfx___might_resched+0x10/0x10 [ 1000.706758][T17518] ? __anon_vma_prepare+0xae/0x5e0 [ 1000.706784][T17518] __anon_vma_prepare+0xae/0x5e0 [ 1000.706809][T17518] uffd_lock_vma+0x360/0x3f0 [ 1000.706838][T17518] mfill_atomic_poison+0x13e/0x18e0 [ 1000.706871][T17518] ? find_held_lock+0x2b/0x80 [ 1000.706893][T17518] ? __might_fault+0xe3/0x190 [ 1000.706915][T17518] ? __might_fault+0xe3/0x190 [ 1000.706935][T17518] ? __might_fault+0x13b/0x190 [ 1000.706957][T17518] ? __pfx_mfill_atomic_poison+0x10/0x10 [ 1000.706992][T17518] userfaultfd_ioctl+0x10a7/0x38e0 [ 1000.707019][T17518] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1000.707038][T17518] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1000.707062][T17518] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1000.707107][T17518] ? selinux_file_ioctl+0x180/0x270 [ 1000.707130][T17518] ? selinux_file_ioctl+0xb4/0x270 [ 1000.707153][T17518] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1000.707175][T17518] ? __x64_sys_ioctl+0x18e/0x210 [ 1000.707195][T17518] __x64_sys_ioctl+0x18e/0x210 [ 1000.707217][T17518] do_syscall_64+0xcd/0x4c0 [ 1000.707244][T17518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.707263][T17518] RIP: 0033:0x7fdecf18e929 [ 1000.707278][T17518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1000.707295][T17518] RSP: 002b:00007fdecff1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1000.707312][T17518] RAX: ffffffffffffffda RBX: 00007fdecf3b6160 RCX: 00007fdecf18e929 [ 1000.707323][T17518] RDX: 0000200000000080 RSI: 00000000c020aa08 RDI: 0000000000000005 [ 1000.707334][T17518] RBP: 00007fdecff1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.707345][T17518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.707356][T17518] R13: 0000000000000000 R14: 00007fdecf3b6160 R15: 00007ffcf2303f98 [ 1000.707380][T17518] [ 1000.948048][ C0] vkms_vblank_simulate: vblank timer overrun [ 1001.011853][T17519] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2794'. [ 1001.691867][T17529] ucma_write: process 1791 (syz.5.2797) changed security contexts after opening file descriptor, this is not allowed. [ 1003.507603][ T30] audit: type=1400 audit(1752691568.105:985): avc: denied { map } for pid=17552 comm="syz.3.2806" path="/dev/nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1003.581380][ T30] audit: type=1400 audit(1752691568.105:986): avc: denied { execute } for pid=17552 comm="syz.3.2806" path="/dev/nvme-fabrics" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1003.973117][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1004.356609][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1004.379744][ T10] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1004.509487][ T10] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1004.520455][ T10] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1004.540611][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1004.825563][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1004.882789][T17569] FAULT_INJECTION: forcing a failure. [ 1004.882789][T17569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.896118][T17569] CPU: 0 UID: 0 PID: 17569 Comm: syz.1.2810 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1004.896143][T17569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1004.896153][T17569] Call Trace: [ 1004.896159][T17569] [ 1004.896166][T17569] dump_stack_lvl+0x16c/0x1f0 [ 1004.896195][T17569] should_fail_ex+0x512/0x640 [ 1004.896221][T17569] _copy_from_user+0x2e/0xd0 [ 1004.896246][T17569] do_sock_getsockopt+0x5f4/0x800 [ 1004.896266][T17569] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1004.896283][T17569] ? __fget_files+0x204/0x3c0 [ 1004.896318][T17569] ? warn_bogus_irq_restore+0x20/0x30 [ 1004.896348][T17569] __sys_getsockopt+0x12f/0x260 [ 1004.896377][T17569] __x64_sys_getsockopt+0xbd/0x160 [ 1004.896398][T17569] ? do_syscall_64+0x91/0x4c0 [ 1004.896423][T17569] ? lockdep_hardirqs_on+0x7c/0x110 [ 1004.896446][T17569] do_syscall_64+0xcd/0x4c0 [ 1004.896472][T17569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.896491][T17569] RIP: 0033:0x7fc6c518e929 [ 1004.896507][T17569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.896524][T17569] RSP: 002b:00007fc6c5f13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1004.896542][T17569] RAX: ffffffffffffffda RBX: 00007fc6c53b6080 RCX: 00007fc6c518e929 [ 1004.896555][T17569] RDX: 000000000000000b RSI: 0000000000000006 RDI: 0000000000000008 [ 1004.896565][T17569] RBP: 00007fc6c5f13090 R08: 0000200000000300 R09: 0000000000000000 [ 1004.896577][T17569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.896588][T17569] R13: 0000000000000000 R14: 00007fc6c53b6080 R15: 00007ffc2b88ac28 [ 1004.896613][T17569] [ 1005.064698][ C0] vkms_vblank_simulate: vblank timer overrun [ 1005.243867][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.256611][ T10] usb 3-1: Product: syz [ 1005.270210][ T10] usb 3-1: Manufacturer: syz [ 1005.274992][ T10] usb 3-1: SerialNumber: syz [ 1005.351994][ T5904] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 1005.539523][ T5904] usb 4-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 1005.558719][ T30] audit: type=1400 audit(1752691570.125:987): avc: denied { ioctl } for pid=17574 comm="syz.1.2812" path="socket:[59414]" dev="sockfs" ino=59414 ioctlcmd=0xaea0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1005.559249][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.583585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1005.638129][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1005.795314][ T5904] usb 4-1: config 0 descriptor?? [ 1005.943726][ T30] audit: type=1400 audit(1752691570.545:988): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1006.048826][T11701] usb 3-1: USB disconnect, device number 50 [ 1006.069813][ T30] audit: type=1400 audit(1752691570.575:989): avc: denied { read write } for pid=17548 comm="syz.2.2804" name="lp0" dev="devtmpfs" ino=3710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1006.139123][ T30] audit: type=1400 audit(1752691570.575:990): avc: denied { open } for pid=17548 comm="syz.2.2804" path="/dev/usb/lp0" dev="devtmpfs" ino=3710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1006.360685][ T5904] nzxt-smart2 0003:1E71:2019.0015: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.3-1/input0 [ 1006.713899][T17591] ceph: No mds server is up or the cluster is laggy [ 1006.800989][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1006.808443][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1006.921972][T17548] usblp0: removed [ 1007.053867][ T5904] usb 4-1: USB disconnect, device number 52 [ 1009.002670][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.638606][T17625] /dev/nullb0: Can't open blockdev [ 1010.519875][T17637] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2826'. [ 1010.534221][T17637] overlayfs: failed to resolve './file1': -2 [ 1013.125374][T17674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2835'. [ 1013.385552][T17681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1014.047509][T17691] kvm: user requested TSC rate below hardware speed [ 1015.651426][ T1997] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1016.671882][ T1997] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 1016.980477][ T1997] usb 7-1: config 0 has no interface number 0 [ 1017.003021][ T1997] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1017.023284][ T1997] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.043987][ T1997] usb 7-1: Product: syz [ 1017.048184][ T1997] usb 7-1: Manufacturer: syz [ 1017.080051][ T1997] usb 7-1: SerialNumber: syz [ 1017.102183][ T1997] usb 7-1: config 0 descriptor?? [ 1017.360454][ T5904] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1017.434475][T17720] random: crng reseeded on system resumption [ 1017.611148][ T5904] usb 6-1: Using ep0 maxpacket: 16 [ 1017.658975][ T5904] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1017.673826][ T5904] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.721805][ T5904] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1017.936864][ T5904] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1017.954968][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.963609][ T5904] usb 6-1: Product: syz [ 1017.975332][ T5904] usb 6-1: Manufacturer: syz [ 1017.984109][ T5904] usb 6-1: SerialNumber: syz [ 1018.000126][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2853'. [ 1018.132870][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.810775][ T1997] usb 7-1: Firmware version (0.0) predates our first public release. [ 1018.827210][ T1997] usb 7-1: Please update to version 0.2 or newer [ 1018.970325][ T5904] usb 6-1: 0:2 : does not exist [ 1019.063868][T17742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2856'. [ 1020.596586][ T10] usb 7-1: USB disconnect, device number 10 [ 1020.622882][ T5904] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 1020.783703][T17757] dummy0: left allmulticast mode [ 1020.788861][T17757] bridge0: port 3(dummy0) entered disabled state [ 1020.799008][ T5904] usb 6-1: USB disconnect, device number 41 [ 1020.836328][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.134721][T17763] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2861'. [ 1021.213791][T17757] batman_adv: batadv0: Adding interface: dummy0 [ 1021.242158][T17757] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.278090][T17757] batman_adv: batadv0: Interface activated: dummy0 [ 1022.040681][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2865'. [ 1022.324824][T17784] netlink: set zone limit has 4 unknown bytes [ 1023.000591][ T10] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 1023.909714][ T10] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1023.989046][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.240450][ T10] usb 4-1: Product: syz [ 1024.244677][ T10] usb 4-1: Manufacturer: syz [ 1024.270761][ T10] usb 4-1: SerialNumber: syz [ 1024.290684][ T10] usb 4-1: config 0 descriptor?? [ 1024.554181][T11701] usb 4-1: USB disconnect, device number 53 [ 1024.935837][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2875'. [ 1026.520085][T17832] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1026.614630][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'. [ 1026.960868][ T30] audit: type=1400 audit(1752691591.535:991): avc: denied { relabelfrom } for pid=17831 comm="syz.5.2880" name="" dev="pipefs" ino=60894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1027.015425][ T30] audit: type=1400 audit(1752691591.595:992): avc: denied { module_load } for pid=17830 comm="syz.2.2879" path="/sys/kernel/oops_count" dev="sysfs" ino=57569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 1027.189023][T17839] pim6reg1: entered allmulticast mode [ 1027.507706][T17855] /dev/nullb0: Can't open blockdev [ 1027.865254][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1027.880830][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.995414][T17851] input: syz0 as /devices/virtual/input/input57 [ 1028.580505][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1028.587392][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1028.599229][ T10] usb 4-1: config index 0 descriptor too short (expected 16420, got 36) [ 1028.615719][ T10] usb 4-1: config 7 has an invalid interface number: 6 but max is 0 [ 1028.626679][ T10] usb 4-1: config 7 has no interface number 0 [ 1028.722710][ T10] usb 4-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254 [ 1028.732739][ T10] usb 4-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1028.747136][ T10] usb 4-1: config 7 interface 6 has no altsetting 0 [ 1028.758960][ T10] usb 4-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=10.9e [ 1028.778556][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.805425][ T10] usb 4-1: Product: syz [ 1028.809633][ T10] usb 4-1: Manufacturer: syz [ 1028.815204][ T10] usb 4-1: SerialNumber: syz [ 1028.880472][ T973] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1028.889036][T17863] overlayfs: failed to resolve './file1': -2 [ 1029.046236][T17869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.055001][T17869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.063167][T17869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.071381][T17869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.079464][T17869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.087577][T17869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.095817][T17869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.104008][T17869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.112198][T17869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.157619][ T973] usb 7-1: Using ep0 maxpacket: 8 [ 1029.167195][ T973] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1029.186842][ T973] usb 7-1: config 179 has no interface number 0 [ 1029.196754][ T973] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1029.208113][ T973] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1029.219522][ T973] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1029.230841][ T973] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1029.254837][ T973] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1029.279161][T17869] sctp_transport_update_pmtu: 44 callbacks suppressed [ 1029.279174][T17869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1029.296525][T17869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1029.306947][T17869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1029.317845][T17869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1029.328111][T17869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1029.338471][T17869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1029.348815][T17869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1029.359219][T17869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1029.369629][T17869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1029.380026][T17869] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1029.403136][T17847] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2881'. [ 1029.412342][ T973] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1029.421580][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.435797][T17860] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1030.613267][T17880] wg1 speed is unknown, defaulting to 1000 [ 1030.888887][ T973] usb 7-1: USB disconnect, device number 11 [ 1030.888942][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1030.888987][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1031.148072][ T10] option 4-1:7.6: GSM modem (1-port) converter detected [ 1031.186153][ T10] usb 4-1: USB disconnect, device number 54 [ 1031.194287][ T10] option 4-1:7.6: device disconnected [ 1031.680633][T11701] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1031.890742][T11701] usb 6-1: Using ep0 maxpacket: 16 [ 1031.908380][T11701] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1031.921755][T11701] usb 6-1: config 129 has an invalid interface number: 145 but max is 0 [ 1031.930343][T11701] usb 6-1: config 129 has no interface number 0 [ 1031.950665][T11701] usb 6-1: config 129 interface 145 has no altsetting 0 [ 1031.972588][T11701] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 1031.997488][T11701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.040488][T11701] usb 6-1: Product: syz [ 1032.044690][T11701] usb 6-1: Manufacturer: syz [ 1032.070696][T11701] usb 6-1: SerialNumber: syz [ 1032.128444][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'. [ 1032.156293][T17905] ip6gretap0: entered promiscuous mode [ 1032.182742][T17905] macsec1: entered promiscuous mode [ 1032.198463][T17905] macsec1: entered allmulticast mode [ 1032.239479][T17905] ip6gretap0: entered allmulticast mode [ 1032.336391][T17914] /dev/nullb0: Can't open blockdev [ 1032.428023][T11701] usb 6-1: disable ehci-hcd to run US-144 [ 1032.495323][T11701] usb 6-1: USB disconnect, device number 42 [ 1032.780570][ T5897] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1032.981128][ T5842] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 1032.981180][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2907'. [ 1033.029225][T17927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2907'. [ 1033.030398][ T30] audit: type=1400 audit(1752691597.625:993): avc: denied { read } for pid=17925 comm="syz.5.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1033.613051][ T5897] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1033.627131][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.646492][ T5897] usb 7-1: Product: syz [ 1033.667983][ T5897] usb 7-1: Manufacturer: syz [ 1033.678629][ T5897] usb 7-1: SerialNumber: syz [ 1033.737957][ T5897] usb 7-1: config 0 descriptor?? [ 1033.765378][ T5897] ch341 7-1:0.0: ch341-uart converter detected [ 1033.894223][ T30] audit: type=1400 audit(1752691598.495:994): avc: denied { read write } for pid=17920 comm="syz.3.2905" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1033.961727][T17944] sp0: Synchronizing with TNC [ 1033.986222][ T5897] usb 7-1: failed to receive control message: -121 [ 1034.000982][ T5897] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1034.009596][ T30] audit: type=1400 audit(1752691598.495:995): avc: denied { open } for pid=17920 comm="syz.3.2905" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1034.150500][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1034.176313][ T30] audit: type=1400 audit(1752691598.495:996): avc: denied { ioctl } for pid=17920 comm="syz.3.2905" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1034.204329][ T30] audit: type=1400 audit(1752691598.565:997): avc: denied { read } for pid=5499 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1034.226731][ T30] audit: type=1400 audit(1752691598.585:998): avc: denied { create } for pid=17945 comm="syz.1.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1034.540563][ T5897] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1034.688556][ T30] audit: type=1400 audit(1752691598.595:999): avc: denied { search } for pid=5499 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.740503][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 1034.748894][ T30] audit: type=1400 audit(1752691598.595:1000): avc: denied { search } for pid=5499 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.775329][ T5897] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.794959][ T5897] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1034.886732][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8616, setting to 1024 [ 1034.927426][ T5897] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1034.928360][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1034.938544][ T30] audit: type=1400 audit(1752691598.595:1001): avc: denied { search } for pid=5499 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1034.969400][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.984205][ T5897] usb 6-1: Product: syz [ 1034.988390][ T5897] usb 6-1: Manufacturer: syz [ 1034.990045][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1034.996067][ T5897] usb 6-1: SerialNumber: syz [ 1035.015981][ T30] audit: type=1400 audit(1752691598.595:1003): avc: denied { prog_load } for pid=17936 comm="syz.5.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1035.042153][ T5897] usb 6-1: config 0 descriptor?? [ 1035.050759][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1035.054288][ T5897] hub 6-1:0.0: bad descriptor, ignoring hub [ 1035.077233][ T5897] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1035.110388][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.182799][ T10] usb 4-1: Product: 껩孛컊纖៾ᾔ췇䲾ｨ౫鼇瓃텩潥櫚䤏枫䄶퐝፟ቲ꽼 [ 1035.233820][ T10] usb 4-1: Manufacturer: І [ 1035.248089][ T10] usb 4-1: SerialNumber: 둥윯ꀃꆓꎣ僳抗㶮桝山偒ᔞ䞒㢜囼ሙႊ䖯➔父僚禳䣦२『뻗紈꓅⵷ঝ壭씸▜꫸䰥㏙ꐢ䠹쵰ᴝ㓰쬈㎵ば횤⬗暠緈ᘽ熛ⴋ済ڈ⤡깔禴뾵顚镟ﷆ⸊ᨁ榽ᨲﶰ᪅쎯潣绶⩲闖맕狉殶䗰䙲杲ዷሌ뷱醖뭆ꚮ㳒帒᭕穆ӻ髦⛭㹱틬༱の陀龑쿼᮲ঢ易浆تꄁ㋐矆⬗ [ 1035.283014][ C0] vkms_vblank_simulate: vblank timer overrun [ 1035.370870][T17943] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1035.379589][T17943] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1035.423359][T17936] [U] [ 1035.457952][ T5897] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1035.458123][T12880] usb 6-1: Failed to submit usb control message: -71 [ 1035.497225][ T5897] usb 6-1: USB disconnect, device number 43 [ 1035.600502][T12880] usb 6-1: unable to send the bmi data to the device: -71 [ 1035.614955][T12880] usb 6-1: unable to get target info from device [ 1035.628676][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1035.649474][T12880] usb 6-1: could not get target info (-71) [ 1035.659609][ T10] usb 4-1: USB disconnect, device number 55 [ 1035.707441][T12880] usb 6-1: could not probe fw (-71) [ 1036.377365][T17961] /dev/nullb0: Can't open blockdev [ 1036.446674][ T9] usb 7-1: USB disconnect, device number 12 [ 1036.473114][ T9] ch341 7-1:0.0: device disconnected [ 1036.636304][T17966] 9pnet_fd: Insufficient options for proto=fd [ 1036.650081][T17970] Malformed UNC in devname [ 1036.650081][T17970] [ 1036.669983][T17970] CIFS: VFS: Malformed UNC in devname [ 1036.807402][T17964] wg1 speed is unknown, defaulting to 1000 [ 1037.586762][ T10] net_ratelimit: 155 callbacks suppressed [ 1037.586781][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.230285][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1038.230298][ T30] audit: type=1400 audit(1752691602.825:1045): avc: denied { create } for pid=17982 comm="syz.2.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1038.620631][T11701] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1038.651367][ T30] audit: type=1400 audit(1752691603.255:1046): avc: denied { create } for pid=17963 comm="syz.6.2916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1038.682065][ T30] audit: type=1400 audit(1752691603.255:1047): avc: denied { read write } for pid=17963 comm="syz.6.2916" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1038.831127][T11701] usb 4-1: Using ep0 maxpacket: 32 [ 1038.945799][T11701] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1038.967088][ T30] audit: type=1400 audit(1752691603.255:1048): avc: denied { open } for pid=17963 comm="syz.6.2916" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1038.996317][ T30] audit: type=1400 audit(1752691603.275:1049): avc: denied { connect } for pid=17997 comm="syz.5.2926" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1039.012736][T11701] usb 4-1: config 0 has no interface number 0 [ 1039.017078][ T30] audit: type=1400 audit(1752691603.285:1050): avc: denied { setopt } for pid=17963 comm="syz.6.2916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1039.017121][ T30] audit: type=1400 audit(1752691603.365:1051): avc: denied { create } for pid=17997 comm="syz.5.2926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1039.017157][ T30] audit: type=1400 audit(1752691603.385:1052): avc: denied { bind } for pid=17997 comm="syz.5.2926" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1039.017193][ T30] audit: type=1400 audit(1752691603.385:1053): avc: denied { node_bind } for pid=17997 comm="syz.5.2926" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1039.235482][T11701] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1039.256047][T11701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.283542][T11701] usb 4-1: Product: syz [ 1039.295684][T11701] usb 4-1: Manufacturer: syz [ 1039.306355][T11701] usb 4-1: SerialNumber: syz [ 1039.367756][T11701] usb 4-1: config 0 descriptor?? [ 1039.394156][T11701] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1039.428007][T11701] usb 4-1: selecting invalid altsetting 1 [ 1039.448670][T11701] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1039.523765][T11701] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1039.584192][T11701] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1039.637603][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1039.653897][T11701] usb 4-1: media controller created [ 1039.718243][ T30] audit: type=1400 audit(1752691604.315:1054): avc: denied { bind } for pid=18003 comm="syz.6.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1039.772293][T11701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1039.826641][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2928'. [ 1039.835646][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2928'. [ 1039.860423][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1039.868619][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.881379][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1039.893460][T11701] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1039.907512][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1039.983559][ T9] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1039.995860][T11701] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1040.007339][ T9] usb 6-1: Product: syz [ 1040.024385][ T9] usb 6-1: Manufacturer: syz [ 1040.029006][ T9] usb 6-1: SerialNumber: syz [ 1040.042376][ T9] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input58 [ 1040.175048][T11701] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1040.258574][T11701] usb 4-1: USB disconnect, device number 56 [ 1040.308228][ T1997] usb 6-1: USB disconnect, device number 44 [ 1040.352956][ T1997] appletouch 6-1:1.0: input: appletouch disconnected [ 1040.530608][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1040.685982][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1040.703915][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1040.724614][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1040.745651][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1040.769520][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1040.779352][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.806563][ T9] usb 2-1: config 0 descriptor?? [ 1041.598193][T18013] overlayfs: failed to resolve './file2': -2 [ 1041.598278][T18027] overlayfs: failed to resolve './file2': -2 [ 1042.118993][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1042.125816][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1042.146314][ T9] usb 2-1: USB disconnect, device number 59 [ 1042.920909][T18048] overlayfs: failed to resolve './file1': -2 [ 1043.233535][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1043.233550][ T30] audit: type=1400 audit(1752691607.835:1100): avc: denied { setopt } for pid=18047 comm="syz.1.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1043.242380][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1043.600311][ T30] audit: type=1400 audit(1752691607.885:1101): avc: denied { accept } for pid=18047 comm="syz.1.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1043.716963][ T30] audit: type=1400 audit(1752691607.885:1102): avc: denied { read } for pid=18047 comm="syz.1.2938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1044.008563][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1044.025488][ T30] audit: type=1400 audit(1752691608.515:1103): avc: denied { create } for pid=18060 comm="syz.1.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1044.051981][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1044.066579][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.078010][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1044.108376][ T30] audit: type=1400 audit(1752691608.705:1104): avc: denied { remount } for pid=18064 comm="syz.2.2946" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1044.133817][ T30] audit: type=1400 audit(1752691608.705:1105): avc: denied { watch watch_reads } for pid=18064 comm="syz.2.2946" path="/321" dev="tmpfs" ino=1738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1044.184032][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1044.193645][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.203205][ T9] usb 4-1: Product: syz [ 1044.207478][ T9] usb 4-1: Manufacturer: syz [ 1044.213786][ T9] usb 4-1: SerialNumber: syz [ 1044.295222][ T30] audit: type=1400 audit(1752691608.895:1106): avc: denied { create } for pid=18069 comm="syz.6.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1044.642304][ T30] audit: type=1400 audit(1752691609.035:1107): avc: denied { read write } for pid=18069 comm="syz.6.2947" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1044.666627][ C0] vkms_vblank_simulate: vblank timer overrun [ 1044.686363][ T30] audit: type=1400 audit(1752691609.035:1108): avc: denied { open } for pid=18069 comm="syz.6.2947" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1044.810497][ T973] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1044.892724][ T30] audit: type=1400 audit(1752691609.485:1109): avc: denied { create } for pid=18038 comm="syz.3.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1044.979048][ T973] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1044.990409][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.018131][ T973] usb 6-1: config 0 descriptor?? [ 1045.124049][ T9] usb 4-1: 0:2 : does not exist [ 1045.186948][T18086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.195348][T18086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.203510][T18086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.211611][T18086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.219723][T18086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.227902][T18086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.236124][T18086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.244302][T18086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.252558][T18086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.260695][T18086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.311457][ T973] kaweth 6-1:0.0: Firmware present in device. [ 1045.329036][T18089] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1046.776657][T18091] pim6reg1: entered allmulticast mode [ 1046.812575][ T9] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 1046.895063][ T9] usb 4-1: USB disconnect, device number 57 [ 1047.165650][ T973] kaweth 6-1:0.0: Statistics collection: 0 [ 1047.221689][ T973] kaweth 6-1:0.0: Multicast filter limit: 0 [ 1047.262807][ T973] kaweth 6-1:0.0: MTU: 0 [ 1047.267469][ T973] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1047.318742][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.551401][ T973] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 1047.767429][ T973] usb 6-1: USB disconnect, device number 45 [ 1047.914132][T18114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1048.043439][T18119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2961'. [ 1048.056369][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2961'. [ 1049.910918][ T5904] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1050.252404][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 1050.259948][ T5904] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1050.273392][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1050.273407][ T30] audit: type=1400 audit(1752691614.875:1123): avc: denied { create } for pid=18145 comm="syz.3.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1050.313136][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.333946][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1050.345894][ T30] audit: type=1400 audit(1752691614.905:1124): avc: denied { setopt } for pid=18145 comm="syz.3.2968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1050.369898][ T5904] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1050.379629][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.391421][ T5904] usb 2-1: Product: syz [ 1050.396236][ T5904] usb 2-1: Manufacturer: syz [ 1050.401199][ T5904] usb 2-1: SerialNumber: syz [ 1050.615286][ T5842] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1050.622181][T11449] Bluetooth: hci5: command 0x1003 tx timeout [ 1050.722219][T18152] net_ratelimit: 13 callbacks suppressed [ 1050.722235][T18152] netlink: zone id is out of range [ 1050.733732][T18152] netlink: zone id is out of range [ 1050.740830][T18152] netlink: zone id is out of range [ 1050.746437][T18152] netlink: zone id is out of range [ 1050.752537][T18152] netlink: zone id is out of range [ 1050.780558][T18152] netlink: zone id is out of range [ 1050.820468][T18152] netlink: zone id is out of range [ 1050.859257][T18152] netlink: set zone limit has 4 unknown bytes [ 1051.539284][ T30] audit: type=1400 audit(1752691615.845:1125): avc: denied { create } for pid=18155 comm="syz.3.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1051.942449][ T5904] usb 2-1: 0:2 : does not exist [ 1051.947612][ T30] audit: type=1400 audit(1752691615.855:1126): avc: denied { shutdown } for pid=18155 comm="syz.3.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1051.967565][ T30] audit: type=1400 audit(1752691615.885:1127): avc: denied { getopt } for pid=18155 comm="syz.3.2973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1051.987246][ T30] audit: type=1400 audit(1752691615.895:1128): avc: denied { write } for pid=18155 comm="syz.3.2973" lport=37676 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1052.118536][ T30] audit: type=1400 audit(1752691616.095:1129): avc: denied { create } for pid=18157 comm="syz.6.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1052.170452][ T30] audit: type=1400 audit(1752691616.105:1130): avc: denied { connect } for pid=18157 comm="syz.6.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1052.201269][ T5904] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1052.450427][ T30] audit: type=1400 audit(1752691616.755:1131): avc: denied { read } for pid=18163 comm="syz.2.2975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1052.531213][ T30] audit: type=1400 audit(1752691616.765:1132): avc: denied { name_bind } for pid=18132 comm="syz.1.2965" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1052.571358][ T5904] usb 2-1: USB disconnect, device number 60 [ 1052.666905][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1052.894033][T18176] sp0: Synchronizing with TNC [ 1055.763416][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1055.763451][ T30] audit: type=1400 audit(1752691620.235:1145): avc: denied { kexec_image_load } for pid=18215 comm="syz.1.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1056.160204][ T30] audit: type=1400 audit(1752691620.755:1146): avc: denied { sqpoll } for pid=18219 comm="syz.5.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1056.319058][T18226] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1056.509643][T18228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=18228 comm=syz.2.2990 [ 1056.774269][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.785885][ T30] audit: type=1400 audit(1752691620.995:1147): avc: denied { create } for pid=18222 comm="syz.2.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1056.806438][ T30] audit: type=1400 audit(1752691620.995:1148): avc: denied { ioctl } for pid=18222 comm="syz.2.2990" path="socket:[61780]" dev="sockfs" ino=61780 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1056.955742][ T30] audit: type=1400 audit(1752691620.995:1149): avc: denied { bind } for pid=18222 comm="syz.2.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1056.976536][ T30] audit: type=1400 audit(1752691620.995:1150): avc: denied { setopt } for pid=18222 comm="syz.2.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1056.986423][T18232] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1057.113434][T18226] pim6reg1: entered allmulticast mode [ 1057.358189][T18238] pim6reg1: entered allmulticast mode [ 1059.986392][ T30] audit: type=1400 audit(1752691624.585:1151): avc: denied { append } for pid=18245 comm="syz.5.2997" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1059.986438][T18255] random: crng reseeded on system resumption [ 1060.071447][T18254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2998'. [ 1060.085642][T11449] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 1060.226196][ T30] audit: type=1400 audit(1752691624.585:1152): avc: denied { open } for pid=18245 comm="syz.5.2997" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1060.355757][ T30] audit: type=1400 audit(1752691624.635:1153): avc: denied { firmware_load } for pid=3587 comm="kworker/u8:10" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1060.393787][ T30] audit: type=1400 audit(1752691624.665:1154): avc: denied { getopt } for pid=18251 comm="syz.2.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1060.653989][T18266] random: crng reseeded on system resumption [ 1060.926636][T18270] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1061.964476][ T30] audit: type=1400 audit(1752691626.565:1155): avc: denied { ioctl } for pid=18279 comm="syz-executor" path="socket:[62935]" dev="sockfs" ino=62935 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1061.965632][T18281] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1062.024509][T18281] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1062.100765][T18281] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1062.109662][T18281] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1062.116997][T18281] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1062.148924][T18279] wg1 speed is unknown, defaulting to 1000 [ 1062.250777][ T30] audit: type=1400 audit(1752691626.725:1156): avc: denied { mounton } for pid=18279 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1062.335161][ T30] audit: type=1400 audit(1752691626.925:1157): avc: denied { ioctl } for pid=18282 comm="syz.6.3004" path="socket:[62979]" dev="sockfs" ino=62979 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1062.463951][T18279] chnl_net:caif_netlink_parms(): no params data found [ 1062.552527][T18279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.559772][T18279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.567775][T18279] bridge_slave_0: entered allmulticast mode [ 1062.583971][T18279] bridge_slave_0: entered promiscuous mode [ 1062.594350][T18279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.601746][T18279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.608865][T18279] bridge_slave_1: entered allmulticast mode [ 1062.616532][T18279] bridge_slave_1: entered promiscuous mode [ 1062.671892][T18279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.684559][T18279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.848831][T18279] team0: Port device team_slave_0 added [ 1062.858357][T18279] team0: Port device team_slave_1 added [ 1062.897817][T18279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.907637][T18279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.933565][ C0] vkms_vblank_simulate: vblank timer overrun [ 1062.970502][T18279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.972996][ T30] audit: type=1400 audit(1752691627.555:1158): avc: denied { read write } for pid=18292 comm="syz.5.3006" name="vbi1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1062.983432][T18279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.011988][T18279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.037860][ C0] vkms_vblank_simulate: vblank timer overrun [ 1063.044688][T18279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.090478][T11449] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1063.156838][T18279] hsr_slave_0: entered promiscuous mode [ 1063.163170][T18279] hsr_slave_1: entered promiscuous mode [ 1063.169085][T18279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1063.177535][T18279] Cannot create hsr debugfs directory [ 1063.218486][ T30] audit: type=1400 audit(1752691627.555:1159): avc: denied { open } for pid=18292 comm="syz.5.3006" path="/dev/vbi1" dev="devtmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1063.297103][ T30] audit: type=1400 audit(1752691627.555:1160): avc: denied { ioctl } for pid=18292 comm="syz.5.3006" path="/dev/vbi1" dev="devtmpfs" ino=953 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1063.321880][ C0] vkms_vblank_simulate: vblank timer overrun [ 1063.993953][T18307] netlink: 'syz.6.3009': attribute type 21 has an invalid length. [ 1064.001991][ T5897] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1064.027875][T18307] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3009'. [ 1064.170587][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 1064.211324][T11449] Bluetooth: hci6: command tx timeout [ 1064.221749][T18309] netlink: 'syz.6.3009': attribute type 21 has an invalid length. [ 1064.234883][T18309] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3009'. [ 1064.247829][ T5897] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1064.292978][ T5897] usb 6-1: config 0 has no interface number 0 [ 1064.305188][ T5897] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1064.314821][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.355203][ T5897] usb 6-1: Product: syz [ 1064.466882][ T5897] usb 6-1: Manufacturer: syz [ 1064.472622][ T5897] usb 6-1: SerialNumber: syz [ 1064.487604][ T5897] usb 6-1: config 0 descriptor?? [ 1064.494841][T18316] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1064.496024][ T5897] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1065.640498][ T5897] usb 6-1: selecting invalid altsetting 1 [ 1065.652146][ T30] audit: type=1400 audit(1752691630.255:1161): avc: denied { setopt } for pid=18326 comm="syz.1.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1065.652496][ T5897] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1065.879196][ T30] audit: type=1400 audit(1752691630.285:1162): avc: denied { create } for pid=18326 comm="syz.1.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1065.906170][T18329] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3014'. [ 1066.234671][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.247477][ T5897] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1066.257806][ T5897] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1066.266528][ T5897] usb 6-1: media controller created [ 1066.305994][T11449] Bluetooth: hci6: command tx timeout [ 1066.313212][ T30] audit: type=1400 audit(1752691630.565:1163): avc: denied { setopt } for pid=18326 comm="syz.1.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1066.347821][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1066.422229][T18332] 9pnet_fd: Insufficient options for proto=fd [ 1066.530937][ T5897] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1066.537949][ T5897] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1066.556588][ T5897] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1066.641527][T18279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1066.652492][T18279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1066.669042][T18279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1066.688322][T18279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1066.762229][T18338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.770857][T18338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.779223][T18338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.787611][T18338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.797460][T18338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.805953][T18338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.897751][ T5897] usb 6-1: USB disconnect, device number 46 [ 1066.974095][T18338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.982954][T18338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.992267][T18338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.216735][T18338] sctp_transport_update_pmtu: 48 callbacks suppressed [ 1067.216784][T18338] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1067.234900][T18338] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1067.246294][T18338] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1067.261513][T18338] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1067.282530][T18338] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1067.293809][T18338] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1067.305116][T18338] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1067.316486][T18338] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1067.327906][T18338] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1067.339781][T18338] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1068.406478][T11449] Bluetooth: hci6: command tx timeout [ 1069.755528][ T30] audit: type=1400 audit(1752691634.305:1164): avc: denied { ioctl } for pid=18355 comm="syz.2.3021" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=61981 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1069.955126][T18279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.163499][T18279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.189676][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.196789][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.268403][T18279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1070.279063][T18279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1070.393228][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.400450][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.469112][T11449] Bluetooth: hci6: command tx timeout [ 1072.366059][T18367] FAULT_INJECTION: forcing a failure. [ 1072.366059][T18367] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.628380][T18380] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3023'. [ 1072.638111][T18367] CPU: 0 UID: 0 PID: 18367 Comm: syz.1.3022 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1072.638137][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1072.638148][T18367] Call Trace: [ 1072.638155][T18367] [ 1072.638162][T18367] dump_stack_lvl+0x16c/0x1f0 [ 1072.638190][T18367] should_fail_ex+0x512/0x640 [ 1072.638217][T18367] should_failslab+0xc2/0x120 [ 1072.638243][T18367] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1072.638268][T18367] ? skb_clone+0x190/0x3f0 [ 1072.638296][T18367] skb_clone+0x190/0x3f0 [ 1072.638320][T18367] netlink_deliver_tap+0xabd/0xd30 [ 1072.638355][T18367] netlink_unicast+0x702/0x850 [ 1072.638376][T18367] ? __pfx_netlink_unicast+0x10/0x10 [ 1072.638401][T18367] netlink_ack+0x696/0xb80 [ 1072.638427][T18367] netlink_rcv_skb+0x332/0x420 [ 1072.638444][T18367] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1072.638471][T18367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1072.638498][T18367] ? netlink_deliver_tap+0x1ae/0xd30 [ 1072.638530][T18367] netlink_unicast+0x58d/0x850 [ 1072.638551][T18367] ? __pfx_netlink_unicast+0x10/0x10 [ 1072.638576][T18367] netlink_sendmsg+0x8d1/0xdd0 [ 1072.638598][T18367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1072.638626][T18367] ____sys_sendmsg+0xa98/0xc70 [ 1072.638644][T18367] ? copy_msghdr_from_user+0x10a/0x160 [ 1072.638667][T18367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1072.638702][T18367] ___sys_sendmsg+0x134/0x1d0 [ 1072.638728][T18367] ? __pfx____sys_sendmsg+0x10/0x10 [ 1072.638749][T18367] ? __lock_acquire+0x622/0x1c90 [ 1072.638801][T18367] __sys_sendmsg+0x16d/0x220 [ 1072.638825][T18367] ? __pfx___sys_sendmsg+0x10/0x10 [ 1072.638861][T18367] do_syscall_64+0xcd/0x4c0 [ 1072.638887][T18367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.638904][T18367] RIP: 0033:0x7fc6c518e929 [ 1072.638919][T18367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.638935][T18367] RSP: 002b:00007fc6c5f34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.638953][T18367] RAX: ffffffffffffffda RBX: 00007fc6c53b5fa0 RCX: 00007fc6c518e929 [ 1072.638965][T18367] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1072.638975][T18367] RBP: 00007fc6c5f34090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.638985][T18367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.638996][T18367] R13: 0000000000000000 R14: 00007fc6c53b5fa0 R15: 00007ffc2b88ac28 [ 1072.639021][T18367] [ 1072.704842][ T30] audit: type=1400 audit(1752691637.305:1165): avc: denied { egress } for pid=1997 comm="kworker/1:2" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1073.318376][ T30] audit: type=1400 audit(1752691637.305:1166): avc: denied { sendto } for pid=1997 comm="kworker/1:2" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1073.324689][T18385] 9pnet_fd: Insufficient options for proto=fd [ 1073.465129][ T30] audit: type=1400 audit(1752691637.825:1167): avc: denied { listen } for pid=18369 comm="syz.6.3023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1073.580127][ T30] audit: type=1400 audit(1752691637.875:1168): avc: denied { map } for pid=18369 comm="syz.6.3023" path="socket:[63395]" dev="sockfs" ino=63395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1073.607707][ T30] audit: type=1400 audit(1752691637.875:1169): avc: denied { read } for pid=18369 comm="syz.6.3023" path="socket:[63395]" dev="sockfs" ino=63395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1073.632911][T18391] netlink: 'syz.1.3028': attribute type 2 has an invalid length. [ 1073.654718][T18279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.662530][T18391] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3028'. [ 1073.684555][ T30] audit: type=1400 audit(1752691638.065:1170): avc: denied { read } for pid=18387 comm="syz.1.3027" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1073.713893][ T30] audit: type=1400 audit(1752691638.065:1171): avc: denied { open } for pid=18387 comm="syz.1.3027" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1073.738966][ T30] audit: type=1400 audit(1752691638.065:1172): avc: denied { ioctl } for pid=18387 comm="syz.1.3027" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1073.758139][T18279] veth0_vlan: entered promiscuous mode [ 1073.819897][T18279] veth1_vlan: entered promiscuous mode [ 1073.857900][T18279] veth0_macvtap: entered promiscuous mode [ 1073.876463][T18397] random: crng reseeded on system resumption [ 1073.924750][T18279] veth1_macvtap: entered promiscuous mode [ 1074.009345][T18400] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3031'. [ 1074.025832][T18400] overlayfs: failed to resolve './file1': -2 [ 1074.654076][T18279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.670271][T18407] 9pnet_fd: Insufficient options for proto=fd [ 1074.680521][ T30] audit: type=1400 audit(1752691639.265:1173): avc: denied { write } for pid=18406 comm="syz.1.3033" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1074.721367][T18279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.738956][T18279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.750488][T18279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.800735][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1074.800749][ T30] audit: type=1400 audit(1752691639.355:1175): avc: denied { execute } for pid=18406 comm="syz.1.3033" path="/575/cpu.stat" dev="tmpfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1074.850566][T18279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.859301][T18279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.903698][ T30] audit: type=1400 audit(1752691639.355:1176): avc: denied { create } for pid=18406 comm="syz.1.3033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1074.928556][T18414] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1075.625292][ T30] audit: type=1400 audit(1752691640.225:1177): avc: denied { mount } for pid=18421 comm="syz.1.3037" name="/" dev="configfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1075.742463][ T973] net_ratelimit: 142 callbacks suppressed [ 1075.742482][ T973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1076.044713][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.050613][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.061032][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.062756][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.123940][ T30] audit: type=1400 audit(1752691640.725:1178): avc: denied { write } for pid=18418 comm="syz.6.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1076.235098][ T30] audit: type=1400 audit(1752691640.835:1179): avc: denied { mounton } for pid=18279 comm="syz-executor" path="/root/syzkaller.2K6I4C/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1076.259872][T11701] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1076.290537][ T30] audit: type=1400 audit(1752691640.835:1180): avc: denied { mount } for pid=18279 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1076.313408][ T30] audit: type=1400 audit(1752691640.835:1181): avc: denied { mount } for pid=18279 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1076.432529][ T30] audit: type=1400 audit(1752691640.835:1182): avc: denied { mounton } for pid=18279 comm="syz-executor" path="/root/syzkaller.2K6I4C/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1076.441281][T11701] usb 2-1: device descriptor read/64, error -71 [ 1076.479527][ T30] audit: type=1400 audit(1752691640.835:1183): avc: denied { mounton } for pid=18279 comm="syz-executor" path="/root/syzkaller.2K6I4C/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=63762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1076.512183][ T30] audit: type=1400 audit(1752691640.915:1184): avc: denied { mounton } for pid=18279 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1076.731100][T18442] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3042'. [ 1076.747482][T18442] overlayfs: failed to resolve './file1': -2 [ 1077.030882][T11701] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1077.280575][ T973] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1077.400511][T11701] usb 2-1: device descriptor read/64, error -71 [ 1077.462085][ T973] usb 7-1: Using ep0 maxpacket: 8 [ 1077.490132][ T973] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1077.510781][T11701] usb usb2-port1: attempt power cycle [ 1077.524737][ T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.567654][ T973] usb 7-1: Product: syz [ 1077.578097][ T973] usb 7-1: Manufacturer: syz [ 1077.594125][ T973] usb 7-1: SerialNumber: syz [ 1077.622140][ T973] usb 7-1: config 0 descriptor?? [ 1078.125325][T11701] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1078.481295][ T973] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1078.498547][T11701] usb 2-1: device descriptor read/8, error -71 [ 1079.231669][ T1997] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1079.470520][ T1997] usb 3-1: Using ep0 maxpacket: 32 [ 1079.484769][ T1997] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1079.493261][ T1997] usb 3-1: config 0 has no interface number 0 [ 1079.512474][ T1997] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1079.527436][ T1997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.541902][ T1997] usb 3-1: Product: syz [ 1079.550905][ T1997] usb 3-1: Manufacturer: syz [ 1079.557836][ T1997] usb 3-1: SerialNumber: syz [ 1079.574675][ T1997] usb 3-1: config 0 descriptor?? [ 1079.601879][ T1997] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1079.632379][ T1997] usb 3-1: selecting invalid altsetting 1 [ 1079.646536][ T1997] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1079.666685][ T1997] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1079.695399][ T1997] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1079.714029][ T1997] usb 3-1: media controller created [ 1079.740735][ T1997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1079.784871][T18462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.809181][T18462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.818540][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1079.818556][ T30] audit: type=1400 audit(1752691644.425:1197): avc: denied { write } for pid=18473 comm="syz.1.3050" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1079.861386][ T30] audit: type=1400 audit(1752691644.445:1198): avc: denied { open } for pid=18473 comm="syz.1.3050" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1079.895544][ T30] audit: type=1400 audit(1752691644.445:1199): avc: denied { ioctl } for pid=18473 comm="syz.1.3050" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1080.238374][T18488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18488 comm=syz.3.3053 [ 1080.852684][ T1997] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1080.882019][T18462] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1081.767103][ T1997] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1081.872863][ T973] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1081.908491][ T1997] usb 3-1: USB disconnect, device number 51 [ 1082.147897][ T973] usb 7-1: USB disconnect, device number 13 [ 1082.556515][T18491] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3054'. [ 1082.566234][T18491] overlayfs: failed to resolve './file1': -2 [ 1083.050124][ T30] audit: type=1400 audit(1752691647.645:1200): avc: denied { unmount } for pid=14692 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1083.085933][T18497] [U] M٭Q& K4 [ 1083.090946][T18497] [U] [)U}ǔJϬ}NSEF* NZF[F_H'W"X~;VA)^`1C':ZFOB *?۟CZS<8ZNѷјEY TT<$CRƖ/VG {Y~Y5\;ƃZDXYA"XIF{`A$í55?SAMOͻ*K [ 1083.500062][ T30] audit: type=1400 audit(1752691648.095:1201): avc: denied { create } for pid=18518 comm="syz.2.3062" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1083.530838][T18521] 9pnet_fd: Insufficient options for proto=fd [ 1083.642875][ T30] audit: type=1400 audit(1752691648.245:1202): avc: denied { create } for pid=18524 comm="syz.3.3064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1083.750724][ T1997] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1083.750783][ T973] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1083.989437][ T30] audit: type=1400 audit(1752691648.265:1203): avc: denied { ioctl } for pid=18524 comm="syz.3.3064" path="socket:[62412]" dev="sockfs" ino=62412 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1084.126609][ T1997] usb 3-1: Using ep0 maxpacket: 8 [ 1084.140460][ T973] usb 7-1: Using ep0 maxpacket: 16 [ 1084.149825][T18534] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1085.005775][ T973] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1085.016270][ T973] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.022011][ T1997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.027327][ T973] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1085.049434][ T973] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1085.059087][ T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.069166][ T973] usb 7-1: Product: syz [ 1085.079275][ T973] usb 7-1: Manufacturer: syz [ 1085.084019][ T973] usb 7-1: SerialNumber: syz [ 1085.106965][ T1997] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1085.237478][ T1997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.347559][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.409423][ T1997] usb 3-1: config 0 descriptor?? [ 1085.481071][ T30] audit: type=1400 audit(1752691650.065:1204): avc: denied { execute } for pid=18544 comm="syz.3.3066" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1085.517008][T18547] netlink: zone id is out of range [ 1085.531575][T18547] netlink: zone id is out of range [ 1085.567075][T18547] netlink: zone id is out of range [ 1085.578609][T18547] netlink: zone id is out of range [ 1085.586311][T18547] netlink: zone id is out of range [ 1085.591787][T18547] netlink: zone id is out of range [ 1085.597540][T18547] netlink: zone id is out of range [ 1085.608238][T18547] netlink: zone id is out of range [ 1085.613519][T18547] netlink: zone id is out of range [ 1086.419941][ T30] audit: type=1400 audit(1752691651.015:1205): avc: denied { ioctl } for pid=18556 comm="syz.1.3069" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1086.703603][ T973] usb 7-1: 0:2 : does not exist [ 1086.882678][ T973] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1086.972617][ T973] usb 7-1: USB disconnect, device number 14 [ 1087.097509][T18445] udevd[18445]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1087.163843][ T30] audit: type=1400 audit(1752691651.765:1206): avc: denied { read } for pid=18564 comm="syz.3.3072" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1087.186937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1087.195723][ T30] audit: type=1400 audit(1752691651.765:1207): avc: denied { open } for pid=18564 comm="syz.3.3072" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1087.233445][T18565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1087.357766][T18565] ------------[ cut here ]------------ [ 1087.363424][T18565] WARNING: CPU: 1 PID: 18565 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1087.373849][T18565] Modules linked in: [ 1087.378151][T18565] CPU: 1 UID: 0 PID: 18565 Comm: syz.3.3072 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1087.390606][T18565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1087.400905][T18565] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1087.403422][ T973] usb 3-1: USB disconnect, device number 52 [ 1087.407595][T18565] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d da fb 7b 0e 00 75 0b c6 05 d1 fb 7b 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 1087.433435][T18565] RSP: 0018:ffffc900049d7908 EFLAGS: 00010246 [ 1087.439515][T18565] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1087.447564][T18565] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000040dc0 [ 1087.455626][T18565] RBP: 000000127fd7a758 R08: 0000000000000007 R09: 0000000000000000 [ 1087.463647][T18565] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000019 [ 1087.471717][T18565] R13: 1ffff9200093af36 R14: 000000127fd7a758 R15: 0000000000000019 [ 1087.479722][T18565] FS: 00007fc807da76c0(0000) GS:ffff888124813000(0000) knlGS:0000000000000000 [ 1087.489303][T18565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1087.496459][T18565] CR2: 0000200000169018 CR3: 0000000061df7000 CR4: 00000000003526f0 [ 1087.504552][T18565] DR0: 0000040000000000 DR1: 000200000000064f DR2: 000000000000000a [ 1087.512720][T18565] DR3: 0000000000000005 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1087.520778][T18565] Call Trace: [ 1087.524085][T18565] [ 1087.527055][T18565] ? __pfx_stack_trace_save+0x10/0x10 [ 1087.532649][T18565] ? stack_depot_save_flags+0x28/0xa40 [ 1087.538164][T18565] ? __lock_acquire+0xb8a/0x1c90 [ 1087.543165][T18565] ? __lock_acquire+0xb8a/0x1c90 [ 1087.548138][T18565] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1087.554552][T18565] ? __mutex_trylock_common+0xe9/0x250 [ 1087.560064][T18565] ? __lock_acquire+0xb8a/0x1c90 [ 1087.565086][T18565] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 1087.570841][T18565] __alloc_pages_noprof+0xb/0x1b0 [ 1087.575949][T18565] ___kmalloc_large_node+0x84/0x1e0 [ 1087.581206][T18565] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 1087.586854][T18565] __kmalloc_large_node_noprof+0x1c/0x70 [ 1087.592848][T18565] __kmalloc_noprof.cold+0xc/0x61 [ 1087.598111][T18565] comedi_unlocked_ioctl+0x1757/0x2e90 [ 1087.603703][T18565] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1087.609663][T18565] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1087.615581][T18565] ? do_vfs_ioctl+0x523/0x1a60 [ 1087.620525][T18565] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1087.625594][T18565] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1087.632225][T18565] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1087.638767][T18565] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1087.645677][T18565] ? hook_file_ioctl_common+0x145/0x410 [ 1087.651309][T18565] ? selinux_file_ioctl+0x180/0x270 [ 1087.656559][T18565] ? selinux_file_ioctl+0xb4/0x270 [ 1087.661729][T18565] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1087.667549][T18565] __x64_sys_ioctl+0x18e/0x210 [ 1087.672376][T18565] do_syscall_64+0xcd/0x4c0 [ 1087.676898][T18565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.682847][T18565] RIP: 0033:0x7fc806f8e929 [ 1087.687271][T18565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.707101][T18565] RSP: 002b:00007fc807da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.715669][T18565] RAX: ffffffffffffffda RBX: 00007fc8071b5fa0 RCX: 00007fc806f8e929 [ 1087.723739][T18565] RDX: 0000200000000040 RSI: 000000008010640b RDI: 0000000000000003 [ 1087.731798][T18565] RBP: 00007fc807010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1087.739766][T18565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.747775][T18565] R13: 0000000000000000 R14: 00007fc8071b5fa0 R15: 00007fff88375fa8 [ 1087.755783][T18565] [ 1087.758798][T18565] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1087.766057][T18565] CPU: 1 UID: 0 PID: 18565 Comm: syz.3.3072 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1087.778095][T18565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1087.788145][T18565] Call Trace: [ 1087.791417][T18565] [ 1087.794345][T18565] dump_stack_lvl+0x3d/0x1f0 [ 1087.798930][T18565] panic+0x71c/0x800 [ 1087.802811][T18565] ? __pfx_panic+0x10/0x10 [ 1087.807213][T18565] ? show_trace_log_lvl+0x29b/0x3e0 [ 1087.812416][T18565] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1087.818468][T18565] check_panic_on_warn+0xab/0xb0 [ 1087.823396][T18565] __warn+0xf6/0x3c0 [ 1087.827288][T18565] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1087.833353][T18565] report_bug+0x3c3/0x580 [ 1087.837671][T18565] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1087.843720][T18565] handle_bug+0x184/0x210 [ 1087.848035][T18565] exc_invalid_op+0x17/0x50 [ 1087.852518][T18565] asm_exc_invalid_op+0x1a/0x20 [ 1087.857346][T18565] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 1087.864004][T18565] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d da fb 7b 0e 00 75 0b c6 05 d1 fb 7b 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 1087.883594][T18565] RSP: 0018:ffffc900049d7908 EFLAGS: 00010246 [ 1087.889649][T18565] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1087.897608][T18565] RDX: 0000000000000000 RSI: 0000000000000019 RDI: 0000000000040dc0 [ 1087.905578][T18565] RBP: 000000127fd7a758 R08: 0000000000000007 R09: 0000000000000000 [ 1087.913541][T18565] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000019 [ 1087.921500][T18565] R13: 1ffff9200093af36 R14: 000000127fd7a758 R15: 0000000000000019 [ 1087.929472][T18565] ? __pfx_stack_trace_save+0x10/0x10 [ 1087.934859][T18565] ? stack_depot_save_flags+0x28/0xa40 [ 1087.940411][T18565] ? __lock_acquire+0xb8a/0x1c90 [ 1087.945347][T18565] ? __lock_acquire+0xb8a/0x1c90 [ 1087.950288][T18565] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1087.956613][T18565] ? __mutex_trylock_common+0xe9/0x250 [ 1087.962056][T18565] ? __lock_acquire+0xb8a/0x1c90 [ 1087.966977][T18565] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 1087.972592][T18565] __alloc_pages_noprof+0xb/0x1b0 [ 1087.977618][T18565] ___kmalloc_large_node+0x84/0x1e0 [ 1087.982819][T18565] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 1087.988445][T18565] __kmalloc_large_node_noprof+0x1c/0x70 [ 1087.994099][T18565] __kmalloc_noprof.cold+0xc/0x61 [ 1087.999119][T18565] comedi_unlocked_ioctl+0x1757/0x2e90 [ 1088.004572][T18565] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1088.010471][T18565] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1088.016287][T18565] ? do_vfs_ioctl+0x523/0x1a60 [ 1088.021036][T18565] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1088.026049][T18565] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 1088.032539][T18565] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1088.039024][T18565] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1088.045870][T18565] ? hook_file_ioctl_common+0x145/0x410 [ 1088.051412][T18565] ? selinux_file_ioctl+0x180/0x270 [ 1088.056600][T18565] ? selinux_file_ioctl+0xb4/0x270 [ 1088.061698][T18565] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1088.068813][T18565] __x64_sys_ioctl+0x18e/0x210 [ 1088.073581][T18565] do_syscall_64+0xcd/0x4c0 [ 1088.078080][T18565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.083969][T18565] RIP: 0033:0x7fc806f8e929 [ 1088.088377][T18565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.107978][T18565] RSP: 002b:00007fc807da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1088.116387][T18565] RAX: ffffffffffffffda RBX: 00007fc8071b5fa0 RCX: 00007fc806f8e929 [ 1088.124355][T18565] RDX: 0000200000000040 RSI: 000000008010640b RDI: 0000000000000003 [ 1088.132307][T18565] RBP: 00007fc807010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1088.140255][T18565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.148205][T18565] R13: 0000000000000000 R14: 00007fc8071b5fa0 R15: 00007fff88375fa8 [ 1088.156191][T18565] [ 1088.159436][T18565] Kernel Offset: disabled [ 1088.163761][T18565] Rebooting in 86400 seconds..