last executing test programs: 11m27.728070225s ago: executing program 1 (id=3015): mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x50, 0xffffffffffffffff, 0x403a2000) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0xa0c, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) fcntl$lock(r2, 0x24, &(0x7f00000000c0)={0x2, 0x0, 0x2, 0x9, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@flushsa={0x11c, 0x1c, 0x200, 0x70bd2c, 0x25dfdbfb, {0x6c}, [@sec_ctx={0xf2, 0x8, {0xee, 0x8, 0x1, 0x6, 0xe6, "d453ce52ff94058720be151c486d12fc2a8bc56653480db747f1a452338abf45974e6690bd1d07424b1ed914f6ecad5cb1b18ddc5db59935c54b991dbf5f5ea82ff39087909d1b617662791b2706777750840b2dc288e7820e0dba642cf2de4c29e5d4a22f5cfae55c81b51f130523f6d0c9ee99d3f4b44f5a952936c27b65145c863fa53539ab176f7d82cf33f40c9ece36ba4097ac539fd99a10e62e3564957b1ff317d64c051adee917ba3fd7def2f0b4efbf74d6a1b29a7a69bc1f32e4bf7cde7c197913427a7a608e72c02a6bc9b907934a400810d8e13d6f327afa5fb8ac8ba081bce3"}}, @policy_type={0xa}, @tfcpad={0x8, 0x16, 0xfa76}]}, 0x11c}}, 0x8000) r7 = openat2(r1, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x400e41, 0x101, 0x23}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x8}}, @var={0x6, 0x0, 0x0, 0xe, 0x4}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x4}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000540)=""/192, 0x54, 0xc0, 0x1, 0x4, 0x10000, @value=r7}, 0x28) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xa90}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r9, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'netdevsim\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x845}, 0x20000040) sendto$inet6(r7, &(0x7f0000000840)="ee0d67d3bfe92a50a3e88693882309653b3cdc5ec5fa2f5541ce3962927a2375d597c39fd599ad6d8e7b5968b1e14a0dc56838f64c3f5e10fcbcd0f193fb9c58a903a57bd3", 0x45, 0x40, &(0x7f00000008c0)={0xa, 0x4e22, 0x7, @empty, 0x4}, 0x1c) r10 = syz_open_dev$MSR(&(0x7f0000000900), 0x8, 0x0) lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x1008, &(0x7f0000000a80)={[{@huge_within_size}, {@inode64}], [{@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, '[\xf8'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@dont_measure}, {@obj_role={'obj_role', 0x3d, '--)$q#{'}}, {@uid_lt={'uid<', r11}}, {@subj_user}, {@subj_user={'subj_user', 0x3d, 'pci\x00'}}]}) r12 = shmget(0x2, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) shmat(r12, &(0x7f0000ffb000/0x3000)=nil, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r7, 0x8004510b, &(0x7f0000000b40)) r13 = syz_open_dev$media(&(0x7f0000000b80), 0x4, 0x1811c3) ioctl$COMEDI_LOCK(r7, 0x6405) r14 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) write$6lowpan_enable(r14, &(0x7f0000000c00)='0', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000c40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001240)={{r13}, r15, 0x0, @unused=[0xd, 0x7fff, 0xff, 0x7], @devid}) 11m27.141139456s ago: executing program 1 (id=3018): set_mempolicy(0x5bd2aa9baf55f6c5, &(0x7f0000000000)=0x4, 0x6b4a) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 11m25.50824926s ago: executing program 1 (id=3022): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', 0xffffffffffffffff, 0x0, 0xf69}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 11m24.247361116s ago: executing program 1 (id=3028): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x128) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000001300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x40000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000dc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002abd7000fcdbdf252c00000008000300", @ANYRES32=r2, @ANYBLOB="0c00990003001f518362d2d5"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000f40)={0x50, 0xfffffffffffffffe, r4, {0x7, 0x2b, 0x9, 0x20000, 0x9, 0x1, 0x0, 0x181a, 0x0, 0x0, 0x20, 0x7e}}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000001000)=ANY=[@ANYBLOB="9a8ee98caf71efbefe2adeeecdd94949b655f87d4809e56f2d5f0abdc7c7dd396dd54d22bdbe909898529ec428cad01c19456113644bf98f7999bdf08f43f4957c62024dfdce747562d3a9af7ff920aa220074d400e16950df6d50c6305c936842f7126ca78fdfaba730db1778b78a07403712", @ANYRES16=r8, @ANYBLOB="ff0000000002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000085) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x36) getdents(r10, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='defcontext']) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x38d, &(0x7f0000001600)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500037f000000000011907800000000ffffffff4e214e20036b9078040000000900000007000000000000004e1baee8bfcfb76a429b95545f92220c69a041ed67948576d31a8c0bd4e690f919f0d80bd992c1c887fe835a0779d6114d8919d079dc02e699ae5b3e916f6c708bd84bc21af131c898d3e9998a967677d0d67535ac16ded6d23ad83830f20d1f1e94d9e34ecdda83bff0d4b00475047698ef581df5fe5c4ca565d504bd87be4857444b6f1bd00adda97d83f79a37c1116515411283b9b261f1356e60ce9554a46b8013b88175e9c2e619e0b43d7a766d6c045a71e1a1f3d48dc145476e489f0157f095fbc45a4dc98b99c7c733d7ffd500c65924402e02ca6aef27bc0809298009a882b1d1a2053a9206d8dc9574fb149cddc07c1043250ecd1989a774be552d4cb37e76a671234d4cf0782f186275b4fffdbe7c64052ffff19028628a573591e22b4786e7f630ae9245d4f45319ffebbe46d32caf85fe4cbaef9da96b209131b5bce1f965ac8483d67357cd3ca1306d49c018c47e3ea362af47f59d3d4e5da102b8ef8bbbb90a9b3e166d858370561ea2a71fbcaead1d22179d68703fbee4790451aa61d9a3677701ba3d17a86f4014a02d7b335b06dc1dd75108f769dd2105b449baca4037e16380e135415e88cb2d91cd6b4e4e3f9344bebbe5e36bc35ad6620d1369df9944eccffb0733d87c91392f8d6974cca39de6d8a87b8ecb6942510871798635369aa99ab30ea9ecce29d3ea2c6736eb469347de18c10178e89a727873c915d0426728721c2e230290ec614073be1592d47a6b6909c8f83d043b173d744ac5a641f4771d7394a91260ddbe047c68abcd90ae87c3829e648410788d0f2b47c7b9b95cb7b607e6d752db7ce1e5b350718001b980770a5e49c109cb7e88f8a8d89435a8e5fd449b542f5f5ac64144a6561f412fdeb6ca22426c14696f0f7ab2f94e7076a5219bf870e916d032021e21243edb8a01265cf9ce8714dfcbecebf096248dcf75f1c0eb938ee054f2dc2a7f66e01f0eb49e591965346ca7eac26ab1b91c28c35235926be9596f39f2c6ba2a09673be6e951a400c5ba96c5e87d7afc8544d68046645b9f16c58c7ba8664a84fc3fe8978cdf0814dc3f4172a153fee4e9afd5087960bfcdfe7bef560776d2e4abb6c317f5e9b8649d6ba1924351d66e826fe09e060430d0fccf3cda3cdd96988af4a90c5e6645109cb33ce0e766872e394ed3cb408e9c5f33d87f25156bd0a7"], 0x0) recvmmsg(r11, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000440)=""/250, 0xfa}], 0x7, &(0x7f00000005c0)=""/52, 0x34}, 0xf}, {{&(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f00000007c0), 0xd}, {&(0x7f0000000800)=""/209, 0xd1}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/155, 0x9b}, {&(0x7f0000000a00)=""/24, 0x18}, {&(0x7f0000000a40)=""/166, 0xaf}], 0x69, &(0x7f0000000b80)=""/62, 0x3e}, 0x6}], 0x3, 0x2, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) syz_emit_ethernet(0x9c, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)={0x0, 0x1, [0x1e7, 0x5c2, 0xea8, 0xe51]}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="14002d80040900000000000000020202178b4a3c478e974d284330d8bf59670600da40ea10abb3f2e99805b4b6fc3c8cb19f5cbb6f36fa4d1073e2129d01a82e6ff80625f5e1fd42e8c71d0000"], 0x30}}, 0x0) 11m23.184282836s ago: executing program 1 (id=3032): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/173, 0xad}], 0x1}, 0x4}], 0x1, 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r6, 0x40309410, &(0x7f00000000c0)={0x6, 0x3, 0x2, 0x3c2, 0x0, [0x7fffffff, 0x1, 0x4, 0x1]}) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x1, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x387}], 0x18, 0x48010}, 0x4000000) syz_emit_ethernet(0x86, &(0x7f0000000bc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x10, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb807f04442be993894b35a336eeca6f"}}}}}}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getpeername$inet(r0, 0x0, &(0x7f0000000040)) 11m20.129486829s ago: executing program 1 (id=3042): syz_emit_vhci(0x0, 0x9) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1]}) r1 = syz_clone(0x21224200, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x701000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7d, &(0x7f0000000300)={0x8, 0x79, 0x6, 0x10, 0x39c1, 0x4, 0x4, 0x40000000}, &(0x7f0000000840)=0x20) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf250e0000001800018014000200677265300075e0b7b7790000000000000000000000d63597a9ad9909facf48714a5bf6ef3a3d6ee19433021b3034b62a"], 0x2c}}, 0x4000040) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) r5 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000600)={{0x1, r7, r8, 0xffffffffffffffff, 0x0, 0x60, 0x8}, 0x10, 0x8001, 0x8001, 0x4, r1, r1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000040)=0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x2, 0x2, 0xd2, 0x4, r9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) timer_create(0x7, 0x0, &(0x7f0000bbdffc)) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r10, &(0x7f0000002380)=[{&(0x7f0000000380)=""/122, 0x7a}], 0x1, 0x7ff, 0x0) 11m19.227765054s ago: executing program 32 (id=3042): syz_emit_vhci(0x0, 0x9) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x18000, 0xfffffffffffffffc, 0x0, 0x2, 0x8000000000000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020000000, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x1c, 0x5, 0x3, 0x2, 0x4000000000002, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x5, 0x7ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xac18, 0x0, 0x0, 0x4000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x1]}) r1 = syz_clone(0x21224200, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x701000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7d, &(0x7f0000000300)={0x8, 0x79, 0x6, 0x10, 0x39c1, 0x4, 0x4, 0x40000000}, &(0x7f0000000840)=0x20) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf250e0000001800018014000200677265300075e0b7b7790000000000000000000000d63597a9ad9909facf48714a5bf6ef3a3d6ee19433021b3034b62a"], 0x2c}}, 0x4000040) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) r5 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000600)={{0x1, r7, r8, 0xffffffffffffffff, 0x0, 0x60, 0x8}, 0x10, 0x8001, 0x8001, 0x4, r1, r1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000040)=0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(r2, 0x7, &(0x7f0000000100)={0x2, 0x2, 0xd2, 0x4, r9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) timer_create(0x7, 0x0, &(0x7f0000bbdffc)) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r10, &(0x7f0000002380)=[{&(0x7f0000000380)=""/122, 0x7a}], 0x1, 0x7ff, 0x0) 3m28.997043108s ago: executing program 0 (id=4433): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x141442, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f00000001c0)) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2542, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8000, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa9}}, 0x18) write$FUSE_INIT(r9, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1000, 0x14210000, 0x81, 0x1005, 0x0, 0xc, 0x0, 0x0, 0x80}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) r10 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, r10, 0x0, 0x0, 0x0, 0x0, 0x2}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x3, 0x5, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x3}, 0x1a) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000140)={0x3, 0x25a}) 3m25.071082022s ago: executing program 0 (id=4444): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b701000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) tkill(0x0, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x39c}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="07060000000000000000090000006a92374d9838b108002f00000000000a00030077"], 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) r10 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r10, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r11 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYRESDEC=r9, @ANYRES16=r10, @ANYRES64=r11, @ANYRESHEX], 0xfe33) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1}, 0x48) 3m23.654653749s ago: executing program 0 (id=4449): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', 0x0, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r3, &(0x7f0000000180)=""/81, 0x51, 0x5) pread64(r2, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xdf}, 0x0, &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000000c0)) read$dsp(r8, &(0x7f00000001c0)=""/95, 0x2) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r9, 0xc048aeca, &(0x7f0000003680)={{0x1, 0x0, 0x80, {0x1000, 0x80a0000, 0x2}}, "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", "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"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) 3m20.334188532s ago: executing program 0 (id=4454): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000437000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0xe1c65000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) socket$inet6(0xa, 0x0, 0xc1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="0010030000003c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) mlock2(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x1) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="210e02ad90e972b212d49b7b10d8cd10cd9391d6"], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x3, @remote, 'vcan0\x00'}}, 0x1e) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="31660ec84220fa4ada936112a777f74214dc772dfbd59225c80c3b43c26f577a1d150beb0603df0baee0ba267864b697fed2e9e3e28dbae79c840c9e1dc6e4ea18e5776bcc7fd5f4d655be8ca4795d8d093f467f387d5d5224905892cd6f4c89bb8b13dc3db0d3e13e481c7c64fb3331ffcd5cc8991b2736c1970abfd692b9a77021e242d1b1d9fa330e61325b29b1052ea7db66f87eea2a939668426c315d3ab970e117757976dc0c150fdb12bade9b", 0xb0}], 0x1}, 0xc004) r6 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r6}) io_uring_enter(r6, 0x2e3b, 0xae2, 0x18, &(0x7f0000000140)={[0x6]}, 0x8) 3m16.557405942s ago: executing program 0 (id=4466): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x20040600, &(0x7f0000000300)="5a1d1156907832bdf15f8bcf0067be9e3067b4f2ee09948234199311c08cc91709ed326175ab28352956b1c362ffdee4a4fc63945deaa1811fd85aceeb1ca741123f8ebd3675c2dd71960e21011e0ea4cf1d6ce686d6e2d88e0a9e846eecb32486a009e00ee0613e59da70f4efc4c540298fc5d42f5250a1739a74dbe0b4e6842cc9cd733e9ab316b20beefe662145b6bf80970ac5b5ac5ac5a2ab186af52e704b64c2ab58b3d342204ed7440bc2f356f11837bce818a46ac0e9c901537ba72ad480ad93a2e5e450f67512eee06710899fad50cff05f6e41538814ab261a60e59a2ddc04748497", 0xe7, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)="a1f346b68ae7a2b86b70a7ed3f2fc120b49a348b295cf55e5662652a2ab0f507b634df288d1d9cfb7f80c31ca12c3e67c2930e85b2f8d776037edf5bfdba92e382745ff14adb15e62e57232b35ba889b70cc7fa6740a071466f1ee40bb978dbe1da7d79a2d97561197eb86fd87d291044dac1b16778c9cc313b3aff19efbc12ba68845359112c4550053c4bcfe36f357c5a710f4eeafc30c475ed75bb9d8d51e4a337bbb1ebc9a2f5530b698") sched_rr_get_interval(r0, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000800ff08000000000000000000530000d8efb9d635e9920fe5cfcac3841aa958f52eb8cdc2a326cdf5842f5b8068c0a91b25500cf85ba0d318986326f4494a54b25a2043f0ac699f957378504d0e0cf8976b28ffceb6868feb5a197820287c93183a31b60b0a749ea3138493098167989ec944e815c0db71a067e4823f02137f868fa22bd85bbdfec321d02435bdf194ab6e708e921997ab0c9e84f433", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 3m15.591659057s ago: executing program 0 (id=4469): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0x9, 0x0, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @loopback, 0xbbc3}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x1, 0x1, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}}]}, 0x60}}, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fanotify_init(0x500, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r3, 0x1, 0x40000019, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r7 = syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec22, 0x400, 0x2, 0x40000337, 0x0, r4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m11.526512811s ago: executing program 5 (id=4479): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f00000002c0)=[{r0}, {r0, 0x40d2}, {r0, 0x1000}, {r0, 0x1008}], 0x4, &(0x7f0000000340), &(0x7f0000000380)={[0x2]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) mkdirat(0xffffffffffffff9c, 0x0, 0xc) pipe2$9p(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x25, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80882, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x10ec25, 0x10000, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1a, 0x6007, @fd_index, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001800)=""/211, 0xd3}, {&(0x7f000001b000)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/110, 0x6e}, {0x0}], 0x4}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) utimes(&(0x7f0000000540)='./file0\x00', &(0x7f00000004c0)={{0x0, 0xea60}, {0x0, 0xea60}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0xff94, 0x2a, 0x10, 0x70bd28, 0x25dfd3fd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0xf}, {0x4, 0x7}}}, 0xffffffffffffffbd}, 0x1, 0x0, 0x0, 0x44}, 0x20008004) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) sendfile(r7, r6, &(0x7f0000000040)=0x10, 0x80000001) 3m9.330258586s ago: executing program 5 (id=4487): syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00062f00fc000004cba1414ec4b4b50000000000ff0200000000000000000000000000010000883e"], 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="62ea80224e6f0cd6"], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2000, @local, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)=ANY=[@ANYBLOB="14000000100001b46b70783cf565960000000000000000000500000a3c000000090a010400000000000000000a000004090001007379a33dd37a310000000008000540000000040900020073797a310000000008000a40fffffffc3c0000000c0a010800000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c0000800800034000000002140000001100010000"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r7) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) 3m8.110421971s ago: executing program 5 (id=4489): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000340)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, 0x0, 0x0, 0x4) syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "efc3d3", 0x40, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0xffff, {0x5, 0x6, "5436ea", 0x400, 0x88, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', [@dstopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 3m5.172356711s ago: executing program 5 (id=4495): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) sigaltstack(0x0, 0x0) 3m3.590724853s ago: executing program 5 (id=4500): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r3, 0x0, 0x0, 0xfffffe04, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/267, 0x10b}], 0x1}, 0x8}], 0x1, 0x40000002, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000001080)={0x5, 0xd, 0x2, 0x5, 0x5, 0x8, "96f865ac131bf78cd2fb00", 0x8, 0x3, 0x8, 0xfd, 0x9, 0x0, 0x6}) 3m1.229223743s ago: executing program 5 (id=4503): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0x9, 0x0, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @loopback, 0xbbc3}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x1, 0x1, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}}]}, 0x60}}, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fanotify_init(0x500, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r3, 0x1, 0x40000019, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r7 = syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec22, 0x400, 0x2, 0x40000337, 0x0, r4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m0.491329437s ago: executing program 33 (id=4469): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0x9, 0x0, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @loopback, 0xbbc3}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x1, 0x1, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}}]}, 0x60}}, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fanotify_init(0x500, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r3, 0x1, 0x40000019, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r7 = syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec22, 0x400, 0x2, 0x40000337, 0x0, r4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m45.739818768s ago: executing program 34 (id=4503): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0x9, 0x0, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @loopback, 0xbbc3}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x1, 0x1, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}}]}, 0x60}}, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fanotify_init(0x500, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r3, 0x1, 0x40000019, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r7 = syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec22, 0x400, 0x2, 0x40000337, 0x0, r4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m37.340805463s ago: executing program 4 (id=4557): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0x9, 0x0, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @loopback, 0xbbc3}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x1, 0x1, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}}]}, 0x60}}, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fanotify_init(0x500, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r3, 0x1, 0x40000019, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r5 = syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec22, 0x400, 0x2, 0x40000337, 0x0, r4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m35.066462525s ago: executing program 4 (id=4561): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x89a2, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000180)={0x401, 0x6}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) connect$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x4, 0xbf22, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) 2m33.719293487s ago: executing program 4 (id=4563): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfff5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd050, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, 0x0, 0x24044884) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, 0x0, 0xa000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe4c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m32.092872779s ago: executing program 4 (id=4566): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000140)='./control\x00', 0x191) inotify_init1(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES32=r0, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) preadv(r6, &(0x7f0000001500), 0x0, 0x0, 0x8) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x78}}, 0x20040054) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r2, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) 2m31.116152371s ago: executing program 4 (id=4569): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0x9, 0x0, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @loopback, 0xbbc3}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x1, 0x1, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}}]}, 0x60}}, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fanotify_init(0x500, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r3, 0x1, 0x40000019, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r5 = syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec22, 0x400, 0x2, 0x40000337, 0x0, r4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m26.872727714s ago: executing program 4 (id=4579): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)='Y', 0x1}], 0x1) read$dsp(r1, &(0x7f00000002c0)=""/4092, 0xffc) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r3) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x40002, 0x0) write$binfmt_elf64(r9, &(0x7f0000000040)=ANY=[], 0xfffffdd5) write$binfmt_aout(r8, 0x0, 0x0) 2m11.740746903s ago: executing program 35 (id=4579): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)='Y', 0x1}], 0x1) read$dsp(r1, &(0x7f00000002c0)=""/4092, 0xffc) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r3) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x40002, 0x0) write$binfmt_elf64(r9, &(0x7f0000000040)=ANY=[], 0xfffffdd5) write$binfmt_aout(r8, 0x0, 0x0) 43.4698194s ago: executing program 2 (id=4841): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="a090", 0x2}], 0x1}, 0xd0a0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="5b20e8487938", 0x6}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x78000, &(0x7f0000000380)) (async) r1 = socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000206050000000000000000000300000105000100070000000900020073797a30000000000c00078008000600000000000500050002000000050004000200000011000300686173683a69702c706f72740000000075c0ff6eab699926f092c5ecaa2b071b68a4cedaf5dc695862037cd8b8eecbdef7024c51bcfe661d6a1a6fc583b0bff9200ccc44333289475e01aeb261d78ed55747bc5a2e26c30e120b085c481984cbd212ba326c7165e30c271f37311db7be6a9b1955"], 0x58}}, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) r4 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000d40)="01", 0x1) 39.496216202s ago: executing program 2 (id=4851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x34, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100000002000000}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40c4) 36.789502527s ago: executing program 2 (id=4857): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x560, &(0x7f0000000480)={0x0, 0x6566, 0x2000, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a8000000010902"], 0x0) r6 = syz_open_dev$dri(&(0x7f00000003c0), 0x80000000, 0x8824c0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x83}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x0, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0xabd66fa, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) pipe(&(0x7f0000000080)) 32.159403237s ago: executing program 2 (id=4872): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', 0x0, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r3, &(0x7f0000000180)=""/81, 0x51, 0x5) pread64(r2, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xdf}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000000c0)) read$dsp(r8, &(0x7f00000001c0)=""/95, 0x2) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r9, 0xc048aeca, &(0x7f0000003680)={{0x1, 0x0, 0x80, {0x1000, 0x80a0000, 0x2}}, "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", "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"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) 29.595006393s ago: executing program 2 (id=4880): syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xfd, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xeb8}, {0xd, 0x24, 0xf, 0x1, 0xffff68e5, 0x100, 0x6, 0xa}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xfc, 0x62, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x10, 0x2, 0xf}}}}}]}}]}}, &(0x7f0000001900)={0x0, 0x0, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x7}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x281c012, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)={0x1, 0x3, 0xe16, 0x6, 0x8e51, 0x7}) ioctl$TIOCSTI(r0, 0x5412, 0x0) 27.156914028s ago: executing program 2 (id=4886): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fanotify_init(0x500, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) fanotify_mark(r2, 0x1, 0x40000019, r3, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r4 = syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec22, 0x400, 0x2, 0x40000337, 0x0, r3}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 13.780134831s ago: executing program 7 (id=4915): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0x9, 0x0, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @loopback, 0xbbc3}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x1, 0x1, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}}]}, 0x60}}, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fanotify_init(0x500, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) fanotify_mark(r2, 0x1, 0x40000019, r3, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r4 = syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec22, 0x400, 0x2, 0x40000337, 0x0, r3}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.460730137s ago: executing program 36 (id=4886): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fanotify_init(0x500, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) fanotify_mark(r2, 0x1, 0x40000019, r3, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r4 = syz_io_uring_setup(0xbe0, &(0x7f0000000640)={0x0, 0xec22, 0x400, 0x2, 0x40000337, 0x0, r3}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.120245711s ago: executing program 6 (id=4921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = dup(r4) write$6lowpan_enable(r5, 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000040)=0x80) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000080)) 8.096358591s ago: executing program 3 (id=4927): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, 0x0, &(0x7f0000000100)=0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x76e1c523, 0x401, 0x4, 0x3, 0x0, 0x16, 0x0, 0x100, 0xa4001f7e}}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, r6, r6) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000480)={0x130, 0x0, r4, {0xdc, 0x3, 0x0, '\x00', {0x7ff, 0xb5, 0x5, 0x4, 0x0, r6, 0xc000, '\x00', 0x6, 0x7, 0x6, 0x8, {0x4, 0x5}, {0x5, 0x1}, {0x2, 0x8d4}, {0x100000000, 0x4}, 0x6, 0x1c, 0x3, 0x8}}}, 0x130) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x30, r7, 0x101, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 7.430697257s ago: executing program 6 (id=4928): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) sigaltstack(0x0, 0x0) 6.644604777s ago: executing program 8 (id=4929): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYRES64=0x0], 0x0, 0x34, 0x50}, 0x28) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x36}}, 0x4004815) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x18c) unshare(0x40400) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) (async) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000580), 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/oss_mixer\x00', 0x400000, 0x0) (async) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="ad03b6c5910fae9d6dcd3292eacac7b6ef915d564c90c200", 0x18) (async) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r7) (async) mkdirat(r6, &(0x7f0000000440)='./file0\x00', 0x80) bind$802154_dgram(r5, &(0x7f00000001c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x4004, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 6.593042562s ago: executing program 3 (id=4930): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x8, &(0x7f0000000300)) epoll_create(0x5) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x1, 0x0, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x40) 6.388935391s ago: executing program 3 (id=4931): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0xc54, @remote, 0x59d5}}, 0x0, 0x0, 0x19, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64, @ANYBLOB="f4b02b86df87851e7be7b383760d80"], 0x138) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x6, r2, 0x3a, r4}, 0x10) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000000)={{@local, 0x3}, 0x1, 0x0, 0x7}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x76, &(0x7f0000000200)={@local, @random="0000101d00", @void, {@ipv4={0x800, @tcp={{0x15, 0x4, 0x2, 0x23, 0x68, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x3c, 0x14, 0x1, 0x1, [{@rand_addr=0x64010100, 0xc07a}, {@loopback, 0x1}, {@multicast2, 0xc}, {@broadcast, 0x1}, {@empty, 0x22f}, {@multicast2, 0x7}, {@local}]}, @end]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xe7}}}}}}, 0x0) 6.249616376s ago: executing program 8 (id=4932): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000040)=0x3114) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.813286829s ago: executing program 7 (id=4933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r4, 0x0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003fc0)=ANY=[], 0x1060}, 0x1, 0x0, 0x0, 0x4805}, 0x20000000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) 5.721569552s ago: executing program 8 (id=4934): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002122, 0x0) socket(0x2, 0x80805, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r5, 0x80047437, &(0x7f0000000140)=0x10) io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2, 0x0, r4}) writev(r4, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 5.390105939s ago: executing program 6 (id=4935): ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100230100003402000002000000080001", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) syz_usb_connect(0x3, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xd5, 0x63, 0x51, 0x20, 0x24df, 0xd062, 0xc03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x6, 0xc0, 0xf, [{{0x9, 0x4, 0xa0, 0x1, 0x0, 0xe0, 0x1, 0x3, 0x40}}]}}]}}, 0x0) 4.836981327s ago: executing program 3 (id=4936): socket$caif_stream(0x25, 0x1, 0x3) socket$caif_stream(0x25, 0x1, 0x1) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x3ff, "e571cdb7594d31d82ea421fe524025789a63b51b3d93bd4d47da00d8af5ce8cf", 0x4, 0x100, 0x7, 0xff, 0x4, 0x4, 0x7, 0x4}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) socket$caif_seqpacket(0x25, 0x5, 0x5) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f00000002c0)={0x18, 0x2f, 0x0, {0x2}}, 0x18) write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) chdir(&(0x7f0000000100)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x1, 0x0, 0x4, {0xa, 0x4e23, 0x9, @loopback, 0x5}}}, 0x80, 0x0, 0xfffffffffffffeb3}, 0x2000f765) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="4ede00"}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='ext4\x00', 0x8000, 0x0) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, 0x0, 0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f0000000140)={0x0, {0x0, 0xe7}}) 4.56453046s ago: executing program 7 (id=4937): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) 4.382679958s ago: executing program 7 (id=4938): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000020d700000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x90) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000240)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000ffc000/0x1000)=nil, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) r5 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x181801) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x7) memfd_secret(0x80000) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000340)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x80) 3.084948869s ago: executing program 7 (id=4939): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x40d2}, {r0, 0x1000}, {r0, 0x1008}], 0x3, &(0x7f0000000340), &(0x7f0000000380)={[0x2]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) mkdirat(0xffffffffffffff9c, 0x0, 0xc) pipe2$9p(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x25, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80882, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x10ec25, 0x10000, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1a, 0x6007, @fd_index, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001800)=""/211, 0xd3}, {&(0x7f000001b000)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/110, 0x6e}, {0x0}], 0x4}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) utimes(&(0x7f0000000540)='./file0\x00', &(0x7f00000004c0)={{0x0, 0xea60}, {0x0, 0xea60}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0xff94, 0x2a, 0x10, 0x70bd28, 0x25dfd3fd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0xf}, {0x4, 0x7}}}, 0xffffffffffffffbd}, 0x1, 0x0, 0x0, 0x44}, 0x20008004) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) sendfile(r7, r6, &(0x7f0000000040)=0x10, 0x80000001) 2.963825152s ago: executing program 8 (id=4940): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000), 0x21c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0xc7b4, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r2, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 2.484996942s ago: executing program 6 (id=4941): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010002070000000000000900020073797a25000000000800410072786500140033"], 0x38}, 0x1, 0xf00000000000000, 0x0, 0x40000}, 0x0) 2.301065816s ago: executing program 6 (id=4942): r0 = socket(0x2, 0x3, 0xff) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x87) socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x1c780, 0x44) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010101, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r2, 0xa35d1000) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5, 0x2}, {}, @time=@time={0x401, 0xffffffff}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x4, 0x40}, {}, @quote={{0x7, 0xfb}, 0x7, &(0x7f0000000040)={0x2e, 0xb, 0x79, 0x5, @tick=0x1b, {0x2, 0x1}, {0x7, 0x9}, @note={0x8c, 0x9, 0x35, 0xff, 0x101}}}}, {0x10, 0xfd, 0x94, 0x2, @time={0x4, 0x7}, {}, {0xfc, 0x9}, @time=@tick=0x9}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0x1}, {}, {0x0, 0x6}, @time}], 0x70) 1.897901526s ago: executing program 8 (id=4943): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e"], 0x6c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x200000) 1.477440325s ago: executing program 8 (id=4944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) add_key$user(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="48c5"], 0x69) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd2, 0x15, 0x34, 0x8, 0x41e, 0x401c, 0x1d9c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4b, 0x19, 0x86}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(r4) inotify_init1(0x80000) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r5, 0x0, 0x30, 0x15, @val=@netfilter={0x3, 0x0, 0x4, 0x1}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000ac0)={0x5, &(0x7f0000000080)=[{0x1, 0x3, 0x1, 0x7}, {0x800, 0x7c, 0x0, 0xb}, {0xf, 0xc, 0x7}, {0x7, 0x4, 0x5, 0x5}, {0x6, 0x6, 0xb7, 0x200}]}, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb0013dd", @ANYRES8=r6], 0x0) r7 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES32=r1], 0x0) syz_usb_disconnect(r7) syz_usb_ep_write(r7, 0x2, 0x64, &(0x7f0000000300)="e50a47d3c6577c3ef96cebfb38bf840fccb1a760e5d33f8a5196345391978dd8bdc68a5beeaeba5139a1b77ba26ffa8caf1692a118b8659023a020545ecf5d4ac58e58dfafffc4eeca6f3b256fff227a595fb501e4ba3612e4419eb97daa54fe138d8637") syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.47251383s ago: executing program 7 (id=4945): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', 0x0, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r3, &(0x7f0000000180)=""/81, 0x51, 0x5) pread64(r2, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xdf}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000000c0)) read$dsp(r8, &(0x7f00000001c0)=""/95, 0x2) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r9, 0xc048aeca, &(0x7f0000003680)={{0x1, 0x0, 0x80, {0x1000, 0x80a0000, 0x2}}, "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", "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"}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) 1.431512883s ago: executing program 3 (id=4946): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000500)=@ccm_128={{0x304}, 'A\x00', "7c216c5c73c6e61855fab3561e62a770", "396d1d54", "ef84ad98520a3900"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r1, r2, 0x0, 0xffffffff004) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc1200, 0x0, 0xfffffec8, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8}, 0x94) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0x0, &(0x7f0000000240)) 116.537651ms ago: executing program 6 (id=4947): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="ddd6541ca36da05536d960fb67d7de345044bcf8", @ANYBLOB="6fa207684f23c10241c5a60cf61f3bb454ae00b839dc184e0dcb7dba139ae48946c752dbae45f61361aadf94edde4495704b906a39cffc853c836a1ba5fe1abd82721f4911fe86306e3c202420ade0b74e7d8e0aa0ac18b154dbf566bfa6fb391c", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8c0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r0 = socket$inet(0x2, 0x5, 0xfffffffd) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) gettid() r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) read$alg(r2, &(0x7f0000000040)=""/136, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r4, @ANYRES32=r4, @ANYBLOB="796100000000000000097e00000008040300", @ANYRES32=0x0, @ANYBLOB="050019010e000000"], 0x24}, 0x1, 0x0, 0x0, 0x2004c851}, 0x4020050) syz_usb_connect(0x2, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000221ecfa383a854ec9a593275624081e041d40bfc5010203010902120001025320882f49482bbc730904df"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x98, &(0x7f00000005c0)=ANY=[@ANYBLOB="98031522705b74b8fd57b8e0094a4f2d0223f7efdb0b63f6be1706fd4167058770cc5c5b88b8a39a2c3bcae6a76cb34295993e5c40137bdc2fbc4d96859a3d98f7f36ef0d3327659c8544c58e6b5c310395e79dbd1f87123653c9348ead4a9c33c718d9ead3db4e2ee7977b11df323c56780f84d4b4f234421d50ecf7421ca9ab4a9368650b4725fd36f4eceec4b54321bbfbb4bd62bb6c2"]}]}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001a104079850210d53d09c304d6bca13b99c0f583ddb4df011779379a3facb953cf", @ANYRESOCT=0x0, @ANYBLOB="080028bd7000fddbdf256b0000000a00060008021100000100000a001a00ffffffffffff00000a0006000802110000000000"], 0x38}, 0x1, 0x0, 0x0, 0x860}, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000940)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x895}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000300)="646ad4006a9583f277e37d4c3a62b0d2381ccd66df554e843b793c7d2fb0f4823fb8dc5041f8ed1fc48dfec7280a0d3428267efa859fb33f674a8973ac13aba7", 0x40}], 0x1, &(0x7f0000000900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x2, 0x814) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) 0s ago: executing program 3 (id=4948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x3000, 0x1000, &(0x7f0000001000/0x1000)=nil}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_CONNECTINFO(r2, 0x40085511, &(0x7f0000000300)) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0x9, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xcb6, 0x400, 0x0, 0x1bb}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x1002, @fd_index=0x7, 0x3ff, &(0x7f0000001540)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000380)="c53705257215a9b4db553e63118c68f780aa2d0907ae73f9dc8df3aa90cf9c2b185a21f85dc4a7d6208783386dbfc86bf5b943f8cdeb856e151fbd141cc005a338c94e17c851", 0x46}, {&(0x7f0000001440)="dba5c48b52cd39e024b5944d80dd94657240f88382512ad0ba146448c38e262d46f16c06796d48682aa7df60899422d61d2624ee420cd204f6ae17b4f0772263a25645f3c905bc6b52bdf3b91f80d1670aae574e5c9ba9de1e74edd4d1efd39c9358b22cb4e1bdb46bee2b5837b6797d4ee3fdbb991230d9559cbbfa4e72803e98055875295721ee9e792ca6b2ba2545591c92e990057269121496c9d2b690bb88aa7365bb3a9378a33c940b7af3e699ee69eae06b1dfc4c7c7455949c1cada726449dc849b3cd2868b7eeea3fd8adc61202c47c4284ecb0f3bb8b", 0xdb}], 0x3, 0x2d, 0x1, {0x1}}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e27, @multicast1}]}, 0x0) kernel console output (not intermixed with test programs): ontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1577.126433][ T30] audit: type=1400 audit(1754519848.575:49226): avc: denied { read open } for pid=23835 comm="syz.3.4649" path="net:[4026533813]" dev="nsfs" ino=4026533813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1577.473316][ T30] audit: type=1400 audit(1754519848.595:49227): avc: denied { read write } for pid=23355 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1577.792405][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1577.958440][ T30] audit: type=1400 audit(1754519848.595:49228): avc: denied { read write open } for pid=23355 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1578.271176][ T10] usb 3-1: device descriptor read/64, error -71 [ 1578.438978][ T30] audit: type=1400 audit(1754519848.595:49229): avc: denied { ioctl } for pid=23355 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1578.759665][T23856] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1578.767046][T23856] audit: audit_lost=4830 audit_rate_limit=0 audit_backlog_limit=64 [ 1578.775531][T23856] audit: backlog limit exceeded [ 1578.810880][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1579.176724][T23718] veth0_vlan: entered promiscuous mode [ 1579.241275][ T10] usb 3-1: device descriptor read/64, error -71 [ 1579.244619][T23718] veth1_vlan: entered promiscuous mode [ 1579.375467][ T10] usb usb3-port1: attempt power cycle [ 1579.388376][T23718] veth0_macvtap: entered promiscuous mode [ 1579.438060][T23718] veth1_macvtap: entered promiscuous mode [ 1579.555378][T23718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1579.586864][T23718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1580.137063][T22376] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.150913][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1580.173422][T22376] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.191087][T22376] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.213023][T22376] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.289857][ T10] usb 3-1: device descriptor read/8, error -71 [ 1580.598639][T17600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.630876][T17600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.761477][T23886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1581.212337][T23895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.221839][T23895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.433268][ T6154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.575203][ T6154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.759541][ T30] kauditd_printk_skb: 831 callbacks suppressed [ 1581.759598][ T30] audit: type=1400 audit(1754519853.485:49551): avc: denied { mounton } for pid=23718 comm="syz-executor" path="/root/syzkaller.2wbw0t/syz-tmp/newroot/syzcgroup/unified" dev="tmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1581.822162][ T30] audit: type=1400 audit(1754519853.485:49552): avc: denied { mounton } for pid=23718 comm="syz-executor" path="/root/syzkaller.2wbw0t/syz-tmp/newroot/syzcgroup/cpu" dev="tmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1581.858041][ T30] audit: type=1400 audit(1754519853.485:49553): avc: denied { create } for pid=23897 comm="syz.2.4663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1581.879149][ T30] audit: type=1400 audit(1754519853.525:49554): avc: denied { mounton } for pid=23718 comm="syz-executor" path="/root/syzkaller.2wbw0t/syz-tmp/newroot/syzcgroup/net" dev="tmpfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1581.906398][ T30] audit: type=1400 audit(1754519853.525:49555): avc: denied { write } for pid=23897 comm="syz.2.4663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1581.926367][ T30] audit: type=1400 audit(1754519853.545:49556): avc: denied { read } for pid=23897 comm="syz.2.4663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1581.946676][ T30] audit: type=1400 audit(1754519853.545:49557): avc: denied { unmount } for pid=23718 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1582.049444][ T30] audit: type=1400 audit(1754519853.545:49558): avc: denied { prog_load } for pid=23897 comm="syz.2.4663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1582.091410][ T30] audit: type=1400 audit(1754519853.545:49559): avc: denied { bpf } for pid=23897 comm="syz.2.4663" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1582.115747][ T30] audit: type=1400 audit(1754519853.555:49560): avc: denied { read write } for pid=23355 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1583.676632][T23915] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4667'. [ 1584.161681][T23922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4668'. [ 1584.974803][T23919] binder: 23918:23919 unknown command 0 [ 1584.991115][T23919] binder: 23918:23919 ioctl c0306201 2000000001c0 returned -22 [ 1585.279757][T23931] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4671'. [ 1585.301788][T23499] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1585.457530][T23919] could not allocate digest TFM handle xcbc(xeta) [ 1585.474544][T23936] tipc: Enabling of bearer rejected, failed to enable media [ 1585.533306][T23499] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1585.595263][T23499] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.624719][T23499] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1585.663099][T23499] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1585.733231][T23499] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1585.761277][T23499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.790806][T23499] usb 3-1: Product: syz [ 1585.801153][T23499] usb 3-1: Manufacturer: syz [ 1585.819281][T23499] usb 3-1: SerialNumber: syz [ 1586.291478][T23945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.317110][T23945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.568740][T23952] netlink: 'syz.3.4672': attribute type 2 has an invalid length. [ 1586.832746][ T30] kauditd_printk_skb: 321 callbacks suppressed [ 1586.832767][ T30] audit: type=1400 audit(1754519858.445:49882): avc: denied { execmem } for pid=23951 comm="syz.8.4675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1587.188522][ T30] audit: type=1400 audit(1754519858.685:49883): avc: denied { read write } for pid=23951 comm="syz.8.4675" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1587.214607][ T30] audit: type=1400 audit(1754519858.705:49884): avc: denied { read write open } for pid=23951 comm="syz.8.4675" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1587.267961][ T30] audit: type=1400 audit(1754519858.735:49885): avc: denied { create } for pid=23951 comm="syz.8.4675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1587.329908][ T30] audit: type=1400 audit(1754519858.755:49886): avc: denied { write } for pid=23951 comm="syz.8.4675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1587.376987][ T30] audit: type=1400 audit(1754519858.765:49887): avc: denied { nlmsg_write } for pid=23951 comm="syz.8.4675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1587.516451][ T30] audit: type=1400 audit(1754519858.865:49888): avc: denied { execmem } for pid=23948 comm="syz.7.4674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1587.574908][ T30] audit: type=1400 audit(1754519859.275:49889): avc: denied { read write } for pid=23229 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1587.625595][ T30] audit: type=1400 audit(1754519859.275:49890): avc: denied { read write open } for pid=23229 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1587.655782][ T30] audit: type=1400 audit(1754519859.275:49891): avc: denied { ioctl } for pid=23229 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1588.051258][T23499] usb 3-1: 0:2 : does not exist [ 1588.131599][T23969] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20000 [ 1588.222585][T23499] usb 3-1: USB disconnect, device number 78 [ 1589.156027][T23979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4680'. [ 1589.180097][T23969] Bluetooth: MGMT ver 1.23 [ 1589.209386][T23979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4680'. [ 1589.749665][T23987] binder: 23985:23987 ioctl c0306201 200000000240 returned -14 [ 1589.769280][T23989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4681'. [ 1589.779844][T23989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4681'. [ 1591.342137][T24000] tmpfs: Bad value for 'mpol' [ 1591.608782][T24008] lo speed is unknown, defaulting to 1000 [ 1591.841277][ T30] kauditd_printk_skb: 774 callbacks suppressed [ 1591.841293][ T30] audit: type=1400 audit(1754519863.565:50666): avc: denied { read write open } for pid=23718 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1591.889089][ T30] audit: type=1400 audit(1754519863.565:50667): avc: denied { ioctl } for pid=23718 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1591.916041][ T30] audit: type=1400 audit(1754519863.565:50668): avc: denied { read } for pid=24013 comm="syz.3.4690" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1591.943910][ T30] audit: type=1400 audit(1754519863.565:50669): avc: denied { read open } for pid=24013 comm="syz.3.4690" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1591.967956][ T30] audit: type=1400 audit(1754519863.565:50670): avc: denied { read } for pid=23960 comm="syz.6.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1592.019257][ T30] audit: type=1400 audit(1754519863.565:50671): avc: denied { read } for pid=23960 comm="syz.6.4676" path="socket:[90653]" dev="sockfs" ino=90653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1592.045580][T23965] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1592.053050][T24017] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1592.061283][T23965] audit: audit_lost=5001 audit_rate_limit=0 audit_backlog_limit=64 [ 1592.069759][T24017] audit: audit_lost=5002 audit_rate_limit=0 audit_backlog_limit=64 [ 1595.482791][T16232] Bluetooth: hci5: unexpected event for opcode 0x1005 [ 1596.388887][T24040] loop2: detected capacity change from 0 to 7 [ 1596.851182][ C1] blk_print_req_error: 6 callbacks suppressed [ 1596.851201][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1596.866558][ C1] buffer_io_error: 6 callbacks suppressed [ 1596.866576][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1596.939421][ T30] kauditd_printk_skb: 3596 callbacks suppressed [ 1596.939445][ T30] audit: type=1400 audit(1754519868.565:53051): avc: denied { write } for pid=24038 comm="syz.2.4698" laddr=fe80::a8aa:aaff:feaa:aa16 lport=255 faddr=ff01::1 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1596.997395][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1597.006662][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1597.032303][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1597.041549][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1597.070371][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1597.079641][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1597.088021][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1597.097237][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1597.108900][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1597.118121][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1597.127415][T24044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1597.134070][T24044] audit: audit_lost=5408 audit_rate_limit=0 audit_backlog_limit=64 [ 1597.142072][T24044] audit: backlog limit exceeded [ 1597.152827][T24044] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1597.159431][T24044] audit: audit_lost=5409 audit_rate_limit=0 audit_backlog_limit=64 [ 1597.167512][T24044] audit: backlog limit exceeded [ 1597.178542][T23965] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1597.186277][T24044] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1597.193204][T24044] audit: audit_lost=5410 audit_rate_limit=0 audit_backlog_limit=64 [ 1597.245777][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1597.255045][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1597.265405][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1597.274627][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1597.283114][T24040] ldm_validate_partition_table(): Disk read failed. [ 1597.301047][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1597.310262][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1597.348307][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1597.357556][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1598.514580][T24040] Dev loop2: unable to read RDB block 0 [ 1598.583839][T24040] loop2: unable to read partition table [ 1598.590964][T24040] loop2: partition table beyond EOD, truncated [ 1598.597143][T24040] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1598.797130][T11897] hid_parser_main: 33 callbacks suppressed [ 1598.797143][T11897] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 1598.865536][T11897] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 1598.919918][T11897] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 1598.991953][T11897] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 1599.067243][T11897] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 1599.116731][T24049] kernel read not supported for file /eth0 (pid: 24049 comm: syz.3.4699) [ 1599.143278][T11897] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 1599.200101][T11897] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 1599.346635][T11897] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 1599.906772][T11897] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 1599.988417][T11897] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 1600.043276][T11897] hid-generic 0000:007F:FFFFFFFE.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1601.153869][T24072] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4705'. [ 1601.179734][T24072] netlink: 'syz.6.4705': attribute type 10 has an invalid length. [ 1601.211433][T24072] veth0_macvtap: left promiscuous mode [ 1601.224771][T24072] batman_adv: batadv0: Adding interface: macvtap0 [ 1601.231449][T24072] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.257355][T24072] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 1601.575750][T24078] program syz.2.4706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1601.603147][T24078] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1601.992654][T24088] FAULT_INJECTION: forcing a failure. [ 1601.992654][T24088] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.005628][T24088] CPU: 1 UID: 0 PID: 24088 Comm: syz.6.4708 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 1602.005654][T24088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1602.005665][T24088] Call Trace: [ 1602.005672][T24088] [ 1602.005679][T24088] dump_stack_lvl+0x16c/0x1f0 [ 1602.005710][T24088] should_fail_ex+0x512/0x640 [ 1602.005727][T24088] ? fs_reclaim_acquire+0xae/0x150 [ 1602.005752][T24088] ? tomoyo_encode2+0x100/0x3e0 [ 1602.005774][T24088] should_failslab+0xc2/0x120 [ 1602.005795][T24088] __kmalloc_noprof+0xd2/0x510 [ 1602.005813][T24088] ? d_absolute_path+0x136/0x1a0 [ 1602.005843][T24088] tomoyo_encode2+0x100/0x3e0 [ 1602.005873][T24088] tomoyo_encode+0x29/0x50 [ 1602.005895][T24088] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1602.005926][T24088] tomoyo_mount_acl+0x1ae/0x850 [ 1602.005948][T24088] ? __pfx___schedule+0x10/0x10 [ 1602.005977][T24088] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1602.005998][T24088] ? __pfx___schedule+0x10/0x10 [ 1602.006050][T24088] ? __srcu_check_read_flavor+0x55/0x160 [ 1602.006072][T24088] tomoyo_mount_permission+0x16d/0x420 [ 1602.006093][T24088] ? tomoyo_mount_permission+0x14f/0x420 [ 1602.006115][T24088] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1602.006153][T24088] security_sb_mount+0x9b/0x260 [ 1602.006176][T24088] path_mount+0x15f/0x1fd0 [ 1602.006204][T24088] ? __pfx_path_mount+0x10/0x10 [ 1602.006228][T24088] ? kmem_cache_free+0x2d1/0x4d0 [ 1602.006244][T24088] ? putname+0x154/0x1a0 [ 1602.006271][T24088] ? putname+0x154/0x1a0 [ 1602.006295][T24088] ? __x64_sys_mount+0x28d/0x310 [ 1602.006316][T24088] __x64_sys_mount+0x28d/0x310 [ 1602.006339][T24088] ? __pfx___x64_sys_mount+0x10/0x10 [ 1602.006370][T24088] do_syscall_64+0xcd/0x4c0 [ 1602.006398][T24088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.006416][T24088] RIP: 0033:0x7f530d38ebe9 [ 1602.006431][T24088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1602.006449][T24088] RSP: 002b:00007f530e1b1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1602.006466][T24088] RAX: ffffffffffffffda RBX: 00007f530d5b6180 RCX: 00007f530d38ebe9 [ 1602.006477][T24088] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 00002000000000c0 [ 1602.006489][T24088] RBP: 00007f530e1b1090 R08: 0000200000000100 R09: 0000000000000000 [ 1602.006499][T24088] R10: 0000000002000010 R11: 0000000000000246 R12: 0000000000000002 [ 1602.006509][T24088] R13: 00007f530d5b6218 R14: 00007f530d5b6180 R15: 00007ffed2aff8b8 [ 1602.006539][T24088] [ 1602.006767][T24088] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1602.267775][ T30] kauditd_printk_skb: 2027 callbacks suppressed [ 1602.267790][ T30] audit: type=1400 audit(1754519873.995:53915): avc: denied { read } for pid=24016 comm="syz.8.4691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1602.366560][T24017] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1602.375675][T24017] audit: audit_lost=5799 audit_rate_limit=0 audit_backlog_limit=64 [ 1602.385312][T24090] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1602.398353][T24017] audit: backlog limit exceeded [ 1602.406137][T24017] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1602.417176][T24091] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1602.423800][T24091] audit: audit_lost=5800 audit_rate_limit=0 audit_backlog_limit=64 [ 1602.431779][T24091] audit: backlog limit exceeded [ 1602.437232][T24091] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1603.769546][T24104] FAULT_INJECTION: forcing a failure. [ 1603.769546][T24104] name failslab, interval 1, probability 0, space 0, times 0 [ 1603.853864][T24104] CPU: 0 UID: 0 PID: 24104 Comm: syz.3.4714 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 1603.853890][T24104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1603.853900][T24104] Call Trace: [ 1603.853906][T24104] [ 1603.853913][T24104] dump_stack_lvl+0x16c/0x1f0 [ 1603.853942][T24104] should_fail_ex+0x512/0x640 [ 1603.853956][T24104] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 1603.853975][T24104] should_failslab+0xc2/0x120 [ 1603.853995][T24104] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1603.854011][T24104] ? __get_vm_area_node+0x101/0x330 [ 1603.854039][T24104] __get_vm_area_node+0x101/0x330 [ 1603.854067][T24104] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1603.854093][T24104] ? __snd_dma_alloc_pages+0x50/0x90 [ 1603.854119][T24104] ? __mutex_trylock_common+0xe9/0x250 [ 1603.854152][T24104] ? __snd_dma_alloc_pages+0x50/0x90 [ 1603.854176][T24104] ? rcu_is_watching+0x12/0xc0 [ 1603.854203][T24104] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1603.854233][T24104] ? __mutex_unlock_slowpath+0x163/0x800 [ 1603.854264][T24104] ? __snd_dma_alloc_pages+0x50/0x90 [ 1603.854285][T24104] __vmalloc_node_noprof+0xad/0xf0 [ 1603.854310][T24104] ? __snd_dma_alloc_pages+0x50/0x90 [ 1603.854333][T24104] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1603.854357][T24104] __snd_dma_alloc_pages+0x50/0x90 [ 1603.854381][T24104] snd_dma_alloc_dir_pages+0x151/0x240 [ 1603.854407][T24104] do_alloc_pages+0x136/0x2d0 [ 1603.854433][T24104] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1603.854460][T24104] snd_pcm_hw_params+0x1656/0x1ba0 [ 1603.854487][T24104] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1603.854510][T24104] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1603.854535][T24104] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1603.854556][T24104] ? __asan_memset+0x23/0x50 [ 1603.854584][T24104] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1603.854616][T24104] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1603.854650][T24104] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1603.854685][T24104] ? get_pid_task+0xfc/0x250 [ 1603.854706][T24104] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1603.854728][T24104] snd_pcm_oss_read+0x39b/0x760 [ 1603.854750][T24104] ? security_file_permission+0x71/0x210 [ 1603.854777][T24104] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1603.854799][T24104] vfs_read+0x1e1/0xc60 [ 1603.854824][T24104] ? __pfx_vfs_read+0x10/0x10 [ 1603.854839][T24104] ? find_held_lock+0x2b/0x80 [ 1603.854860][T24104] ? __fget_files+0x204/0x3c0 [ 1603.854882][T24104] ? __fget_files+0x20e/0x3c0 [ 1603.854909][T24104] ksys_read+0x12a/0x250 [ 1603.854926][T24104] ? __pfx_ksys_read+0x10/0x10 [ 1603.854951][T24104] do_syscall_64+0xcd/0x4c0 [ 1603.854980][T24104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.854998][T24104] RIP: 0033:0x7f6f30d8ebe9 [ 1603.855013][T24104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1603.855029][T24104] RSP: 002b:00007f6f31ca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1603.855047][T24104] RAX: ffffffffffffffda RBX: 00007f6f30fb5fa0 RCX: 00007f6f30d8ebe9 [ 1603.855059][T24104] RDX: 0000000000002020 RSI: 00002000000063c0 RDI: 0000000000000004 [ 1603.855069][T24104] RBP: 00007f6f31ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.855079][T24104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1603.855088][T24104] R13: 00007f6f30fb6038 R14: 00007f6f30fb5fa0 R15: 00007ffe3ced2b08 [ 1603.855113][T24104] [ 1603.858896][T24104] syz.3.4714: vmalloc error: size 65536, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 1604.374479][T24106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.541770][T24104] ,cpuset=/,mems_allowed=0-1 [ 1604.567910][T24106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.611816][T24104] CPU: 0 UID: 0 PID: 24104 Comm: syz.3.4714 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 1604.611835][T24104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1604.611842][T24104] Call Trace: [ 1604.611846][T24104] [ 1604.611851][T24104] dump_stack_lvl+0x16c/0x1f0 [ 1604.611876][T24104] warn_alloc+0x248/0x3a0 [ 1604.611897][T24104] ? __pfx_warn_alloc+0x10/0x10 [ 1604.611915][T24104] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 1604.611929][T24104] ? __kasan_kmalloc+0x8a/0xb0 [ 1604.611941][T24104] ? __get_vm_area_node+0x208/0x330 [ 1604.611959][T24104] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1604.611976][T24104] ? __mutex_trylock_common+0xe9/0x250 [ 1604.611996][T24104] ? __snd_dma_alloc_pages+0x50/0x90 [ 1604.612013][T24104] ? rcu_is_watching+0x12/0xc0 [ 1604.612030][T24104] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1604.612048][T24104] ? __mutex_unlock_slowpath+0x163/0x800 [ 1604.612068][T24104] ? __snd_dma_alloc_pages+0x50/0x90 [ 1604.612081][T24104] __vmalloc_node_noprof+0xad/0xf0 [ 1604.612097][T24104] ? __snd_dma_alloc_pages+0x50/0x90 [ 1604.612110][T24104] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1604.612126][T24104] __snd_dma_alloc_pages+0x50/0x90 [ 1604.612140][T24104] snd_dma_alloc_dir_pages+0x151/0x240 [ 1604.612156][T24104] do_alloc_pages+0x136/0x2d0 [ 1604.612171][T24104] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1604.612187][T24104] snd_pcm_hw_params+0x1656/0x1ba0 [ 1604.612204][T24104] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1604.612218][T24104] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1604.612238][T24104] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1604.612251][T24104] ? __asan_memset+0x23/0x50 [ 1604.612268][T24104] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1604.612283][T24104] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1604.612302][T24104] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1604.612322][T24104] ? get_pid_task+0xfc/0x250 [ 1604.612335][T24104] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1604.612352][T24104] snd_pcm_oss_read+0x39b/0x760 [ 1604.612365][T24104] ? security_file_permission+0x71/0x210 [ 1604.612382][T24104] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1604.612395][T24104] vfs_read+0x1e1/0xc60 [ 1604.612410][T24104] ? __pfx_vfs_read+0x10/0x10 [ 1604.612419][T24104] ? find_held_lock+0x2b/0x80 [ 1604.612432][T24104] ? __fget_files+0x204/0x3c0 [ 1604.612447][T24104] ? __fget_files+0x20e/0x3c0 [ 1604.612462][T24104] ksys_read+0x12a/0x250 [ 1604.612475][T24104] ? __pfx_ksys_read+0x10/0x10 [ 1604.612490][T24104] do_syscall_64+0xcd/0x4c0 [ 1604.612508][T24104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.612519][T24104] RIP: 0033:0x7f6f30d8ebe9 [ 1604.612528][T24104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1604.612539][T24104] RSP: 002b:00007f6f31ca6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1604.612549][T24104] RAX: ffffffffffffffda RBX: 00007f6f30fb5fa0 RCX: 00007f6f30d8ebe9 [ 1604.612557][T24104] RDX: 0000000000002020 RSI: 00002000000063c0 RDI: 0000000000000004 [ 1604.612563][T24104] RBP: 00007f6f31ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 1604.612569][T24104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1604.612576][T24104] R13: 00007f6f30fb6038 R14: 00007f6f30fb5fa0 R15: 00007ffe3ced2b08 [ 1604.612589][T24104] [ 1604.612941][T24104] Mem-Info: [ 1605.123292][T24104] active_anon:16421 inactive_anon:0 isolated_anon:0 [ 1605.123292][T24104] active_file:21629 inactive_file:41222 isolated_file:0 [ 1605.123292][T24104] unevictable:768 dirty:229 writeback:0 [ 1605.123292][T24104] slab_reclaimable:9308 slab_unreclaimable:186923 [ 1605.123292][T24104] mapped:48421 shmem:12695 pagetables:1296 [ 1605.123292][T24104] sec_pagetables:0 bounce:0 [ 1605.123292][T24104] kernel_misc_reclaimable:0 [ 1605.123292][T24104] free:1189740 free_pcp:10271 free_cma:0 [ 1605.168822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.271305][T24104] Node 0 active_anon:68512kB inactive_anon:0kB active_file:86416kB inactive_file:164684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:196360kB dirty:924kB writeback:0kB shmem:52012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13380kB pagetables:5088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1605.459742][T24104] Node 1 active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1605.489982][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.510748][T24104] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1605.627178][T24104] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 1605.661257][T24104] Node 0 DMA32 free:838088kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:73912kB inactive_anon:0kB active_file:86416kB inactive_file:163364kB unevictable:1536kB writepending:924kB present:3129332kB managed:2539452kB mlocked:0kB bounce:0kB free_pcp:23748kB local_pcp:13240kB free_cma:0kB [ 1605.713425][T24104] lowmem_reserve[]: 0 0 1 1 1 [ 1605.718254][T24104] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 1605.747365][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.789848][T24104] lowmem_reserve[]: 0 0 0 0 0 [ 1605.816609][T24104] Node 1 Normal free:3903256kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:100kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12544kB local_pcp:5120kB free_cma:0kB [ 1605.848039][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.871494][T24104] lowmem_reserve[]: 0 0 0 0 0 [ 1605.902812][T24104] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1605.960813][T24104] Node 0 DMA32: 209*4kB (UME) 111*8kB (UE) 563*16kB (UME) 693*32kB (UME) 311*64kB (UME) 129*128kB (UME) 76*256kB (UME) 36*512kB (UME) 20*1024kB (UM) 13*2048kB (UME) 167*4096kB (UM) = 838348kB [ 1605.991486][T24104] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1606.046692][T24104] Node 1 Normal: 180*4kB (UE) 51*8kB (UME) 39*16kB (UME) 244*32kB (UE) 107*64kB (UE) 32*128kB (UME) 11*256kB (UM) 6*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3903256kB [ 1606.072814][T24104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1606.128919][T24122] geneve2: entered promiscuous mode [ 1606.156034][T24104] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1606.173170][T24104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1606.211259][T24104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1606.230443][T24104] 74046 total pagecache pages [ 1606.249135][T24125] input input60: cannot allocate more than FF_MAX_EFFECTS effects [ 1606.262296][T24104] 0 pages in swap cache [ 1606.269152][T24104] Free swap = 124996kB [ 1606.275958][T24104] Total swap = 124996kB [ 1606.280223][T24104] 2097051 pages RAM [ 1606.290347][T24104] 0 pages HighMem/MovableOnly [ 1606.299844][T24104] 430226 pages reserved [ 1606.306936][T24104] 0 pages cma reserved [ 1606.400756][ T975] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1606.561068][ T975] usb 7-1: Using ep0 maxpacket: 16 [ 1606.582632][ T975] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1606.631091][ T975] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1606.641932][ T975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.649986][ T975] usb 7-1: Product: syz [ 1606.654587][ T975] usb 7-1: Manufacturer: syz [ 1606.659859][ T975] usb 7-1: SerialNumber: syz [ 1606.674537][ T975] usb 7-1: config 0 descriptor?? [ 1606.718357][ T975] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1606.948586][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.976798][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.273522][T24142] syz.2.4723: attempt to access beyond end of device [ 1607.273522][T24142] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1607.315501][ T30] kauditd_printk_skb: 715 callbacks suppressed [ 1607.315536][ T30] audit: type=1400 audit(1754519878.985:54598): avc: denied { mounton } for pid=24131 comm="syz.2.4723" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1607.345743][ C1] vkms_vblank_simulate: vblank timer overrun [ 1607.558817][ T30] audit: type=1400 audit(1754519879.275:54599): avc: denied { allowed } for pid=24138 comm="syz.3.4724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1607.560845][T24124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.605279][T24124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1607.624353][ T30] audit: type=1400 audit(1754519879.285:54600): avc: denied { create } for pid=24138 comm="syz.3.4724" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1607.692582][ T30] audit: type=1400 audit(1754519879.285:54601): avc: denied { map } for pid=24138 comm="syz.3.4724" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1607.732426][T22372] usb 7-1: Failed to submit usb control message: -110 [ 1607.751557][T22372] usb 7-1: unable to send the bmi data to the device: -110 [ 1607.766897][ T30] audit: type=1400 audit(1754519879.285:54602): avc: denied { read write } for pid=24138 comm="syz.3.4724" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=91041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1607.802547][T22372] usb 7-1: unable to get target info from device [ 1607.808939][T22372] usb 7-1: could not get target info (-110) [ 1607.818321][T22372] usb 7-1: could not probe fw (-110) [ 1607.825554][ T30] audit: type=1400 audit(1754519879.285:54603): avc: denied { read write } for pid=24123 comm="syz.6.4721" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1608.007707][ T30] audit: type=1400 audit(1754519879.285:54604): avc: denied { read write open } for pid=24123 comm="syz.6.4721" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1608.063309][ T30] audit: type=1400 audit(1754519879.285:54605): avc: denied { ioctl } for pid=24123 comm="syz.6.4721" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1608.130391][T24146] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1608.137705][T24146] audit: audit_lost=5813 audit_rate_limit=0 audit_backlog_limit=64 [ 1610.117921][T11897] usb 7-1: USB disconnect, device number 3 [ 1610.782665][T24169] bridge0: port 1(team0) entered blocking state [ 1610.789402][T24169] bridge0: port 1(team0) entered disabled state [ 1610.796671][T24169] team0: entered allmulticast mode [ 1610.811360][T24169] team0: entered promiscuous mode [ 1611.377713][T24166] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4731'. [ 1611.484568][T24178] hfsplus: unable to find HFS+ superblock [ 1612.486500][T24183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.494163][T24183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.505013][T24183] bridge0: entered promiscuous mode [ 1612.510253][T24183] bridge0: entered allmulticast mode [ 1612.544740][T24183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.551879][T24183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1612.559272][T24183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.566396][T24183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.628568][ T30] kauditd_printk_skb: 304 callbacks suppressed [ 1612.628583][ T30] audit: type=1400 audit(1754519884.195:54903): avc: denied { mounton } for pid=24179 comm="syz.6.4736" path="/40/file1" dev="tmpfs" ino=224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1612.657417][ C1] vkms_vblank_simulate: vblank timer overrun [ 1612.682602][ T30] audit: type=1400 audit(1754519884.195:54904): avc: denied { mount } for pid=24179 comm="syz.6.4736" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1612.801049][ T30] audit: type=1400 audit(1754519884.335:54905): avc: denied { create } for pid=24179 comm="syz.6.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1612.826270][ T30] audit: type=1400 audit(1754519884.345:54906): avc: denied { create } for pid=24179 comm="syz.6.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1612.886870][ T30] audit: type=1400 audit(1754519884.345:54907): avc: denied { write } for pid=24179 comm="syz.6.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1613.097836][ T30] audit: type=1400 audit(1754519884.355:54908): avc: denied { read } for pid=24179 comm="syz.6.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1613.262377][ T30] audit: type=1400 audit(1754519884.355:54909): avc: denied { read } for pid=24179 comm="syz.6.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1613.368784][ T30] audit: type=1400 audit(1754519884.395:54910): avc: denied { write } for pid=24179 comm="syz.6.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1613.419487][ T30] audit: type=1400 audit(1754519884.405:54911): avc: denied { perfmon } for pid=24188 comm="syz.2.4739" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1613.454819][ T30] audit: type=1400 audit(1754519884.415:54912): avc: denied { perfmon } for pid=24188 comm="syz.2.4739" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1613.766012][T24198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.776270][T24198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.819195][T24198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.828757][T24198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.871292][T24198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.882579][T24198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.926967][T24198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.937051][T24198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.973396][ T975] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1615.095676][ T975] usb 7-1: device descriptor read/64, error -71 [ 1615.493891][T24212] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 1615.500422][T24212] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1615.508182][T24212] vhci_hcd vhci_hcd.0: Device attached [ 1615.530744][ T975] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1615.765827][T11897] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 1616.377365][T24213] vhci_hcd: connection reset by peer [ 1617.018299][T22374] vhci_hcd: stop threads [ 1617.022729][T22374] vhci_hcd: release socket [ 1617.843771][T24218] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1617.850311][T24218] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1617.858181][T24218] vhci_hcd vhci_hcd.0: Device attached [ 1617.871681][T24219] vhci_hcd: connection closed [ 1618.788492][T22374] vhci_hcd: disconnect device [ 1619.132340][T22374] vhci_hcd: stop threads [ 1619.136604][T22374] vhci_hcd: release socket [ 1619.162486][T22374] vhci_hcd: disconnect device [ 1619.167268][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 1619.167281][ T30] audit: type=1400 audit(1754519890.895:55055): avc: denied { read write } for pid=23229 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1619.266046][ T30] audit: type=1400 audit(1754519890.895:55056): avc: denied { read write open } for pid=23229 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1619.298829][ T30] audit: type=1400 audit(1754519890.895:55057): avc: denied { ioctl } for pid=23229 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1619.420328][T24230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.431663][T24230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.495060][T24227] syz.7.4748: attempt to access beyond end of device [ 1619.495060][T24227] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1619.580348][ T30] audit: type=1400 audit(1754519890.935:55058): avc: denied { read write } for pid=23355 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1619.670822][T24230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.680378][ T30] audit: type=1400 audit(1754519890.935:55059): avc: denied { read write open } for pid=23355 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1619.683047][T24230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.714411][ T30] audit: type=1400 audit(1754519890.935:55060): avc: denied { ioctl } for pid=23355 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1619.743086][ T30] audit: type=1400 audit(1754519890.965:55061): avc: denied { map_create } for pid=24226 comm="syz.7.4748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1619.762970][ T30] audit: type=1400 audit(1754519890.965:55062): avc: denied { bpf } for pid=24226 comm="syz.7.4748" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1619.785585][ T30] audit: type=1400 audit(1754519890.975:55063): avc: denied { read } for pid=24226 comm="syz.7.4748" dev="nsfs" ino=4026533789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1619.952792][ T30] audit: type=1400 audit(1754519890.975:55064): avc: denied { read open } for pid=24226 comm="syz.7.4748" path="net:[4026533789]" dev="nsfs" ino=4026533789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1620.410777][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1620.573210][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1620.787874][ T24] usb 9-1: config 254 has an invalid interface number: 160 but max is 0 [ 1620.817798][ T24] usb 9-1: config 254 has no interface number 0 [ 1620.871619][ T24] usb 9-1: config 254 interface 160 has no altsetting 0 [ 1620.927038][T11897] vhci_hcd: vhci_device speed not set [ 1620.944491][ T24] usb 9-1: New USB device found, idVendor=24df, idProduct=d062, bcdDevice=c0.3f [ 1620.964043][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.979011][ T24] usb 9-1: Product: syz [ 1620.996251][ T24] usb 9-1: Manufacturer: syz [ 1621.002512][ T24] usb 9-1: SerialNumber: syz [ 1621.171909][T24257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1621.183553][T24257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1621.442046][ T24] usb 9-1: bad CDC descriptors [ 1621.625517][ T24] usb 9-1: USB disconnect, device number 2 [ 1622.489772][T24264] geneve1: entered allmulticast mode [ 1622.603694][T24267] loop2: detected capacity change from 0 to 7 [ 1622.610586][ C0] blk_print_req_error: 6 callbacks suppressed [ 1622.610596][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1622.625746][ C0] buffer_io_error: 6 callbacks suppressed [ 1622.625754][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1622.642645][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1622.651765][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1622.662626][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1622.671742][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1622.679689][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1622.688890][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1622.698110][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1622.707324][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1622.716304][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1622.725496][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1622.734170][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1622.743379][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1622.751335][T24267] ldm_validate_partition_table(): Disk read failed. [ 1622.761628][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1622.770844][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1622.779893][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1622.789110][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1622.809406][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1622.818560][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1622.827311][T24267] Dev loop2: unable to read RDB block 0 [ 1622.833423][T24267] loop2: unable to read partition table [ 1622.839206][T24267] loop2: partition table beyond EOD, truncated [ 1622.845423][T24267] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1623.436106][T24290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4765'. [ 1623.492383][T24293] snd_dummy snd_dummy.0: control 0:0:-256:syz0:524289 is already present [ 1624.184822][ T30] kauditd_printk_skb: 295 callbacks suppressed [ 1624.184834][ T30] audit: type=1400 audit(1754519895.915:55360): avc: denied { prog_load } for pid=24298 comm="syz.8.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1624.253371][ T30] audit: type=1400 audit(1754519895.915:55361): avc: denied { bpf } for pid=24298 comm="syz.8.4766" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1624.393094][ T30] audit: type=1400 audit(1754519895.945:55362): avc: denied { map_create } for pid=24298 comm="syz.8.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1624.508095][ T30] audit: type=1400 audit(1754519895.945:55363): avc: denied { map_read map_write } for pid=24298 comm="syz.8.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1624.753403][ T30] audit: type=1400 audit(1754519895.955:55364): avc: denied { prog_load } for pid=24298 comm="syz.8.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1624.901895][ T30] audit: type=1400 audit(1754519895.955:55365): avc: denied { bpf } for pid=24298 comm="syz.8.4766" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1624.925218][ T30] audit: type=1400 audit(1754519895.955:55366): avc: denied { perfmon } for pid=24298 comm="syz.8.4766" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1624.951116][ T30] audit: type=1400 audit(1754519895.955:55367): avc: denied { perfmon } for pid=24298 comm="syz.8.4766" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1624.990790][ T30] audit: type=1400 audit(1754519895.955:55368): avc: denied { perfmon } for pid=24298 comm="syz.8.4766" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1625.189150][T24308] syz.6.4767: attempt to access beyond end of device [ 1625.189150][T24308] loop6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1625.447308][ T30] audit: type=1400 audit(1754519895.955:55369): avc: denied { perfmon } for pid=24298 comm="syz.8.4766" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1626.319283][T24320] virtio-fs: tag not found [ 1626.360430][T24320] syz.2.4772: attempt to access beyond end of device [ 1626.360430][T24320] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1626.373879][T24320] gfs2: error -5 reading superblock [ 1627.820530][T24337] FAULT_INJECTION: forcing a failure. [ 1627.820530][T24337] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.834304][T24337] CPU: 0 UID: 0 PID: 24337 Comm: syz.8.4776 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 1627.834331][T24337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1627.834341][T24337] Call Trace: [ 1627.834347][T24337] [ 1627.834354][T24337] dump_stack_lvl+0x16c/0x1f0 [ 1627.834383][T24337] should_fail_ex+0x512/0x640 [ 1627.834399][T24337] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1627.834419][T24337] should_failslab+0xc2/0x120 [ 1627.834438][T24337] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1627.834455][T24337] ? getname_flags.part.0+0x4c/0x550 [ 1627.834481][T24337] getname_flags.part.0+0x4c/0x550 [ 1627.834507][T24337] getname_flags+0x93/0xf0 [ 1627.834524][T24337] do_sys_openat2+0xb8/0x1d0 [ 1627.834546][T24337] ? __pfx_do_sys_openat2+0x10/0x10 [ 1627.834569][T24337] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1627.834595][T24337] __x64_sys_openat+0x174/0x210 [ 1627.834615][T24337] ? __pfx___x64_sys_openat+0x10/0x10 [ 1627.834641][T24337] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1627.834663][T24337] do_syscall_64+0xcd/0x4c0 [ 1627.834689][T24337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.834705][T24337] RIP: 0033:0x7f4879f8d550 [ 1627.834720][T24337] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1627.834735][T24337] RSP: 002b:00007f487adfdf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1627.834752][T24337] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4879f8d550 [ 1627.834763][T24337] RDX: 0000000000000002 RSI: 00007f487adfdfa0 RDI: 00000000ffffff9c [ 1627.834773][T24337] RBP: 00007f487adfdfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1627.834782][T24337] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1627.834791][T24337] R13: 00007f487a1b6128 R14: 00007f487a1b6090 R15: 00007fff2bb0b2c8 [ 1627.834813][T24337] [ 1628.025175][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.269789][T24345] fuse: Unknown parameter 'grou00000000000000000000' [ 1628.288730][T24338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4778'. [ 1629.268620][ T30] kauditd_printk_skb: 244 callbacks suppressed [ 1629.268636][ T30] audit: type=1400 audit(1754519900.995:55614): avc: denied { read write } for pid=15228 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1629.341527][ T30] audit: type=1400 audit(1754519900.995:55615): avc: denied { read write open } for pid=15228 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1629.367813][ T30] audit: type=1400 audit(1754519900.995:55616): avc: denied { ioctl } for pid=15228 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1629.520354][ T30] audit: type=1400 audit(1754519901.215:55617): avc: denied { read write } for pid=23355 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1629.612889][ T30] audit: type=1400 audit(1754519901.245:55618): avc: denied { read write } for pid=23718 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1630.001208][ T30] audit: type=1400 audit(1754519901.245:55619): avc: denied { read write open } for pid=23718 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1630.146451][ T30] audit: type=1400 audit(1754519901.245:55620): avc: denied { ioctl } for pid=23718 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1630.303654][T24366] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1630.310368][ T30] audit: type=1400 audit(1754519901.285:55621): avc: denied { read write open } for pid=23355 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1630.341093][T24366] audit: audit_lost=5819 audit_rate_limit=0 audit_backlog_limit=64 [ 1632.949508][T24396] lo speed is unknown, defaulting to 1000 [ 1633.179434][T24391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1633.577913][T22376] Bluetooth: hci6: Frame reassembly failed (-84) [ 1634.320777][ T30] kauditd_printk_skb: 247 callbacks suppressed [ 1634.320791][ T30] audit: type=1400 audit(1754519905.615:55868): avc: denied { create } for pid=24406 comm="syz.8.4795" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1634.348382][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.354939][ T30] audit: type=1400 audit(1754519905.635:55869): avc: denied { map_create } for pid=24406 comm="syz.8.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1634.376455][ T30] audit: type=1400 audit(1754519905.655:55870): avc: denied { create } for pid=24406 comm="syz.8.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1634.396079][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.405674][ T30] audit: type=1400 audit(1754519905.675:55871): avc: denied { create } for pid=24406 comm="syz.8.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1634.437739][ T5853] Bluetooth: to_multiplier 4 < 10 [ 1634.449597][ T30] audit: type=1400 audit(1754519905.695:55872): avc: denied { create } for pid=24406 comm="syz.8.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1634.475545][ T30] audit: type=1400 audit(1754519905.705:55873): avc: denied { write } for pid=24406 comm="syz.8.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1634.496051][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.504858][ T30] audit: type=1400 audit(1754519905.715:55874): avc: denied { read } for pid=24406 comm="syz.8.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1634.525777][ T30] audit: type=1400 audit(1754519905.715:55875): avc: denied { read } for pid=24406 comm="syz.8.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1634.546182][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.554908][ T30] audit: type=1400 audit(1754519905.785:55876): avc: denied { create } for pid=24406 comm="syz.8.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1634.575878][ T30] audit: type=1400 audit(1754519905.795:55877): avc: denied { ioctl } for pid=24406 comm="syz.8.4795" path="socket:[93441]" dev="sockfs" ino=93441 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1634.600625][ C0] vkms_vblank_simulate: vblank timer overrun [ 1635.159285][T24421] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1635.572079][T16232] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1635.897213][T24419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8720 sclass=netlink_route_socket pid=24419 comm=syz.2.4797 [ 1636.458806][T16232] Bluetooth: hci1: command 0x0405 tx timeout [ 1638.567723][T21181] Bluetooth: hci1: command 0x0405 tx timeout [ 1639.350526][ T30] kauditd_printk_skb: 207 callbacks suppressed [ 1639.350543][ T30] audit: type=1400 audit(1754519911.075:56085): avc: denied { create } for pid=24459 comm="syz.3.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1639.385267][ T30] audit: type=1400 audit(1754519911.115:56086): avc: denied { create } for pid=24459 comm="syz.3.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1639.406899][ T30] audit: type=1400 audit(1754519911.115:56087): avc: denied { write } for pid=24459 comm="syz.3.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1639.427573][ C0] vkms_vblank_simulate: vblank timer overrun [ 1639.455156][ T30] audit: type=1400 audit(1754519911.175:56088): avc: denied { read } for pid=24459 comm="syz.3.4808" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1639.477955][ C0] vkms_vblank_simulate: vblank timer overrun [ 1639.485562][ T30] audit: type=1400 audit(1754519911.175:56089): avc: denied { read open } for pid=24459 comm="syz.3.4808" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1639.543317][ T30] audit: type=1400 audit(1754519911.275:56090): avc: denied { create } for pid=24459 comm="syz.3.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1639.564081][ C0] vkms_vblank_simulate: vblank timer overrun [ 1639.617409][ T30] audit: type=1400 audit(1754519911.305:56091): avc: denied { write } for pid=24459 comm="syz.3.4808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1639.774978][T24467] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4808'. [ 1639.953712][T24458] Falling back ldisc for ttyprintk. [ 1640.053401][ T30] audit: type=1400 audit(1754519911.785:56092): avc: denied { read write } for pid=23718 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1640.077742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1640.150974][ T30] audit: type=1400 audit(1754519911.785:56093): avc: denied { read write open } for pid=23718 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1640.200340][ T30] audit: type=1400 audit(1754519911.785:56094): avc: denied { ioctl } for pid=23718 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1641.200769][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1641.269986][T24484] Invalid source name [ 1641.289979][T24484] UBIFS error (pid: 24484): cannot open "usrquota", error -22 [ 1641.533297][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1641.578794][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1641.593905][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1641.761474][T24491] tipc: Started in network mode [ 1641.766361][T24491] tipc: Node identity ae178068ac17, cluster identity 4711 [ 1641.773932][T24491] tipc: Enabled bearer , priority 0 [ 1641.787180][T24491] syzkaller0: entered promiscuous mode [ 1641.792985][T24491] syzkaller0: entered allmulticast mode [ 1641.945957][ T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 1641.981011][T18659] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1642.001111][T24480] tipc: Resetting bearer [ 1642.022438][T24480] tipc: Disabling bearer [ 1642.166517][ T10] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1642.184996][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.206159][ T10] usb 9-1: Product: syz [ 1642.210372][ T10] usb 9-1: Manufacturer: syz [ 1642.242729][T18659] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.264436][T18659] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1642.430098][ T10] usb 9-1: SerialNumber: syz [ 1642.482192][T18659] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1642.503644][T18659] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1642.565196][ T10] usb 9-1: config 0 descriptor?? [ 1642.598640][T24479] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1642.623720][ T10] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 1642.629622][ T10] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 1642.637699][ T10] mcba_usb 9-1:0.0 can0: failed tx_urb -90 [ 1642.654563][T18659] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1642.692390][T18659] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.700432][T18659] usb 7-1: Product: syz [ 1643.248918][ T10] mcba_usb 9-1:0.0 can0: Failed to send cmd (169) [ 1643.281916][T24477] netlink: 'syz.8.4811': attribute type 5 has an invalid length. [ 1643.293484][T18659] usb 7-1: Manufacturer: syz [ 1643.298879][ T10] mcba_usb 9-1:0.0: Microchip CAN BUS Analyzer connected [ 1643.307412][T18659] usb 7-1: SerialNumber: syz [ 1643.323147][T24477] ip6erspan0: entered promiscuous mode [ 1643.368830][T18659] usb 7-1: config 0 descriptor?? [ 1643.409581][T18659] garmin_gps 7-1:0.0: Garmin GPS usb/tty converter detected [ 1643.488250][T18659] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1643.540966][T18659] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1643.716294][T24505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1643.728153][T24505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1643.754690][T24505] can1: slcan on ptm0. [ 1644.048068][T24506] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4818'. [ 1644.057547][T24506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4818'. [ 1644.066746][T24506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4818'. [ 1644.082332][T24504] can1 (unregistered): slcan off ptm0. [ 1644.411603][ T30] kauditd_printk_skb: 301 callbacks suppressed [ 1644.411619][ T30] audit: type=1400 audit(1754519916.145:56396): avc: denied { write } for pid=24508 comm="syz.7.4820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1644.499316][ T30] audit: type=1400 audit(1754519916.165:56397): avc: denied { write } for pid=24508 comm="syz.7.4820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1644.557201][ T30] audit: type=1400 audit(1754519916.195:56398): avc: denied { read } for pid=24508 comm="syz.7.4820" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1644.579989][ C0] vkms_vblank_simulate: vblank timer overrun [ 1644.586884][ T30] audit: type=1400 audit(1754519916.195:56399): avc: denied { read open } for pid=24508 comm="syz.7.4820" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1644.610524][ C0] vkms_vblank_simulate: vblank timer overrun [ 1644.619017][ T30] audit: type=1400 audit(1754519916.195:56400): avc: denied { read } for pid=24508 comm="syz.7.4820" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1644.653383][ T30] audit: type=1400 audit(1754519916.195:56401): avc: denied { read open } for pid=24508 comm="syz.7.4820" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1644.677362][ C0] vkms_vblank_simulate: vblank timer overrun [ 1644.695893][ T30] audit: type=1400 audit(1754519916.195:56402): avc: denied { read write } for pid=24508 comm="syz.7.4820" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1644.755079][ T24] usb 7-1: USB disconnect, device number 6 [ 1644.761980][ T24] garmin_gps 7-1:0.0: device disconnected [ 1644.822367][ T10] usb 9-1: USB disconnect, device number 3 [ 1644.829011][ T10] mcba_usb 9-1:0.0 can0: device disconnected [ 1644.865401][ T30] audit: type=1400 audit(1754519916.195:56403): avc: denied { read write open } for pid=24508 comm="syz.7.4820" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1644.894333][ T30] audit: type=1400 audit(1754519916.255:56404): avc: denied { ioctl } for pid=24508 comm="syz.7.4820" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1644.919832][ T30] audit: type=1400 audit(1754519916.265:56405): avc: denied { prog_load } for pid=24508 comm="syz.7.4820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1645.138483][T24517] vivid-007: ================= START STATUS ================= [ 1645.149167][T24517] vivid-007: Generate PTS: true [ 1645.154775][T24517] vivid-007: Generate SCR: true [ 1645.159779][T24517] tpg source WxH: 320x240 (Y'CbCr) [ 1645.165030][T24517] tpg field: 1 [ 1645.168422][T24517] tpg crop: (0,0)/320x240 [ 1645.173398][T24517] tpg compose: (0,0)/320x240 [ 1645.178035][T24517] tpg colorspace: 8 [ 1645.181913][T24517] tpg transfer function: 0/0 [ 1645.405612][T24517] tpg Y'CbCr encoding: 0/0 [ 1645.410096][T24517] tpg quantization: 0/0 [ 1645.414709][T24517] tpg RGB range: 0/2 [ 1645.418646][T24517] vivid-007: ================== END STATUS ================== [ 1645.535032][T24521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4823'. [ 1645.557198][T24518] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 1645.563820][T24518] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1645.572185][T24518] vhci_hcd vhci_hcd.0: Device attached [ 1646.690591][T24519] vhci_hcd: connection closed [ 1646.691171][T22374] vhci_hcd: stop threads [ 1646.711411][T23499] vhci_hcd: vhci_device speed not set [ 1646.719825][T22374] vhci_hcd: release socket [ 1646.725904][T22374] vhci_hcd: disconnect device [ 1646.802262][T23499] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 1646.860964][ T975] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1646.860986][T23499] usb 45-1: enqueue for inactive port 0 [ 1647.019914][T23499] vhci_hcd: vhci_device speed not set [ 1647.077549][ T975] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1647.093877][ T975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.220060][T24531] netlink: 'syz.2.4825': attribute type 3 has an invalid length. [ 1647.227947][T24531] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4825'. [ 1648.093087][ T975] usb 9-1: Product: syz [ 1648.097322][ T975] usb 9-1: Manufacturer: syz [ 1648.155773][ T975] usb 9-1: SerialNumber: syz [ 1648.690377][T24525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.790354][T24525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.523792][ T30] kauditd_printk_skb: 234 callbacks suppressed [ 1649.523811][ T30] audit: type=1400 audit(1754519921.105:56640): avc: denied { ioctl } for pid=24540 comm="syz.7.4831" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1649.585013][ T975] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1649.591749][ T975] cdc_ncm 9-1:1.0: setting tx_max = 184 [ 1649.659999][ T30] audit: type=1400 audit(1754519921.125:56641): avc: denied { ioctl } for pid=24540 comm="syz.7.4831" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1649.687213][ T30] audit: type=1400 audit(1754519921.135:56642): avc: denied { write } for pid=24537 comm="syz.2.4830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1649.732278][ T30] audit: type=1400 audit(1754519921.215:56643): avc: denied { ioctl } for pid=24540 comm="syz.7.4831" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1649.881649][ T30] audit: type=1400 audit(1754519921.285:56644): avc: denied { ioctl } for pid=24540 comm="syz.7.4831" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1649.944773][ T30] audit: type=1400 audit(1754519921.295:56645): avc: denied { ioctl } for pid=24523 comm="syz.8.4824" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1650.013101][ T30] audit: type=1400 audit(1754519921.315:56646): avc: denied { ioctl } for pid=24523 comm="syz.8.4824" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1650.077743][ T30] audit: type=1400 audit(1754519921.555:56647): avc: denied { read write } for pid=24557 comm="syz.3.4834" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1650.197805][ T30] audit: type=1400 audit(1754519921.565:56648): avc: denied { read write open } for pid=24557 comm="syz.3.4834" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1650.272428][ T975] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1650.324000][ T30] audit: type=1400 audit(1754519921.575:56649): avc: denied { mounton } for pid=24557 comm="syz.3.4834" path="/418/file0" dev="tmpfs" ino=2210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1650.367016][ T975] usb 9-1: USB disconnect, device number 4 [ 1650.407063][ T975] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 1651.724645][T24579] tipc: Enabling of bearer rejected, already enabled [ 1651.786515][T24576] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4837'. [ 1652.530850][T16232] Bluetooth: hci6: command 0x1003 tx timeout [ 1652.531638][T21181] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1653.290828][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1653.441838][T24602] lo speed is unknown, defaulting to 1000 [ 1653.881030][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1654.637535][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 1654.637557][ T30] audit: type=1400 audit(1754519926.195:56811): avc: denied { write } for pid=24600 comm="syz.3.4844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1654.665196][ T30] audit: type=1400 audit(1754519926.255:56812): avc: denied { ioctl } for pid=24590 comm="syz.6.4843" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1654.690527][ T30] audit: type=1400 audit(1754519926.305:56813): avc: denied { read write } for pid=23718 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1654.715220][ T10] usb 7-1: config 254 has an invalid interface number: 160 but max is 0 [ 1654.732407][ T10] usb 7-1: config 254 has no interface number 0 [ 1654.747890][ T10] usb 7-1: config 254 interface 160 has no altsetting 0 [ 1654.782885][ T10] usb 7-1: New USB device found, idVendor=24df, idProduct=d062, bcdDevice=c0.3f [ 1654.818949][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.827848][ T30] audit: type=1400 audit(1754519926.325:56814): avc: denied { read write open } for pid=23718 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1654.856413][ T30] audit: type=1400 audit(1754519926.345:56815): avc: denied { ioctl } for pid=23718 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1654.865115][ T10] usb 7-1: Product: syz [ 1654.923845][ T10] usb 7-1: Manufacturer: syz [ 1654.931183][ T30] audit: type=1400 audit(1754519926.475:56816): avc: denied { ioctl } for pid=24590 comm="syz.6.4843" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1654.934962][ T10] usb 7-1: SerialNumber: syz [ 1655.007758][ T30] audit: type=1400 audit(1754519926.495:56817): avc: denied { ioctl } for pid=24590 comm="syz.6.4843" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1655.081534][ T30] audit: type=1400 audit(1754519926.495:56818): avc: denied { ioctl } for pid=24590 comm="syz.6.4843" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1655.193327][ T30] audit: type=1400 audit(1754519926.495:56819): avc: denied { ioctl } for pid=24590 comm="syz.6.4843" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1655.500235][T24613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4847'. [ 1655.734993][ T30] audit: type=1400 audit(1754519926.505:56820): avc: denied { ioctl } for pid=24590 comm="syz.6.4843" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1656.073210][ T10] usb 7-1: bad CDC descriptors [ 1656.083348][ T10] usb 7-1: USB disconnect, device number 7 [ 1657.391819][T24621] loop2: detected capacity change from 0 to 7 [ 1657.401676][ C1] blk_print_req_error: 6 callbacks suppressed [ 1657.401694][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1657.417078][ C1] buffer_io_error: 6 callbacks suppressed [ 1657.417094][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1657.435713][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1657.444967][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1657.453887][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1657.463042][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1657.471869][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1657.481048][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1657.501433][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1657.510599][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1657.518717][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1657.527912][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1657.536154][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1657.545333][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1657.556630][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1657.565811][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1657.573996][T24621] ldm_validate_partition_table(): Disk read failed. [ 1657.581701][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1657.590905][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1657.599477][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1657.608726][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1657.618207][T24621] Dev loop2: unable to read RDB block 0 [ 1657.624368][T24621] loop2: unable to read partition table [ 1657.630141][T24621] loop2: partition table beyond EOD, truncated [ 1657.636388][T24621] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1657.700098][T24625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1657.774155][T24625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1658.505995][T24625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1658.530663][T24625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.640739][ T30] kauditd_printk_skb: 3193 callbacks suppressed [ 1659.640757][ T30] audit: type=1400 audit(1754519931.345:57131): avc: denied { write } for pid=24635 comm="syz.7.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1659.742079][T24644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1659.770365][T24644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1659.804547][ T30] audit: type=1400 audit(1754519931.355:57132): avc: denied { write } for pid=24635 comm="syz.7.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1659.891311][ T30] audit: type=1400 audit(1754519931.355:57133): avc: denied { write } for pid=24635 comm="syz.7.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1659.989613][ T30] audit: type=1400 audit(1754519931.365:57134): avc: denied { write } for pid=24635 comm="syz.7.4855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1660.006913][T24643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1660.034754][T24643] audit: audit_lost=6781 audit_rate_limit=0 audit_backlog_limit=64 [ 1660.042903][T11897] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1660.070357][T24643] audit: backlog limit exceeded [ 1660.082389][T24643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1660.091474][T24643] audit: audit_lost=6782 audit_rate_limit=0 audit_backlog_limit=64 [ 1660.100135][T24648] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1660.211347][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1660.298470][T11897] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1660.309353][T11897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.317846][T11897] usb 3-1: Product: syz [ 1660.324321][T11897] usb 3-1: Manufacturer: syz [ 1660.333688][T11897] usb 3-1: SerialNumber: syz [ 1660.346697][T11897] usb 3-1: config 0 descriptor?? [ 1660.478704][ T10] usb 7-1: config 0 has an invalid interface number: 156 but max is 1 [ 1660.494094][ T10] usb 7-1: config 0 has no interface number 1 [ 1660.506449][ T10] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1660.666668][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.880778][T24657] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4859'. [ 1661.329682][ T10] usb 7-1: config 0 descriptor?? [ 1661.413235][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1661.420230][ T10] usb 7-1: MIDIStreaming interface descriptor not found [ 1661.535019][T24663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.544969][T24663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.838515][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1661.856206][ T10] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 1662.878054][ T10] usb 7-1: USB disconnect, device number 8 [ 1663.328208][T24675] block nbd7: shutting down sockets [ 1663.383545][T23499] usb 3-1: USB disconnect, device number 79 [ 1663.790854][ T975] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1663.969211][T24698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4869'. [ 1663.978588][T24698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4869'. [ 1664.098127][ T975] usb 9-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1664.109045][ T975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.163634][ T975] usb 9-1: Product: syz [ 1664.167942][ T975] usb 9-1: Manufacturer: syz [ 1664.179991][ T975] usb 9-1: SerialNumber: syz [ 1664.196367][ T975] usb 9-1: config 0 descriptor?? [ 1664.223986][ T975] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1664.665390][ T30] kauditd_printk_skb: 387 callbacks suppressed [ 1664.665473][ T30] audit: type=1400 audit(1754519936.395:57513): avc: denied { shutdown } for pid=24703 comm="syz.3.4871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1664.745386][ T30] audit: type=1400 audit(1754519936.405:57514): avc: denied { prog_load } for pid=24704 comm="syz.2.4872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1664.785296][ T975] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1664.817171][ T975] sq905c 9-1:0.0: Get version command failed [ 1664.827850][ T30] audit: type=1400 audit(1754519936.405:57515): avc: denied { bpf } for pid=24704 comm="syz.2.4872" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1664.869945][ T975] sq905c 9-1:0.0: probe with driver sq905c failed with error -110 [ 1664.887049][ T30] audit: type=1400 audit(1754519936.405:57516): avc: denied { allowed } for pid=24704 comm="syz.2.4872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1664.913320][ T30] audit: type=1400 audit(1754519936.415:57517): avc: denied { create } for pid=24704 comm="syz.2.4872" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1664.941298][ T30] audit: type=1400 audit(1754519936.415:57518): avc: denied { map } for pid=24704 comm="syz.2.4872" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1664.967460][ T30] audit: type=1400 audit(1754519936.415:57519): avc: denied { read write } for pid=24704 comm="syz.2.4872" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1665.032642][ T30] audit: type=1400 audit(1754519936.415:57520): avc: denied { map } for pid=24704 comm="syz.2.4872" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1665.070867][ T5920] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1665.079785][ T30] audit: type=1400 audit(1754519936.415:57521): avc: denied { module_request } for pid=24699 comm="syz.6.4870" kmod="net-pf-10-proto-132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1665.105112][ T30] audit: type=1400 audit(1754519936.445:57522): avc: denied { read write } for pid=24704 comm="syz.2.4872" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1665.253301][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 1665.296537][ T5920] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1665.325028][ T5920] usb 3-1: config 0 has no interface number 0 [ 1665.374055][ T5920] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1665.392561][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.424298][ T5920] usb 3-1: Product: syz [ 1665.438674][ T5920] usb 3-1: Manufacturer: syz [ 1665.460877][ T5920] usb 3-1: SerialNumber: syz [ 1665.480777][ T5920] usb 3-1: config 0 descriptor?? [ 1665.513072][ T5920] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1665.727820][ T5920] gspca_spca1528: reg_w err -71 [ 1665.763269][ T5920] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 1665.798782][ T5920] usb 3-1: USB disconnect, device number 80 [ 1666.326985][T24733] loop2: detected capacity change from 0 to 7 [ 1666.335405][ C1] blk_print_req_error: 6 callbacks suppressed [ 1666.335423][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1666.350737][ C1] buffer_io_error: 6 callbacks suppressed [ 1666.350751][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1666.365061][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1666.374268][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1666.383891][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1666.393051][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1666.404624][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1666.413783][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1666.423020][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1666.432172][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1666.440204][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1666.449397][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1666.458320][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1666.467566][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1666.475587][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1666.484841][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1666.492959][T24733] ldm_validate_partition_table(): Disk read failed. [ 1666.510750][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1666.519995][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1666.529933][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1666.539153][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1666.548910][T24733] Dev loop2: unable to read RDB block 0 [ 1666.557736][T24733] loop2: unable to read partition table [ 1666.564771][T24733] loop2: partition table beyond EOD, truncated [ 1666.571040][T24733] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1666.950945][ T975] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 1666.978842][ T10] usb 9-1: USB disconnect, device number 5 [ 1667.195466][T24740] loop2: detected capacity change from 0 to 7 [ 1667.204460][T24740] ldm_validate_partition_table(): Disk read failed. [ 1667.213773][T24740] Dev loop2: unable to read RDB block 0 [ 1667.220636][T24740] loop2: unable to read partition table [ 1667.226391][T24740] loop2: partition table beyond EOD, truncated [ 1667.232642][T24740] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1667.284108][ T975] usb 3-1: LPM exit latency is zeroed, disabling LPM. [ 1667.315649][ T975] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x82 is Bulk; changing to Interrupt [ 1667.348883][ T975] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x3 is Bulk; changing to Interrupt [ 1667.370563][ T975] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1667.462053][ T975] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1667.510021][ T975] usb 3-1: string descriptor 0 read error: -22 [ 1667.518443][ T975] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1667.552052][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.581049][ T24] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1667.700910][T22629] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1667.862155][T24741] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1667.870387][T24741] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1667.925420][ T975] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1668.075954][T22629] usb 7-1: device descriptor read/64, error -71 [ 1668.384610][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.391011][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.423436][ T24] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1668.432602][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.444096][ T24] usb 9-1: Product: syz [ 1668.448322][ T24] usb 9-1: Manufacturer: syz [ 1668.454690][ T24] usb 9-1: SerialNumber: syz [ 1668.468296][ T975] usb 3-1: USB disconnect, device number 81 [ 1668.474498][T22629] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1668.509189][ T24] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1668.646644][ T5920] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1668.671058][T22629] usb 7-1: device descriptor read/64, error -71 [ 1668.803494][T22629] usb usb7-port1: attempt power cycle [ 1669.211128][T22629] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1669.264691][T22629] usb 7-1: device descriptor read/8, error -71 [ 1669.863322][T24769] audit_log_start: 531 callbacks suppressed [ 1669.863334][T24769] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1669.875928][T24769] audit: audit_lost=6786 audit_rate_limit=0 audit_backlog_limit=64 [ 1669.881055][ T30] audit: type=1400 audit(1754519941.275:58054): avc: denied { connect } for pid=24747 comm="syz.8.4881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1669.883936][T24769] audit: backlog limit exceeded [ 1669.911244][T24769] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1669.917777][T24769] audit: audit_lost=6787 audit_rate_limit=0 audit_backlog_limit=64 [ 1669.925743][T24769] audit: backlog limit exceeded [ 1669.931374][T24769] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1669.937902][T24769] audit: audit_lost=6788 audit_rate_limit=0 audit_backlog_limit=64 [ 1669.945867][T24769] audit: backlog limit exceeded [ 1670.245652][ T5920] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1670.254967][ T5920] ath9k_htc: Failed to initialize the device [ 1670.257610][T23499] IPVS: starting estimator thread 0... [ 1670.309135][ T5920] usb 9-1: ath9k_htc: USB layer deinitialized [ 1670.401025][T24771] IPVS: using max 41 ests per chain, 98400 per kthread [ 1670.410804][T22629] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1670.485772][T22629] usb 7-1: device descriptor read/8, error -71 [ 1670.834300][T22629] usb usb7-port1: unable to enumerate USB device [ 1671.571429][T22629] usb 9-1: USB disconnect, device number 6 [ 1672.920181][T24794] lo speed is unknown, defaulting to 1000 [ 1674.893926][ T30] kauditd_printk_skb: 1923 callbacks suppressed [ 1674.893941][ T30] audit: type=1400 audit(1754519946.585:58559): avc: denied { map } for pid=24798 comm="syz.8.4893" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1674.977541][ T30] audit: type=1400 audit(1754519946.595:58560): avc: denied { read } for pid=24762 comm="syz.2.4886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1675.135044][T24812] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4896'. [ 1675.148587][T24764] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1675.153342][T24808] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1675.161839][T24808] audit: audit_lost=7262 audit_rate_limit=0 audit_backlog_limit=64 [ 1675.169734][T24808] audit: backlog limit exceeded [ 1675.180074][T24764] audit: audit_lost=7263 audit_rate_limit=0 audit_backlog_limit=64 [ 1675.203587][ T30] audit: type=1400 audit(1754519946.595:58561): avc: denied { read } for pid=24762 comm="syz.2.4886" path="socket:[94170]" dev="sockfs" ino=94170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1675.205395][T24813] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1675.226911][ C0] vkms_vblank_simulate: vblank timer overrun [ 1675.242084][T24808] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1676.375513][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4899'. [ 1676.477085][T24830] netlink: 'syz.8.4900': attribute type 1 has an invalid length. [ 1676.651297][T24830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1677.017738][T24841] vlan2: entered allmulticast mode [ 1677.048631][T24841] veth1: entered allmulticast mode [ 1677.067432][T24841] bond2: (slave vlan2): making interface the new active one [ 1677.078637][T24841] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 1677.502725][T24843] loop2: detected capacity change from 0 to 7 [ 1677.532990][ C1] blk_print_req_error: 22 callbacks suppressed [ 1677.533008][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.548411][ C1] buffer_io_error: 22 callbacks suppressed [ 1677.548432][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1677.571448][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.580683][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1677.589992][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.599325][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1677.622080][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.631311][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1677.643402][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.652608][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1677.661057][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.670212][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1677.682866][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.692071][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1677.701841][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.711075][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1677.719187][T24843] ldm_validate_partition_table(): Disk read failed. [ 1677.752120][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.761297][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1677.774323][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1677.783525][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1677.875945][T24843] Dev loop2: unable to read RDB block 0 [ 1677.888092][T24843] loop2: unable to read partition table [ 1677.903221][T24853] input: syz0 as /devices/virtual/input/input62 [ 1678.117727][T24843] loop2: partition table beyond EOD, truncated [ 1678.136553][T24843] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1678.316577][T24858] Lens A: ================= START STATUS ================= [ 1678.367867][T24858] Lens A: Focus, Absolute: 0 [ 1678.381324][T24858] Lens A: ================== END STATUS ================== [ 1678.580976][ T5920] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1678.875500][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 1678.978148][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.113357][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.140852][ T5920] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1679.182004][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.242224][ T5920] usb 7-1: config 0 descriptor?? [ 1679.713003][ T5920] hid_parser_main: 40 callbacks suppressed [ 1679.713017][ T5920] hid-multitouch 0003:1FD2:6007.0023: unknown main item tag 0x6 [ 1679.789623][ T5920] hid-multitouch 0003:1FD2:6007.0023: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 1679.907787][ T30] kauditd_printk_skb: 1397 callbacks suppressed [ 1679.907803][ T30] audit: type=1400 audit(1754519951.625:59570): avc: denied { read } for pid=24762 comm="syz.2.4886" path="socket:[94170]" dev="sockfs" ino=94170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1679.948158][T24855] hugetlbfs: Bad value '' for mount option 'size' [ 1679.948158][T24855] [ 1679.995609][ T5920] usb 7-1: USB disconnect, device number 13 [ 1680.063308][ T30] audit: type=1400 audit(1754519951.625:59571): avc: denied { read } for pid=24762 comm="syz.2.4886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1680.090234][T24870] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1680.103594][T24764] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1680.103976][T24870] audit: audit_lost=7394 audit_rate_limit=0 audit_backlog_limit=64 [ 1680.120000][T24764] audit: audit_lost=7395 audit_rate_limit=0 audit_backlog_limit=64 [ 1680.121739][T24870] audit: backlog limit exceeded [ 1680.139408][T24870] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1680.139487][T24764] audit: backlog limit exceeded [ 1680.149794][T24870] audit: audit_lost=7396 audit_rate_limit=0 audit_backlog_limit=64 [ 1680.472512][T24873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1680.491116][T24873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1681.104824][T23499] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1681.411025][T23499] usb 7-1: Using ep0 maxpacket: 32 [ 1681.510521][T23499] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1681.574095][T24881] loop2: detected capacity change from 0 to 7 [ 1681.589113][T23499] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1681.599347][T24881] ldm_validate_partition_table(): Disk read failed. [ 1681.606702][T24881] Dev loop2: unable to read RDB block 0 [ 1681.612497][T23499] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1681.621497][T24881] loop2: unable to read partition table [ 1681.627283][T24881] loop2: partition table beyond EOD, truncated [ 1681.633604][T24881] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1682.330444][T23499] usb 7-1: Product: syz [ 1682.334693][T23499] usb 7-1: Manufacturer: syz [ 1682.339291][T23499] usb 7-1: SerialNumber: syz [ 1682.356229][T23499] usb 7-1: config 0 descriptor?? [ 1682.366354][T24883] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1682.437152][T23499] hub 7-1:0.0: bad descriptor, ignoring hub [ 1682.451642][T23499] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1682.625691][T24894] FAULT_INJECTION: forcing a failure. [ 1682.625691][T24894] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.638558][T24894] CPU: 0 UID: 0 PID: 24894 Comm: syz.3.4914 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 1682.638584][T24894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1682.638596][T24894] Call Trace: [ 1682.638603][T24894] [ 1682.638610][T24894] dump_stack_lvl+0x16c/0x1f0 [ 1682.638650][T24894] should_fail_ex+0x512/0x640 [ 1682.638667][T24894] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1682.638698][T24894] should_failslab+0xc2/0x120 [ 1682.638720][T24894] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1682.638749][T24894] ? bpf_lsm_capable+0x9/0x10 [ 1682.638775][T24894] ? security_capable+0x7e/0x260 [ 1682.638792][T24894] ? pagemap_read+0x296/0x890 [ 1682.638818][T24894] pagemap_read+0x296/0x890 [ 1682.638843][T24894] ? __pfx_pagemap_read+0x10/0x10 [ 1682.638871][T24894] ? rw_verify_area+0xcf/0x6c0 [ 1682.638898][T24894] ? __pfx_pagemap_read+0x10/0x10 [ 1682.638921][T24894] vfs_read+0x1e1/0xc60 [ 1682.638939][T24894] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1682.638965][T24894] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 1682.638986][T24894] ? __pfx_vfs_read+0x10/0x10 [ 1682.639007][T24894] ? __rcu_read_unlock+0x2bc/0x620 [ 1682.639027][T24894] ? __fget_files+0x20e/0x3c0 [ 1682.639046][T24894] ? __fget_files+0x120/0x3c0 [ 1682.639073][T24894] __x64_sys_pread64+0x1eb/0x250 [ 1682.639093][T24894] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1682.639121][T24894] do_syscall_64+0xcd/0x4c0 [ 1682.639151][T24894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.639169][T24894] RIP: 0033:0x7f6f30d8ebe9 [ 1682.639185][T24894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1682.639202][T24894] RSP: 002b:00007f6f31c85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1682.639219][T24894] RAX: ffffffffffffffda RBX: 00007f6f30fb6090 RCX: 00007f6f30d8ebe9 [ 1682.639231][T24894] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 000000000000000b [ 1682.639242][T24894] RBP: 00007f6f31c85090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.639253][T24894] R10: 0000001000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.639265][T24894] R13: 00007f6f30fb6128 R14: 00007f6f30fb6090 R15: 00007ffe3ced2b08 [ 1682.639290][T24894] [ 1682.857951][ C0] vkms_vblank_simulate: vblank timer overrun [ 1683.675777][T24896] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4916'. [ 1683.921039][T18659] usb 7-1: USB disconnect, device number 14 [ 1684.757671][T18659] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1684.934057][ T30] kauditd_printk_skb: 1122 callbacks suppressed [ 1684.934074][ T30] audit: type=1400 audit(1754519956.665:60525): avc: denied { read } for pid=24762 comm="syz.2.4886" path="socket:[94170]" dev="sockfs" ino=94170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1684.981251][T18659] usb 7-1: Using ep0 maxpacket: 32 [ 1684.991115][T18659] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1685.054568][T24904] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4918'. [ 1685.107728][T18659] usb 7-1: string descriptor 0 read error: -71 [ 1685.149272][T24899] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1685.156563][ T30] audit: type=1400 audit(1754519956.685:60526): avc: denied { read write } for pid=17285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1685.181316][T24899] audit: audit_lost=7453 audit_rate_limit=0 audit_backlog_limit=64 [ 1685.189434][T24899] audit: backlog limit exceeded [ 1685.194794][T18659] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1685.196904][T24764] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1685.235056][T24764] audit: audit_lost=7454 audit_rate_limit=0 audit_backlog_limit=64 [ 1685.241019][T18659] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1685.247760][ T30] audit: type=1400 audit(1754519956.685:60527): avc: denied { read write open } for pid=17285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1685.276353][ C1] vkms_vblank_simulate: vblank timer overrun [ 1685.288653][T23229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1685.288715][T24908] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1685.835855][T18659] usb 7-1: config 0 descriptor?? [ 1685.875074][T18659] usb 7-1: can't set config #0, error -71 [ 1685.916271][T18659] usb 7-1: USB disconnect, device number 15 [ 1685.941083][T21181] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1685.995644][T24908] SELinux: ebitmap: truncated map [ 1686.041366][T21181] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1686.055187][T21181] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1686.066035][T21181] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1686.077425][T21181] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1686.146237][T24908] SELinux: failed to load policy [ 1686.213927][T24908] binfmt_misc: register: failed to install interpreter file ./file0 [ 1686.351180][T24913] lo speed is unknown, defaulting to 1000 [ 1686.551128][ T5920] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1686.730892][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 1686.748626][ T5920] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.850986][ T5920] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.905928][ T5920] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1686.938273][ T5920] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1686.978737][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.041619][ T5920] usb 7-1: config 0 descriptor?? [ 1687.063320][T24913] chnl_net:caif_netlink_parms(): no params data found [ 1687.096155][T24925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.112110][T24925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1687.583202][T24913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.626896][T24913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.801494][T24913] bridge_slave_0: entered allmulticast mode [ 1687.808914][T24913] bridge_slave_0: entered promiscuous mode [ 1687.944995][ T5920] cougar 0003:060B:500A.0024: unexpected long global item [ 1687.989675][ T6154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.020444][ T5920] cougar 0003:060B:500A.0024: parse failed [ 1688.038334][ T5920] cougar 0003:060B:500A.0024: probe with driver cougar failed with error -22 [ 1688.130828][T16232] Bluetooth: hci6: command tx timeout [ 1688.151211][ T5920] usb 7-1: USB disconnect, device number 16 [ 1688.203785][T24913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.239438][T24913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.258407][T24913] bridge_slave_1: entered allmulticast mode [ 1688.269866][T24913] bridge_slave_1: entered promiscuous mode [ 1689.530449][ T6154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.622506][T24913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1689.744198][ T6154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.776332][T24913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1689.956005][ T30] kauditd_printk_skb: 4476 callbacks suppressed [ 1689.956022][ T30] audit: type=1400 audit(1754519961.675:61870): avc: denied { read } for pid=24898 comm="syz.7.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1689.999302][ T6154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.031752][ T30] audit: type=1400 audit(1754519961.675:61871): avc: denied { read } for pid=24898 comm="syz.7.4915" path="socket:[95414]" dev="sockfs" ino=95414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1690.188484][ T30] audit: type=1400 audit(1754519961.675:61872): avc: denied { read } for pid=24898 comm="syz.7.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1690.205923][T24913] team0: Port device team_slave_0 added [ 1690.214887][T16232] Bluetooth: hci6: command tx timeout [ 1690.236974][ T30] audit: type=1400 audit(1754519961.675:61873): avc: denied { read } for pid=24898 comm="syz.7.4915" path="socket:[95414]" dev="sockfs" ino=95414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1690.272779][T24913] team0: Port device team_slave_1 added [ 1690.330736][ T30] audit: type=1400 audit(1754519961.675:61874): avc: denied { read } for pid=24898 comm="syz.7.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1690.370563][ T30] audit: type=1400 audit(1754519961.675:61875): avc: denied { read } for pid=24898 comm="syz.7.4915" path="socket:[95414]" dev="sockfs" ino=95414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1690.397650][ T30] audit: type=1400 audit(1754519961.675:61876): avc: denied { read } for pid=24898 comm="syz.7.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1690.493460][ T30] audit: type=1400 audit(1754519961.675:61877): avc: denied { read } for pid=24898 comm="syz.7.4915" path="socket:[95414]" dev="sockfs" ino=95414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1690.596390][ T30] audit: type=1400 audit(1754519961.675:61878): avc: denied { read } for pid=24898 comm="syz.7.4915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1690.606314][T24913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1690.639711][T24913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1690.676626][T24913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1690.704192][T24913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1690.716708][T24913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1690.792038][ T30] audit: type=1400 audit(1754519961.675:61879): avc: denied { read } for pid=24898 comm="syz.7.4915" path="socket:[95414]" dev="sockfs" ino=95414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1690.834024][T24913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1691.397788][ T6154] dummy0: left allmulticast mode [ 1691.412371][ T6154] bridge0: port 3(dummy0) entered disabled state [ 1691.714980][ T6154] bridge_slave_1: left allmulticast mode [ 1691.729786][ T6154] bridge_slave_1: left promiscuous mode [ 1691.751283][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.781565][ T6154] bridge_slave_0: left allmulticast mode [ 1691.783103][T24975] 9pnet_fd: Insufficient options for proto=fd [ 1691.787293][ T6154] bridge_slave_0: left promiscuous mode [ 1691.793490][T23499] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1691.843643][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.941127][T23499] usb 7-1: Using ep0 maxpacket: 32 [ 1691.952911][T23499] usb 7-1: config 254 has an invalid interface number: 160 but max is 0 [ 1692.041767][T23499] usb 7-1: config 254 has no interface number 0 [ 1692.055946][T23499] usb 7-1: config 254 interface 160 has no altsetting 0 [ 1692.088157][T23499] usb 7-1: New USB device found, idVendor=24df, idProduct=d062, bcdDevice=c0.3f [ 1692.104257][T23499] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.137648][T23499] usb 7-1: Product: syz [ 1692.152123][T23499] usb 7-1: Manufacturer: syz [ 1692.194799][T23499] usb 7-1: SerialNumber: syz [ 1692.288902][T24980] program syz.7.4938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1692.299745][T16232] Bluetooth: hci6: command tx timeout [ 1693.142478][T23499] usb 7-1: bad CDC descriptors [ 1693.157061][T23499] usb 7-1: USB disconnect, device number 17 [ 1693.337871][ T6154] batman_adv: batadv0: Removing interface: gretap1 [ 1693.733959][ T6154] team0: Port device geneve0 removed [ 1693.861379][T24987] loop2: detected capacity change from 0 to 7 [ 1693.880555][ C1] blk_print_req_error: 22 callbacks suppressed [ 1693.880574][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1693.896046][ C1] buffer_io_error: 22 callbacks suppressed [ 1693.896063][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1693.916177][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1693.925389][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1693.941256][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1693.950475][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1693.961829][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1693.971078][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1693.981826][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1693.991056][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1693.999733][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1694.008963][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1694.025282][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1694.034536][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1694.056092][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1694.065324][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1694.073361][T24987] ldm_validate_partition_table(): Disk read failed. [ 1694.092180][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1694.101474][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1694.112404][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1694.121659][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1694.136903][T24987] Dev loop2: unable to read RDB block 0 [ 1694.171171][T24987] loop2: unable to read partition table [ 1694.187253][T24987] loop2: partition table beyond EOD, truncated [ 1694.211021][T24987] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1694.370890][T16232] Bluetooth: hci6: command tx timeout [ 1694.526338][T25000] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4943'. [ 1694.577289][T25000] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4943'. [ 1694.612690][ T6154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1694.654104][ T6154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1694.668053][ T6154] bond0 (unregistering): Released all slaves [ 1694.815854][T24913] hsr_slave_0: entered promiscuous mode [ 1694.834140][T24913] hsr_slave_1: entered promiscuous mode [ 1694.857414][T24913] debugfs: 'hsr0' already exists in 'hsr' [ 1694.873756][T24913] Cannot create hsr debugfs directory [ 1694.963749][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 1694.963767][ T30] audit: type=1400 audit(1754519966.695:62129): avc: denied { read write } for pid=25002 comm="syz.7.4945" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1695.050676][ T30] audit: type=1400 audit(1754519966.715:62130): avc: denied { create } for pid=25006 comm="syz.3.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1695.140464][ T30] audit: type=1400 audit(1754519966.715:62131): avc: denied { create } for pid=25006 comm="syz.3.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1695.242230][ T30] audit: type=1400 audit(1754519966.725:62132): avc: denied { read write open } for pid=25002 comm="syz.7.4945" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1695.629602][T18659] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1695.671204][ T30] audit: type=1400 audit(1754519966.755:62133): avc: denied { relabelfrom } for pid=25004 comm="syz.8.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1695.808469][ T30] audit: type=1400 audit(1754519966.755:62134): avc: denied { relabelto } for pid=25004 comm="syz.8.4944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1695.871225][T18659] usb 9-1: Using ep0 maxpacket: 8 [ 1695.935655][ T30] audit: type=1400 audit(1754519966.835:62135): avc: denied { ioctl } for pid=25002 comm="syz.7.4945" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1695.968810][T18659] usb 9-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 1696.001156][T18659] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.017997][T18659] usb 9-1: Product: syz [ 1696.070258][T18659] usb 9-1: Manufacturer: syz [ 1696.074374][ T30] audit: type=1400 audit(1754519966.865:62136): avc: denied { read write } for pid=25004 comm="syz.8.4944" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.100651][T18659] usb 9-1: SerialNumber: syz [ 1696.136231][T18659] usb 9-1: config 0 descriptor?? [ 1696.160137][T18659] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 1696.182869][ T30] audit: type=1400 audit(1754519966.865:62137): avc: denied { read write open } for pid=25004 comm="syz.8.4944" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.244101][ T6154] : left promiscuous mode [ 1696.294620][ T30] audit: type=1400 audit(1754519966.865:62138): avc: denied { ioctl } for pid=25004 comm="syz.8.4944" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1696.399280][T24913] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1696.444921][ T6154] tipc: Left network mode [ 1696.454662][T24913] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1696.520757][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1696.565781][T24913] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1696.586213][T24913] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1696.705724][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1696.767051][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1696.817311][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1696.838572][ T6154] hsr_slave_0: left promiscuous mode [ 1696.844241][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.852547][ T10] usb 7-1: Product: syz [ 1696.852593][ T6154] hsr_slave_1: left promiscuous mode [ 1696.856742][ T10] usb 7-1: Manufacturer: syz [ 1696.856758][ T10] usb 7-1: SerialNumber: syz [ 1696.868629][ T10] usb 7-1: config 0 descriptor?? [ 1696.886062][ T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1696.890782][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1696.895563][ T10] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1696.912515][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1696.928967][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1696.937911][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.974797][ T6154] veth0_macvtap: left allmulticast mode [ 1696.982900][ T6154] veth1_macvtap: left promiscuous mode [ 1696.988634][ T6154] veth0_macvtap: left promiscuous mode [ 1696.999942][ T6154] veth1_vlan: left promiscuous mode [ 1697.007644][ T6154] veth0_vlan: left promiscuous mode [ 1697.102458][T25016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1697.111187][T25016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1697.171096][ T31] INFO: task kworker/0:6:13092 blocked for more than 143 seconds. [ 1697.285916][ T31] Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 [ 1697.304586][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1697.326587][ T31] task:kworker/0:6 state:D stack:22840 pid:13092 tgid:13092 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1697.369503][ T31] Workqueue: usb_hub_wq hub_event [ 1697.396850][ T31] Call Trace: [ 1697.402690][ T31] [ 1697.405937][ T31] __schedule+0x1190/0x5de0 [ 1697.412913][ T31] ? device_del+0x64e/0x9f0 [ 1697.418110][ T31] ? device_unregister+0x1d/0xc0 [ 1697.425095][ T31] ? i2c_del_adapter+0x53e/0x6f0 [ 1697.436322][ T31] ? __pfx___schedule+0x10/0x10 [ 1697.445286][ T31] ? find_held_lock+0x2b/0x80 [ 1697.450215][ T31] ? schedule+0x2d7/0x3a0 [ 1697.473894][ T31] schedule+0xe7/0x3a0 [ 1697.485095][ T31] schedule_timeout+0x257/0x290 [ 1697.522792][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1697.558900][ T31] ? mark_held_locks+0x49/0x80 [ 1697.599112][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1697.624290][ T31] __wait_for_common+0x2fc/0x4e0 [ 1697.629318][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1697.670931][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1697.676476][ T31] ? __pfx_device_del+0x10/0x10 [ 1697.720794][ T31] ? kobject_put+0xab/0x5a0 [ 1697.725369][ T31] i2c_del_adapter+0x546/0x6f0 [ 1697.739643][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1697.745077][ T31] ? kfree+0x2b4/0x4d0 [ 1697.755841][T23499] usb 4-1: USB disconnect, device number 69 [ 1697.763772][ T31] ? media_device_cleanup+0x53/0x80 [ 1697.770380][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 1697.776849][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 1697.782242][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 1697.787218][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1697.792567][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1697.797794][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1697.803866][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 1697.809515][ T31] usb_probe_interface+0x303/0xa40 [ 1697.815521][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1697.821261][ T31] really_probe+0x241/0xa90 [ 1697.825790][ T31] __driver_probe_device+0x1de/0x440 [ 1697.831148][ T31] driver_probe_device+0x4c/0x1b0 [ 1697.836199][ T31] __device_attach_driver+0x1df/0x310 [ 1697.842029][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1697.847942][ T31] bus_for_each_drv+0x159/0x1e0 [ 1697.853726][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1697.859123][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1697.864396][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1697.870216][ T31] __device_attach+0x1e4/0x4b0 [ 1697.875028][ T31] ? __pfx___device_attach+0x10/0x10 [ 1697.880331][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1697.886398][ T31] bus_probe_device+0x17f/0x1c0 [ 1697.891503][ T31] device_add+0x1148/0x1aa0 [ 1697.896018][ T31] ? __pfx_device_add+0x10/0x10 [ 1697.900928][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1697.906318][ T31] usb_set_configuration+0x1187/0x1e20 [ 1697.911854][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1697.917957][ T31] usb_generic_driver_probe+0xb1/0x110 [ 1697.923952][ T31] usb_probe_device+0xec/0x3e0 [ 1697.928729][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1697.934176][ T31] really_probe+0x241/0xa90 [ 1697.938696][ T31] __driver_probe_device+0x1de/0x440 [ 1697.944022][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 1697.949489][ T31] driver_probe_device+0x4c/0x1b0 [ 1697.955401][ T31] __device_attach_driver+0x1df/0x310 [ 1697.960871][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1697.966791][ T31] bus_for_each_drv+0x159/0x1e0 [ 1697.972231][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1697.977907][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1697.983281][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1697.989139][ T31] __device_attach+0x1e4/0x4b0 [ 1697.997429][ T31] ? __pfx___device_attach+0x10/0x10 [ 1698.002862][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1698.008079][ T31] bus_probe_device+0x17f/0x1c0 [ 1698.012987][ T31] device_add+0x1148/0x1aa0 [ 1698.017496][ T31] ? __pfx_device_add+0x10/0x10 [ 1698.022422][ T31] ? add_device_randomness+0xb7/0xf0 [ 1698.027733][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1698.033686][ T31] usb_new_device+0xd07/0x1a60 [ 1698.038458][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1698.043695][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1698.048969][ T10] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1698.053388][ T31] ? mark_held_locks+0x49/0x80 [ 1698.060018][ T31] hub_event+0x2f34/0x4fe0 [ 1698.064796][ T31] ? __pfx_hub_event+0x10/0x10 [ 1698.069555][ T31] ? rcu_is_watching+0x12/0xc0 [ 1698.074521][ T31] ? irqentry_exit+0x3b/0x90 [ 1698.079142][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1698.084628][ T31] process_one_work+0x9cc/0x1b70 [ 1698.089577][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 1698.094979][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1698.100368][ T31] ? assign_work+0x1a0/0x250 [ 1698.105258][ T31] worker_thread+0x6c8/0xf10 [ 1698.109867][ T31] ? __kthread_parkme+0x19e/0x250 [ 1698.120747][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1698.128738][ T10] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1698.130705][ T31] kthread+0x3c5/0x780 [ 1698.141005][ T10] em28xx 7-1:0.0: board has no eeprom [ 1698.141668][ T31] ? __pfx_kthread+0x10/0x10 [ 1698.156451][ T31] ? rcu_is_watching+0x12/0xc0 [ 1698.163739][ T31] ? __pfx_kthread+0x10/0x10 [ 1698.168395][ T31] ret_from_fork+0x5d4/0x6f0 [ 1698.174559][ T31] ? __pfx_kthread+0x10/0x10 [ 1698.179168][ T31] ret_from_fork_asm+0x1a/0x30 [ 1698.184113][ T31] [ 1698.189325][ T31] [ 1698.189325][ T31] Showing all locks held in the system: [ 1698.202697][ T31] 5 locks held by kworker/0:1/10: [ 1698.207758][ T31] #0: ffff88801ceb2948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1698.244503][ T10] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1698.258695][ T10] em28xx 7-1:0.0: dvb set to bulk mode. [ 1698.281736][T18659] gspca_zc3xx: reg_w_i err -110 [ 1698.295223][ T31] #1: ffffc900000f7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1698.303865][T23499] em28xx 7-1:0.0: Binding DVB extension [ 1698.346577][ T31] #2: ffff8880b8428948 (lock#5){..-.}-{3:3}, at: kcov_remote_stop+0x85/0x5f0 [ 1698.371396][ T31] #3: ffffffff9b03c398 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 1698.430795][ T31] #4: ffff888144fd1098 (&hub->status_mutex){+.+.}-{4:4}, at: hub_ext_port_status+0x5e/0x670 [ 1698.481069][ T31] 1 lock held by khungtaskd/31: [ 1698.485962][ T31] #0: ffffffff8e5c1160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1698.550675][ T31] 2 locks held by kworker/u8:4/59: [ 1698.555861][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1698.603322][ T31] #1: ffffc9000210fd10 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1698.640881][ T31] 2 locks held by getty/5607: [ 1698.645599][ T31] #0: ffff888035cb60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1698.670588][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1698.679755][T23499] em28xx 7-1:0.0: Registering input extension [ 1698.683310][ T31] 3 locks held by kworker/1:5/5920: [ 1698.683324][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1698.705121][ T31] #1: ffffc900045bfd10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1698.715094][ T31] #2: ffffffff8e5cc6f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1698.725187][ T31] 3 locks held by kworker/u8:7/5944: [ 1698.730473][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1698.741683][ T31] #1: ffffc9000472fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1698.752197][ T31] #2: ffffffff9037e148 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1698.761347][ T31] 5 locks held by kworker/u8:8/6154: [ 1698.766635][ T31] #0: ffff88801c6f4148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1698.778676][ T31] #1: ffffc90005467d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1698.788771][ T31] #2: ffffffff90367ef0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 1698.798934][ T31] #3: ffffffff9037e148 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0 [ 1698.813023][ T31] #4: ffffffff8e5cc6f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1698.823278][ T31] 5 locks held by kworker/0:6/13092: [ 1698.828646][ T31] #0: ffff88801ceb2948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1698.839578][ T31] #1: ffffc9001c3e7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1698.850999][ T31] #2: ffff8880296e4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 1698.860017][ T31] #3: ffff88823bf88998 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1698.869361][ T31] #4: ffff888079589160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1698.878995][ T31] 2 locks held by kworker/u8:3/17600: [ 1698.884471][ T31] #0: ffff888020f4a148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1698.895304][ T31] #1: ffffc9000444fd10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1698.900794][T18659] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1698.906887][ T31] 10 locks held by kworker/0:2/18659: [ 1698.916905][T18659] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1698.920750][ T31] 3 locks held by kworker/u8:9/22372: [ 1698.937081][ T31] #0: ffff888031490148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1698.948260][ T31] #1: ffffc90004297d10 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1698.963019][ T31] #2: ffffffff9037e148 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 1698.972724][ T31] 1 lock held by syz.3.4529/23319: [ 1698.978473][ T31] #0: ffffffff9037e148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1698.987515][ T31] 1 lock held by syz-executor/24913: [ 1698.993089][ T31] #0: ffffffff9037e148 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 1699.002417][ T31] 1 lock held by syz.7.4945/25003: [ 1699.007523][ T31] #0: ffffffff9037e148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1699.016900][ T31] 4 locks held by syz.8.4944/25005: [ 1699.022237][ T31] #0: ffff888034904dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1699.031946][ T31] #1: ffff8880349040b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1699.041784][ T31] #2: ffffffff905e6068 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1699.051995][ T31] #3: ffff888064189338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 1699.061392][ T31] 1 lock held by syz.6.4947/25016: [ 1699.066486][ T31] #0: ffffffff9037e148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1699.075585][ T31] 1 lock held by syz.3.4948/25017: [ 1699.081450][ T31] #0: ffffffff8e5cc5c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 1699.092975][ T31] [ 1699.102615][ T31] ============================================= [ 1699.102615][ T31] [ 1699.131300][ T31] NMI backtrace for cpu 0 [ 1699.131318][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 1699.131345][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1699.131355][ T31] Call Trace: [ 1699.131361][ T31] [ 1699.131370][ T31] dump_stack_lvl+0x116/0x1f0 [ 1699.131400][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1699.131419][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1699.131442][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1699.131470][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1699.131493][ T31] watchdog+0xf0e/0x1260 [ 1699.131518][ T31] ? __pfx_watchdog+0x10/0x10 [ 1699.131535][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1699.131562][ T31] ? __kthread_parkme+0x19e/0x250 [ 1699.131590][ T31] ? __pfx_watchdog+0x10/0x10 [ 1699.131609][ T31] kthread+0x3c5/0x780 [ 1699.131626][ T31] ? __pfx_kthread+0x10/0x10 [ 1699.131645][ T31] ? rcu_is_watching+0x12/0xc0 [ 1699.131667][ T31] ? __pfx_kthread+0x10/0x10 [ 1699.131684][ T31] ret_from_fork+0x5d4/0x6f0 [ 1699.131701][ T31] ? __pfx_kthread+0x10/0x10 [ 1699.131718][ T31] ret_from_fork_asm+0x1a/0x30 [ 1699.131752][ T31] [ 1699.131758][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1699.256378][ C1] NMI backtrace for cpu 1 [ 1699.256393][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 1699.256409][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1699.256418][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1699.256443][ C1] Code: 4c 63 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 82 17 00 fb f4 4c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1699.256457][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1699.256469][ C1] RAX: 00000000067576ab RBX: 0000000000000001 RCX: ffffffff8b928c29 [ 1699.256478][ C1] RDX: 0000000000000000 RSI: ffffffff8de4d731 RDI: ffffffff8c161100 [ 1699.256486][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6655 [ 1699.256495][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1699.256504][ C1] R13: ffff88801e2b2440 R14: ffffffff90aaf390 R15: 0000000000000000 [ 1699.256513][ C1] FS: 0000000000000000(0000) GS:ffff8881247c6000(0000) knlGS:0000000000000000 [ 1699.256527][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1699.256537][ C1] CR2: 0000563b62e7ab48 CR3: 0000000032141000 CR4: 00000000003526f0 [ 1699.256546][ C1] Call Trace: [ 1699.256552][ C1] [ 1699.256557][ C1] default_idle+0x13/0x20 [ 1699.256570][ C1] default_idle_call+0x6d/0xb0 [ 1699.256583][ C1] do_idle+0x391/0x510 [ 1699.256602][ C1] ? __pfx_do_idle+0x10/0x10 [ 1699.256617][ C1] ? do_idle+0x2e5/0x510 [ 1699.256634][ C1] cpu_startup_entry+0x4f/0x60 [ 1699.256649][ C1] start_secondary+0x21d/0x2b0 [ 1699.256669][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1699.256690][ C1] common_startup_64+0x13e/0x148 [ 1699.256710][ C1] [ 1699.257449][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1699.434678][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 1699.446111][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1699.456148][ T31] Call Trace: [ 1699.459406][ T31] [ 1699.462315][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1699.466895][ T31] vpanic+0x6e8/0x7a0 [ 1699.470861][ T31] ? __pfx_vpanic+0x10/0x10 [ 1699.475351][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1699.481319][ T31] panic+0xca/0xd0 [ 1699.485022][ T31] ? __pfx_panic+0x10/0x10 [ 1699.489426][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1699.494783][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1699.500920][ T31] ? watchdog+0xd78/0x1260 [ 1699.505316][ T31] ? watchdog+0xd6b/0x1260 [ 1699.509720][ T31] watchdog+0xd89/0x1260 [ 1699.513972][ T31] ? __pfx_watchdog+0x10/0x10 [ 1699.518646][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1699.523835][ T31] ? __kthread_parkme+0x19e/0x250 [ 1699.528860][ T31] ? __pfx_watchdog+0x10/0x10 [ 1699.533518][ T31] kthread+0x3c5/0x780 [ 1699.537571][ T31] ? __pfx_kthread+0x10/0x10 [ 1699.542149][ T31] ? rcu_is_watching+0x12/0xc0 [ 1699.546896][ T31] ? __pfx_kthread+0x10/0x10 [ 1699.551464][ T31] ret_from_fork+0x5d4/0x6f0 [ 1699.556032][ T31] ? __pfx_kthread+0x10/0x10 [ 1699.560599][ T31] ret_from_fork_asm+0x1a/0x30 [ 1699.565357][ T31] [ 1699.568550][ T31] Kernel Offset: disabled [ 1699.572851][ T31] Rebooting in 86400 seconds..