last executing test programs: 5m28.325971008s ago: executing program 3 (id=3678): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000080)={0x2}) socket$rds(0x15, 0x5, 0x0) r4 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4, 0x4}, [{0x3, 0xffffffc0, 0x8001, 0x7, 0x6, 0x101, 0x10000009, 0x8}]}, 0x58) close(r4) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x0, 0x100000, 0xffffffffffffffff, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYRES16=0x0], 0x0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYBLOB="96a09c4e06a136c95454f7c1a2947235fb84883f6616dd28638f6a79a0fe366a00"/42, @ANYRESDEC=r5, @ANYRESOCT=r5], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000105002, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x38011, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) 5m25.247387981s ago: executing program 3 (id=3686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) r2 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x8000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0xf80, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000000)={r3, 0x1000, &(0x7f0000001a80)=""/4096}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m23.824388657s ago: executing program 3 (id=3688): r0 = socket$nl_rdma(0x10, 0x3, 0x14) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e65726963"], 0xe0}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) sendmsg$nl_crypto(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) signalfd4(r2, 0x0, 0x0, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002840)=ANY=[@ANYBLOB="200000000b1411012cbd7000fcdbdf25080003000000000f080001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x200080c4) 5m22.852519963s ago: executing program 3 (id=3690): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x7d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2121c9f, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0\x00', 0x245) 5m22.810889179s ago: executing program 3 (id=3691): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000901d8901", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = fcntl$getown(r0, 0x9) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000040)={0x0, 0xfffffff8, 0x80000000, 0x10000, 0x0, [0x0, 0x0, 0x0], [0x800, 0x167, 0x2], [0x4, 0x10000, 0x4, 0xfffffffd], [0x80000001, 0x7, 0x4, 0x80000000]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000580)={0x0, 0x800008c1, 0x80, 0x20203843, 0x2, [0x2, 0x0, r6], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x2]}) sched_setscheduler(r4, 0x3, &(0x7f0000000000)=0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0xfffe, 0x4e24, 0x40, 0xa, 0x0, 0x80, 0x87}, {0x0, 0x48bb978d}, {}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) preadv(r8, &(0x7f0000001580)=[{&(0x7f0000000340)=""/25, 0x19}], 0x1, 0x1, 0x7) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 5m22.553834005s ago: executing program 3 (id=3695): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x48, 0x30, 0x12f, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x2, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ffffffffe, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000040)={0x0, 0x0, 0x0}) 5m22.470826771s ago: executing program 32 (id=3695): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x48, 0x30, 0x12f, 0x70bd25, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x2, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ffffffffe, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000040)={0x0, 0x0, 0x0}) 5m6.867192968s ago: executing program 1 (id=3743): syz_emit_ethernet(0x46, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x84042, 0x0) writev(r6, &(0x7f0000001600)=[{&(0x7f0000000240)="646b6bde9367ac", 0x7}, {0x0}], 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000400)={0xb, 0x8, 0x8}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="050000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) sendmsg(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000440), 0x410100, 0x0) 5m4.201873238s ago: executing program 1 (id=3748): syz_open_dev$tty1(0xc, 0x4, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) listen(r1, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3461) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x20, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@exit, @printk={@s}, @call={0x85, 0x0, 0x0, 0x87}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @generic={0xf0, 0x8, 0x3, 0x6, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7e1, 0x0, 0x0, 0x0, 0x400}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1100000000000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES16=r3, @ANYBLOB, @ANYRES64=0x0], 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206010200000000000000000000ffff050001000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000500010007000000729fb3b4add1311efd39deec12954879540260e44bfc1a20cf6b84a1cd2a075e2cbceed58b9affe58d3fbf5a3d8dafbfcc7da97f3e154a36707efb461fd3e0018ce4678742f0ffa08a95fb176f460982efaaabb97da0bbba597dba41d51e2df850039c88bb01d6293442f1aa13edf06676564bc94b98bd93646a297dd6ba128abd9dbb0fa0f835c4724bd00fbb2cd0e9e6fa71654ce25659723509f6e33b9e2c2848af909295577a911d867fa8"], 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x1002, 0x0) 5m3.013938274s ago: executing program 1 (id=3757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001840)=""/4111, 0x100f) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x0, 0x8, 0x9, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x40000) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5m0.888457465s ago: executing program 1 (id=3759): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400600, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x60882) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, 0xffffffffffffffff) statx(r0, &(0x7f0000000080)='./file0\x00', 0x8000, 0x2, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) open(0x0, 0x141242, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x5, r5, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 5m0.266853839s ago: executing program 1 (id=3764): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x11, 0x3, 0x300) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x40000020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = userfaultfd(0x80001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000480)=""/165, 0xa5}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) munlockall() r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 4m58.385834013s ago: executing program 1 (id=3769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001840)=""/4111, 0x100f) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x0, 0x8, 0x9, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x40000) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4m58.161823438s ago: executing program 33 (id=3769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001840)=""/4111, 0x100f) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x0, 0x8, 0x9, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x40000) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2m8.499848516s ago: executing program 4 (id=4462): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x157}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) pread64(r5, 0x0, 0x0, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:'], 0x9) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), 0x0, 0x0, 0x1) io_uring_enter(r2, 0x3516, 0x0, 0x20, 0x0, 0x0) 2m7.449906815s ago: executing program 4 (id=4465): iopl(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$proc_mixer(r1, &(0x7f00000016c0)=ANY=[@ANYBLOB="4c494e453120274d61737465722043617074757265272030303030303030303030303030303030303030300a4344202743442043617074757265272030303030303030303030fc3030303030303030300a494741494e20274361707475726520566f6c756d65272030303030303030303030303030303030303030300a50d77d56"], 0x178) 2m7.091520247s ago: executing program 4 (id=4467): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff118f160000007b8af8ff00000000bfa200010000000000000000f8ffffffb703000008000010b704000001005265222b2ce95d0e000000c796abf3c1513e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000040)="8907040400", 0x5) connect$inet(r3, &(0x7f0000000300), 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x7ff, 0x6, "9f983fdc4eed"}, 0xe) sendto$inet6(r5, &(0x7f00000002c0)="b1", 0x29fbc, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 2m4.964762047s ago: executing program 4 (id=4471): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000180)=0x1, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0xc) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) accept(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0\x00', 0x245) 2m3.851070897s ago: executing program 4 (id=4473): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x1, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) 2m3.345599629s ago: executing program 4 (id=4475): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0xd, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6000000000183afffe800000000000000200000000000000ff"], 0x0) 2m2.241133979s ago: executing program 34 (id=4475): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0xd, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6000000000183afffe800000000000000200000000000000ff"], 0x0) 37.104967776s ago: executing program 0 (id=4749): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cf000000000550000008000004180001800c00070010000000010000000800925e1f040500030000009c2798bf115e5853e42da97b0700ecf10e04b97a823474b4de26aae4ef0874d27a442319d58e14d89db693d68b7193f8a625652d48b9a749018584b09f232771889d1420c38fcf769694851cb9c9fd718378148d8e234152889298bf1ce16919144c4c"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYRESOCT=r1], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r4}, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="14", 0x1}], 0x1}, 0x810) tkill(0x0, 0xb) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) readv(r5, &(0x7f0000001500)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x5}, 0x4) accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x800) r6 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 36.646537585s ago: executing program 0 (id=4753): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000901d8901", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = fcntl$getown(r0, 0x9) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000040)={0x0, 0xfffffff8, 0x80000000, 0x10000, 0x0, [0x0, 0x0, 0x0], [0x800, 0x167, 0x2], [0x4, 0x10000, 0x4, 0xfffffffd], [0x80000001, 0x7, 0x4, 0x80000000]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000580)={0x0, 0x800008c1, 0x80, 0x20203843, 0x2, [0x2, 0x0, r6], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x2]}) sched_setscheduler(r4, 0x3, &(0x7f0000000000)=0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0xfffe, 0x4e24, 0x40, 0xa, 0x0, 0x80, 0x87}, {0x0, 0x48bb978d}, {}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) preadv(r8, &(0x7f0000001580), 0x0, 0x1, 0x7) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 35.938896625s ago: executing program 0 (id=4755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) getdents64(r3, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000100}, 0x40000) 34.65376671s ago: executing program 0 (id=4756): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000340)={0xc0000000, 0x1, "115e06697744814f8c282cae0e3c76e5b7c107339b4b6e5280cb4c9844141bd5", 0x212, 0x1, 0x400, 0x8, 0xffff, 0x25, 0x1, 0xa, [0x9, 0x5, 0x0, 0x5]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[], 0xa) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = eventfd2(0x0, 0x800) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0x3, 0x0, 0x2, r8, 0xb}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000100)={0x104beed1, 0x0, 0x0, r8, 0x1f}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = dup(r10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x16, @remote, 0x4e24, 0x4, 'dh\x00', 0x0, 0x32bb, 0x4}, {@empty, 0x4e21, 0x2000, 0xfffffffe, 0xf334, 0x12d59}}, 0x44) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x18, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) 33.953987195s ago: executing program 0 (id=4758): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {0x101}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) mkdir(0x0, 0x102) (async) syz_usb_connect$uac1(0x5, 0x89, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0xcf, 0x110, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x93}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x7, 0x1, 0x9, 0x0, "cbcd39", "b5065a"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0x7, 0x0, "a4", 'I'}]}, {{0x9, 0x5, 0x1, 0x9, 0x742d8be3ddd9f32d, 0x7b, 0x87, 0x6d, {0x7, 0x25, 0x1, 0x80, 0x1, 0x179}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x40, 0x9, 0x10, {0x7, 0x25, 0x1, 0x80, 0x9, 0x8001}}}}}}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="050f057b"]}) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) (rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x9, &(0x7f0000006680)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mmap$xdp(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0x2000008, 0x80010, r1, 0x80000000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) 32.046153201s ago: executing program 0 (id=4766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socket(0x8, 0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x101b00, 0x46) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r5, 0x0, 0x0, 0x3}) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0xfffff000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 26.537491477s ago: executing program 6 (id=4783): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\"\x00']) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x205c) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x1, 0x2d, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRESDEC=r2], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x5, 0x1, 0x2, '\x00', 0x8}}, 0x2a) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000080000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x52}, 0x0) ioctl$int_in(r6, 0x5421, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r11, {0x0, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 24.378799177s ago: executing program 2 (id=4789): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b00000000000000000000901d8901", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = fcntl$getown(r0, 0x9) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000040)={0x0, 0xfffffff8, 0x80000000, 0x10000, 0x0, [0x0, 0x0, 0x0], [0x800, 0x167, 0x2], [0x4, 0x10000, 0x4, 0xfffffffd], [0x80000001, 0x7, 0x4, 0x80000000]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000580)={0x0, 0x800008c1, 0x80, 0x20203843, 0x2, [0x2, 0x0, r6], [0x810003], [0x5, 0x0, 0xffffffff, 0x46], [0x2]}) sched_setscheduler(r4, 0x3, &(0x7f0000000000)=0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0xfffe, 0x4e24, 0x40, 0xa, 0x0, 0x80, 0x87}, {0x0, 0x48bb978d}, {}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1, 0x6c}, 0x0, @in6=@mcast2, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) preadv(r8, &(0x7f0000001580)=[{&(0x7f0000000340)=""/25, 0x19}], 0x1, 0x1, 0x7) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x20000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 23.370660955s ago: executing program 6 (id=4790): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x8, 0x4) r1 = syz_open_dev$vivid(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) readv(r1, &(0x7f0000002740)=[{&(0x7f00000012c0)=""/187, 0xbb}], 0x1) 23.368953519s ago: executing program 2 (id=4791): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0xeb322e1fb5425c9a, 0xffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x860b, 0x1, 0x8, 0xf6}, &(0x7f0000000300), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0x1, 0x4) landlock_create_ruleset(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500c9883e1ad1fe358f399dda48bf2eacd3ea4d95eace8c300c808e624e083042f631b938304f511dd1eb40bc962f", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 22.930781945s ago: executing program 6 (id=4792): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c608d3538cb7c33e9068f8968f9d66abf17d44081c3999d89dc5810977753ea8a4a88a1219e24672173732db6fea544d2cf9220250a987c33eabb4b4cd486951e56d901b628cdf6d3c474f36021b4ff2fcc7e6ca7643aac9a0e86744fe4c2211fe3ea04bfd8b0f61d9d69799d775b2b880a8ef47287498ae758e9d8abe48c17e6ac496c1d98b6caa694c4f4f3f08441e83c281b6d182966509696e4f2c58d839e0e3d0da373b18b354f0e01f8fbb7e33d5984c5b0b65945597dfb733eddd5769ca035af4da1b46e35b2d3347dcfcc47f987caf43e9471614e9361af3b137e24f3500dcf7334b8d45bf6a09aacff306000000000000004f59ee53a0a428ce8ffef15332e168244209f8e96faf1b98ecbfae3dbc1a43dc46e485ca45a5f7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) mmap$binder(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x2000000) r3 = socket(0x848000000015, 0x805, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000100e00000010c0002800500010000000000240002801400018008000100ac1e000108000200ac1e00010c000280050001000000000008000740ffff639c"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) creat(&(0x7f0000000280)='./file0\x00', 0x82) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) 22.877032579s ago: executing program 2 (id=4793): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, r2, 0x0, 0x0, 0x8}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x6, r2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, r2}]) r4 = dup(r1) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r5 = getpgid(0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$setown(r6, 0x8, r5) fcntl$getown(r6, 0x9) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x8, 0xf, 0x8f, 0xff, 0x0, 0x0, 0x2, 0xc, 0x2, 0x0, 0x0, 0x0, 0x4, 0x5}, 0xe) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) 22.383818099s ago: executing program 6 (id=4794): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001400)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000001440)='net/wireless\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000001080)=0x7) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000200)={r4, r5, r6, 0x35, 0x3fe, 0x7ff7ffff, 0x3, 0x3, 0x2, 0x3ff, 0xfffffffb, 0x31e}) r7 = getpid() r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)}, 0x4008841) sched_setscheduler(r7, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000001100)={0x4, 0x2}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) r11 = openat(r10, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2042, 0x68) r12 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r13 = fanotify_init(0xf00, 0x0) fanotify_mark(r13, 0x105, 0x40009975, r12, 0x0) fallocate(r11, 0x0, 0xffffffffffffff35, 0x3) 22.261828387s ago: executing program 2 (id=4795): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000000)={0x0, 0xffffffd5, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r3, &(0x7f00000003c0), 0x100000000000022d) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000240)={"1c583fccf6a91cfecbe351d58e581412298d2341e47f25a6279e29630fcd272b", r1}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0), 0x20, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x4010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, &(0x7f0000000100)=0xb892, 0x0, 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)) 22.17800617s ago: executing program 2 (id=4796): mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000000180)='sysv\x00', 0x8000, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0x3, {0x0, 0x120, 0x36, 0x1}, {0x2681, 0x10001, 0x2, 0x803}, {0x14edbbd9, 0x3}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000019380)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYRES16=r0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000019500)={&(0x7f00000194c0)='jbd2_shrink_scan_exit\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/tcp6\x00') pread64(r5, &(0x7f0000019540)=""/102351, 0x18fcf, 0xc2a) r6 = socket(0x27, 0x3, 0xff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0x13}, {0x1, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xbcf3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xda5681c3bcf3736a}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'dvmrp1\x00', @random="0e00"}) writev(r1, &(0x7f0000019340)=[{&(0x7f0000019400)="3dc3103e320b0565ae4027abd63cc48cbf0d736ec1d7ed9edaf4f0385fe8b0e202ffca627b8f6de1429acd77176e145db641d7d099c4b4db8ba356f34b4936e80583ba81396702d34ba6b47e2f9321ee236a095f38efc3a59e2502007b7236fd23b8e8d02a4ec0b2bebaca8786bbb3c3f01c9fc596f9053bbdcd1f1d71157cda7312b3c7cb3fdaaa829b00"/152, 0x98}], 0x1) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f0000019080), 0xd7d, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x3, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0x1d0, 0x0, &(0x7f0000019140)="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", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x2e0}, 0x50) read$snddsp(r5, &(0x7f0000019100)=""/5, 0x5) 21.258021011s ago: executing program 2 (id=4798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x1, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) 20.924387546s ago: executing program 7 (id=4800): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 20.8691935s ago: executing program 7 (id=4801): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r1, 0xe2923000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0x0, 0x0, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000001840)) 20.653245817s ago: executing program 7 (id=4802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x0, 0x8, 0x9, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x40000) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) getdents64(r3, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000100}, 0x40000) 19.619498617s ago: executing program 7 (id=4803): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r2 = dup(r1) syz_open_dev$sndctrl(0x0, 0x10001d, 0x4841c1) unshare(0x72030280) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000002498", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x1006) 18.697917962s ago: executing program 6 (id=4805): r0 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x3c1, 0x3, 0x540, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x470, 0x238, 0x238, 0x470, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100000004}, 0x16) syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYRES64=r2, @ANYBLOB="6d4a7ba0f04466b708ac79c135ecdb4e20b06cdecca341d2c00eaa4261f0a3e45c92bf454f528544"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) 18.050531697s ago: executing program 7 (id=4806): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0xeb322e1fb5425c9a, 0xffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x860b, 0x1, 0x8, 0xf6}, &(0x7f0000000300), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), 0x0}, 0x20) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000080)=0x1, 0x4) landlock_create_ruleset(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500c9883e1ad1fe358f399dda48bf2eacd3ea4d95eace8c300c808e624e083042f631b938304f511dd1eb40bc962f", @ANYRES32=r5, @ANYBLOB], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 17.518270422s ago: executing program 7 (id=4808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x3, 0x6, 0x7, 0xfffffffe}, {0x9, 0x6, 0xc9, 0x8}, {0x33, 0x4, 0x8, 0x6}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x1, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000085000000500000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 17.019512144s ago: executing program 35 (id=4766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socket(0x8, 0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x101b00, 0x46) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000480)={0x1, 0x0, &(0x7f00000003c0)=[0x0]}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r5, 0x0, 0x0, 0x3}) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x2010, 0xffffffffffffffff, 0xfffff000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 15.918028873s ago: executing program 5 (id=4814): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r1 = open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x80901) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f0000002bc0)={0x2020}, 0x2084) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000815}, 0x24008000) 15.88073512s ago: executing program 5 (id=4815): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x140) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/ipc\x00') r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x4000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) io_setup(0x2, &(0x7f0000000000)) keyctl$negate(0xd, r4, 0x1, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$chown(0x4, 0x0, 0x0, 0x0) 15.542678204s ago: executing program 6 (id=4816): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) unshare(0x60600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="370700000000000000002e3d62cae9cd0000ffff", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e2d, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f3389f733fcf307", 0x0, 0xffffffff, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x2}, 0x50) mbind(&(0x7f00000ba000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000140)=0x3, 0x800000000000008, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) socket$inet(0x2, 0x5, 0x4) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 15.393214107s ago: executing program 5 (id=4817): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x10001, 0x7ffd, 0x27b6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20004, 0x0, 0x0, @void, @value, @void, @value}, 0x50) read$snddsp(r1, 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000340)) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x10001, 0x7ffd, 0x27b6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20004, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) read$snddsp(r1, 0x0, 0x0) (async) ioctl$I2C_PEC(r0, 0x708, 0x9) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) (async) sched_rr_get_interval(0x0, &(0x7f0000000340)) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0}) (async) 15.261979368s ago: executing program 5 (id=4818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0xffffffff, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 15.255999958s ago: executing program 5 (id=4819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x6}, 0xfffffe5a) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f00000001c0)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0xfffffffffffffdd9, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x394, @empty}, 0x1c) set_mempolicy(0x4000, &(0x7f0000000340), 0x2) 15.199954218s ago: executing program 5 (id=4820): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff118f160000007b8af8ff00000000bfa200010000000000000000f8ffffffb703000008000010b704000001005265222b2ce95d0e000000c796abf3c1513e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000040)="8907040400", 0x5) connect$inet(r3, &(0x7f0000000300), 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x7ff, 0x6, "9f983fdc4eed"}, 0xe) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) unshare(0x2040400) 6.010631922s ago: executing program 36 (id=4798): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x1, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) 2.029649494s ago: executing program 37 (id=4808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x3, 0x6, 0x7, 0xfffffffe}, {0x9, 0x6, 0xc9, 0x8}, {0x33, 0x4, 0x8, 0x6}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc1105518, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fa, 0x1, 0x0, 0x8000000000000, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9b, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x6, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x8001]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000085000000500000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 28.033491ms ago: executing program 38 (id=4816): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) unshare(0x60600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="370700000000000000002e3d62cae9cd0000ffff", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e2d, @void, @value}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f3389f733fcf307", 0x0, 0xffffffff, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x2}, 0x50) mbind(&(0x7f00000ba000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000140)=0x3, 0x800000000000008, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) socket$inet(0x2, 0x5, 0x4) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000540)='string\x00\xa2\xb5\xbf4\x04`P\xfb\b}\xd6\xe1\"\xf9\xae\xa4N\x10\x13!\x04\x00\x97\xb6\x94\xc2\x0f8\x997Vg\xa2\xeb\xb4RU|\x99t\xe0N\x1c\xf4-\t\x80?\x10\xf7J\',\xd1Bxq\x16R\xe4\x88\x02\xfd\x81q<5n^.izR*\xcfL\xb7Q\xb8\xf2e\xbb\xd3r>\x86\x14\x963\xc0N\x18\x1cm%\x01w\xba*\xd1\xfa\xf8\xa3\xfabP\xaf\x9a\x0e\x9fjZ\xcaX\xdaV\x88`\xac\xe4\x86(\xfd\x0f\x96\xffd9;\xb5\xdd?\xbcc#\x17\xea\\\xc1\x12\xa2\xdcb\fB\xddk\xb3\x14=T\xcb\xe0\v\xeb\x18!_\xa6\x06\xb5*_^ns\xd7\xfe\xc1t\'\x1bJ4V\rV\xf0\xabP]\x18\x8c\xe3\xb0@\xe0A:', 0xca) r6 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 0s ago: executing program 39 (id=4820): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff118f160000007b8af8ff00000000bfa200010000000000000000f8ffffffb703000008000010b704000001005265222b2ce95d0e000000c796abf3c1513e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000040)="8907040400", 0x5) connect$inet(r3, &(0x7f0000000300), 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x7ff, 0x6, "9f983fdc4eed"}, 0xe) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bind$l2tp(r4, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) unshare(0x2040400) kernel console output (not intermixed with test programs): 724][ T30] audit: type=1400 audit(1745169409.726:44134): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 874.973956][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.981154][ T6380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.002910][ T30] audit: type=1400 audit(1745169409.726:44135): avc: denied { append } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 875.029038][ T30] audit: type=1400 audit(1745169409.726:44136): avc: denied { open } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 875.042695][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.058752][ T6380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.086250][ T30] audit: type=1400 audit(1745169409.726:44137): avc: denied { read write } for pid=16960 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 875.183535][T14475] usb 6-1: USB disconnect, device number 30 [ 875.200945][ T30] audit: type=1400 audit(1745169409.726:44138): avc: denied { getattr } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 875.378868][ T30] audit: type=1400 audit(1745169409.726:44139): avc: denied { open } for pid=16960 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 876.904633][T19662] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4517'. [ 876.913893][T19662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4517'. [ 876.924952][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4517'. [ 877.106712][T19523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 877.151502][T15599] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 877.254773][T19665] xt_CT: No such helper "pptp" [ 877.330710][T15599] usb 3-1: Using ep0 maxpacket: 32 [ 877.345851][T15599] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 877.392753][T15599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.456357][T15599] usb 3-1: Product: syz [ 877.481431][T15599] usb 3-1: Manufacturer: syz [ 877.486067][T15599] usb 3-1: SerialNumber: syz [ 877.510718][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 877.736190][T15599] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 877.880329][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 877.886594][T15599] usb 3-1: 2:1 : invalid channels 0 [ 877.892069][ T9] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 877.892094][ T9] usb 6-1: config 0 has no interface number 0 [ 877.892127][ T9] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 877.892151][ T9] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 877.893757][ T9] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 877.968808][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.989939][ T9] usb 6-1: Product: syz [ 877.998399][T15599] usb 3-1: USB disconnect, device number 74 [ 878.003215][ T9] usb 6-1: Manufacturer: syz [ 878.012711][T19523] veth0_vlan: entered promiscuous mode [ 878.020113][ T9] usb 6-1: SerialNumber: syz [ 878.035365][ T9] usb 6-1: config 0 descriptor?? [ 878.043450][T19523] veth1_vlan: entered promiscuous mode [ 878.051862][ T9] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 878.072750][ T9] em28xx 6-1:0.132: Video interface 132 found: [ 878.085232][T19523] veth0_macvtap: entered promiscuous mode [ 878.096759][T19523] veth1_macvtap: entered promiscuous mode [ 878.113848][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.124444][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.134801][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.145307][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.155736][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.166756][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.176619][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.187109][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.197947][T19523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.210871][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.223413][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.233280][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.245902][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.257164][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.260807][ T5874] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 878.267904][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.285149][T19523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.295623][T19523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.306880][T19523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.322615][T19523] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.336159][T19523] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.345830][T19523] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.357343][T19523] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.461172][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 878.472558][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.487128][ T9] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 878.488275][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.509163][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.519018][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 878.525704][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.533052][ T5874] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 878.552831][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.574619][ T9] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 878.580846][ T5874] usb 1-1: config 0 descriptor?? [ 878.592641][ T9] em28xx 6-1:0.132: board has no eeprom [ 878.616668][T14784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.631288][T14784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.643584][T19689] openvswitch: netlink: Actions may not be safe on all matching packets [ 878.663305][ T9] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 878.688473][ T9] em28xx 6-1:0.132: analog set to bulk mode. [ 878.703971][ T5917] em28xx 6-1:0.132: Registering V4L2 extension [ 878.734225][ T9] usb 6-1: USB disconnect, device number 31 [ 878.766056][ T9] em28xx 6-1:0.132: Disconnecting em28xx [ 878.895985][ T5917] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 878.913002][ T5917] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 878.924447][ T5917] em28xx 6-1:0.132: No AC97 audio processor [ 878.942954][ T5917] usb 6-1: Decoder not found [ 878.947564][ T5917] em28xx 6-1:0.132: failed to create media graph [ 878.960154][ T5917] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 878.977296][ T5917] em28xx 6-1:0.132: Remote control support is not available for this card. [ 878.986409][ T9] em28xx 6-1:0.132: Closing input extension [ 878.998976][ T9] em28xx 6-1:0.132: Freeing device [ 879.067967][T19698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=19698 comm=syz.7.4476 [ 879.080162][ T5874] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0008/input/input70 [ 879.105622][T14475] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 879.352811][ T30] kauditd_printk_skb: 267 callbacks suppressed [ 879.352827][ T30] audit: type=1400 audit(1745169414.416:44407): avc: denied { read } for pid=5182 comm="acpid" name="event4" dev="devtmpfs" ino=3356 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 879.354786][ T5874] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 879.386488][ T30] audit: type=1400 audit(1745169414.416:44408): avc: denied { read open } for pid=5182 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3356 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 879.399861][ T5874] usb 1-1: USB disconnect, device number 68 [ 879.420020][ C0] vkms_vblank_simulate: vblank timer overrun [ 879.426710][ T30] audit: type=1400 audit(1745169414.416:44409): avc: denied { ioctl } for pid=19692 comm="syz.2.4525" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 879.462510][T14475] usb 3-1: Using ep0 maxpacket: 8 [ 879.499758][T14475] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 879.515717][ T30] audit: type=1400 audit(1745169414.536:44410): avc: denied { ioctl } for pid=19692 comm="syz.2.4525" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 879.540759][ C0] vkms_vblank_simulate: vblank timer overrun [ 879.547713][T14475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.691199][T14475] usb 3-1: Product: syz [ 879.698424][T14475] usb 3-1: Manufacturer: syz [ 879.703163][T14475] usb 3-1: SerialNumber: syz [ 879.708144][ T30] audit: type=1400 audit(1745169414.576:44411): avc: denied { ioctl } for pid=5182 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3356 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 879.842919][T14475] usb 3-1: config 0 descriptor?? [ 879.940968][ T30] audit: type=1400 audit(1745169414.576:44412): avc: denied { ioctl } for pid=5182 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3356 ioctlcmd=0x4523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 880.456970][ T30] audit: type=1400 audit(1745169414.606:44413): avc: denied { execmem } for pid=19699 comm="syz.5.4526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 880.477184][ T30] audit: type=1400 audit(1745169414.746:44414): avc: denied { read } for pid=5182 comm="acpid" name="event4" dev="devtmpfs" ino=3356 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 880.500096][ T30] audit: type=1400 audit(1745169414.746:44415): avc: denied { open } for pid=5182 comm="acpid" path=2F6465762F696E7075742F6576656E7434202864656C6574656429 dev="devtmpfs" ino=3356 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 880.526774][ C0] vkms_vblank_simulate: vblank timer overrun [ 880.556874][T14475] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 880.605798][ T30] audit: type=1400 audit(1745169414.846:44416): avc: denied { create } for pid=19699 comm="syz.5.4526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 880.746843][T14475] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 880.800594][T14475] usb 3-1: USB disconnect, device number 75 [ 881.210788][T19725] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 881.386233][T19711] program syz.7.4528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 881.550360][T19711] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4528'. [ 881.784192][T19705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.894098][T19732] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 883.624356][T19753] tmpfs: Unknown parameter 'huge½always' [ 884.289159][T19760] ntfs3(nullb0): Primary boot signature is not NTFS. [ 884.296530][T19760] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 884.458614][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 884.458636][ T30] audit: type=1400 audit(1745169419.426:44602): avc: denied { create } for pid=19746 comm="syz.0.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 884.544894][ T30] audit: type=1400 audit(1745169419.426:44603): avc: denied { create } for pid=19746 comm="syz.0.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 884.643041][ T30] audit: type=1400 audit(1745169419.436:44604): avc: denied { setopt } for pid=19746 comm="syz.0.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 884.810809][ T30] audit: type=1400 audit(1745169419.436:44605): avc: denied { connect } for pid=19746 comm="syz.0.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 884.833927][T19766] kvm: pic: level sensitive irq not supported [ 884.836410][T19766] kvm: pic: non byte read [ 884.964277][ T30] audit: type=1400 audit(1745169419.436:44606): avc: denied { name_connect } for pid=19746 comm="syz.0.4540" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 884.991998][ T30] audit: type=1400 audit(1745169419.436:44607): avc: denied { create } for pid=19746 comm="syz.0.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 885.020145][ T30] audit: type=1400 audit(1745169419.436:44608): avc: denied { create } for pid=19746 comm="syz.0.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 885.043492][ T30] audit: type=1400 audit(1745169419.436:44609): avc: denied { setopt } for pid=19746 comm="syz.0.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 885.401949][T19775] audit: audit_backlog=65 > audit_backlog_limit=64 [ 885.408708][T19772] audit: audit_backlog=65 > audit_backlog_limit=64 [ 885.777871][T19784] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4548'. [ 885.787141][T19784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4548'. [ 885.796279][T19784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4548'. [ 887.180464][ T5878] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 889.430876][ T5878] usb 6-1: device not accepting address 32, error -71 [ 889.460352][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 889.460370][ T30] audit: type=1400 audit(1745169424.516:44777): avc: denied { map_create } for pid=19797 comm="syz.5.4554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 889.509015][T19803] kvm: pic: single mode not supported [ 889.509162][T19803] kvm: pic: non byte read [ 889.529771][T19803] kvm: pic: single mode not supported [ 889.529831][T19803] kvm: pic: non byte read [ 889.539977][ T30] audit: type=1400 audit(1745169424.526:44778): avc: denied { prog_load } for pid=19795 comm="syz.6.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 889.563318][T19803] kvm: pic: non byte read [ 889.568209][T19803] kvm: pic: non byte read [ 889.573961][ T30] audit: type=1400 audit(1745169424.526:44779): avc: denied { bpf } for pid=19795 comm="syz.6.4556" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 890.074439][ T30] audit: type=1400 audit(1745169424.526:44780): avc: denied { perfmon } for pid=19795 comm="syz.6.4556" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 890.138846][ T30] audit: type=1400 audit(1745169424.536:44781): avc: denied { prog_run } for pid=19795 comm="syz.6.4556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 890.229636][ T30] audit: type=1400 audit(1745169424.636:44782): avc: denied { allowed } for pid=19808 comm="syz.7.4559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 890.398965][ T30] audit: type=1400 audit(1745169424.666:44783): avc: denied { create } for pid=19802 comm="syz.2.4557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 890.593270][ T30] audit: type=1400 audit(1745169424.666:44784): avc: denied { setopt } for pid=19802 comm="syz.2.4557" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 890.738503][T19822] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4561'. [ 890.748003][T19822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4561'. [ 890.758239][T19822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4561'. [ 890.997151][ T30] audit: type=1400 audit(1745169424.666:44785): avc: denied { module_request } for pid=19802 comm="syz.2.4557" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 891.106224][ T30] audit: type=1400 audit(1745169424.666:44786): avc: denied { create } for pid=19797 comm="syz.5.4554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 892.999588][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4570'. [ 893.220636][ T5878] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 893.320984][ T58] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 893.517394][ T5878] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.045417][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 894.152240][ T5878] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 894.164896][ T58] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1023 [ 894.175677][ T58] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 16 [ 894.187049][ T58] usb 1-1: config 1 interface 0 has no altsetting 0 [ 894.196524][ T5878] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 894.206981][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 894.216039][ T5878] usb 6-1: SerialNumber: syz [ 894.222462][ T58] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 894.233490][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.242968][ T58] usb 1-1: Product: á [ 894.247213][ T58] usb 1-1: Manufacturer: ìŠ¾ã’’ï¤¹ã·¶î£®æ®‰èž®æ´ [ 894.254715][ T58] usb 1-1: SerialNumber: 颭ꤤ訇爻ㇵﱇ㨧ᥘ裧⿙乑㠩 [ 894.267852][T19853] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 894.275528][T19853] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 894.481694][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 894.481710][ T30] audit: type=1400 audit(1745169429.536:44972): avc: denied { bind } for pid=19871 comm="syz.7.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 894.515799][ T30] audit: type=1400 audit(1745169429.576:44973): avc: denied { write } for pid=19871 comm="syz.7.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 894.613453][ T30] audit: type=1400 audit(1745169429.636:44974): avc: denied { setopt } for pid=19871 comm="syz.7.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 894.672753][ T30] audit: type=1400 audit(1745169429.636:44975): avc: denied { create } for pid=19871 comm="syz.7.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 894.714806][ T30] audit: type=1400 audit(1745169429.636:44976): avc: denied { create } for pid=19871 comm="syz.7.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 894.852887][ T30] audit: type=1400 audit(1745169429.636:44977): avc: denied { write } for pid=19871 comm="syz.7.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 894.873624][ T30] audit: type=1400 audit(1745169429.636:44978): avc: denied { read } for pid=19871 comm="syz.7.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 894.894524][ T30] audit: type=1400 audit(1745169429.636:44979): avc: denied { read } for pid=19871 comm="syz.7.4578" dev="nsfs" ino=4026533015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 894.921079][ T30] audit: type=1400 audit(1745169429.636:44980): avc: denied { open } for pid=19871 comm="syz.7.4578" path="net:[4026533015]" dev="nsfs" ino=4026533015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 894.958548][ T30] audit: type=1400 audit(1745169429.636:44981): avc: denied { create } for pid=19871 comm="syz.7.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 895.623842][T19014] Bluetooth: hci2: command 0x0406 tx timeout [ 895.652742][ T5878] usb 6-1: 0:2 : does not exist [ 895.681226][ T58] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 895.753221][ T5878] usb 6-1: USB disconnect, device number 34 [ 895.761144][ T58] usb 1-1: USB disconnect, device number 69 [ 895.942588][T19888] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 896.110980][ T58] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 896.306651][T19893] openvswitch: netlink: Key 19 has unexpected len 0 expected 4 [ 896.310787][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 896.332667][ T58] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 896.365115][ T58] usb 1-1: can't read configurations, error -61 [ 896.511273][ T58] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 896.580380][T19898] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 896.721027][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 896.804856][ T58] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 896.824227][ T58] usb 1-1: can't read configurations, error -61 [ 896.834489][ T58] usb usb1-port1: attempt power cycle [ 897.074174][T19904] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4589'. [ 897.081890][T19905] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4589'. [ 897.099069][T19904] gretap0: entered promiscuous mode [ 897.127786][T19905] 0ªî{X¹¦: renamed from gretap0 [ 897.138590][T19905] 0ªî{X¹¦: left promiscuous mode [ 897.144913][T19905] 0ªî{X¹¦: entered allmulticast mode [ 897.162363][T19905] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 897.181018][ T58] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 897.212284][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 897.219282][ T58] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 897.228255][ T58] usb 1-1: can't read configurations, error -61 [ 897.371421][T19919] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 897.550962][ T58] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 897.621542][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 897.632099][ T58] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 897.647473][ T58] usb 1-1: can't read configurations, error -61 [ 897.858668][ T58] usb usb1-port1: unable to enumerate USB device [ 899.395948][T19942] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 899.667401][ T30] kauditd_printk_skb: 207 callbacks suppressed [ 899.667417][ T30] audit: type=1400 audit(1745169434.476:45189): avc: denied { prog_load } for pid=19932 comm="syz.5.4599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 899.672784][T19014] Bluetooth: hci2: unexpected event 0x0b length: 4 < 11 [ 899.673720][ T30] audit: type=1400 audit(1745169434.476:45190): avc: denied { bpf } for pid=19932 comm="syz.5.4599" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 899.720597][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.811256][ T30] audit: type=1400 audit(1745169434.476:45191): avc: denied { perfmon } for pid=19932 comm="syz.5.4599" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 900.290852][ T30] audit: type=1400 audit(1745169434.726:45192): avc: denied { prog_load } for pid=19930 comm="syz.7.4597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 900.331672][ T30] audit: type=1400 audit(1745169434.726:45193): avc: denied { bpf } for pid=19930 comm="syz.7.4597" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 900.438004][ T30] audit: type=1400 audit(1745169434.726:45194): avc: denied { perfmon } for pid=19930 comm="syz.7.4597" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 900.516300][ T30] audit: type=1400 audit(1745169434.736:45195): avc: denied { write } for pid=19939 comm="syz.0.4600" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 900.614153][ T30] audit: type=1400 audit(1745169434.816:45196): avc: denied { read write } for pid=13198 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 900.732854][ T30] audit: type=1400 audit(1745169434.816:45197): avc: denied { open } for pid=13198 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 900.783168][ T30] audit: type=1400 audit(1745169434.816:45198): avc: denied { ioctl } for pid=13198 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 901.231545][T19961] xt_CT: No such helper "pptp" [ 901.430954][ T5878] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 901.567727][T19970] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 901.669759][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 901.683105][ T5878] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 901.694337][ T5878] usb 1-1: config 0 has no interface number 0 [ 901.700961][ T5878] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 901.712795][ T5878] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 901.725113][ T5878] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 901.738505][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.747173][ T5878] usb 1-1: Product: syz [ 901.752009][ T5878] usb 1-1: Manufacturer: syz [ 901.756612][ T5878] usb 1-1: SerialNumber: syz [ 901.763106][ T5878] usb 1-1: config 0 descriptor?? [ 901.770208][ T5878] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 901.781666][ T5878] em28xx 1-1:0.132: Video interface 132 found: [ 902.946718][ T5878] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 903.298598][ T5878] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 903.324095][ T5878] em28xx 1-1:0.132: board has no eeprom [ 903.401006][ T5878] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 903.412466][ T5878] em28xx 1-1:0.132: analog set to bulk mode. [ 903.429864][ T5874] em28xx 1-1:0.132: Registering V4L2 extension [ 903.494530][ T5878] usb 1-1: USB disconnect, device number 74 [ 903.526846][ T5878] em28xx 1-1:0.132: Disconnecting em28xx [ 903.847667][ T5874] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 903.858068][ T5874] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 904.075463][T19995] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4610'. [ 904.084714][T19995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4610'. [ 904.093893][T19995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4610'. [ 904.244552][ T5874] em28xx 1-1:0.132: No AC97 audio processor [ 904.258225][ T5874] usb 1-1: Decoder not found [ 904.278721][ T5874] em28xx 1-1:0.132: failed to create media graph [ 904.992456][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 904.992498][ T30] audit: type=1400 audit(1745169439.666:45374): avc: denied { read } for pid=19996 comm="syz.0.4611" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 905.021525][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.041588][ T5874] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 905.102486][T20005] No such timeout policy "syz1" [ 905.202075][ T5874] em28xx 1-1:0.132: Remote control support is not available for this card. [ 905.235938][ T5878] em28xx 1-1:0.132: Closing input extension [ 905.251406][ T30] audit: type=1400 audit(1745169439.666:45375): avc: denied { open } for pid=19996 comm="syz.0.4611" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 905.275236][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.738754][ T5878] em28xx 1-1:0.132: Freeing device [ 905.791783][ T30] audit: type=1400 audit(1745169439.776:45376): avc: denied { create } for pid=19996 comm="syz.0.4611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 905.889716][ T30] audit: type=1400 audit(1745169439.786:45377): avc: denied { write } for pid=19996 comm="syz.0.4611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 905.981097][ T30] audit: type=1400 audit(1745169440.126:45378): avc: denied { read write } for pid=16662 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 905.981213][ T5874] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 906.005472][ C1] vkms_vblank_simulate: vblank timer overrun [ 906.037893][T20014] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 906.055733][ T30] audit: type=1400 audit(1745169440.216:45379): avc: denied { read write open } for pid=16662 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 906.082519][ T30] audit: type=1400 audit(1745169440.216:45380): avc: denied { ioctl } for pid=16662 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 906.331947][ T30] audit: type=1400 audit(1745169440.486:45381): avc: denied { create } for pid=20006 comm="syz.5.4613" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 906.360364][ T30] audit: type=1400 audit(1745169440.486:45382): avc: denied { create } for pid=20006 comm="syz.5.4613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 906.360862][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 906.580384][ T30] audit: type=1400 audit(1745169440.486:45383): avc: denied { setopt } for pid=20006 comm="syz.5.4613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 906.720799][ T5874] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.731802][ T5874] usb 6-1: config 0 has no interfaces? [ 906.739333][ T5874] usb 6-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=65.b8 [ 906.749051][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.904576][T20027] lo speed is unknown, defaulting to 1000 [ 906.911191][T20027] lo speed is unknown, defaulting to 1000 [ 906.919863][T20027] lo speed is unknown, defaulting to 1000 [ 906.971891][T20027] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 907.212274][T20027] lo speed is unknown, defaulting to 1000 [ 907.219193][T20027] lo speed is unknown, defaulting to 1000 [ 907.226056][T20027] lo speed is unknown, defaulting to 1000 [ 907.233604][T20027] lo speed is unknown, defaulting to 1000 [ 907.240035][T20027] lo speed is unknown, defaulting to 1000 [ 907.285363][ T5874] usb 6-1: Product: syz [ 907.305354][ T5874] usb 6-1: Manufacturer: syz [ 907.315507][ T5874] usb 6-1: SerialNumber: syz [ 907.375679][ T5874] usb 6-1: config 0 descriptor?? [ 907.820883][T20034] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4620'. [ 907.829933][T20034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'. [ 907.840979][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4620'. [ 908.074085][T13227] usb 6-1: USB disconnect, device number 35 [ 909.275778][T20051] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 909.296161][T20051] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 909.668149][T20059] FAULT_INJECTION: forcing a failure. [ 909.668149][T20059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.681899][T20059] CPU: 1 UID: 0 PID: 20059 Comm: syz.6.4627 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 909.681923][T20059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 909.681934][T20059] Call Trace: [ 909.681940][T20059] [ 909.681946][T20059] dump_stack_lvl+0x16c/0x1f0 [ 909.681972][T20059] should_fail_ex+0x512/0x640 [ 909.681994][T20059] _copy_from_user+0x2e/0xd0 [ 909.682015][T20059] copy_msghdr_from_user+0x98/0x160 [ 909.682037][T20059] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 909.682069][T20059] ___sys_sendmsg+0xfe/0x1d0 [ 909.682091][T20059] ? __pfx____sys_sendmsg+0x10/0x10 [ 909.682142][T20059] __sys_sendmsg+0x16d/0x220 [ 909.682163][T20059] ? __pfx___sys_sendmsg+0x10/0x10 [ 909.682200][T20059] do_syscall_64+0xcd/0x260 [ 909.682226][T20059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.682244][T20059] RIP: 0033:0x7fe07b18e169 [ 909.682258][T20059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.682275][T20059] RSP: 002b:00007fe078ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.682293][T20059] RAX: ffffffffffffffda RBX: 00007fe07b3b6080 RCX: 00007fe07b18e169 [ 909.682304][T20059] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000a [ 909.682314][T20059] RBP: 00007fe078ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 909.682325][T20059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.682335][T20059] R13: 0000000000000000 R14: 00007fe07b3b6080 R15: 00007ffc8044f758 [ 909.682358][T20059] [ 910.441929][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 910.441944][ T30] audit: type=1400 audit(1745169445.506:45574): avc: denied { read write } for pid=16662 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 910.491895][ T30] audit: type=1400 audit(1745169445.546:45575): avc: denied { read write open } for pid=16662 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 910.518324][ T30] audit: type=1400 audit(1745169445.546:45576): avc: denied { ioctl } for pid=16662 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 910.565527][ T30] audit: type=1400 audit(1745169445.626:45577): avc: denied { read write } for pid=20061 comm="syz.0.4629" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 910.590220][ T30] audit: type=1400 audit(1745169445.626:45578): avc: denied { open } for pid=20061 comm="syz.0.4629" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 910.615851][ T30] audit: type=1400 audit(1745169445.626:45579): avc: denied { ioctl } for pid=20061 comm="syz.0.4629" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 910.649950][ T30] audit: type=1400 audit(1745169445.656:45580): avc: denied { read write } for pid=16960 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 910.698733][ T30] audit: type=1400 audit(1745169445.656:45581): avc: denied { read write open } for pid=16960 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 910.751640][ T30] audit: type=1400 audit(1745169445.656:45582): avc: denied { ioctl } for pid=16960 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 910.798878][T20065] kernel profiling enabled (shift: 7) [ 910.890965][ T5874] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 911.059885][ T30] audit: type=1400 audit(1745169445.706:45583): avc: denied { read } for pid=20062 comm="syz.5.4628" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 911.129802][ T5874] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 911.143744][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.156275][T20068] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 911.181820][ T5874] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 911.192487][ T5874] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 911.209067][ T5874] usb 1-1: Manufacturer: syz [ 911.240095][ T5874] usb 1-1: config 0 descriptor?? [ 911.319674][T20074] loop6: detected capacity change from 0 to 524287999 [ 911.332350][ T5874] rc_core: IR keymap rc-hauppauge not found [ 911.345647][ T5874] Registered IR keymap rc-empty [ 911.352484][ T5874] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 911.368276][ T5874] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input71 [ 911.391022][ T58] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 911.684018][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.755106][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.802219][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 911.820717][ T9] usb 1-1: USB disconnect, device number 75 [ 911.820938][ T58] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 911.837997][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.045349][ T58] usb 3-1: config 0 descriptor?? [ 912.697768][ T58] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 912.915301][T20095] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4636'. [ 912.924553][T20095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4636'. [ 912.933656][T20095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4636'. [ 913.083684][T20069] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.193027][ T58] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 913.267932][ T58] usb 3-1: USB disconnect, device number 76 [ 914.514297][T20116] loop6: detected capacity change from 0 to 524287999 [ 914.739889][T20125] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 915.190554][T20131] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 915.468717][ T30] kauditd_printk_skb: 221 callbacks suppressed [ 915.468756][ T30] audit: type=1400 audit(1745169450.526:45805): avc: denied { read write } for pid=20132 comm="syz.6.4647" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 915.783725][ T30] audit: type=1400 audit(1745169450.526:45806): avc: denied { open } for pid=20132 comm="syz.6.4647" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 915.806859][ C0] vkms_vblank_simulate: vblank timer overrun [ 915.864764][ T30] audit: type=1400 audit(1745169450.546:45807): avc: denied { ioctl } for pid=20132 comm="syz.6.4647" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 915.889204][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.229855][ T30] audit: type=1400 audit(1745169450.546:45808): avc: denied { read } for pid=20132 comm="syz.6.4647" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 916.252944][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.260036][ T30] audit: type=1400 audit(1745169450.546:45809): avc: denied { open } for pid=20132 comm="syz.6.4647" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 916.294149][ T30] audit: type=1400 audit(1745169450.546:45810): avc: denied { ioctl } for pid=20132 comm="syz.6.4647" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 916.319463][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.426816][ T30] audit: type=1400 audit(1745169450.546:45811): avc: denied { read } for pid=20132 comm="syz.6.4647" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 916.450991][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.464037][ T30] audit: type=1400 audit(1745169450.546:45812): avc: denied { open } for pid=20132 comm="syz.6.4647" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 916.488624][ C0] vkms_vblank_simulate: vblank timer overrun [ 916.508061][ T30] audit: type=1400 audit(1745169450.746:45813): avc: denied { execmem } for pid=20134 comm="syz.5.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 916.625171][ T30] audit: type=1400 audit(1745169450.876:45814): avc: denied { write } for pid=20134 comm="syz.5.4646" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 917.255344][T20151] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4651'. [ 917.264537][T20151] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4651'. [ 917.274047][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4651'. [ 918.656499][T20167] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4655'. [ 918.735898][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4655'. [ 918.769095][T20158] kvm: pic: non byte read [ 918.819274][T20158] kvm: pic: level sensitive irq not supported [ 918.819335][T20158] kvm: pic: non byte read [ 918.830622][T20158] kvm: pic: level sensitive irq not supported [ 918.830664][T20158] kvm: pic: non byte read [ 918.842586][T13227] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 919.282968][T13227] usb 3-1: unable to get BOS descriptor or descriptor too short [ 919.291603][T13227] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 919.300887][T13227] usb 3-1: config 1 has no interface number 1 [ 919.308239][T13227] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 919.338864][T13227] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 919.361057][T13227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.369100][T13227] usb 3-1: Product: syz [ 919.393384][T13227] usb 3-1: Manufacturer: syz [ 919.404249][T13227] usb 3-1: SerialNumber: syz [ 919.645981][T13227] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 919.666357][T13227] usb 3-1: failed to enable PITCH for EP 0x82 [ 919.706312][T13227] usb 3-1: USB disconnect, device number 77 [ 920.855914][ T30] kauditd_printk_skb: 197 callbacks suppressed [ 920.855933][ T30] audit: type=1400 audit(1745169455.316:46012): avc: denied { read write } for pid=20183 comm="syz.0.4660" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 920.934560][ T30] audit: type=1400 audit(1745169455.316:46013): avc: denied { open } for pid=20183 comm="syz.0.4660" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 920.978810][ T30] audit: type=1400 audit(1745169455.316:46014): avc: denied { ioctl } for pid=20183 comm="syz.0.4660" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 921.012379][ T30] audit: type=1400 audit(1745169455.876:46015): avc: denied { read write } for pid=16960 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 921.037450][ T30] audit: type=1400 audit(1745169455.876:46016): avc: denied { read write open } for pid=16960 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 921.073710][ T30] audit: type=1400 audit(1745169455.876:46017): avc: denied { ioctl } for pid=16960 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 921.106002][ T30] audit: type=1400 audit(1745169455.896:46018): avc: denied { read write } for pid=20189 comm="syz.7.4662" name="vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 921.132818][ T30] audit: type=1400 audit(1745169455.896:46019): avc: denied { read write open } for pid=20189 comm="syz.7.4662" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 921.161697][ T30] audit: type=1400 audit(1745169455.896:46020): avc: denied { ioctl } for pid=20189 comm="syz.7.4662" path="/dev/vmci" dev="devtmpfs" ino=697 ioctlcmd=0x7a7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 921.188387][ T30] audit: type=1400 audit(1745169455.906:46021): avc: denied { execmem } for pid=20189 comm="syz.7.4662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 921.381197][ T5874] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 921.878808][T20205] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 924.210946][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 924.260393][ T5874] usb 1-1: device descriptor read/all, error -71 [ 925.169720][T20230] FAULT_INJECTION: forcing a failure. [ 925.169720][T20230] name failslab, interval 1, probability 0, space 0, times 0 [ 925.221090][T20230] CPU: 1 UID: 0 PID: 20230 Comm: syz.5.4673 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 925.221119][T20230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 925.221129][T20230] Call Trace: [ 925.221135][T20230] [ 925.221142][T20230] dump_stack_lvl+0x16c/0x1f0 [ 925.221169][T20230] should_fail_ex+0x512/0x640 [ 925.221188][T20230] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 925.221216][T20230] should_failslab+0xc2/0x120 [ 925.221235][T20230] __kmalloc_cache_noprof+0x6a/0x3e0 [ 925.221259][T20230] ? __pfx___might_resched+0x10/0x10 [ 925.221282][T20230] ? vhost_task_create+0xe5/0x2e0 [ 925.221300][T20230] ? rcu_is_watching+0x12/0xc0 [ 925.221325][T20230] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 925.221347][T20230] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 925.221372][T20230] vhost_task_create+0xe5/0x2e0 [ 925.221390][T20230] ? __pfx_vhost_task_create+0x10/0x10 [ 925.221408][T20230] ? register_lock_class+0x41/0x4c0 [ 925.221431][T20230] ? __pfx_vhost_task_fn+0x10/0x10 [ 925.221451][T20230] ? kvm_vcpu_ioctl+0x27e/0x1680 [ 925.221475][T20230] kvm_mmu_post_init_vm+0x1b7/0x370 [ 925.221494][T20230] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 925.221521][T20230] ? kvm_vcpu_ioctl+0x14c2/0x1680 [ 925.221541][T20230] kvm_vcpu_ioctl+0x5e9/0x1680 [ 925.221560][T20230] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 925.221594][T20230] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 925.221622][T20230] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 925.221657][T20230] ? hook_file_ioctl_common+0x145/0x410 [ 925.221681][T20230] ? selinux_file_ioctl+0x180/0x270 [ 925.221705][T20230] ? selinux_file_ioctl+0xb4/0x270 [ 925.221730][T20230] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 925.221757][T20230] __x64_sys_ioctl+0x190/0x200 [ 925.221783][T20230] do_syscall_64+0xcd/0x260 [ 925.221808][T20230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.221825][T20230] RIP: 0033:0x7fbd7fd8e169 [ 925.221839][T20230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.221855][T20230] RSP: 002b:00007fbd80bdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 925.221872][T20230] RAX: ffffffffffffffda RBX: 00007fbd7ffb5fa0 RCX: 00007fbd7fd8e169 [ 925.221883][T20230] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 925.221893][T20230] RBP: 00007fbd80bdc090 R08: 0000000000000000 R09: 0000000000000000 [ 925.221902][T20230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.221912][T20230] R13: 0000000000000000 R14: 00007fbd7ffb5fa0 R15: 00007fff2cc50208 [ 925.221936][T20230] [ 925.570675][ T5874] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 925.770847][ T5874] usb 1-1: Invalid ep0 maxpacket: 64 [ 925.777123][ T5874] usb usb1-port1: attempt power cycle [ 925.862430][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 925.862445][ T30] audit: type=1400 audit(1745169460.926:46199): avc: denied { ioctl } for pid=20228 comm="syz.0.4675" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 926.023214][ T30] audit: type=1400 audit(1745169460.926:46200): avc: denied { prog_load } for pid=20234 comm="syz.7.4679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 926.080471][T20248] kvm: emulating exchange as write [ 926.153014][ T5874] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 926.184521][ T5874] usb 1-1: Invalid ep0 maxpacket: 64 [ 926.195486][ T30] audit: type=1400 audit(1745169460.926:46201): avc: denied { bpf } for pid=20234 comm="syz.7.4679" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 926.241280][ T30] audit: type=1400 audit(1745169460.926:46202): avc: denied { perfmon } for pid=20234 comm="syz.7.4679" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 926.293224][ T30] audit: type=1400 audit(1745169460.996:46203): avc: denied { execmem } for pid=20243 comm="syz.5.4681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 926.331005][ T5874] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 926.345589][ T30] audit: type=1400 audit(1745169461.006:46204): avc: denied { read write } for pid=13198 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 926.392271][ T5874] usb 1-1: Invalid ep0 maxpacket: 64 [ 926.407098][ T5874] usb usb1-port1: unable to enumerate USB device [ 926.440039][T20257] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 926.585160][ T30] audit: type=1400 audit(1745169461.006:46205): avc: denied { open } for pid=13198 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 926.716044][ T30] audit: type=1400 audit(1745169461.006:46206): avc: denied { ioctl } for pid=13198 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 927.054511][T20260] netlink: 788 bytes leftover after parsing attributes in process `syz.5.4681'. [ 927.793137][ T30] audit: type=1400 audit(1745169461.056:46207): avc: denied { create } for pid=20249 comm="syz.2.4682" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 927.816580][ T30] audit: type=1400 audit(1745169461.066:46208): avc: denied { map_create } for pid=20249 comm="syz.2.4682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 928.212501][T20275] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 929.292682][T20266] ALSA: mixer_oss: invalid OSS volume 'P×}V' [ 929.300687][T15599] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 929.521071][T15599] usb 3-1: Using ep0 maxpacket: 16 [ 929.844079][T15599] usb 3-1: config 8 has an invalid interface number: 153 but max is 1 [ 929.858023][T15599] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 929.869826][T15599] usb 3-1: config 8 has an invalid interface number: 142 but max is 1 [ 929.878636][T15599] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 929.987685][T20295] trusted_key: encrypted_key: key user:syz not found [ 930.161592][T15599] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 930.200896][T15599] usb 3-1: config 8 has no interface number 0 [ 930.212580][T15599] usb 3-1: config 8 has no interface number 1 [ 930.218917][T15599] usb 3-1: config 8 interface 153 altsetting 75 has an invalid descriptor for endpoint zero, skipping [ 930.232814][T15599] usb 3-1: config 8 interface 153 altsetting 75 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 930.247841][T15599] usb 3-1: config 8 interface 153 altsetting 75 has an endpoint descriptor with address 0xC8, changing to 0x88 [ 930.270220][T15599] usb 3-1: config 8 interface 153 altsetting 75 endpoint 0x88 has invalid maxpacket 44174, setting to 1024 [ 930.289373][T20298] loop6: detected capacity change from 0 to 524287999 [ 930.293638][T15599] usb 3-1: config 8 interface 153 altsetting 75 bulk endpoint 0x88 has invalid maxpacket 1024 [ 930.405678][T15599] usb 3-1: config 8 interface 153 altsetting 75 bulk endpoint 0x1 has invalid maxpacket 64 [ 930.417262][T15599] usb 3-1: config 8 interface 153 altsetting 75 has a duplicate endpoint with address 0xE, skipping [ 930.428681][T15599] usb 3-1: config 8 interface 153 altsetting 75 has an endpoint descriptor with address 0x12, changing to 0x2 [ 930.440963][T15599] usb 3-1: config 8 interface 153 altsetting 75 has a duplicate endpoint with address 0x3, skipping [ 930.460788][T15599] usb 3-1: config 8 interface 153 altsetting 75 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 930.634028][T15599] usb 3-1: config 8 interface 153 altsetting 75 endpoint 0xC has an invalid bInterval 43, changing to 9 [ 930.652025][T15599] usb 3-1: config 8 interface 153 altsetting 75 endpoint 0xF has invalid wMaxPacketSize 0 [ 930.663836][T15599] usb 3-1: config 8 interface 153 altsetting 75 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 930.698935][T15599] usb 3-1: config 8 interface 142 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 930.716640][T15599] usb 3-1: config 8 interface 142 altsetting 4 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 930.753584][T15599] usb 3-1: config 8 interface 142 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 930.765048][T15599] usb 3-1: config 8 interface 142 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 930.778826][T15599] usb 3-1: config 8 interface 142 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 930.791916][T15599] usb 3-1: config 8 interface 142 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 930.804313][T20304] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 930.813908][T15599] usb 3-1: config 8 interface 142 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 930.826098][T15599] usb 3-1: config 8 interface 142 altsetting 4 has a duplicate endpoint with address 0x2, skipping [ 930.877440][ T30] kauditd_printk_skb: 202 callbacks suppressed [ 930.877451][ T30] audit: type=1400 audit(1745169465.936:46411): avc: denied { ioctl } for pid=20293 comm="syz.7.4694" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=72394 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 930.910565][ C1] vkms_vblank_simulate: vblank timer overrun [ 930.942758][T15599] usb 3-1: config 8 interface 142 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 930.979241][T15599] usb 3-1: config 8 interface 142 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 931.008219][T15599] usb 3-1: config 8 interface 142 altsetting 4 has 11 endpoint descriptors, different from the interface descriptor's value: 15 [ 931.039105][T15599] usb 3-1: config 8 interface 153 has no altsetting 0 [ 931.060810][T15599] usb 3-1: config 8 interface 142 has no altsetting 0 [ 931.068773][ T30] audit: type=1400 audit(1745169466.126:46412): avc: denied { ioctl } for pid=20278 comm="syz.2.4690" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 931.093849][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.106405][T15599] usb 3-1: New USB device found, idVendor=1fb9, idProduct=0203, bcdDevice=ba.6a [ 931.126118][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.136068][T15599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.144695][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.156195][T15599] usb 3-1: Product: 枊℡暭닳ⱅ鷴嶷ì䕒刺㉕ۭç£ë“œçŒ­êžî€•å™ì¬ ã²ã²‰â¿´î¾¤é—ŽïŠé¦¨ä¬·æ†©ä´‹è±—è‘“îžå£â³ã ™å£•å¿£ë¤¬å¿¶çœ¹ãž¡î°ë–†æ¾Šê¼¤å¿â ¸ïƒ¬ì±…çŒì£±é’¨à¦‹æ¯‘ê“槅禱ã¤ã¸¶á¬ç¥—ã‚䌾≛視⸶ç–♙歚 [ 931.196557][ T30] audit: type=1400 audit(1745169466.226:46413): avc: denied { prog_load } for pid=20308 comm="syz.6.4697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 931.215969][T15599] usb 3-1: Manufacturer: ୡ町з缠ëšæ ¥à¥§ã½™ê¿€î¤ à­¿ä®§ã’®âšåŸ’䈑ತ完괜쟺䑱㗰瑠냛â î¾çµ¦ê–µå»”⩽Ϭ׷ॊ㋉奡ꊢꋪᮟ⎯횙儂å…얮ߎ᡹촇㦻鮷厳饳倢æ³ï°‚㹳佪嫤棫䷟㘷뒄ä¢É´å…€ç£·â¥’굵㖥頶櫒롎㞈ﶇ럔íºâ—´æ· â¹¹â¾µç²‘ሽ귈㛈䦔췶곗Ლ⸉쉇ç¾ã‰€ê§‡ï¥¯æ‰ê˜—á¼ã¶Žä„¬å¢¶ä ž [ 931.247520][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.260818][ T30] audit: type=1400 audit(1745169466.226:46414): avc: denied { bpf } for pid=20308 comm="syz.6.4697" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 931.284744][ T30] audit: type=1400 audit(1745169466.226:46415): avc: denied { perfmon } for pid=20308 comm="syz.6.4697" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 931.310816][T15599] usb 3-1: SerialNumber: ⊠[ 931.317325][ T30] audit: type=1400 audit(1745169466.226:46416): avc: denied { bpf } for pid=20308 comm="syz.6.4697" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 931.340869][T15599] usb 3-1: Interface #153 referenced by multiple IADs [ 931.383377][T15599] usb 3-1: Interface #142 referenced by multiple IADs [ 931.392810][ T30] audit: type=1400 audit(1745169466.416:46417): avc: denied { create } for pid=20308 comm="syz.6.4697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 931.412550][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.423479][ T30] audit: type=1400 audit(1745169466.416:46418): avc: denied { create } for pid=20308 comm="syz.6.4697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 931.443116][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.455212][ T30] audit: type=1400 audit(1745169466.416:46419): avc: denied { setopt } for pid=20308 comm="syz.6.4697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 931.569675][T15599] usb 3-1: can't set config #8, error -71 [ 931.594064][T15599] usb 3-1: USB disconnect, device number 78 [ 931.606463][ T30] audit: type=1400 audit(1745169466.416:46420): avc: denied { connect } for pid=20308 comm="syz.6.4697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 931.974710][T20319] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4700'. [ 932.010971][T15599] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 932.022727][T20319] nbd: must specify at least one socket [ 932.263802][T15599] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.272748][T20324] ALSA: mixer_oss: invalid OSS volume 'P×}V' [ 932.280024][T15599] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 932.289823][T15599] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 932.315565][T15599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.371620][T20330] smc: net device bond0 applied user defined pnetid SYZ0 [ 932.686065][T15599] usb 3-1: config 0 descriptor?? [ 932.717415][T15599] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 932.738268][T15599] dvb-usb: bulk message failed: -22 (3/0) [ 932.771494][T15599] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 932.795629][T15599] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 932.806125][T15599] usb 3-1: media controller created [ 932.817817][T15599] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 932.825100][T15599] dvb-usb: bulk message failed: -22 (6/0) [ 932.825875][T15599] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 932.829573][T15599] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input73 [ 932.834623][T15599] dvb-usb: schedule remote query interval to 150 msecs. [ 932.834642][T15599] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 933.002505][T15599] dvb-usb: bulk message failed: -22 (1/0) [ 933.008352][T15599] dvb-usb: error while querying for an remote control event. [ 933.893110][T15599] dvb-usb: bulk message failed: -22 (1/0) [ 933.973474][T20351] fuse: Unknown parameter '»»»»»' [ 934.004356][T15599] dvb-usb: error while querying for an remote control event. [ 934.229734][T15599] dvb-usb: bulk message failed: -22 (1/0) [ 934.315619][T15599] dvb-usb: error while querying for an remote control event. [ 934.450341][T20357] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4712'. [ 934.459400][T20357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4712'. [ 934.468516][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4712'. [ 934.481028][T15599] dvb-usb: bulk message failed: -22 (1/0) [ 934.750199][T15599] dvb-usb: error while querying for an remote control event. [ 934.774259][ T9] usb 3-1: USB disconnect, device number 79 [ 935.395377][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 935.880262][ T30] kauditd_printk_skb: 288 callbacks suppressed [ 935.880279][ T30] audit: type=1400 audit(1745169470.936:46709): avc: denied { create } for pid=20360 comm="syz.2.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 936.043861][T20378] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 936.770345][ T30] audit: type=1400 audit(1745169470.996:46710): avc: denied { ioctl } for pid=16662 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 936.905990][ T30] audit: type=1400 audit(1745169471.046:46711): avc: denied { create } for pid=20366 comm="syz.6.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 937.075804][ T30] audit: type=1400 audit(1745169471.056:46712): avc: denied { ioctl } for pid=20366 comm="syz.6.4715" path="socket:[72539]" dev="sockfs" ino=72539 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 937.555745][ T30] audit: type=1400 audit(1745169471.066:46713): avc: denied { create } for pid=20366 comm="syz.6.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 937.577181][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.599651][ T30] audit: type=1400 audit(1745169471.086:46714): avc: denied { setopt } for pid=20366 comm="syz.6.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 937.836048][T20393] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 938.029579][ T30] audit: type=1400 audit(1745169471.276:46715): avc: denied { create } for pid=20360 comm="syz.2.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 938.149908][ T30] audit: type=1400 audit(1745169471.276:46716): avc: denied { create } for pid=20360 comm="syz.2.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 938.232247][ T30] audit: type=1400 audit(1745169471.286:46717): avc: denied { setopt } for pid=20360 comm="syz.2.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 938.310798][ T30] audit: type=1400 audit(1745169471.286:46718): avc: denied { write } for pid=20360 comm="syz.2.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 940.212740][T20388] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 940.226741][T20388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 940.266517][T20388] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 940.273390][T20388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 940.279470][T20388] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 940.286005][T20388] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 940.304194][T20388] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 940.474329][T20413] fuse: Bad value for 'group_id' [ 940.479336][T20413] fuse: Bad value for 'group_id' [ 940.915418][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 940.927511][ T30] audit: type=1400 audit(1745169475.946:46833): avc: denied { read open } for pid=20415 comm="syz.5.4726" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 941.090468][ T30] audit: type=1400 audit(1745169476.126:46834): avc: denied { setopt } for pid=20414 comm="syz.7.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 941.425146][ T30] audit: type=1400 audit(1745169476.146:46835): avc: denied { read write } for pid=13198 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 941.449518][ C1] vkms_vblank_simulate: vblank timer overrun [ 941.949093][ T30] audit: type=1400 audit(1745169476.146:46836): avc: denied { open } for pid=13198 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 942.006873][ T30] audit: type=1400 audit(1745169476.146:46837): avc: denied { ioctl } for pid=13198 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 942.092311][ T30] audit: type=1400 audit(1745169476.176:46838): avc: denied { create } for pid=20424 comm="syz.2.4729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 942.112784][ T30] audit: type=1400 audit(1745169476.176:46839): avc: denied { ioctl } for pid=20424 comm="syz.2.4729" path="socket:[73371]" dev="sockfs" ino=73371 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 942.139191][ T30] audit: type=1400 audit(1745169476.186:46840): avc: denied { map_create } for pid=20414 comm="syz.7.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 942.159371][ T30] audit: type=1400 audit(1745169476.186:46841): avc: denied { read } for pid=20419 comm="syz.0.4728" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 942.346991][T19014] Bluetooth: hci2: command 0x0406 tx timeout [ 943.135843][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 943.148584][T16309] Bluetooth: hci3: command 0x0c1a tx timeout [ 943.154651][T16309] Bluetooth: hci1: command 0x0406 tx timeout [ 943.172002][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 943.389392][ T30] audit: type=1400 audit(1745169476.186:46842): avc: denied { open } for pid=20419 comm="syz.0.4728" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 943.639802][T20452] loop6: detected capacity change from 0 to 524287999 [ 943.646070][T20449] SELinux: failed to load policy [ 944.223144][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 945.202707][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 945.297957][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 945.307858][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.318159][ T9] usb 1-1: Product: syz [ 945.323847][ T9] usb 1-1: Manufacturer: syz [ 945.363831][ T9] usb 1-1: SerialNumber: syz [ 946.261345][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 946.261363][ T30] audit: type=1400 audit(1745169480.536:46983): avc: denied { execmem } for pid=20474 comm="syz.6.4742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 946.311308][ T9] usb 1-1: config 0 descriptor?? [ 946.319236][ T9] ch341 1-1:0.0: ch341-uart converter detected [ 946.343011][ T30] audit: type=1400 audit(1745169480.686:46984): avc: denied { allowed } for pid=20471 comm="syz.7.4741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 947.331062][T20443] Bluetooth: hci3: command 0x0c1a tx timeout [ 947.731558][ T9] usb 1-1: failed to receive control message: -110 [ 947.738141][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 947.746754][ T30] audit: type=1400 audit(1745169480.686:46985): avc: denied { create } for pid=20471 comm="syz.7.4741" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 947.769760][ T30] audit: type=1400 audit(1745169480.686:46986): avc: denied { map } for pid=20471 comm="syz.7.4741" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 947.795294][ T30] audit: type=1400 audit(1745169480.686:46987): avc: denied { read write } for pid=20471 comm="syz.7.4741" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=73491 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 947.857479][ T30] audit: type=1400 audit(1745169480.686:46988): avc: denied { read } for pid=20471 comm="syz.7.4741" path="socket:[73774]" dev="sockfs" ino=73774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 947.889925][ T30] audit: type=1400 audit(1745169481.376:46989): avc: denied { ioctl } for pid=20458 comm="syz.0.4738" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 947.890595][ T9] usb 1-1: USB disconnect, device number 80 [ 947.939099][ T30] audit: type=1400 audit(1745169481.776:46990): avc: denied { read } for pid=20474 comm="syz.6.4742" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 947.986283][ T30] audit: type=1400 audit(1745169481.776:46991): avc: denied { open } for pid=20474 comm="syz.6.4742" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 948.021673][ T9] ch341 1-1:0.0: device disconnected [ 948.125437][ T30] audit: type=1400 audit(1745169481.836:46992): avc: denied { create } for pid=20474 comm="syz.6.4742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 948.290014][T20497] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 949.290448][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 949.363468][T20443] Bluetooth: hci3: command 0x0c1a tx timeout [ 949.442112][T14475] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 949.480696][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 949.834844][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.845740][T14475] usb 3-1: Using ep0 maxpacket: 8 [ 949.871774][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 950.007060][T14475] usb 3-1: unable to get BOS descriptor or descriptor too short [ 950.014881][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 950.036348][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 950.036530][T14475] usb 3-1: config 10 has an invalid interface number: 237 but max is 0 [ 950.054743][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 950.110962][T14475] usb 3-1: config 10 has no interface number 0 [ 950.117182][T14475] usb 3-1: config 10 interface 237 altsetting 2 endpoint 0x6 has invalid maxpacket 60192, setting to 1024 [ 950.139692][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 950.149245][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 950.161391][T14475] usb 3-1: config 10 interface 237 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 1024 [ 950.175697][ T9] usb 6-1: Manufacturer: syz [ 951.341100][ T9] usb 6-1: config 0 descriptor?? [ 951.346313][T14475] usb 3-1: config 10 interface 237 has no altsetting 0 [ 951.398794][ T30] kauditd_printk_skb: 147 callbacks suppressed [ 951.398816][ T30] audit: type=1400 audit(1745169486.416:47140): avc: denied { ioctl } for pid=20501 comm="syz.5.4748" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 951.652726][ T30] audit: type=1400 audit(1745169486.456:47141): avc: denied { ioctl } for pid=20508 comm="syz.2.4751" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 951.687401][ T30] audit: type=1400 audit(1745169486.456:47142): avc: denied { read } for pid=20519 comm="syz.7.4754" name="media3" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 951.710672][ T30] audit: type=1400 audit(1745169486.456:47143): avc: denied { open } for pid=20519 comm="syz.7.4754" path="/dev/media3" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 951.734832][ T30] audit: type=1400 audit(1745169486.506:47144): avc: denied { ioctl } for pid=20519 comm="syz.7.4754" path="/dev/media3" dev="devtmpfs" ino=939 ioctlcmd=0x7c02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 951.759511][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.766507][ T30] audit: type=1400 audit(1745169486.516:47145): avc: denied { read } for pid=20519 comm="syz.7.4754" name="media3" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 951.789300][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.810408][ T30] audit: type=1400 audit(1745169486.516:47146): avc: denied { open } for pid=20519 comm="syz.7.4754" path="/dev/media3" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 951.834440][ T30] audit: type=1400 audit(1745169486.546:47147): avc: denied { prog_load } for pid=20519 comm="syz.7.4754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 951.834694][T14475] usb 3-1: New USB device found, idVendor=061c, idProduct=c0a4, bcdDevice=31.08 [ 951.853904][ C0] vkms_vblank_simulate: vblank timer overrun [ 951.872309][ T30] audit: type=1400 audit(1745169486.546:47148): avc: denied { bpf } for pid=20519 comm="syz.7.4754" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 951.896539][T14475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.908989][T14475] usb 3-1: Product: syz [ 951.920119][ T30] audit: type=1400 audit(1745169486.686:47149): avc: denied { module_request } for pid=20519 comm="syz.7.4754" kmod="net-pf-2-proto-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 951.942677][T14475] usb 3-1: SerialNumber: syz [ 951.967870][T20509] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 952.078706][T20538] xt_TCPMSS: Only works on TCP SYN packets [ 952.331359][ T5878] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 952.540875][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 952.548338][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short [ 952.549002][T14475] usb 3-1: USB disconnect, device number 80 [ 952.562151][ T5878] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 952.562174][ T5878] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 952.562191][ T5878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 952.563920][ T5878] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 952.604858][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.613734][ T5878] usb 1-1: Product: syz [ 952.618021][ T5878] usb 1-1: Manufacturer: syz [ 952.636870][ T5878] usb 1-1: SerialNumber: syz [ 952.674944][T20548] loop6: detected capacity change from 0 to 524287999 [ 953.040743][T20539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.073016][T20539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.122544][T20539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.196390][T20539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.231081][T20539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.243745][T20539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.257354][T20539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.268244][T20539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.278706][T20539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.289520][T20539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.313170][ T9] rc_core: IR keymap rc-hauppauge not found [ 953.328181][ T9] Registered IR keymap rc-empty [ 953.338390][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 953.388050][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 953.418057][ T5878] usb 1-1: 0:2 : does not exist [ 953.438326][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 953.728041][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input75 [ 955.741912][ T5874] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 955.901037][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 955.908751][ T5874] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.920124][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 955.931799][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 955.944881][ T5874] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 955.955919][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 955.973589][ T5874] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 955.984117][ T5874] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 955.992935][ T5874] usb 3-1: Manufacturer: syz [ 956.171440][T20586] block nbd7: NBD_DISCONNECT [ 956.225729][T20586] block nbd7: Send disconnect failed -22 [ 956.398157][T20583] block nbd7: Disconnected due to user request. [ 956.407172][T20583] block nbd7: shutting down sockets [ 956.517972][ T30] kauditd_printk_skb: 242 callbacks suppressed [ 956.517987][ T30] audit: type=1400 audit(1745169491.576:47392): avc: denied { read write } for pid=19523 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 956.548942][ T30] audit: type=1400 audit(1745169491.576:47393): avc: denied { open } for pid=19523 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 956.573189][ C0] vkms_vblank_simulate: vblank timer overrun [ 956.579714][ T30] audit: type=1400 audit(1745169491.576:47394): avc: denied { ioctl } for pid=19523 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 956.608825][ T30] audit: type=1400 audit(1745169491.616:47395): avc: denied { create } for pid=20588 comm="syz.7.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 956.633206][ T30] audit: type=1400 audit(1745169491.626:47396): avc: denied { read } for pid=20588 comm="syz.7.4774" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 956.655994][ C0] vkms_vblank_simulate: vblank timer overrun [ 956.719161][ T30] audit: type=1400 audit(1745169491.626:47397): avc: denied { read open } for pid=20588 comm="syz.7.4774" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 956.723877][T20590] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4774'. [ 956.747178][ T30] audit: type=1400 audit(1745169491.696:47398): avc: denied { setopt } for pid=20588 comm="syz.7.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 956.774373][T20590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4774'. [ 956.776429][ T30] audit: type=1400 audit(1745169491.706:47399): avc: denied { map_create } for pid=20588 comm="syz.7.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 956.802960][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4774'. [ 956.849351][ T30] audit: type=1400 audit(1745169491.776:47400): avc: denied { create } for pid=20588 comm="syz.7.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 956.918391][ T30] audit: type=1400 audit(1745169491.776:47401): avc: denied { create } for pid=20588 comm="syz.7.4774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 959.501853][T20621] fuse: Bad value for 'group_id' [ 959.506959][T20621] fuse: Bad value for 'group_id' [ 959.588436][T20623] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4782'. [ 959.639857][T20623] erofs (device nbd5): cannot find valid erofs superblock [ 961.573563][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 961.573582][ T30] audit: type=1400 audit(1745169496.266:47559): avc: denied { read write } for pid=20635 comm="syz.7.4787" name="video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 961.607940][ T30] audit: type=1400 audit(1745169496.266:47560): avc: denied { open } for pid=20635 comm="syz.7.4787" path="/dev/video36" dev="devtmpfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 961.636529][ T30] audit: type=1400 audit(1745169496.276:47561): avc: denied { ioctl } for pid=20635 comm="syz.7.4787" path="/dev/video36" dev="devtmpfs" ino=1044 ioctlcmd=0x563b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 961.671635][ T30] audit: type=1400 audit(1745169496.286:47562): avc: denied { create } for pid=20635 comm="syz.7.4787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 961.693531][ T30] audit: type=1400 audit(1745169496.286:47563): avc: denied { execute } for pid=20635 comm="syz.7.4787" name="file0" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 961.721121][ T30] audit: type=1400 audit(1745169496.296:47564): avc: denied { execute_no_trans } for pid=20635 comm="syz.7.4787" path="/58/file0" dev="tmpfs" ino=323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 961.748140][ T30] audit: type=1400 audit(1745169496.306:47565): avc: denied { read write } for pid=20635 comm="syz.7.4787" name="radio1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 961.771900][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.781465][ T30] audit: type=1400 audit(1745169496.306:47566): avc: denied { open } for pid=20635 comm="syz.7.4787" path="/dev/radio1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 961.805019][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.818473][ T30] audit: type=1400 audit(1745169496.316:47567): avc: denied { ioctl } for pid=20635 comm="syz.7.4787" path="/dev/radio1" dev="devtmpfs" ino=956 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 961.854704][ T30] audit: type=1400 audit(1745169496.316:47568): avc: denied { read write } for pid=20635 comm="syz.7.4787" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 962.690104][T20647] vivid-000: ================= START STATUS ================= [ 962.702695][T20647] vivid-000: Generate PTS: true [ 962.709720][T20647] vivid-000: Generate SCR: true [ 962.715598][T20647] tpg source WxH: 1280x720 (R'G'B) [ 962.721572][T20647] tpg field: 1 [ 962.731756][T20647] tpg crop: (0,0)/64x64 [ 962.760925][T20647] tpg compose: (0,0)/16x16 [ 962.769230][T20647] tpg colorspace: 3 [ 962.773779][T20647] tpg transfer function: 0/0 [ 962.819446][T20651] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 962.846471][T20647] tpg quantization: 0/0 [ 962.851151][T20647] tpg RGB range: 0/1 [ 962.855491][T20647] vivid-000: ================== END STATUS ================== [ 963.589900][T20653] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4792'. [ 963.599250][T20653] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4792'. [ 963.608534][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4792'. [ 966.482834][T20692] loop6: detected capacity change from 0 to 524287999 [ 966.870981][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 966.871012][ T30] audit: type=1400 audit(1745169501.816:47760): avc: denied { create } for pid=20691 comm="syz.7.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 967.096844][ T30] audit: type=1400 audit(1745169501.826:47761): avc: denied { prog_load } for pid=20691 comm="syz.7.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 967.137459][ T30] audit: type=1400 audit(1745169501.826:47762): avc: denied { bpf } for pid=20691 comm="syz.7.4803" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 967.190528][ T30] audit: type=1400 audit(1745169501.826:47763): avc: denied { perfmon } for pid=20691 comm="syz.7.4803" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 967.217733][ T30] audit: type=1400 audit(1745169501.826:47764): avc: denied { bpf } for pid=20691 comm="syz.7.4803" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 967.254029][ T30] audit: type=1400 audit(1745169501.836:47765): avc: denied { prog_run } for pid=20691 comm="syz.7.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 967.281229][ T30] audit: type=1400 audit(1745169501.856:47766): avc: denied { map_create } for pid=20691 comm="syz.7.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 967.304246][ T30] audit: type=1400 audit(1745169501.866:47767): avc: denied { map_read map_write } for pid=20691 comm="syz.7.4803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 967.330555][ T30] audit: type=1400 audit(1745169502.186:47768): avc: denied { read write } for pid=16662 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 967.354924][ C0] vkms_vblank_simulate: vblank timer overrun [ 967.364327][ T30] audit: type=1400 audit(1745169502.186:47769): avc: denied { open } for pid=16662 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 968.092959][T20701] xt_CT: No such helper "pptp" [ 968.449371][T20709] nfs: Unknown parameter '' [ 968.454208][T20706] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 969.213943][T20718] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4810'. [ 969.223139][T20718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4810'. [ 969.232220][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4810'. [ 969.619509][T20721] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4811'. [ 969.628775][T20721] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4811'. [ 969.638342][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4811'. [ 969.878185][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 969.897408][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 969.910866][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 969.926915][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 969.943364][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 969.986935][T20723] lo speed is unknown, defaulting to 1000 [ 970.054879][T20729] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4813'. [ 970.156787][T20723] chnl_net:caif_netlink_parms(): no params data found [ 970.584977][T20723] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.592960][T20723] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.600976][T20723] bridge_slave_0: entered allmulticast mode [ 970.608619][T20723] bridge_slave_0: entered promiscuous mode [ 970.618102][T20723] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.626063][T20723] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.642686][T20723] bridge_slave_1: entered allmulticast mode [ 970.653184][T20723] bridge_slave_1: entered promiscuous mode [ 970.693619][T20723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.705210][T20723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.753421][T20723] team0: Port device team_slave_0 added [ 970.766589][T20723] team0: Port device team_slave_1 added [ 970.811433][T20723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.818480][T20723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.846311][T20723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.860185][T20723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.871111][T20723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.898315][T20723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.939753][T20723] hsr_slave_0: entered promiscuous mode [ 970.946017][T20723] hsr_slave_1: entered promiscuous mode [ 970.952334][T20723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 970.959886][T20723] Cannot create hsr debugfs directory [ 972.003172][T20443] Bluetooth: hci4: command tx timeout [ 974.081286][T20443] Bluetooth: hci4: command tx timeout [ 976.160714][T20443] Bluetooth: hci4: command tx timeout [ 978.240358][T20443] Bluetooth: hci4: command tx timeout [ 980.047717][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 980.047733][ T30] audit: type=1400 audit(1745169515.106:47955): avc: denied { execmem } for pid=20760 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 980.170294][ T30] audit: type=1400 audit(1745169515.226:47956): avc: denied { create } for pid=20761 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 980.178607][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 980.191113][ T30] audit: type=1400 audit(1745169515.236:47957): avc: denied { read write } for pid=20761 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 980.202336][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 980.222841][ T30] audit: type=1400 audit(1745169515.236:47958): avc: denied { open } for pid=20761 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 980.253790][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 980.262799][ T30] audit: type=1400 audit(1745169515.316:47959): avc: denied { ioctl } for pid=20761 comm="syz-executor" path="socket:[74377]" dev="sockfs" ino=74377 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 980.268582][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 980.301796][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 980.315125][ T30] audit: type=1400 audit(1745169515.376:47960): avc: denied { read } for pid=20761 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 980.338388][ T30] audit: type=1400 audit(1745169515.376:47961): avc: denied { open } for pid=20761 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 980.363405][ T30] audit: type=1400 audit(1745169515.376:47962): avc: denied { mounton } for pid=20761 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 982.402422][T20443] Bluetooth: hci6: command tx timeout [ 984.031029][ T30] audit: type=1400 audit(1745169519.096:47963): avc: denied { execmem } for pid=20763 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 984.150963][ T30] audit: type=1400 audit(1745169519.216:47964): avc: denied { create } for pid=20764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 984.159729][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 984.182126][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 984.190974][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 984.198796][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 984.207776][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 984.481143][T20443] Bluetooth: hci6: command tx timeout [ 986.038713][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 986.038729][ T30] audit: type=1400 audit(1745169521.096:47971): avc: denied { execmem } for pid=20766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 986.095486][ T30] audit: type=1400 audit(1745169521.156:47972): avc: denied { execmem } for pid=20767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 986.241635][T20443] Bluetooth: hci7: command tx timeout [ 986.295651][ T30] audit: type=1400 audit(1745169521.356:47973): avc: denied { create } for pid=20768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 986.322407][ T30] audit: type=1400 audit(1745169521.356:47974): avc: denied { create } for pid=20769 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 986.324981][T16309] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 986.346462][ T30] audit: type=1400 audit(1745169521.356:47975): avc: denied { read write } for pid=20768 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 986.379673][ T30] audit: type=1400 audit(1745169521.356:47976): avc: denied { open } for pid=20768 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 986.383585][ T5833] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 986.416487][ T30] audit: type=1400 audit(1745169521.366:47977): avc: denied { ioctl } for pid=20768 comm="syz-executor" path="socket:[75339]" dev="sockfs" ino=75339 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 986.416793][T16309] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 986.449469][ T5833] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 986.452068][T16309] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 986.459889][ T5833] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 986.464124][T16309] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 986.476307][ T5833] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 986.479572][T16309] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 986.487012][ T5833] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 986.513552][ T30] audit: type=1400 audit(1745169521.566:47978): avc: denied { read } for pid=20768 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 986.536722][ T30] audit: type=1400 audit(1745169521.566:47979): avc: denied { open } for pid=20768 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 986.561014][ T5833] Bluetooth: hci6: command tx timeout [ 986.566733][ T30] audit: type=1400 audit(1745169521.566:47980): avc: denied { ioctl } for pid=20769 comm="syz-executor" path="socket:[75345]" dev="sockfs" ino=75345 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 988.320973][ T5833] Bluetooth: hci7: command tx timeout [ 988.560773][ T5833] Bluetooth: hci8: command tx timeout [ 988.570933][ T5833] Bluetooth: hci9: command tx timeout [ 988.650909][ T5833] Bluetooth: hci6: command tx timeout [ 990.400356][ T5833] Bluetooth: hci7: command tx timeout [ 990.640466][T16309] Bluetooth: hci8: command tx timeout [ 990.641456][ T5833] Bluetooth: hci9: command tx timeout [ 992.480824][ T5833] Bluetooth: hci7: command tx timeout [ 992.565307][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.572748][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.720439][ T5833] Bluetooth: hci9: command tx timeout [ 992.725868][ T5833] Bluetooth: hci8: command tx timeout [ 994.801518][ T5833] Bluetooth: hci8: command tx timeout [ 994.802047][T16309] Bluetooth: hci9: command tx timeout [ 996.358975][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 996.358990][ T30] audit: type=1400 audit(1745169531.416:47985): avc: denied { read } for pid=5179 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 996.388014][ T30] audit: type=1400 audit(1745169531.416:47986): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 996.412784][ T30] audit: type=1400 audit(1745169531.416:47987): avc: denied { append } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 996.435980][ T30] audit: type=1400 audit(1745169531.416:47988): avc: denied { open } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 996.458811][ T30] audit: type=1400 audit(1745169531.416:47989): avc: denied { getattr } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 997.369388][ T30] audit: type=1400 audit(1745169532.426:47990): avc: denied { read } for pid=5179 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 997.392295][ T30] audit: type=1400 audit(1745169532.426:47991): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 997.414424][ T30] audit: type=1400 audit(1745169532.426:47992): avc: denied { append } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 997.437343][ T30] audit: type=1400 audit(1745169532.426:47993): avc: denied { open } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 997.462552][ T30] audit: type=1400 audit(1745169532.426:47994): avc: denied { getattr } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1002.473251][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1002.473267][ T30] audit: type=1400 audit(1745169537.536:48005): avc: denied { read } for pid=5179 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1002.501751][ T30] audit: type=1400 audit(1745169537.536:48006): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1002.523480][ T30] audit: type=1400 audit(1745169537.536:48007): avc: denied { append } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1002.545957][ T30] audit: type=1400 audit(1745169537.536:48008): avc: denied { open } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1002.569787][ T30] audit: type=1400 audit(1745169537.536:48009): avc: denied { getattr } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1029.594329][ T30] audit: type=1400 audit(1745169564.656:48010): avc: denied { execmem } for pid=20777 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1029.718524][ T30] audit: type=1400 audit(1745169564.776:48011): avc: denied { create } for pid=20778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1029.739281][ T30] audit: type=1400 audit(1745169564.776:48012): avc: denied { read write } for pid=20778 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1029.746915][ T5833] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1029.769102][ T30] audit: type=1400 audit(1745169564.776:48013): avc: denied { open } for pid=20778 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1029.776125][ T5833] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1029.807140][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1029.814976][ T30] audit: type=1400 audit(1745169564.776:48014): avc: denied { ioctl } for pid=20778 comm="syz-executor" path="socket:[74556]" dev="sockfs" ino=74556 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1029.817000][ T5833] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1029.850806][ T5833] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1029.864018][ T30] audit: type=1400 audit(1745169564.926:48015): avc: denied { read } for pid=20778 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1029.886618][ T30] audit: type=1400 audit(1745169564.936:48016): avc: denied { open } for pid=20778 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1029.912389][ T30] audit: type=1400 audit(1745169564.936:48017): avc: denied { mounton } for pid=20778 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1031.920874][T16309] Bluetooth: hci10: command tx timeout [ 1034.000983][T16309] Bluetooth: hci10: command tx timeout [ 1036.080857][T16309] Bluetooth: hci10: command tx timeout [ 1038.160308][T16309] Bluetooth: hci10: command tx timeout [ 1040.100105][ T30] audit: type=1400 audit(1745169575.156:48018): avc: denied { execmem } for pid=20781 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1040.224712][ T30] audit: type=1400 audit(1745169575.286:48019): avc: denied { create } for pid=20782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1040.246058][ T30] audit: type=1400 audit(1745169575.286:48020): avc: denied { read write } for pid=20782 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1040.246502][ T5833] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1040.275720][ T30] audit: type=1400 audit(1745169575.286:48021): avc: denied { open } for pid=20782 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1040.285629][ T5833] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1040.312602][ T30] audit: type=1400 audit(1745169575.286:48022): avc: denied { ioctl } for pid=20782 comm="syz-executor" path="socket:[74589]" dev="sockfs" ino=74589 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1040.338453][ T5833] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1040.349629][ T5833] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1040.359498][ T5833] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1040.373901][ T30] audit: type=1400 audit(1745169575.436:48023): avc: denied { read } for pid=20782 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1040.397151][ T30] audit: type=1400 audit(1745169575.436:48024): avc: denied { open } for pid=20782 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1040.421255][ T30] audit: type=1400 audit(1745169575.436:48025): avc: denied { mounton } for pid=20782 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1042.400972][T16309] Bluetooth: hci11: command tx timeout [ 1044.109723][ T30] audit: type=1400 audit(1745169579.166:48026): avc: denied { execmem } for pid=20784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1044.235661][ T30] audit: type=1400 audit(1745169579.296:48027): avc: denied { create } for pid=20785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1044.247958][ T5833] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1044.268239][ T5833] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1044.280881][ T5833] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1044.289750][ T5833] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1044.297474][ T5833] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1044.480799][ T5833] Bluetooth: hci11: command tx timeout [ 1046.320896][ T5833] Bluetooth: hci12: command tx timeout [ 1046.560926][ T5833] Bluetooth: hci11: command tx timeout [ 1046.621353][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1046.621369][ T30] audit: type=1400 audit(1745169581.676:48034): avc: denied { execmem } for pid=20787 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1046.680872][ T30] audit: type=1400 audit(1745169581.726:48035): avc: denied { execmem } for pid=20788 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1046.832861][ T30] audit: type=1400 audit(1745169581.896:48036): avc: denied { create } for pid=20789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1046.855790][T16309] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1046.866417][T16309] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1046.875667][ T30] audit: type=1400 audit(1745169581.896:48037): avc: denied { read write } for pid=20789 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1046.900791][ T30] audit: type=1400 audit(1745169581.896:48038): avc: denied { open } for pid=20789 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1046.927029][T16309] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1046.932004][ T30] audit: type=1400 audit(1745169581.896:48039): avc: denied { ioctl } for pid=20789 comm="syz-executor" path="socket:[74639]" dev="sockfs" ino=74639 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1046.942504][T20443] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1046.961594][T19014] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1046.970910][T20443] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1046.979413][ T30] audit: type=1400 audit(1745169581.996:48040): avc: denied { create } for pid=20791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1046.984660][T20443] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1047.007564][ T30] audit: type=1400 audit(1745169582.066:48041): avc: denied { ioctl } for pid=20789 comm="syz-executor" path="socket:[74639]" dev="sockfs" ino=74639 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1047.013482][T20443] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1047.048235][T20443] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1047.063181][T20443] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1047.067966][ T30] audit: type=1400 audit(1745169582.116:48042): avc: denied { read } for pid=20789 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1047.092974][ T30] audit: type=1400 audit(1745169582.116:48043): avc: denied { open } for pid=20789 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1048.400326][T20443] Bluetooth: hci12: command tx timeout [ 1048.640326][T20443] Bluetooth: hci11: command tx timeout [ 1049.121075][T20443] Bluetooth: hci14: command tx timeout [ 1049.121082][T16309] Bluetooth: hci13: command tx timeout [ 1050.492804][T16309] Bluetooth: hci12: command tx timeout [ 1051.200985][T16309] Bluetooth: hci14: command tx timeout [ 1051.210852][T16309] Bluetooth: hci13: command tx timeout [ 1052.560527][T16309] Bluetooth: hci12: command tx timeout [ 1053.280526][T16309] Bluetooth: hci13: command tx timeout [ 1053.280792][T20443] Bluetooth: hci14: command tx timeout [ 1054.003391][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.009700][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.360848][T20443] Bluetooth: hci14: command tx timeout [ 1055.364845][T16309] Bluetooth: hci13: command tx timeout [ 1059.759461][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1059.759474][ T30] audit: type=1400 audit(1745169594.816:48049): avc: denied { read } for pid=5179 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1059.788803][ T30] audit: type=1400 audit(1745169594.816:48050): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1059.811381][ T30] audit: type=1400 audit(1745169594.816:48051): avc: denied { append } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1059.834074][ T30] audit: type=1400 audit(1745169594.816:48052): avc: denied { open } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1059.857253][ T30] audit: type=1400 audit(1745169594.816:48053): avc: denied { getattr } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1061.988031][ T30] audit: type=1400 audit(1745169597.046:48054): avc: denied { read } for pid=5179 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1062.011673][ T30] audit: type=1400 audit(1745169597.046:48055): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1062.033862][ T30] audit: type=1400 audit(1745169597.046:48056): avc: denied { append } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1062.058093][ T30] audit: type=1400 audit(1745169597.046:48057): avc: denied { open } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1062.082162][ T30] audit: type=1400 audit(1745169597.046:48058): avc: denied { getattr } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1065.708833][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1065.708848][ T30] audit: type=1400 audit(1745169600.766:48064): avc: denied { read } for pid=5179 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1065.737266][ T30] audit: type=1400 audit(1745169600.766:48065): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1065.759833][ T30] audit: type=1400 audit(1745169600.766:48066): avc: denied { append } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1065.786141][ T30] audit: type=1400 audit(1745169600.766:48067): avc: denied { append open } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1065.809471][ T30] audit: type=1400 audit(1745169600.766:48068): avc: denied { getattr } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1090.496953][ T30] audit: type=1400 audit(1745169625.556:48069): avc: denied { execmem } for pid=20794 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1090.621022][ T30] audit: type=1400 audit(1745169625.686:48070): avc: denied { create } for pid=20795 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1090.632695][T20443] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1090.646567][ T30] audit: type=1400 audit(1745169625.686:48071): avc: denied { read write } for pid=20795 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1090.654059][T20443] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1090.673980][ T30] audit: type=1400 audit(1745169625.686:48072): avc: denied { open } for pid=20795 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1090.674029][ T30] audit: type=1400 audit(1745169625.686:48073): avc: denied { ioctl } for pid=20795 comm="syz-executor" path="socket:[75599]" dev="sockfs" ino=75599 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1090.737519][T20443] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1090.746123][T20443] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1090.755030][T20443] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1090.768536][ T30] audit: type=1400 audit(1745169625.826:48074): avc: denied { read } for pid=20795 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1090.791522][ T30] audit: type=1400 audit(1745169625.846:48075): avc: denied { open } for pid=20795 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1090.815469][ T30] audit: type=1400 audit(1745169625.846:48076): avc: denied { mounton } for pid=20795 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1092.801007][T20443] Bluetooth: hci15: command tx timeout [ 1094.880365][T20443] Bluetooth: hci15: command tx timeout [ 1096.971073][T16309] Bluetooth: hci15: command tx timeout [ 1097.040757][T16309] Bluetooth: hci4: command 0x0406 tx timeout [ 1099.041027][T20443] Bluetooth: hci15: command tx timeout [ 1100.721579][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 1100.729089][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1100.737109][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1100.746142][ T31] task:kworker/0:0 state:D stack:23304 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1100.758911][ T31] Workqueue: usb_hub_wq hub_event [ 1100.764374][ T31] Call Trace: [ 1100.768118][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1100.771650][ T31] __schedule+0x116f/0x5de0 [ 1100.776293][ T31] ? __pfx___schedule+0x10/0x10 [ 1100.777986][ T30] audit: type=1400 audit(1745169635.836:48077): avc: denied { write } for pid=5809 comm="syz-executor" path="pipe:[3622]" dev="pipefs" ino=3622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1100.781845][ T31] ? find_held_lock+0x2b/0x80 [ 1100.809748][ T31] ? schedule+0x2d7/0x3a0 [ 1100.815036][ T31] schedule+0xe7/0x3a0 [ 1100.819344][ T31] schedule_timeout+0x257/0x290 [ 1100.853782][ T30] audit: type=1400 audit(1745169635.916:48078): avc: denied { read } for pid=5179 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1100.885587][ T30] audit: type=1400 audit(1745169635.916:48079): avc: denied { search } for pid=5179 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1100.886849][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1100.908614][ T30] audit: type=1400 audit(1745169635.916:48080): avc: denied { append } for pid=5179 comm="syslogd" name="messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1100.937400][ T31] ? mark_held_locks+0x49/0x80 [ 1100.939139][ T30] audit: type=1400 audit(1745169635.916:48081): avc: denied { open } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1100.943074][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1100.969677][ T30] audit: type=1400 audit(1745169635.916:48082): avc: denied { getattr } for pid=5179 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1100.970605][ T31] __wait_for_common+0x2fc/0x4e0 [ 1100.970636][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1100.970658][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1100.970683][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 1100.970714][ T31] devtmpfs_submit_req+0xa8/0x100 [ 1100.970739][ T31] devtmpfs_create_node+0x18a/0x230 [ 1100.970765][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 1100.970791][ T31] ? up_write+0x1b2/0x520 [ 1100.970820][ T31] ? kernfs_create_link+0x1bd/0x240 [ 1100.970846][ T31] ? kernfs_put+0x35/0x60 [ 1100.970865][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 1100.970887][ T31] device_add+0x10bd/0x1a70 [ 1100.970907][ T31] ? __pfx_device_add+0x10/0x10 [ 1100.970924][ T31] ? __pfx_exact_lock+0x10/0x10 [ 1100.970946][ T31] ? kobject_get+0xbb/0x150 [ 1100.970973][ T31] cdev_device_add+0xc2/0x1e0 [ 1100.970993][ T31] evdev_connect+0x3a4/0x4c0 [ 1100.971021][ T31] input_attach_handler.isra.0+0x181/0x260 [ 1100.971050][ T31] input_register_device+0xa84/0x1130 [ 1100.971073][ T31] ? rc_register_device+0xff1/0x1bd0 [ 1100.971099][ T31] rc_register_device+0x1115/0x1bd0 [ 1100.971129][ T31] ? __pfx_rc_register_device+0x10/0x10 [ 1100.971151][ T31] ? device_initialize+0x243/0x510 [ 1101.113159][ T31] mceusb_dev_probe+0x15da/0x38f0 [ 1101.118191][ T31] ? __pfx_mceusb_dev_probe+0x10/0x10 [ 1101.124290][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1101.129325][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 1101.135450][ T31] usb_probe_interface+0x300/0x9c0 [ 1101.140902][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1101.146520][ T31] really_probe+0x23e/0xa90 [ 1101.151675][ T31] __driver_probe_device+0x1de/0x440 [ 1101.156962][ T31] driver_probe_device+0x4c/0x1b0 [ 1101.162234][ T31] __device_attach_driver+0x1df/0x310 [ 1101.167606][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1101.173590][ T31] bus_for_each_drv+0x156/0x1e0 [ 1101.179259][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1101.184771][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1101.189978][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1101.195863][ T31] __device_attach+0x1e4/0x4b0 [ 1101.200755][ T31] ? __pfx___device_attach+0x10/0x10 [ 1101.206043][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1101.211460][ T31] bus_probe_device+0x17f/0x1c0 [ 1101.216315][ T31] device_add+0x1148/0x1a70 [ 1101.220841][ T31] ? __pfx_device_add+0x10/0x10 [ 1101.225682][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1101.231066][ T31] usb_set_configuration+0x1187/0x1e20 [ 1101.236508][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1101.242576][ T31] usb_generic_driver_probe+0xb1/0x110 [ 1101.248031][ T31] usb_probe_device+0xec/0x3e0 [ 1101.252796][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1101.258160][ T31] really_probe+0x23e/0xa90 [ 1101.262728][ T31] __driver_probe_device+0x1de/0x440 [ 1101.268009][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 1101.273496][ T31] driver_probe_device+0x4c/0x1b0 [ 1101.278518][ T31] __device_attach_driver+0x1df/0x310 [ 1101.284777][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1101.290708][ T31] bus_for_each_drv+0x156/0x1e0 [ 1101.295558][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1101.300952][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1101.306152][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1101.311975][ T31] __device_attach+0x1e4/0x4b0 [ 1101.316720][ T31] ? __pfx___device_attach+0x10/0x10 [ 1101.322032][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1101.327232][ T31] bus_probe_device+0x17f/0x1c0 [ 1101.332101][ T31] device_add+0x1148/0x1a70 [ 1101.336584][ T31] ? __pfx_device_add+0x10/0x10 [ 1101.341447][ T31] ? usb_new_device+0xcd3/0x1a20 [ 1101.346389][ T31] usb_new_device+0xd07/0x1a20 [ 1101.351164][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1101.356170][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1101.361379][ T31] ? mark_held_locks+0x49/0x80 [ 1101.366146][ T31] hub_event+0x2eb7/0x4fa0 [ 1101.370599][ T31] ? __pfx_hub_event+0x10/0x10 [ 1101.375370][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 1101.381041][ T31] ? rcu_is_watching+0x12/0xc0 [ 1101.386682][ T31] process_one_work+0x9cc/0x1b70 [ 1101.391687][ T31] ? __pfx_fb_flashcursor+0x10/0x10 [ 1101.396879][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1101.402284][ T31] ? assign_work+0x1a0/0x250 [ 1101.406869][ T31] worker_thread+0x6c8/0xf10 [ 1101.411477][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1101.416565][ T31] kthread+0x3c2/0x780 [ 1101.420640][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.425233][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.429808][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.434426][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.439008][ T31] ? rcu_is_watching+0x12/0xc0 [ 1101.443883][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.448477][ T31] ret_from_fork+0x45/0x80 [ 1101.452924][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.457517][ T31] ret_from_fork_asm+0x1a/0x30 [ 1101.462306][ T31] [ 1101.465426][ T31] INFO: task kworker/1:4:5874 blocked for more than 144 seconds. [ 1101.473163][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1101.480809][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1101.490316][ T31] task:kworker/1:4 state:D stack:21208 pid:5874 tgid:5874 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1101.502403][ T31] Workqueue: usb_hub_wq hub_event [ 1101.507451][ T31] Call Trace: [ 1101.510755][ T31] [ 1101.513693][ T31] __schedule+0x116f/0x5de0 [ 1101.518187][ T31] ? __pfx___schedule+0x10/0x10 [ 1101.523366][ T31] ? find_held_lock+0x2b/0x80 [ 1101.528069][ T31] ? schedule+0x2d7/0x3a0 [ 1101.532426][ T31] schedule+0xe7/0x3a0 [ 1101.536490][ T31] schedule_timeout+0x257/0x290 [ 1101.541359][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1101.546755][ T31] ? mark_held_locks+0x49/0x80 [ 1101.551528][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1101.556705][ T31] __wait_for_common+0x2fc/0x4e0 [ 1101.561670][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1101.567037][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1101.572499][ T31] devtmpfs_submit_req+0xa8/0x100 [ 1101.577513][ T31] devtmpfs_create_node+0x18a/0x230 [ 1101.582738][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 1101.589741][ T31] ? up_write+0x1b2/0x520 [ 1101.594128][ T31] ? kernfs_create_link+0x1bd/0x240 [ 1101.599323][ T31] ? kernfs_put+0x35/0x60 [ 1101.603750][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 1101.609302][ T31] device_add+0x10bd/0x1a70 [ 1101.613816][ T31] ? __pfx_device_add+0x10/0x10 [ 1101.618655][ T31] ? add_device_randomness+0xb7/0xf0 [ 1101.623972][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1101.629867][ T31] usb_new_device+0xd07/0x1a20 [ 1101.634635][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1101.639640][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1101.644843][ T31] ? mark_held_locks+0x49/0x80 [ 1101.649589][ T31] hub_event+0x2eb7/0x4fa0 [ 1101.654028][ T31] ? __pfx_hub_event+0x10/0x10 [ 1101.658782][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 1101.664442][ T31] ? rcu_is_watching+0x12/0xc0 [ 1101.669201][ T31] process_one_work+0x9cc/0x1b70 [ 1101.674163][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 1101.679429][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1101.684828][ T31] ? assign_work+0x1a0/0x250 [ 1101.690580][ T31] worker_thread+0x6c8/0xf10 [ 1101.695199][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1101.700347][ T31] kthread+0x3c2/0x780 [ 1101.704425][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.709035][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.713670][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.718346][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.722962][ T31] ? rcu_is_watching+0x12/0xc0 [ 1101.727736][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.732343][ T31] ret_from_fork+0x45/0x80 [ 1101.736739][ T31] ? __pfx_kthread+0x10/0x10 [ 1101.741350][ T31] ret_from_fork_asm+0x1a/0x30 [ 1101.746133][ T31] [ 1101.749146][ T31] INFO: task kworker/1:7:5878 blocked for more than 144 seconds. [ 1101.757917][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1101.765648][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1101.774337][ T31] task:kworker/1:7 state:D stack:18392 pid:5878 tgid:5878 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1101.786375][ T31] Workqueue: usb_hub_wq hub_event [ 1101.791418][ T31] Call Trace: [ 1101.795539][ T31] [ 1101.798475][ T31] __schedule+0x116f/0x5de0 [ 1101.803062][ T31] ? __device_attach+0x1e4/0x4b0 [ 1101.808057][ T31] ? bus_probe_device+0x17f/0x1c0 [ 1101.813115][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1101.818047][ T31] ? __pfx___schedule+0x10/0x10 [ 1101.822944][ T31] ? find_held_lock+0x2b/0x80 [ 1101.827626][ T31] ? schedule+0x2d7/0x3a0 [ 1101.831988][ T31] schedule+0xe7/0x3a0 [ 1101.836062][ T31] schedule_timeout+0x257/0x290 [ 1101.840927][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1101.846302][ T31] ? mark_held_locks+0x49/0x80 [ 1101.851076][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1101.856288][ T31] __wait_for_common+0x2fc/0x4e0 [ 1101.861243][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1101.866611][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1101.872096][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 1101.877323][ T31] devtmpfs_submit_req+0xa8/0x100 [ 1101.882382][ T31] devtmpfs_create_node+0x18a/0x230 [ 1101.887564][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 1101.893306][ T31] ? up_write+0x1b2/0x520 [ 1101.898504][ T31] ? kernfs_create_link+0x1bd/0x240 [ 1101.903739][ T31] ? kernfs_put+0x35/0x60 [ 1101.908051][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 1101.913600][ T31] device_add+0x10bd/0x1a70 [ 1101.918097][ T31] ? __pfx_device_add+0x10/0x10 [ 1101.923007][ T31] snd_register_device+0x328/0x4b0 [ 1101.928142][ T31] ? __pfx_snd_ctl_dev_register+0x10/0x10 [ 1101.933888][ T31] snd_ctl_dev_register+0x77/0x160 [ 1101.938994][ T31] ? __pfx_snd_ctl_dev_register+0x10/0x10 [ 1101.944733][ T31] snd_device_register_all+0x10c/0x1b0 [ 1101.950214][ T31] snd_card_register+0x106/0x760 [ 1101.955168][ T31] ? __pfx_snd_card_register+0x10/0x10 [ 1101.960651][ T31] ? snd_usb_create_mixer+0xcea/0x1ab0 [ 1101.966112][ T31] ? __pfx__dev_err+0x10/0x10 [ 1101.970810][ T31] try_to_register_card+0x1d7/0x370 [ 1101.976012][ T31] ? __pfx_try_to_register_card+0x10/0x10 [ 1101.981778][ T31] ? snd_usb_create_stream.isra.0+0x4ed/0x550 [ 1101.987866][ T31] usb_audio_probe+0x87a/0x3c80 [ 1101.992732][ T31] ? __pfx_usb_audio_probe+0x10/0x10 [ 1101.998879][ T31] ? mark_held_locks+0x49/0x80 [ 1102.003831][ T31] ? mark_held_locks+0x49/0x80 [ 1102.008594][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1102.014419][ T31] usb_probe_interface+0x300/0x9c0 [ 1102.019527][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1102.025174][ T31] really_probe+0x23e/0xa90 [ 1102.029674][ T31] __driver_probe_device+0x1de/0x440 [ 1102.034961][ T31] driver_probe_device+0x4c/0x1b0 [ 1102.040002][ T31] __device_attach_driver+0x1df/0x310 [ 1102.045415][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1102.051321][ T31] bus_for_each_drv+0x156/0x1e0 [ 1102.056165][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1102.061543][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1102.066749][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1102.072595][ T31] __device_attach+0x1e4/0x4b0 [ 1102.077365][ T31] ? __pfx___device_attach+0x10/0x10 [ 1102.082685][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1102.087917][ T31] bus_probe_device+0x17f/0x1c0 [ 1102.092818][ T31] device_add+0x1148/0x1a70 [ 1102.097331][ T31] ? __pfx_device_add+0x10/0x10 [ 1102.103424][ T31] ? usb_cache_string+0xf2/0x150 [ 1102.108391][ T31] usb_set_configuration+0x1187/0x1e20 [ 1102.113862][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1102.119925][ T31] usb_generic_driver_probe+0xb1/0x110 [ 1102.125492][ T31] usb_probe_device+0xec/0x3e0 [ 1102.130259][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1102.135635][ T31] really_probe+0x23e/0xa90 [ 1102.140132][ T31] __driver_probe_device+0x1de/0x440 [ 1102.145444][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 1102.150925][ T31] driver_probe_device+0x4c/0x1b0 [ 1102.155952][ T31] __device_attach_driver+0x1df/0x310 [ 1102.165196][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1102.171591][ T31] bus_for_each_drv+0x156/0x1e0 [ 1102.176465][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1102.182359][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1102.187585][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1102.193732][ T31] __device_attach+0x1e4/0x4b0 [ 1102.198494][ T31] ? __pfx___device_attach+0x10/0x10 [ 1102.204656][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1102.209890][ T31] bus_probe_device+0x17f/0x1c0 [ 1102.214819][ T31] device_add+0x1148/0x1a70 [ 1102.219319][ T31] ? __pfx_device_add+0x10/0x10 [ 1102.224178][ T31] ? add_device_randomness+0xb7/0xf0 [ 1102.229455][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1102.235700][ T31] usb_new_device+0xd07/0x1a20 [ 1102.242162][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1102.247205][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1102.252817][ T31] ? mark_held_locks+0x49/0x80 [ 1102.257584][ T31] hub_event+0x2eb7/0x4fa0 [ 1102.262382][ T31] ? __pfx_hub_event+0x10/0x10 [ 1102.267155][ T31] ? insn_get_modrm+0x440/0x720 [ 1102.272587][ T31] ? insn_get_modrm+0x440/0x720 [ 1102.277456][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1102.283161][ T31] process_one_work+0x9cc/0x1b70 [ 1102.288096][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 1102.293726][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1102.299098][ T31] ? assign_work+0x1a0/0x250 [ 1102.304641][ T31] worker_thread+0x6c8/0xf10 [ 1102.309246][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1102.314818][ T31] kthread+0x3c2/0x780 [ 1102.318872][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.323809][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.328380][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.333305][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.337875][ T31] ? rcu_is_watching+0x12/0xc0 [ 1102.342981][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.347564][ T31] ret_from_fork+0x45/0x80 [ 1102.352314][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.356909][ T31] ret_from_fork_asm+0x1a/0x30 [ 1102.362254][ T31] [ 1102.365285][ T31] INFO: task syz-executor:13584 blocked for more than 145 seconds. [ 1102.373951][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1102.382149][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1102.391438][ T31] task:syz-executor state:D stack:23912 pid:13584 tgid:13584 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1102.404045][ T31] Call Trace: [ 1102.407970][ T31] [ 1102.411287][ T31] __schedule+0x116f/0x5de0 [ 1102.415786][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1102.421495][ T31] ? __pfx___schedule+0x10/0x10 [ 1102.426352][ T31] ? find_held_lock+0x2b/0x80 [ 1102.431626][ T31] ? schedule+0x2d7/0x3a0 [ 1102.435969][ T31] schedule+0xe7/0x3a0 [ 1102.440026][ T31] schedule_preempt_disabled+0x13/0x30 [ 1102.445818][ T31] rwsem_down_read_slowpath+0x62f/0xb60 [ 1102.451867][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1102.457963][ T31] ? __pfx___might_resched+0x10/0x10 [ 1102.463568][ T31] ? find_held_lock+0x2b/0x80 [ 1102.468246][ T31] down_read+0xef/0x480 [ 1102.472457][ T31] ? mnt_get_write_access+0x54/0x300 [ 1102.477721][ T31] ? __pfx_down_read+0x10/0x10 [ 1102.482548][ T31] ? mnt_get_write_access+0x20c/0x300 [ 1102.487920][ T31] path_openat+0x88a/0x2d40 [ 1102.492803][ T31] ? __pfx_path_openat+0x10/0x10 [ 1102.497734][ T31] do_filp_open+0x20b/0x470 [ 1102.502782][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1102.507797][ T31] ? alloc_fd+0x471/0x7d0 [ 1102.512775][ T31] do_sys_openat2+0x11b/0x1d0 [ 1102.517456][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1102.523208][ T31] ? handle_softirqs+0x5be/0x8e0 [ 1102.528164][ T31] __x64_sys_openat+0x174/0x210 [ 1102.533803][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 1102.539181][ T31] ? __pfx_handle_softirqs+0x10/0x10 [ 1102.544809][ T31] do_syscall_64+0xcd/0x260 [ 1102.549319][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.555554][ T31] RIP: 0033:0x7fba54b8cad0 [ 1102.559946][ T31] RSP: 002b:00007ffe3f1bc5d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1102.569155][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fba54b8cad0 [ 1102.577497][ T31] RDX: 0000000000000002 RSI: 00007ffe3f1bc6e0 RDI: 00000000ffffff9c [ 1102.585819][ T31] RBP: 00007ffe3f1bc6e0 R08: 0000000000000000 R09: 00007ffe3f1bc397 [ 1102.594165][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000014b [ 1102.602793][ T31] R13: 00000000000927c0 R14: 00000000000e8bd1 R15: 00007ffe3f1bc6e0 [ 1102.611756][ T31] [ 1102.614792][ T31] INFO: task kworker/1:3:15599 blocked for more than 145 seconds. [ 1102.622942][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1102.631134][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1102.639788][ T31] task:kworker/1:3 state:D stack:20792 pid:15599 tgid:15599 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 1102.652672][ T31] Workqueue: md_misc mddev_delayed_delete [ 1102.658394][ T31] Call Trace: [ 1102.662238][ T31] [ 1102.665180][ T31] __schedule+0x116f/0x5de0 [ 1102.669689][ T31] ? __lock_acquire+0xe90/0x1ba0 [ 1102.674998][ T31] ? __pfx___schedule+0x10/0x10 [ 1102.679847][ T31] ? find_held_lock+0x2b/0x80 [ 1102.684965][ T31] ? schedule+0x2d7/0x3a0 [ 1102.689299][ T31] schedule+0xe7/0x3a0 [ 1102.693708][ T31] schedule_timeout+0x257/0x290 [ 1102.698550][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1102.704287][ T31] ? mark_held_locks+0x49/0x80 [ 1102.709051][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1102.715236][ T31] __wait_for_common+0x2fc/0x4e0 [ 1102.720825][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1102.726227][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1102.732014][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 1102.737197][ T31] devtmpfs_submit_req+0xa8/0x100 [ 1102.742229][ T31] devtmpfs_delete_node+0xf6/0x160 [ 1102.747331][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 1102.753084][ T31] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 1102.759233][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1102.764894][ T31] ? kernfs_put+0x4e/0x60 [ 1102.769202][ T31] ? sysfs_remove_group+0xc6/0x180 [ 1102.774644][ T31] device_del+0x734/0x9f0 [ 1102.778960][ T31] ? __pfx_device_del+0x10/0x10 [ 1102.784358][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1102.789572][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1102.795371][ T31] del_gendisk+0x486/0xc40 [ 1102.799790][ T31] ? __pfx_del_gendisk+0x10/0x10 [ 1102.805238][ T31] ? kernfs_put.part.0+0x18b/0x630 [ 1102.810982][ T31] md_kobj_release+0xb2/0x100 [ 1102.816132][ T31] kobject_put+0x1e4/0x5a0 [ 1102.821233][ T31] process_one_work+0x9cc/0x1b70 [ 1102.826175][ T31] ? __pfx_disk_events_workfn+0x10/0x10 [ 1102.832062][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1102.837417][ T31] ? assign_work+0x1a0/0x250 [ 1102.842544][ T31] worker_thread+0x6c8/0xf10 [ 1102.847121][ T31] ? __kthread_parkme+0x19e/0x250 [ 1102.852487][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1102.857586][ T31] kthread+0x3c2/0x780 [ 1102.862061][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.866634][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.872009][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.876619][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.881554][ T31] ? rcu_is_watching+0x12/0xc0 [ 1102.886306][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.891460][ T31] ret_from_fork+0x45/0x80 [ 1102.895889][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.901209][ T31] ret_from_fork_asm+0x1a/0x30 [ 1102.905989][ T31] [ 1102.909029][ T31] [ 1102.909029][ T31] Showing all locks held in the system: [ 1102.917558][ T31] 6 locks held by kworker/0:0/9: [ 1102.923533][ T31] #0: ffff8881442c9948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1102.934702][ T31] #1: ffffc900000e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1102.946244][ T31] #2: ffff88802904c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1102.955479][ T31] #3: ffff888067f9b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1102.965209][ T31] #4: ffff888055f16160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1102.974824][ T31] #5: ffffffff8f9650e8 (input_mutex){+.+.}-{4:4}, at: input_register_device+0x98a/0x1130 [ 1102.985199][ T31] 3 locks held by kworker/u8:0/12: [ 1102.990651][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1103.001815][ T31] #1: ffffc90000117d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1103.012187][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1103.022201][ T31] 2 locks held by kdevtmpfs/26: [ 1103.027057][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0 [ 1103.038130][ T31] #1: ffffffff8eef4368 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 1103.048684][ T31] 1 lock held by khungtaskd/31: [ 1103.053890][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1103.064113][ T31] 2 locks held by getty/5578: [ 1103.068772][ T31] #0: ffff88803241e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1103.078853][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1103.089291][ T31] 3 locks held by kworker/1:4/5874: [ 1103.094940][ T31] #0: ffff8881442c9948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1103.106058][ T31] #1: ffffc90003127d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1103.117604][ T31] #2: ffff888145714198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1103.127349][ T31] 7 locks held by kworker/1:7/5878: [ 1103.133036][ T31] #0: ffff8881442c9948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1103.144161][ T31] #1: ffffc900030f7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1103.155732][ T31] #2: ffff88814537c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1103.165163][ T31] #3: ffff888042e3f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1103.175002][ T31] #4: ffff88806ad83160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1103.184599][ T31] #5: ffffffff90066788 (register_mutex#6){+.+.}-{4:4}, at: usb_audio_probe+0x4e2/0x3c80 [ 1103.194786][ T31] #6: ffffffff8ffd5608 (sound_mutex){+.+.}-{4:4}, at: snd_register_device+0x1b7/0x4b0 [ 1103.205344][ T31] 3 locks held by kworker/u8:9/6380: [ 1103.211223][ T31] 3 locks held by kworker/0:2/13227: [ 1103.216506][ T31] #0: ffff88801b479d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1103.228955][ T31] #1: ffffc9000431fd18 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1103.239760][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 [ 1103.249753][ T31] 2 locks held by syz-executor/13584: [ 1103.255349][ T31] #0: ffff88814128e420 (sb_writers){.+.+}-{0:0}, at: path_openat+0x1f3e/0x2d40 [ 1103.264407][ T31] #1: ffff88801c6d8950 (&type->i_mutex_dir_key#2){++++}-{4:4}, at: path_openat+0x88a/0x2d40 [ 1103.274605][ T31] 3 locks held by kworker/u8:10/14784: [ 1103.280052][ T31] #0: ffff88814e0f8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1103.292574][ T31] #1: ffffc90003e3fd18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1103.306187][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1103.316220][ T31] 2 locks held by kworker/1:3/15599: [ 1103.321856][ T31] #0: ffff8881442ca548 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1103.333243][ T31] #1: ffffc90003e5fd18 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1103.345207][ T31] 1 lock held by syz.2.3697/16661: [ 1103.350853][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1103.359850][ T31] 1 lock held by syz.2.4798/20681: [ 1103.365299][ T31] #0: ffffffff8ffd5608 (sound_mutex){+.+.}-{4:4}, at: snd_open+0x90/0x450 [ 1103.374235][ T31] 1 lock held by syz.7.4808/20713: [ 1103.379332][ T31] #0: ffffffff8ffd5608 (sound_mutex){+.+.}-{4:4}, at: snd_open+0x90/0x450 [ 1103.388291][ T31] 1 lock held by syz.7.4808/20714: [ 1103.393735][ T31] #0: ffffffff8ffd5608 (sound_mutex){+.+.}-{4:4}, at: snd_open+0x90/0x450 [ 1103.402929][ T31] 2 locks held by syz-executor/20723: [ 1103.408320][ T31] #0: ffffffff90868640 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1103.418284][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 1103.427815][ T31] 1 lock held by syz.6.4816/20742: [ 1103.433909][ T31] #0: ffffffff8ffd5608 (sound_mutex){+.+.}-{4:4}, at: snd_open+0x90/0x450 [ 1103.443397][ T31] 1 lock held by syz.5.4820/20757: [ 1103.448498][ T31] #0: ffffffff8ffd5608 (sound_mutex){+.+.}-{4:4}, at: snd_open+0x90/0x450 [ 1103.457441][ T31] 1 lock held by syz.5.4820/20758: [ 1103.462874][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 1103.472845][ T31] 1 lock held by syz-executor/20761: [ 1103.478113][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1103.488270][ T31] 1 lock held by syz-executor/20764: [ 1103.493868][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1103.503590][ T31] 1 lock held by syz-executor/20768: [ 1103.508850][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1103.518586][ T31] 1 lock held by syz-executor/20769: [ 1103.524080][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1103.534092][ T31] 1 lock held by syz-executor/20778: [ 1103.539370][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1103.548786][ T31] 1 lock held by syz-executor/20782: [ 1103.554397][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1103.564349][ T31] 1 lock held by syz-executor/20785: [ 1103.569616][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1103.579347][ T31] 1 lock held by syz-executor/20789: [ 1103.584990][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1103.594715][ T31] 1 lock held by syz-executor/20791: [ 1103.599980][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1103.609927][ T31] 1 lock held by syz-executor/20795: [ 1103.615816][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1103.625597][ T31] [ 1103.627908][ T31] ============================================= [ 1103.627908][ T31] [ 1103.637075][ T31] NMI backtrace for cpu 1 [ 1103.637089][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1103.637110][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1103.637120][ T31] Call Trace: [ 1103.637125][ T31] [ 1103.637133][ T31] dump_stack_lvl+0x116/0x1f0 [ 1103.637161][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1103.637180][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1103.637200][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1103.637220][ T31] watchdog+0xf70/0x12c0 [ 1103.637241][ T31] ? __pfx_watchdog+0x10/0x10 [ 1103.637251][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1103.637267][ T31] ? __kthread_parkme+0x19e/0x250 [ 1103.637284][ T31] ? __pfx_watchdog+0x10/0x10 [ 1103.637294][ T31] kthread+0x3c2/0x780 [ 1103.637305][ T31] ? __pfx_kthread+0x10/0x10 [ 1103.637315][ T31] ? __pfx_kthread+0x10/0x10 [ 1103.637325][ T31] ? __pfx_kthread+0x10/0x10 [ 1103.637335][ T31] ? __pfx_kthread+0x10/0x10 [ 1103.637345][ T31] ? rcu_is_watching+0x12/0xc0 [ 1103.637359][ T31] ? __pfx_kthread+0x10/0x10 [ 1103.637369][ T31] ret_from_fork+0x45/0x80 [ 1103.637380][ T31] ? __pfx_kthread+0x10/0x10 [ 1103.637390][ T31] ret_from_fork_asm+0x1a/0x30 [ 1103.637412][ T31] [ 1103.637416][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1103.775130][ C0] NMI backtrace for cpu 0 [ 1103.775145][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1103.775161][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1103.775169][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1103.775190][ C0] Code: 35 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 4a 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1103.775202][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 1103.775215][ C0] RAX: 00000000041297df RBX: 0000000000000000 RCX: ffffffff8b72a419 [ 1103.775224][ C0] RDX: 0000000000000000 RSI: ffffffff8dbef846 RDI: ffffffff8bf46540 [ 1103.775232][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 1103.775240][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 1103.775248][ C0] R13: ffffffff8e097740 R14: ffffffff90864910 R15: 0000000000000000 [ 1103.775256][ C0] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 1103.775270][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1103.775278][ C0] CR2: 00007f2c722e7d60 CR3: 000000000e180000 CR4: 00000000003526f0 [ 1103.775287][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1103.775294][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1103.775302][ C0] Call Trace: [ 1103.775307][ C0] [ 1103.775312][ C0] default_idle+0x13/0x20 [ 1103.775330][ C0] default_idle_call+0x6d/0xb0 [ 1103.775347][ C0] do_idle+0x391/0x510 [ 1103.775364][ C0] ? __pfx_do_idle+0x10/0x10 [ 1103.775379][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 1103.775399][ C0] ? do_idle+0x2ea/0x510 [ 1103.775414][ C0] cpu_startup_entry+0x4f/0x60 [ 1103.775430][ C0] rest_init+0x16b/0x2b0 [ 1103.775441][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1103.775456][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1103.775475][ C0] start_kernel+0x3e9/0x4d0 [ 1103.775494][ C0] x86_64_start_reservations+0x18/0x30 [ 1103.775511][ C0] x86_64_start_kernel+0xb0/0xc0 [ 1103.775528][ C0] common_startup_64+0x13e/0x148 [ 1103.775549][ C0] [ 1103.776434][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1103.995336][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1104.007121][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1104.017158][ T31] Call Trace: [ 1104.020418][ T31] [ 1104.023331][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1104.027913][ T31] panic+0x71c/0x800 [ 1104.031790][ T31] ? __pfx_panic+0x10/0x10 [ 1104.036195][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1104.041555][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1104.047517][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1104.052873][ T31] ? watchdog+0xdda/0x12c0 [ 1104.057271][ T31] ? watchdog+0xdcd/0x12c0 [ 1104.061670][ T31] watchdog+0xdeb/0x12c0 [ 1104.065898][ T31] ? __pfx_watchdog+0x10/0x10 [ 1104.070573][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1104.075763][ T31] ? __kthread_parkme+0x19e/0x250 [ 1104.080783][ T31] ? __pfx_watchdog+0x10/0x10 [ 1104.085441][ T31] kthread+0x3c2/0x780 [ 1104.089491][ T31] ? __pfx_kthread+0x10/0x10 [ 1104.094065][ T31] ? __pfx_kthread+0x10/0x10 [ 1104.098650][ T31] ? __pfx_kthread+0x10/0x10 [ 1104.103231][ T31] ? __pfx_kthread+0x10/0x10 [ 1104.107801][ T31] ? rcu_is_watching+0x12/0xc0 [ 1104.112550][ T31] ? __pfx_kthread+0x10/0x10 [ 1104.117132][ T31] ret_from_fork+0x45/0x80 [ 1104.121528][ T31] ? __pfx_kthread+0x10/0x10 [ 1104.126097][ T31] ret_from_fork_asm+0x1a/0x30 [ 1104.130871][ T31] [ 1104.134072][ T31] Kernel Offset: disabled [ 1104.138377][ T31] Rebooting in 86400 seconds..