last executing test programs: 11m50.295656713s ago: executing program 1 (id=1224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0xffff0000, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1c, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="d388e1446433fa5109d001abbc7d977da26aa1d12a4930d016c003189a153b7c659c0526605df96eb09f3806be21ed30490003eb7e8ef844a5fd7ea27fd7de82f42d46a2597f5f28fd40f1c8d850e900d8cf3ba262b36af6c2213747aa147f7e13e2e086d50790fe7b5289a42b35a849e1c5cd35328d1e5803a652e9299e641ff47dfd455626952e9bb99496f825654b67d9532159dad3e92272f5a884a66b010cedf3151935374f780b996f3331d6dc687a102227a4a3930c248fb8e922ec074fe0e60059630f4b2ab303a8897220bc78292a9f75679091760cf5afbb354c9da1000e0cc3a7a6a0d67900769e", @ANYRES64=0x0], 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000fe75000000000000000000b5afd1b4f1"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RVERSION(r6, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x40, 0x8, '9P2000.L'}, 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) listen(r7, 0x0) accept4$unix(r7, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x25, 0x5, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r9, 0x0, 0xd}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x2000c064}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x44, r1, 0x5, 0x70bd27, 0x8, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_SSID={0x1e, 0x34, @random="1744e4a4426ea541fe97209e378de044dd009c2e3aaab818885b"}]}, 0x44}}, 0x40488c0) 11m48.932556822s ago: executing program 1 (id=1228): prctl$PR_CAPBSET_READ(0x17, 0x13) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='\x8d\r~\xa7ce', &(0x7f0000000740)='Z\t\x00\x01\x00', 0x0) syz_open_dev$vcsn(&(0x7f0000000100), 0x7, 0x101b00) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) prctl$PR_CAPBSET_READ(0x17, 0x4) 11m47.867705221s ago: executing program 1 (id=1234): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000180)='0', 0xfe64) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r3) r4 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r4, &(0x7f0000000140)="6967ae4243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59c8958d6f156c9c8a2ac4677b000900ffffffffffffff200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x10f242) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, &(0x7f0000000280)={0x0, 0xd, 0x1f, {0x1f, 0x9, "8cf170233641444356ba707728c044d3ce753e685aabd2eb06ba39d3e4"}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x44, &(0x7f00000009c0)={0x40, 0x14, 0x3c, "a773003bb1aa3ae0223a39bdc5fa3aab264a09077c19ad9f3427d048c6ca9d48b35556109620413f17c62336f217f6969b325e90c2bc06efab3f3d60"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000ac0)={0x20, 0x80, 0x5, {0x1000, 0x1, 0x2, 0x9, 0x7ff, 0x9, 0x69, 0x74e, 0x7f, 0xcc, 0x8, 0x3}}, 0x0, &(0x7f0000000b40)={0x20, 0x83, 0x2}, &(0x7f0000000b80)={0x20, 0x87, 0x2, 0xcc0f}, &(0x7f0000000bc0)={0x20, 0x89, 0x2}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000200)={'veth1_macvtap\x00', 0xbcd}) 11m42.486215949s ago: executing program 1 (id=1244): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000140)={{}, {0x77359400}}) (async) r0 = syz_open_dev$usbmon(0x0, 0xffffffff, 0x80) fchdir(r0) syz_usb_connect(0x2, 0x41, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x8a, 0xdf, 0x94, 0x20, 0x2c7, 0xd349, 0x8a42, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0x0, 0x3a, 0xa0, 0x5, [{{0x9, 0x4, 0xa4, 0x4, 0x3, 0x2, 0x2, 0x2, 0x1, [], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x6, 0x4, 0x10, [@generic={0x2, 0x2}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x9, 0x7, 0x4}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x9, 0x8, 0x3}}]}}]}}]}}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 11m40.754391412s ago: executing program 1 (id=1249): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x401, 0x66200) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x7, 0x0, 0x0, 0x100, 0x2}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x2000000) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x5, 0x0, 0xfffffefc, 'syz0\x00'}, 0x2, 0x2, 0x1, 0x0, 0x0, 0xff, 'syz0\x00', 0x0}) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0xf, 0x3f, 0xb, "00efecffff00"}) 11m40.17091994s ago: executing program 1 (id=1253): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 11m39.549715788s ago: executing program 32 (id=1253): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 10m23.960125107s ago: executing program 2 (id=1527): r0 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x21}, [@printk={@p, {0x3, 0x3, 0x6}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {0x25, 0x0, 0xfff8}}]}, &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x24, 0x7, @val=@tcx={@void, @value=r4}}, 0xf) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000040)={0x2000}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x412400, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x4b4b4b4b}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f0000000400)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], r6, 0x0, '\x00', 0x7, 0x9}) 10m18.035724053s ago: executing program 2 (id=1550): syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0xf82, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140)='syzkaller\x00'}, 0x30) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000002000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000dab0490a5bd0feff8915e7112f8aed17eb3eff94b1aafbc137ef6aec09c035b75db1dd784c7328f83fd4706ddcd54b4d01903b66c316cac74e61e428cc2b05d924902b018f4242946dae0f323b69116361a805f66e360522"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="1efb00000000f8ff00000000bfa2000000000000ff023339c5ac50b20000f870ffffb703000008000000b70400000000010085000000a2b352c7a8cfc7158e630300", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x3, 0x1, 0x5, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x29, 0xa, 0x3) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000200), 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0, 0x20040000, 0x1}) r10 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000400)='!', 0x1}], 0x3) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 10m16.054645808s ago: executing program 2 (id=1556): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x20000000000001eb, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xa, '\x00', r0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x9, &(0x7f0000000080)={[0xffff]}, 0x8) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x1, 0x0) 10m15.030490214s ago: executing program 2 (id=1560): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x4, 0xc, 0xfffffffe, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000001280)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000000), &(0x7f0000000100)=@buf="18f3ba9bbc1c61de111a1bde54ba5d873b69bf180366f51bb2033ce0119d4f877e7883b9d33441a00f93174ce42342c3a1159081c56df0502ad431a4a0bdc013e834ca57e1e45aba8154e74763daa7909ff65d721d6eee8870d6f13793859748f20f52332653e29d252c531735ab132b281a3d75fe3bc68ab768fd55411272f56b4232dd3ed079471ec28e70ddb3d180e6bd575672e5d33fc4edd29b2163d5f9d704c057e688cdec9f9fda630a50a4eda2428d8e4a3199244e41253460bd7bab", 0x4}, 0x20) setpgid(0x0, r0) mount$bpf(0x0, 0x0, 0x0, 0x80000, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 10m14.043551274s ago: executing program 2 (id=1563): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) add_key$user(&(0x7f00000000c0), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000280)="fdda04e458fef0e7ae24e32f4bdeec837f25852ef4d741f503d6759a4df163498574d6e755149391973e76050c9a3c516851aa7c625b1fa94f19f793131c204a8e6fa2526660ae5503ca7bbdf0b90f507b36e77304433857d1d5deee64f1367e01f6bc36", 0x64, 0xfffffffffffffffd) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYRES32], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f, 0x0, 0x0, 0x55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x4, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="0500"]) r6 = syz_open_dev$video4linux(&(0x7f0000000140), 0x105, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f0000000200)={0x409a090a, 0x101, "eb38845cf6f2e168f59e5c708b4cddb9f54e0bd29a8afaea3096d9061a2df0c1", 0x10001, 0x1, 0x5, 0x8, 0x1000, 0xc, 0x400009, 0x8, [0x101, 0x2, 0x4, 0xe]}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000080)={0xea, 0x1, 0x3, "00040000000000000080001900", 0x30313953}) read(r1, 0x0, 0x5d) write$ppp(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x458, 0x7d, 0x3, {{0x500, 0x317, 0x4000, 0x0, {0x0, 0x0, 0x8}, 0xa0780000, 0x9, 0x0, 0x8, 0x1b, '\x04nodev{evoo~%9\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x260, 'u\xaf\xf5@\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1e\xe1,\xeaHY|fFF\xc9\xa7\x0f>I%3q\xc0B8wE\x8c\xe9C\xc5\xef\x03\xb9\x14e\x1f\xa3\xb8OAik\x90\x14\x16#\xd7\xc1CD\x190\xdf\xf2V\xf6\xe8\xd4\x83]\x9b;\xa5\xa7tKP\xbe \x96x7\x83&\x18OJ\xc3\xe0\xc3h\x1b\xb9Pu\xf3\x84}+s,\xd9\xbd\x96\xfb\x98M\x84\xe6\x9b\xa9\x92\'\x93\xd2c\x84\x86\xd6x\x0e\v\x85#e\xf08\xb0\f\x11\xc5\xd4Y\bC\xbcr\xa5\x9f\xa4\xa3s\x12\x9e28*\x15\xcfl\x88W\t\xfa\x1asD\x8d\x94\xde\x89e\x1e\xc2\x8c;\xdc\xc3\xd3\xb9Y\xbd~\xd0q\xabZ[\xe0\xfa)\x1c\xf1\x15\xab\xf0\x84\xc7\xbd\xfa\x15\f\xb8\xe4\xaa\xe2\xce\xbf\x98{\"H\x80kE\x9bZ_\xddZ\xa5\xbb\x90\xa5~\xe1\xf4\xe3TK\xd6\xd1\xb4\xca\x13yus\x80\x80\xc4hgJks\xa3\xdf(%n\a\x003!,\'{\x1d\xc1u\x81\xf4\xc6\xdd\xde\xf3\xaa\xe3\xadm\xca\xed\xf4\xf6\x7f\xdd7\x94\x83/\x89M\x10l\x9e\x8d\xfc\xd2c\xcc\t\xc0\\\x15\xe6\xc4\xbf\xb0\xdfmZ\xd6\a\xee\a\x05\xea\xcc\x8a \xaa\xfe\xfc\"\x88_\xb6\x1e\xf5{\xc8\f0T\x02t`\xf6G\xd1#\xd4\x8a_\xfcg8\xab\xe1\xc9@\t\x96xE-\xca\\\xc1v\xb6\xb6m\xcaV^\xe7\x83%\xb9!dn\xa0\xd8`\x0f\x1e/}\xfc\xd0`\xd4\xb7\xfe\xf2\xe0\xcd\xd3t^\x90\x9a\x14\xaa\x03W\x03\xe8m\xd9[<\x82O>{$\xfb(\x7f\xe8\xb3\xe3\x19w2\xf2c\x8a\xec\x8do\xa5\x9d\xa7\xc1D\xb3\xa1$[+5!\n\x0el:\xb2\x1e\xea#\xa4\xde#\xf2q\x8a\b\"\x8f\x12d\x8a\xf5\xb2\x9f\x91\xdb\"~z\xfa\x03M\xf1<_\xbf\x10k\x97\xa3\x00$\x84\xb4\xab\xbfqh\xc32\x183\xfe\xe63\x99\xad\x1e\xbb}\xd0{\xd7t\x8c\x83\x87\xf6\xd5\x04\xbf\xb9\x88,\x92\x8bA\x95\xba\xf7\xb85\xaap\x06\xe4\xb3\xd8\xb7Q\xec\xe4\x1f\xc8\x18\xbc^\xee\xe6\x972\xe2\x12\x91C\x00<,\x894\xb2\x04\x05\x04\xf7[y\n\xbf5\\Ag\xe5\xd8\xed?KF\xb6\'\xf0\xbb\x80:9\x00'/608, 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x458) 10m12.589736936s ago: executing program 2 (id=1567): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40488c0) 10m12.13327953s ago: executing program 33 (id=1567): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40488c0) 9m56.577698777s ago: executing program 6 (id=1568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={0x14, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) 9m56.381974014s ago: executing program 6 (id=1621): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x7000000) 9m55.065360859s ago: executing program 6 (id=1625): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000005e80)=ANY=[], 0x80}}, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f00000000c0), 0x2c8, 0x0) 9m53.816449234s ago: executing program 6 (id=1631): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={0x14, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) 9m52.538535958s ago: executing program 34 (id=1631): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={0x14, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) 9.978689793s ago: executing program 3 (id=3886): syz_usb_connect(0x2, 0x10e, &(0x7f0000000340)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e0100ffe5240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff0100042445ff20517ead1fc74d03794e7ae73282f67984f03545cc30147721749c5d411506d8a750dcaeb7ca2848b40dee07fe333c398c3c328b50eb174af9edaec04ac52251747d467e2932437d8440e1cb3f8598b0c92aa8377df76e7f6af9c853be35862a711c524326eb74379442cd0ca0fd7ff4fe7a133ce1ed414d4fa4fb1a6d30588c2c8e0aa531976b5f6a"], 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept$netrom(r1, &(0x7f0000000140)={{0x3, @default}, [@null, @null, @netrom, @netrom, @netrom, @rose, @remote, @netrom]}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x8014) 8.56806454s ago: executing program 4 (id=3895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f00000000c0), &(0x7f0000000100)=0x4) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff9}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) 7.179300958s ago: executing program 4 (id=3897): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) openat$rfkill(0xffffff9c, 0x0, 0x8080, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x2}]}, 0x10) sendmmsg(r1, &(0x7f0000007d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000008440)="294470a2", 0x4}], 0x1}}], 0x1, 0x44842) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f00000002c0)={0x20, 0x21, 0xfb, {0xfb, 0xb, "db41fd23bf9b760f0e0f1c3a0d7ccf2f3d49af3dfdc6d4f32b2a44718b56b943d19c2766dd8e924bcec955855ff0fb2d025368413f5aed3c4ecfebfe4db8dfab84e9439c7f0aae4b71b0d1a9a8169ac4406874f19600727a04598b7961e4a89cd04dbac6627a1ab30192de1588a7b8c163357df06e7ebe9c104be8c1b060aca8e64fa34642c36adc9f9db3691cb9146c3dfcb02561e39b53fc1190cdb313a2228ea84b51f105ad11c722151594e8cfd7e6a7c7542ecec5d7220854b47b9645096fc8ddfba7148703f743247324ad2d256e73f6dbf40b778926162960d9905e5199774d2a33eb91913c5b49455804e7008bc2a8dd4e9fbc676d"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "eda5849f"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf4, 0xd, 0x1, {0x22, 0x864}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x0, 0x1, 0x3b, "1b1498f66ea471b4cbb4ca6cdc8d59d04f70fd6ccfe54482e44d297e20965610ad528705faa36d028f4f862f4b65ab4653e9c4ce8202c186cd4518"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x1, 0xbc, "1bff8e1a0b522bb67df30df591a728b5a6b6004c652f0f79d00a9e7f7699fb6eaacda47ca4b1a4ff1c0a2bc514f4f76a6883aaf0b0fd124cac76d04d9290be964b7c412c0715c10d8059504da47c5fb95deb5f5b717a7371bacfdd7745015bbb3aa6a986425ae200c82a69d7e27bb8dd0bdf2fc9dc0d72fb6ae932ba7c6880a6ba760b0952cae94699b74be2668c830ae41d777f7056ce3558008119b4d7eada7fa973ce1686cc19989a5e53f19600d3e4ea09d6db08024399d40065"}, &(0x7f0000000580)={0x20, 0x3, 0x1}}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x24000040) write(0xffffffffffffffff, 0x0, 0x0) 6.783622446s ago: executing program 5 (id=3898): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f00000001c0)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000005c0)=@gcm_256={{0x303}, "c48f5db913a720e7", "d896436ae2e72b5955c578b8853f5f5b8f681bf8d021c2050c4723291b8a1de8", "eeaa5308", "bff332a8867c999d"}, 0x38) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r5, 0x400, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000040)) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r11, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x4, 0x9, 0x4, 0x2c, 0x7fffffff, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r11, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad0b19196c79eb5}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xbac9}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 6.1573875s ago: executing program 3 (id=3900): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000002044104d7a00000000000109022400010000200409040000010300020009210000000122030009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="002203000000bdb5b4"], 0x0}, 0x0) 5.147749887s ago: executing program 7 (id=3902): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_create(r3, &(0x7f0000000300)=@access={'system_u:object_r:fsadm_log_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x3}, 0x54) 4.840363088s ago: executing program 5 (id=3905): ioperm(0x0, 0x2, 0x7e) syz_usb_disconnect(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000740)=@urb_type_iso={0x0, {0x6}, 0x7ff, 0x20, &(0x7f0000000200)="2a5c208006fce72853d94175c0ad6e8e4bcc7de376be", 0x16, 0x8, 0x1, 0x5d, 0xfffffffa, 0x80000001, &(0x7f0000000400)="63bce7269781f1a8a80526f74a21a98596e456b74b06963358d2a0ec064a2a578319cefd63051f6c82badce87d6a1e72e57aec95f3596a80b15117f3b09faef3e950ae2a281e46491578627e40c4574c51eeab76dbe72ddc046f3cfea2f0f8212e9cc9dff5c252874e553c631e2921dc036720f00bdc9a4f68a0816795c4b868cd3dc895f47a9beaf5048774bfe26d236fb8488f4e130906b713cde3f41f48d12732e9d15ffb78d691e735a7dcebaa8533308a2ee6156932ac", [{0x8, 0x5, 0xfff}, {0x80, 0x8, 0x8}, {0x9, 0x0, 0x7}, {0xb, 0x0, 0x2}, {0x40, 0xe7, 0x3}, {0x9, 0x8, 0x8}, {0x4, 0x6, 0x5}, {0x6, 0x80000000, 0x200}, {0x8a, 0x400000, 0x9}, {0x5, 0x4, 0x1ff}, {0x1ff, 0x5, 0x5}, {0x8, 0x6, 0xee}, {0x5, 0x6, 0xfffffffa}, {0x3, 0x3, 0x1}, {0x32fc, 0x0, 0x5}, {0x2, 0x48, 0xb02}, {0x2, 0xb5}, {0x7fffffff, 0x8, 0x1}, {0x4, 0xfffffbff, 0x4}, {0x8, 0x400, 0x30}, {0x6, 0x6, 0x5}, {0x6, 0x7fffffff, 0xaf8}, {0xfffffffc, 0x3, 0x2}, {0x7fffffff, 0x9, 0x9}, {0x0, 0x5, 0xb39e}, {0x1e, 0x81, 0x7ff}, {0x1, 0x8, 0x200}, {0x90, 0xfffffffc, 0xffff}, {0x0, 0x8, 0xfffffffd}, {0x80, 0x7fff, 0x6}, {0x6, 0x1, 0x4}, {0x80, 0x80000001, 0x3}, {0x101, 0x1, 0x7fff}, {0xc, 0x81, 0x9}, {0xd, 0xffffffff, 0xa036c200}, {0x75, 0x80000000, 0x5}, {0x4, 0x9, 0x7}, {0x4, 0x0, 0xfffffff7}, {0x7ff, 0x8c3, 0xf}, {0x1, 0x7, 0x6}, {0x10001, 0x4, 0xffffffff}, {0xd70, 0x6, 0x400}, {0x4, 0x5, 0x3}, {0x9, 0x5}, {0x0, 0x5}, {0x0, 0x8, 0x1000}, {0xc5, 0x7f, 0x10001}, {0x6, 0x7fff, 0x80000001}, {0xf7, 0x0, 0x80000001}, {0x4, 0x3, 0x3}, {0x6, 0x9, 0x7}, {0x0, 0x101}, {0x4, 0x0, 0x2cb}, {0x6cb2, 0xe, 0x6}, {0x8, 0x7fffffff, 0x7}, {0x7, 0x6, 0x4}, {0x7fffffff, 0x8, 0x8000}, {0x7, 0x0, 0x1}, {0xed4c, 0xffff}, {0x5, 0x9, 0x4}, {0x9, 0x101, 0x7}, {0x0, 0x2, 0x9}, {0xff, 0x4, 0x18}, {0x0, 0x6, 0x7f}, {0x9, 0x0, 0xfab9a61}, {0x0, 0x1, 0x7}, {0xffffffff, 0x46, 0x7}, {0x1000, 0xffff, 0x25}, {0x9, 0x7, 0x5}, {0x100, 0xffff, 0xe}, {0x1, 0x2, 0x7}, {0x6, 0x4, 0x5}, {0x3, 0x4, 0x36b8fc8a}, {0x92, 0x10001, 0xf}, {0x2, 0xfffffff8, 0xcb7}, {0x9, 0x6, 0xb15}, {0x3, 0x1000, 0x8}, {0x10001, 0xe, 0xffff67cb}, {0x651417af, 0x2, 0x101}, {0x9, 0x3, 0x2}, {0x6, 0x5, 0x5}, {0xfffffff8, 0x9, 0x1}, {0x5, 0x4, 0xf6}, {0x6, 0x2, 0x7}, {0xdb, 0x4, 0x1ff}, {0x3, 0x1ff, 0x17}, {0x1, 0x1, 0x4}, {0x7, 0xfffffae6, 0x4}, {0x8, 0xf9c, 0x1}, {0xa, 0x1}, {0x1, 0x4, 0x80000001}, {0x6c, 0x4, 0xffffac52}, {0x2e23, 0xfffffffb, 0x9}]}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r2 = socket(0x11, 0x800000003, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x60602) socket$rds(0x15, 0x5, 0x0) r7 = accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x40, @loopback, 0x6}, 0x1c) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f0000000300)={0x40000000, 0x6, "3f9dfddc589a8f8084d220515d36e0234e8f1cfef21ea9364aa4084105fa66e8", 0x406d5d66, 0x5, 0x2, 0x1, 0x401, 0x7c, 0x9, 0x9, [0x80, 0x2, 0x3, 0x3ff]}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="150626bd7000ffdbdf252a000000060006000300000008000200", @ANYRES32=r5, @ANYBLOB="050037000000000008002f00000000000c0005000000000000000000050036000000000006000400feff0000e2913ebe2d6e40b25bc1c2247f5436ce361017f28175d30bb2de28fc018000e4875b4c12e5788b0fd32cb1f7f7de628d00f186e2b2f63ce99be3df4c69bb429a741f78e5b6473d1d783fb759527801c5e61018bd3019baebadb6a8a3656b0aa47bbd837b7ae5c92fc5da15d49eebfac30e10d84e8e7f0feca913bca58fe75e2c14a03fb60f9ae7b6bb7eff"], 0x50}, 0x1, 0x2000000, 0x0, 0x801}, 0xc040) chroot(0x0) 3.531589358s ago: executing program 4 (id=3908): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40202, 0xa0) r1 = eventfd(0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000240)={0x3, r1}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4, 0x2000, 0x7, 0x0, 0x0, 0xf0ec, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=@delpolicy={0x78, 0x14, 0x10, 0x70bd2c, 0x25dfdbfb, {{@in6=@mcast1, @in6=@private0, 0x4e23, 0x4, 0x4e22, 0x9, 0x2, 0x0, 0x80, 0x87}, 0x6e6bb7, 0x2}, [@address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x25}, @in=@remote, 0xa, 0x3a, 0x3}}]}, 0x78}}, 0x4000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) unshare(0x6020480) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={0x0, r6}, 0x18) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r7}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r8}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYRES64=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 3.53110675s ago: executing program 7 (id=3909): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000900000000000000000000000000000080000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000729200004bb6876b800e3ba35b8a9d24a0ae8006861e056270abb6b5502aaf132742437fb713ba45181ab273e8995d72ef2eca4baf27881e7c4883de516251019c57388fbce08ee730b1b1f4ea2d5adcc21ae32da6333e49593e3a3435238ea4aad5", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xae4a58c703879f63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d047008476100000001090212"], 0x0) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x1cb, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_io_uring_setup(0x7a0, &(0x7f0000000200)={0x0, 0x7067, 0x0, 0x2}, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) writev(r5, &(0x7f0000000940)=[{&(0x7f00000005c0)="a987520bf9f16a8355b3595bf35962ac7630e8b0119b2ba8732c96b15d2f1ee1715119cd09b090677bc2d31877e427881cc318cbeef6fb343715f3f0e809c3cadf", 0x41}, {&(0x7f0000000640)="0647205eacc98881dc101128631dd056840ac778f9bb9192687f1d1c78da406d7047d5aa6e598d6711e715f7cbe0f64f1675a8558fe57ac5c1b61d1a77d0b2b57c67fff1d8f2e92444096b8b5b19ae9cb893a6d3ba32213923667cc08d03f0f9ea936c7b7e90e746d37f70840edb5814dfecfcddd88ebaf63f23f58c01c82ae6fc2d8c80c3", 0x85}, {&(0x7f0000000700)="e9aa83863b3d2cf1c7e415bf02a2ddfaf18c68e4028d7d844d7fc811c77fcdf3e9925ccfab23ee9e1714f47960d0fa5d058d978c660b6ee5781d54cef5b7161007324e7f9cd6eb7acab8c60432afa21ff988ba2d7a4984eaf04d35101316988f6784859007e68c2da71117862f098e8e0d51d2e5a6623bf53b8ed955b4ae3bc3669379688a2bd728352f5533face1bfa6c0e98", 0x93}, {&(0x7f00000007c0)}, {&(0x7f00000008c0)="ce5d5fa979772c0fec6dd422efdc36d119a0b3abe6532a0f53cfbb0ee0f9a02bfd41067457ad93d2583d6e8d8dc9654970ba0f542d7d373c4bce8a37600d1842e49312f7c2a2cc421c1bc6855d0f1a570145d2c8515830441970c03fadad79516bca7d21b66e1e18146d60d7963e03cebb784ee3cfceff13", 0x78}], 0x5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x7fffffd, 0xb877, 0x0, 0xfffffe6f, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d322dcfe222fceda9fad90e366bfb9b1bcd5c825dfbb86"], 0x42c}, 0x1, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x40086603, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@initdev, 0x0}, &(0x7f0000000440)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000580), 0x4) sendmmsg$inet(r8, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="dd6e9332c67a41fb9e48eb0a6efa93a4c50ac0398c35cc15cd493685fe2bef14e8da24826a320db90536419102c953d8b007e54e1c3dd4362ab00bc7e77889f28f4136e205e1044b44cd176c05863867bd32ec6442cdc45f83ad1304195145ba2676fa24e62b8ec2", 0x68}, {&(0x7f00000002c0)="b3aaa49ba30109462b9cdd5ff8e82c6aea2f9f48f7e91497dd86c31cc1673049d0e483601d2e6bf486a946697b29afc1eb408161e5c00b8de9a88668f48b1769cedd4634a63352b7728766a4173527b75b6f04d4db2277bc4f818aa1e11827ff65bc79c0c9670fd0d8d7ff3c984a18902257c5fd25de5ce4ee6afd49b30276f71ef2e101", 0x84}, {&(0x7f0000000180)="88ecdf2013f7f60ba19703a57b1be0b097cb55b6e9f239eed31c8fd148769e1a0234c09d", 0x24}, {&(0x7f00000001c0)="5a3a9531dcbb9c768162", 0xa}], 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="ac1414aae0000002000000001c0000009118105a3fc9cc858d65e115", @ANYRES32=r11, @ANYBLOB="7f0000016401010000000000140000000000000000000000010000000300000000000000280000000000000000000000070000000717cce0000002ac1414bbffffffff7f0000016401010000140000000000000000000000010000000400000000000000"], 0x98}}], 0x1, 0x800) 2.996461961s ago: executing program 5 (id=3910): syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000008100000008004500005c00000000002f907800000000e0adc124de47126891aa2ab16cb400000124806558000000001000080000000000000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000e62324e4903f14dcb6f59f4ad54735da4112b8cd11729e276a9cac1ead7c525146481f90972e28b4ca9f5bcf13d008d1e0665146c38884d540e41727acf79a8f7729cbd0fec270e57d8067b089f6177e49217c36e259ab6e4d62184bf562b58201181ec0c34cccc79d87ff27c2ba7f19e5245ff8c8608d4567f578a371aed0680a23"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0xfffffffffffffdc8, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}, 0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x5, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) (async, rerun: 64) write(0xffffffffffffffff, &(0x7f0000000140)="0259473bb7c011", 0x7) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0x600}, @val={0x0, 0x5, 0xe, 0x7, 0x2, 0x7}, @x25={0x2, 0x4, 0x1, "e5b192eb5045782de4dee30df6b19afeb1371be56f22ccc4416e1d167325d23914804569ce14a22eb457831a3c9975b25e7a97387750780bf4f16d34fbd842646024bd7a84c53a1dfcd24b8847f39583d530b245e700354717163a88c05bd14633528b431e5a3594d63688004fbbc4fece50300d6a1a9a045cc52e581ff6bc1e6a40281fddc16f489b700838df08b0c88d68"}}, 0xa3) (rerun: 64) 2.704217879s ago: executing program 0 (id=3911): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_ethernet(0xe6, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[]) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x2) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r7, 0x0, 0x2) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x20, 0x4) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101c84, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.579626287s ago: executing program 4 (id=3912): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000580)=ANY=[@ANYRES8=r0], 0x101000) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r2, 0x8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x407) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f06ebbee8, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0xfffffe94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b90a00000044268cb89e14f086dd", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000f00), 0x13f}}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02ebd11e3b000000c790236e0004000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pread64(r8, &(0x7f0000000740)=""/178, 0xb2, 0x7) syz_open_dev$video4linux(0x0, 0x7f, 0x80) 2.559856433s ago: executing program 0 (id=3913): timer_create(0x5, &(0x7f0000000000)={0x0, 0x2f}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000f8ffffffffffffff000000020000000000"], 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000100)) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000004) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r3], 0x38}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES16=r4], 0x70}}, 0x24004801) sendmmsg(r3, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2004) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00'}, 0x18) 2.406027013s ago: executing program 0 (id=3914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents(r1, &(0x7f0000000280)=""/4097, 0x1001) 2.355659192s ago: executing program 7 (id=3915): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r1, &(0x7f0000001f80)=[{{&(0x7f0000000300)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000640)=""/54, 0x36}, {&(0x7f0000000680)=""/19, 0x13}, {&(0x7f00000006c0)=""/5, 0x5}, {&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f00000007c0)=""/53, 0x35}], 0x6, &(0x7f0000000880)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f00000008c0)=""/109, 0x6d}, {&(0x7f0000000940)=""/232, 0xe8}], 0x3, &(0x7f0000000a80)=""/158, 0x9e}, 0xc91}, {{&(0x7f0000000b40)=@caif, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/203, 0xcb}], 0x1, &(0x7f0000000d00)=""/194, 0xc2}, 0x7}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000e00)=""/79, 0x4f}, {&(0x7f0000000e80)=""/4, 0x4}], 0x2}, 0x7}], 0x4, 0x40000001, &(0x7f0000002080)={0x0, 0x989680}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x19) ioctl$TCFLSH(r7, 0x40085500, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r8], 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r4, @ANYBLOB="000425bd7000fddbdf254400000043000300", @ANYRES32=r8, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x60000010}, 0x1) 2.310883266s ago: executing program 0 (id=3916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xe0fe) 2.16794899s ago: executing program 0 (id=3917): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100880000ff74338c7012896eeeb05fa03469ac301ded10405cf196b0e32874bd22611300ae98058b83f341857cadb0a7359b76e7890e7a215f69c4ef6f852f281a8be6ef4a51a324de73341b96c1596b07ffe95c9147d8f26439bb84cc3531a118fd1ac5065baecc8f1b8d8e014e51b4f09c380e4ff75dcddf000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000200"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000000), &(0x7f0000000100)=""/7}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02004000000000010000000080218d09", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) 2.164326947s ago: executing program 3 (id=3918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) (fail_nth: 3) 2.063755372s ago: executing program 5 (id=3919): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_create(r3, &(0x7f0000000300)=@access={'system_u:object_r:fsadm_log_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x3}, 0x54) 2.012193121s ago: executing program 3 (id=3920): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) r3 = socket(0x23, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) socket$netlink(0x10, 0x3, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={0x0, 0x200, 0x1, [0x7, 0x587, 0xb949, 0xc617, 0x1], [0x506c, 0x401, 0x3, 0x40000, 0x3, 0x3, 0x4, 0x8, 0xc0000, 0x0, 0x4c3c, 0x400, 0x2, 0x0, 0x2, 0x1, 0x9, 0xb, 0xafb, 0xfffffffffffffff0, 0x6101bc6, 0x200, 0x8, 0x1, 0x81, 0x7, 0xc8, 0x7, 0x3, 0x8, 0x0, 0xe281, 0x7, 0x1, 0x14000000, 0x7, 0x10001, 0x7, 0x3, 0x4, 0x6, 0x10, 0xff, 0x2ad, 0x3, 0x10000, 0xfb, 0x8000000000000001, 0x200000000000, 0xe, 0x3, 0x4, 0x1000, 0xffff, 0x9f, 0x7, 0xf71, 0x8, 0x4, 0xdf, 0x94d5, 0x8000, 0x3ff, 0x4, 0x1, 0xffffffffffff0001, 0x100000000, 0x17b1, 0x337ebb37, 0x5, 0x4, 0x180000000000, 0xfffffffffffffffb, 0x9, 0x7fff, 0x8, 0x8, 0xfff, 0x3, 0x0, 0x6, 0x0, 0x6, 0x9, 0x100000001, 0x80000000, 0x9, 0x3ff, 0x7ff, 0x10001, 0x44, 0x9, 0x0, 0x3, 0x2, 0x9, 0x243, 0x6, 0x0, 0x9, 0xfff, 0xffff, 0x0, 0x7, 0x101, 0x5, 0x3, 0x4, 0x80, 0x7, 0x5, 0xab83, 0x10001, 0x1, 0x8, 0x8000000000000001, 0x5, 0x29, 0x10001, 0x5, 0x9]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000004c0)={0x0, 0xf11a, 0x0, [0x3, 0x7, 0x3ff, 0x4, 0x8], [0x8000000000000001, 0x2, 0xac9, 0x9, 0x7, 0x1d113a77, 0x540c, 0x7fffffff, 0x7, 0x1ff, 0x4, 0xb4, 0x3, 0x6, 0x4, 0x7, 0x3, 0x5, 0x9, 0x100000001, 0x1000, 0x0, 0x5, 0xfffffffffffffffb, 0x1000, 0x3, 0x9, 0xa5c, 0x7ff, 0x2, 0xd2c, 0x7f, 0x2, 0x1000000000, 0xfffffffffffffc00, 0x3, 0xffffffffffffffff, 0xff, 0x400, 0x101, 0x7, 0x45b2, 0x8, 0x2, 0x8, 0x6, 0x1, 0x80000000, 0x6, 0x8, 0x7, 0xa02, 0x7fff, 0xb, 0x6, 0x4, 0x7, 0x3, 0x5, 0xfffffffffffffff8, 0x0, 0x8000, 0xffffffffffffffff, 0xccbd, 0x1, 0xd032, 0x8, 0x5, 0x8000000000000000, 0x2, 0x5, 0x3, 0x9, 0x9d, 0x5, 0x8000000000000000, 0x4, 0x5a3b4777, 0x3, 0x800, 0x7, 0x7, 0x0, 0x80000001, 0x8, 0x4, 0x1, 0xfffffffffffffffc, 0x7, 0x95d, 0x8000000000000000, 0xaa23, 0x81, 0x5, 0x8, 0x80, 0x9fd5, 0x0, 0x5, 0x0, 0x800, 0x9, 0x91bf, 0x7ff, 0x8922, 0x9, 0x0, 0x3, 0x800, 0x20000000000508b, 0x7, 0x2, 0x80, 0x24ff, 0xa65, 0x0, 0x2, 0x8254, 0x3, 0x3, 0x8000000000000001]}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000900)={0x14, 0x0, {0x8, @usage=0x10000, 0x0, 0x8, 0x3, 0x5, 0x9, 0x0, 0x80, @struct={0x7, 0x4}, 0x492d556d, 0x6, [0x4ef, 0xfffffffffffffff9, 0x10001, 0xff, 0x100000001, 0x2]}, {0x9, @struct={0x9}, r5, 0x7fffffff, 0x0, 0x84, 0x0, 0x2, 0xa1, @usage=0x725, 0x2, 0x7ff, [0x3000, 0x8, 0xfffffffffffffff7, 0x8, 0xff, 0x4]}, {0x100, @struct={0x8, 0x2}, r6, 0x6, 0x8, 0x1000, 0xe23, 0x8001, 0x92, @struct={0x3, 0x8}, 0x6, 0x2, [0x10, 0xffffffffffffffff, 0x30, 0xfffffffffffffffc, 0xe, 0x3]}, {0x8, 0x401, 0x325}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) getsockname$packet(r7, 0x0, 0x0) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) 1.56441156s ago: executing program 4 (id=3921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.500605977s ago: executing program 0 (id=3922): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x13) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r3}, 0x38) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000100)=0x16) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0xf8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0xc, 0x1, 0x4, 0x1], 0x0, 0x5}, {0x2, [0x2, 0x4, 0x7, 0x0, 0x1, 0x7], 0x6, 0x1}}}}, {{@ip={@local, @multicast2, 0xffffff00, 0xffffffff, 'veth0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x84, 0x3, 0x2}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@addrtype={{0x30}, {0x800, 0x1, 0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xa, 0x80, '\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020300000009210000010122290a090581ff"], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r6, 0x401) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast2, 0x0, 0x0, 'wrr\x00', 0x30, 0x3, 0x4e}, 0x2c) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r7) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) 1.326014263s ago: executing program 7 (id=3923): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045438, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) r3 = socket(0x2a, 0x2, 0xfffffffe) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/112, 0x228000, 0x800, 0x2, 0x3}, 0x20) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x30) 1.32415794s ago: executing program 3 (id=3924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0x80d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) r4 = socket(0x23, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={0x0, 0x200, 0x1, [0x7, 0x587, 0xb949, 0xc617, 0x1], [0x506c, 0x401, 0x3, 0x40000, 0x3, 0x3, 0x4, 0x8, 0xc0000, 0x0, 0x4c3c, 0x400, 0x2, 0x0, 0x2, 0x1, 0x9, 0xb, 0xafb, 0xfffffffffffffff0, 0x6101bc6, 0x200, 0x8, 0x1, 0x81, 0x7, 0xc8, 0x7, 0x3, 0x8, 0x0, 0xe281, 0x7, 0x1, 0x14000000, 0x7, 0x10001, 0x7, 0x3, 0x4, 0x6, 0x10, 0xff, 0x2ad, 0x3, 0x10000, 0xfb, 0x8000000000000001, 0x200000000000, 0xe, 0x3, 0x4, 0x1000, 0xffff, 0x9f, 0x7, 0xf71, 0x8, 0x4, 0xdf, 0x94d5, 0x8000, 0x3ff, 0x4, 0x1, 0xffffffffffff0001, 0x100000000, 0x17b1, 0x337ebb37, 0x5, 0x4, 0x180000000000, 0xfffffffffffffffb, 0x9, 0x7fff, 0x8, 0x8, 0xfff, 0x3, 0x0, 0x6, 0x0, 0x6, 0x9, 0x100000001, 0x80000000, 0x9, 0x3ff, 0x7ff, 0x10001, 0x44, 0x9, 0x0, 0x3, 0x2, 0x9, 0x243, 0x6, 0x0, 0x9, 0xfff, 0xffff, 0x0, 0x7, 0x101, 0x5, 0x3, 0x4, 0x80, 0x7, 0x5, 0xab83, 0x10001, 0x1, 0x8, 0x8000000000000001, 0x5, 0x29, 0x10001, 0x5, 0x9]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000004c0)={0x0, 0xf11a, 0x0, [0x3, 0x7, 0x3ff, 0x4, 0x8], [0x8000000000000001, 0x2, 0xac9, 0x9, 0x7, 0x1d113a77, 0x540c, 0x7fffffff, 0x7, 0x1ff, 0x4, 0xb4, 0x3, 0x6, 0x4, 0x7, 0x3, 0x5, 0x9, 0x100000001, 0x1000, 0x0, 0x5, 0xfffffffffffffffb, 0x1000, 0x3, 0x9, 0xa5c, 0x7ff, 0x2, 0xd2c, 0x7f, 0x2, 0x1000000000, 0xfffffffffffffc00, 0x3, 0xffffffffffffffff, 0xff, 0x400, 0x101, 0x7, 0x45b2, 0x8, 0x2, 0x8, 0x6, 0x1, 0x80000000, 0x6, 0x8, 0x7, 0xa02, 0x7fff, 0xb, 0x6, 0x4, 0x7, 0x3, 0x5, 0xfffffffffffffff8, 0x0, 0x8000, 0xffffffffffffffff, 0xccbd, 0x1, 0xd032, 0x8, 0x5, 0x8000000000000000, 0x2, 0x5, 0x3, 0x9, 0x9d, 0x5, 0x8000000000000000, 0x4, 0x5a3b4777, 0x3, 0x800, 0x7, 0x7, 0x0, 0x80000001, 0x8, 0x4, 0x1, 0xfffffffffffffffc, 0x7, 0x95d, 0x8000000000000000, 0xaa23, 0x81, 0x5, 0x8, 0x80, 0x9fd5, 0x0, 0x5, 0x0, 0x800, 0x9, 0x91bf, 0x7ff, 0x8922, 0x9, 0x0, 0x3, 0x800, 0x20000000000508b, 0x7, 0x2, 0x80, 0x24ff, 0xa65, 0x0, 0x2, 0x8254, 0x3, 0x3, 0x8000000000000001]}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000900)={0x14, 0x0, {0x8, @usage=0x10000, 0x0, 0x8, 0x3, 0x5, 0x9, 0x0, 0x80, @struct={0x7, 0x4}, 0x492d556d, 0x6, [0x4ef, 0xfffffffffffffff9, 0x10001, 0xff, 0x100000001, 0x2]}, {0x9, @struct={0x9}, r6, 0x7fffffff, 0x0, 0x84, 0x0, 0x2, 0xa1, @usage=0x725, 0x2, 0x7ff, [0x3000, 0x8, 0xfffffffffffffff7, 0x8, 0xff, 0x4]}, {0x100, @struct={0x8, 0x2}, r7, 0x6, 0x8, 0x1000, 0xe23, 0x8001, 0x92, @struct={0x3, 0x8}, 0x6, 0x2, [0x10, 0xffffffffffffffff, 0x30, 0xfffffffffffffffc, 0xe, 0x3]}, {0x8, 0x401, 0x325}}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) 527.620559ms ago: executing program 4 (id=3925): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000900000000000000000000000000000080000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000729200004bb6876b800e3ba35b8a9d24a0ae8006861e056270abb6b5502aaf132742437fb713ba45181ab273e8995d72ef2eca4baf27881e7c4883de516251019c57388fbce08ee730b1b1f4ea2d5adcc21ae32da6333e49593e3a3435238ea4aad5", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xae4a58c703879f63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d047008476100000001090212"], 0x0) socket$inet6(0xa, 0x80002, 0x88) syz_emit_ethernet(0x1cb, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_io_uring_setup(0x7a0, &(0x7f0000000200)={0x0, 0x7067, 0x0, 0x2}, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) writev(r5, &(0x7f0000000940)=[{&(0x7f00000005c0)="a987520bf9f16a8355b3595bf35962ac7630e8b0119b2ba8732c96b15d2f1ee1715119cd09b090677bc2d31877e427881cc318cbeef6fb343715f3f0e809c3cadf", 0x41}, {&(0x7f0000000640)="0647205eacc98881dc101128631dd056840ac778f9bb9192687f1d1c78da406d7047d5aa6e598d6711e715f7cbe0f64f1675a8558fe57ac5c1b61d1a77d0b2b57c67fff1d8f2e92444096b8b5b19ae9cb893a6d3ba32213923667cc08d03f0f9ea936c7b7e90e746d37f70840edb5814dfecfcddd88ebaf63f23f58c01c82ae6fc2d8c80c3", 0x85}, {&(0x7f0000000700)="e9aa83863b3d2cf1c7e415bf02a2ddfaf18c68e4028d7d844d7fc811c77fcdf3e9925ccfab23ee9e1714f47960d0fa5d058d978c660b6ee5781d54cef5b7161007324e7f9cd6eb7acab8c60432afa21ff988ba2d7a4984eaf04d35101316988f6784859007e68c2da71117862f098e8e0d51d2e5a6623bf53b8ed955b4ae3bc3669379688a2bd728352f5533face1bfa6c0e98", 0x93}, {&(0x7f00000007c0)="1a62155e012b17e274281f8d1b3caf973fbf2aa7d86ba91fc466a6011a9cf54c54ee98dec0acaedc591257fba68c3b9450ba25741c87cfae67085e97dc90dd22cc61020527fbdc8baf9450435ebcfe965e74a2a3757641970153c1be3169255115f53b0a8488d6636b5232361a0504256bb07c239cdcd4e6", 0x78}, {&(0x7f00000008c0)="ce5d5fa979772c0fec6dd422efdc36d119a0b3abe6532a0f53cfbb0ee0f9a02bfd41067457ad93d2583d6e8d8dc9654970ba0f542d7d373c4bce8a37600d1842e49312f7c2a2cc421c1bc6855d0f1a570145d2c8515830441970c03fadad79516bca7d21b66e1e18146d60d7963e03cebb784ee3cfceff13", 0x78}], 0x5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x4, 0x4007, @fd_index=0x7fffffd, 0xb877, 0x0, 0xfffffe6f, 0x0, 0x1}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d322dcfe222fceda9fad90e366bfb9b1bcd5c825dfbb86"], 0x42c}, 0x1, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x3f70, 0x0, 0x0, 0x0, 0x0) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r7, 0x40086603, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@initdev, 0x0}, &(0x7f0000000440)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000580), 0x4) sendmmsg$inet(r8, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="dd6e9332c67a41fb9e48eb0a6efa93a4c50ac0398c35cc15cd493685fe2bef14e8da24826a320db90536419102c953d8b007e54e1c3dd4362ab00bc7e77889f28f4136e205e1044b44cd176c05863867bd32ec6442cdc45f83ad1304195145ba2676fa24e62b8ec2", 0x68}, {&(0x7f00000002c0)="b3aaa49ba30109462b9cdd5ff8e82c6aea2f9f48f7e91497dd86c31cc1673049d0e483601d2e6bf486a946697b29afc1eb408161e5c00b8de9a88668f48b1769cedd4634a63352b7728766a4173527b75b6f04d4db2277bc4f818aa1e11827ff65bc79c0c9670fd0d8d7ff3c984a18902257c5fd25de5ce4ee6afd49b30276f71ef2e101", 0x84}, {&(0x7f0000000180)="88ecdf2013f7f60ba19703a57b1be0b097cb55b6e9f239eed31c8fd148769e1a0234c09d", 0x24}, {&(0x7f00000001c0)="5a3a9531dcbb9c768162", 0xa}], 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="ac1414aae0000002000000001c0000009118105a3fc9cc858d65e115", @ANYRES32=r11, @ANYBLOB="7f0000016401010000000000140000000000000000000000010000000300000000000000280000000000000000000000070000000717cce0000002ac1414bbffffffff7f0000016401010000140000000000000000000000010000000400000000000000"], 0x98}}], 0x1, 0x800) 143.90887ms ago: executing program 7 (id=3926): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents(r1, &(0x7f0000000280)=""/4097, 0x1001) 99.043091ms ago: executing program 3 (id=3927): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf251300000008000300", @ANYRES32=r1, @ANYBLOB="0600b500040000000000000006001200000000000500e40280000000"], 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000001000010856000000fbdbdf25000000f0318a98244c4229313cd7df47011faf0c0600000000a149ee842f5ca3e9982f3d0ea988172d20b31ef079b6fee480b674949f9f9290658e6cf424bd18cea79e0dafffffffffeabf43327700"/111, @ANYRESDEC=r1, @ANYRESDEC=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x880) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000019000100ffffffff00000000e00000020000000000000000000000000000000000000000000000000000000000000000000400000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000800000000000000000000000000000000000000000000000000000000000000fbffffffff01ffff00000000000000000000000000000000e7000000000000000000000000000000000000000000000000010000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000600)={0x1, &(0x7f0000000300)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000780)={r6, 0x5, &(0x7f0000000640)=[0x0, 0x7, 0x1, 0x4, 0x146b7ad7], &(0x7f00000006c0)=[0x2, 0x1, 0x89, 0x9, 0x2, 0x800], 0x20, 0x2, 0x8, &(0x7f0000000700)=[0x4, 0x5], &(0x7f0000000740)=[0x1a5, 0x921]}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000380)=@abs, 0x6e) r8 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r8, 0x0, 0x0, 0xfe49, 0x0) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r9, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) 88.497923ms ago: executing program 5 (id=3928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x4, 0x0, &(0x7f0000001580)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 26.859672ms ago: executing program 7 (id=3929): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3f2) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7f0, 0xf000, 0x0, r2, 0x9}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$video4linux(&(0x7f0000000300), 0x2, 0x428280) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$bind(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2080, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x2016010, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1]) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800490000240000000000879078ac1414bbac1414358907efe0ef0001860600000000000000"], 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120104009d6fce202505882843d00000000109021b000100000000090400"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0\x00') 0s ago: executing program 5 (id=3930): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') io_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x4000000, &(0x7f0000001980)={[{@index_on}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd27, 0x25dedbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff2}, {0x7, 0xfff3}}}, 0x24}}, 0x24040084) futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x1) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/46, 0x2e}, {0x0}, {0x0}, {0x0}], 0x4, 0x0, 0x4000) (fail_nth: 2) kernel console output (not intermixed with test programs): 000000246 R12: 0000000000000001 [ 1084.537166][T18490] R13: 0000000000000000 R14: 00007f22987b5fa0 R15: 00007ffca13c63e8 [ 1084.537185][T18490] [ 1084.537239][T18490] netlink: 'syz.3.3441': attribute type 8 has an invalid length. [ 1084.948622][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 1084.948640][ T30] audit: type=1400 audit(1750178243.510:24759): avc: denied { prog_load } for pid=18465 comm="syz.0.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1084.985021][ T30] audit: type=1400 audit(1750178243.510:24760): avc: denied { bpf } for pid=18465 comm="syz.0.3436" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1085.031066][ T30] audit: type=1400 audit(1750178243.510:24761): avc: denied { perfmon } for pid=18465 comm="syz.0.3436" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1085.285368][ T30] audit: type=1400 audit(1750178243.510:24762): avc: denied { prog_run } for pid=18465 comm="syz.0.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1085.335678][T18469] syz.0.3436: attempt to access beyond end of device [ 1085.335678][T18469] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1085.436189][ T30] audit: type=1400 audit(1750178243.540:24763): avc: denied { map_create } for pid=18499 comm="syz.4.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1085.536333][ T30] audit: type=1400 audit(1750178243.540:24764): avc: denied { bpf } for pid=18499 comm="syz.4.3445" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1085.837876][ T5890] usb 1-1: USB disconnect, device number 91 [ 1085.843642][ T30] audit: type=1400 audit(1750178243.540:24765): avc: denied { map_read map_write } for pid=18499 comm="syz.4.3445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1085.877131][ T30] audit: type=1400 audit(1750178243.620:24766): avc: denied { allowed } for pid=18498 comm="syz.7.3443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1085.957378][ T30] audit: type=1400 audit(1750178243.620:24767): avc: denied { create } for pid=18498 comm="syz.7.3443" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1085.979088][ T1604] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1086.027138][ T30] audit: type=1400 audit(1750178243.620:24768): avc: denied { map } for pid=18498 comm="syz.7.3443" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1086.157308][ T1604] usb 5-1: Using ep0 maxpacket: 8 [ 1086.172779][ T1604] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1086.188616][ T1604] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.242197][ T1604] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1086.262033][ T1604] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1086.287254][ T1604] usb 5-1: Product: syz [ 1086.291497][ T1604] usb 5-1: Manufacturer: syz [ 1086.320107][ T1604] usb 5-1: config 0 descriptor?? [ 1086.527568][ T5890] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1086.557184][ T1604] usb 5-1: USB disconnect, device number 86 [ 1086.687661][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 1086.700004][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.734640][ T5890] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1086.754094][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.776267][ T5890] usb 4-1: config 0 descriptor?? [ 1087.251586][ T5890] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 1087.272225][ T5890] mcp2221 0003:04D8:00DD.0034: unknown main item tag 0x0 [ 1087.280408][T10851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1087.306127][ T5890] mcp2221 0003:04D8:00DD.0034: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1087.515115][ C0] usb 4-1: input irq status -75 received [ 1087.822945][ T1604] usb 4-1: USB disconnect, device number 82 [ 1088.597788][T18539] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 1088.650977][T18540] syz_tun: entered allmulticast mode [ 1088.897633][T18544] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3459'. [ 1089.374148][T18553] netlink: 'syz.0.3460': attribute type 4 has an invalid length. [ 1090.015010][ T30] kauditd_printk_skb: 164 callbacks suppressed [ 1090.015026][ T30] audit: type=1400 audit(1750178248.567:24933): avc: denied { read write } for pid=15041 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1090.194419][T18558] trusted_key: encrypted_key: key user:syz not found [ 1090.202263][ T30] audit: type=1400 audit(1750178248.607:24934): avc: denied { read write } for pid=18548 comm="syz.3.3461" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1090.269972][ T30] audit: type=1400 audit(1750178248.607:24935): avc: denied { open } for pid=18548 comm="syz.3.3461" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1090.366183][ T30] audit: type=1400 audit(1750178248.607:24936): avc: denied { ioctl } for pid=18548 comm="syz.3.3461" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1090.423941][ T30] audit: type=1400 audit(1750178248.617:24937): avc: denied { read write open } for pid=15041 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1090.479518][ T30] audit: type=1400 audit(1750178248.617:24938): avc: denied { ioctl } for pid=15041 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1090.566243][ T30] audit: type=1400 audit(1750178248.637:24939): avc: denied { prog_load } for pid=18548 comm="syz.3.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1090.656549][T18568] lo speed is unknown, defaulting to 1000 [ 1090.699212][ T30] audit: type=1400 audit(1750178248.637:24940): avc: denied { bpf } for pid=18548 comm="syz.3.3461" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1090.729882][ T30] audit: type=1400 audit(1750178248.637:24941): avc: denied { map_create } for pid=18556 comm="syz.5.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1090.749738][ T30] audit: type=1400 audit(1750178248.637:24942): avc: denied { map_read map_write } for pid=18556 comm="syz.5.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1091.154915][ T5881] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1091.343738][ T5881] usb 1-1: config 0 has no interfaces? [ 1091.414297][ T5881] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1091.448835][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1091.487211][ T5881] usb 1-1: Product: syz [ 1091.517439][ T5881] usb 1-1: Manufacturer: syz [ 1091.540370][ T5881] usb 1-1: SerialNumber: syz [ 1091.581776][ T5881] usb 1-1: config 0 descriptor?? [ 1091.716347][ T10] hid-generic 0007:0005:0009.0035: unknown main item tag 0x1 [ 1091.723885][ T10] hid-generic 0007:0005:0009.0035: unknown main item tag 0x3 [ 1091.734226][ T10] hid-generic 0007:0005:0009.0035: hidraw0: HID v0.08 Device [syz1] on syz1 [ 1092.302030][T18590] syz_tun: entered allmulticast mode [ 1093.021418][T18580] Invalid ELF header magic: != ELF [ 1093.124194][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1093.177743][T18597] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1093.385776][T18588] SELinux: failed to load policy [ 1093.652488][ T5890] usb 1-1: USB disconnect, device number 92 [ 1093.729830][T18613] pim6reg14: entered allmulticast mode [ 1094.009722][T18630] netlink: 'syz.0.3483': attribute type 39 has an invalid length. [ 1094.181256][ T5943] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1094.774019][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.785383][ T5943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.795463][ T5943] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1094.804781][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.852342][ T5943] usb 5-1: config 0 descriptor?? [ 1095.021985][ T30] kauditd_printk_skb: 241 callbacks suppressed [ 1095.022007][ T30] audit: type=1400 audit(1750178253.565:25184): avc: denied { create } for pid=18646 comm="syz.3.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1095.132053][T18647] lo speed is unknown, defaulting to 1000 [ 1095.192005][ T30] audit: type=1400 audit(1750178253.565:25185): avc: denied { map_create } for pid=18646 comm="syz.3.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1095.211916][ T30] audit: type=1400 audit(1750178253.565:25186): avc: denied { bpf } for pid=18646 comm="syz.3.3488" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1095.233011][ T30] audit: type=1400 audit(1750178253.565:25187): avc: denied { map_read map_write } for pid=18646 comm="syz.3.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1095.253320][ T30] audit: type=1400 audit(1750178253.565:25188): avc: denied { prog_load } for pid=18646 comm="syz.3.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1095.272506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.279436][ T30] audit: type=1400 audit(1750178253.565:25189): avc: denied { perfmon } for pid=18646 comm="syz.3.3488" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1095.300926][ T30] audit: type=1400 audit(1750178253.565:25190): avc: denied { prog_run } for pid=18646 comm="syz.3.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1095.320338][ T30] audit: type=1400 audit(1750178253.675:25191): avc: denied { create } for pid=18646 comm="syz.3.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1095.341100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1095.368906][T18626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3484'. [ 1095.388323][ T30] audit: type=1400 audit(1750178253.675:25192): avc: denied { setopt } for pid=18646 comm="syz.3.3488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1095.459377][ T30] audit: type=1400 audit(1750178253.675:25193): avc: denied { read write } for pid=18646 comm="syz.3.3488" name="video3" dev="devtmpfs" ino=937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1095.519671][ T5838] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1095.637470][ T5943] hid-led 0003:1D34:0004.0036: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.4-1/input0 [ 1095.796663][ T5943] hid-led 0003:1D34:0004.0036: Dream Cheeky Webmail Notifier initialized [ 1096.101716][ T9] usb 5-1: USB disconnect, device number 87 [ 1096.378865][T10851] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1096.409570][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1096.426173][T10851] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1096.442396][ T5890] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1096.605441][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.675857][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.885740][ T5890] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1096.916574][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.045977][ T5890] usb 4-1: config 0 descriptor?? [ 1097.055527][ T5890] usbhid 4-1:0.0: can't add hid device: -22 [ 1097.060816][T18689] FAULT_INJECTION: forcing a failure. [ 1097.060816][T18689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.071770][ T5890] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1097.077241][T18689] CPU: 1 UID: 0 PID: 18689 Comm: syz.4.3502 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1097.077266][T18689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1097.077276][T18689] Call Trace: [ 1097.077282][T18689] [ 1097.077289][T18689] dump_stack_lvl+0x16c/0x1f0 [ 1097.077319][T18689] should_fail_ex+0x512/0x640 [ 1097.077344][T18689] _copy_from_user+0x2e/0xd0 [ 1097.077367][T18689] ucma_write+0x128/0x330 [ 1097.077393][T18689] ? __pfx_ucma_write+0x10/0x10 [ 1097.077413][T18689] ? bpf_lsm_file_permission+0x9/0x10 [ 1097.077439][T18689] ? security_file_permission+0x71/0x210 [ 1097.077463][T18689] ? rw_verify_area+0xcf/0x680 [ 1097.077482][T18689] ? __pfx_ucma_write+0x10/0x10 [ 1097.077502][T18689] vfs_write+0x2a0/0x1150 [ 1097.077527][T18689] ? __pfx_vfs_write+0x10/0x10 [ 1097.077544][T18689] ? find_held_lock+0x2b/0x80 [ 1097.077564][T18689] ? __fget_files+0x204/0x3c0 [ 1097.077588][T18689] ? __fget_files+0x20e/0x3c0 [ 1097.077615][T18689] ksys_write+0x1f8/0x250 [ 1097.077633][T18689] ? __pfx_ksys_write+0x10/0x10 [ 1097.077658][T18689] do_syscall_64+0xcd/0x4c0 [ 1097.077683][T18689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.077699][T18689] RIP: 0033:0x7fec7638e929 [ 1097.077714][T18689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.077729][T18689] RSP: 002b:00007fec77148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1097.077746][T18689] RAX: ffffffffffffffda RBX: 00007fec765b5fa0 RCX: 00007fec7638e929 [ 1097.077757][T18689] RDX: 0000000000000118 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1097.077781][T18689] RBP: 00007fec77148090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.077791][T18689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.077800][T18689] R13: 0000000000000000 R14: 00007fec765b5fa0 R15: 00007ffcbf2fc258 [ 1097.077821][T18689] [ 1097.275680][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1097.624217][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1098.208189][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 1098.470916][ T5890] usb 4-1: USB disconnect, device number 83 [ 1099.075806][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1099.123825][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1099.249014][T18720] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3511'. [ 1099.280468][T18724] netlink: 'syz.0.3513': attribute type 10 has an invalid length. [ 1099.299247][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1099.304134][T18724] team0: Port device wlan1 added [ 1099.311804][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.321679][ T10] usb 5-1: Product: syz [ 1099.328277][ T10] usb 5-1: Manufacturer: syz [ 1099.333836][ T10] usb 5-1: SerialNumber: syz [ 1099.474565][T18725] SET target dimension over the limit! [ 1099.491463][T18725] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3513'. [ 1099.500872][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1100.197769][ T30] kauditd_printk_skb: 273 callbacks suppressed [ 1100.197816][ T30] audit: type=1400 audit(1750178258.692:25467): avc: denied { ioctl } for pid=18690 comm="syz.4.3503" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1100.241234][ T5890] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1100.319151][ T30] audit: type=1400 audit(1750178258.872:25468): avc: denied { create } for pid=18727 comm="syz.5.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1100.346659][ T30] audit: type=1400 audit(1750178258.892:25469): avc: denied { create } for pid=18729 comm="syz.3.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1100.366666][ T30] audit: type=1400 audit(1750178258.892:25470): avc: denied { setopt } for pid=18727 comm="syz.5.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1100.390349][ T30] audit: type=1400 audit(1750178258.902:25471): avc: denied { setopt } for pid=18729 comm="syz.3.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1100.413708][ T30] audit: type=1400 audit(1750178258.942:25472): avc: denied { read } for pid=18729 comm="syz.3.3514" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1100.450629][T18732] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1100.486847][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1100.510309][T18728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18728 comm=syz.5.3515 [ 1100.540759][ T30] audit: type=1400 audit(1750178258.942:25473): avc: denied { read open } for pid=18729 comm="syz.3.3514" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1101.197101][ T5898] usb 5-1: USB disconnect, device number 88 [ 1101.320885][ T30] audit: type=1400 audit(1750178258.962:25474): avc: denied { ioctl } for pid=18727 comm="syz.5.3515" path="socket:[60417]" dev="sockfs" ino=60417 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1101.355081][ T30] audit: type=1400 audit(1750178258.962:25475): avc: denied { bind } for pid=18727 comm="syz.5.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1101.375533][ T5890] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1101.382968][ T5890] ath9k_htc: Failed to initialize the device [ 1101.390389][ T5898] usb 5-1: ath9k_htc: USB layer deinitialized [ 1101.417581][ T30] audit: type=1400 audit(1750178259.032:25476): avc: denied { create } for pid=18729 comm="syz.3.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1101.861855][T18744] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3517'. [ 1102.244033][T18748] No control pipe specified [ 1102.259565][T18750] FAULT_INJECTION: forcing a failure. [ 1102.259565][T18750] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.275311][T18750] CPU: 1 UID: 0 PID: 18750 Comm: syz.3.3521 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1102.275338][T18750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1102.275349][T18750] Call Trace: [ 1102.275355][T18750] [ 1102.275363][T18750] dump_stack_lvl+0x16c/0x1f0 [ 1102.275394][T18750] should_fail_ex+0x512/0x640 [ 1102.275416][T18750] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1102.275442][T18750] should_failslab+0xc2/0x120 [ 1102.275471][T18750] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1102.275494][T18750] ? __alloc_skb+0x2b2/0x380 [ 1102.275524][T18750] __alloc_skb+0x2b2/0x380 [ 1102.275553][T18750] ? __pfx___alloc_skb+0x10/0x10 [ 1102.275580][T18750] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1102.275603][T18750] netlink_alloc_large_skb+0x69/0x130 [ 1102.275621][T18750] netlink_sendmsg+0x6a1/0xdd0 [ 1102.275648][T18750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1102.275674][T18750] ____sys_sendmsg+0xa95/0xc70 [ 1102.275694][T18750] ? copy_msghdr_from_user+0x10a/0x160 [ 1102.275717][T18750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1102.275745][T18750] ___sys_sendmsg+0x134/0x1d0 [ 1102.275776][T18750] ? __pfx____sys_sendmsg+0x10/0x10 [ 1102.275798][T18750] ? __lock_acquire+0x622/0x1c90 [ 1102.275852][T18750] __sys_sendmsg+0x16d/0x220 [ 1102.275876][T18750] ? __pfx___sys_sendmsg+0x10/0x10 [ 1102.275914][T18750] do_syscall_64+0xcd/0x4c0 [ 1102.275943][T18750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.275961][T18750] RIP: 0033:0x7f229858e929 [ 1102.275976][T18750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.275993][T18750] RSP: 002b:00007f229945e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1102.276011][T18750] RAX: ffffffffffffffda RBX: 00007f22987b5fa0 RCX: 00007f229858e929 [ 1102.276023][T18750] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1102.276034][T18750] RBP: 00007f229945e090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.276045][T18750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.276055][T18750] R13: 0000000000000000 R14: 00007f22987b5fa0 R15: 00007ffca13c63e8 [ 1102.276080][T18750] [ 1102.679750][T18752] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1102.685849][T18760] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3525'. [ 1102.686301][T18752] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1102.707313][T18752] vhci_hcd vhci_hcd.0: Device attached [ 1102.947157][ T1604] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1102.962226][ T5943] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1103.028783][T18767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1103.384173][ T5943] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.406240][ T5943] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1103.415818][ T5943] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1103.425172][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.453209][ T5943] usb 5-1: config 0 descriptor?? [ 1103.647339][ T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1103.760953][T18752] nvme_fabrics: missing parameter 'transport=%s' [ 1103.768635][T18752] nvme_fabrics: missing parameter 'nqn=%s' [ 1103.779324][T16755] usb 5-1: USB disconnect, device number 89 [ 1103.795663][T18759] usb 41-1: recv xbuf, 0 [ 1103.804425][ T191] vhci_hcd: stop threads [ 1103.810620][ T191] vhci_hcd: release socket [ 1103.820900][ T191] vhci_hcd: disconnect device [ 1103.866304][ T1604] vhci_hcd: vhci_device speed not set [ 1103.978641][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1103.990907][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 1104.000675][ T10] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 1104.009126][ T10] usb 4-1: Product: syz [ 1104.013308][ T10] usb 4-1: Manufacturer: syz [ 1104.019669][ T10] usb 4-1: SerialNumber: syz [ 1104.066307][ T10] usb 4-1: config 0 descriptor?? [ 1104.088562][ T10] usb 4-1: selecting invalid altsetting 1 [ 1104.264835][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1104.652599][ T191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1104.733713][T18794] netlink: 'syz.7.3533': attribute type 7 has an invalid length. [ 1104.783952][T18796] tty tty29: ldisc open failed (-12), clearing slot 28 [ 1105.031251][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3537'. [ 1105.033322][T18808] trusted_key: encrypted_key: insufficient parameters specified [ 1105.056329][T18806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3537'. [ 1105.222576][ T30] kauditd_printk_skb: 276 callbacks suppressed [ 1105.222598][ T30] audit: type=1400 audit(1750178263.770:25753): avc: denied { ioctl } for pid=18813 comm="syz.4.3541" path="/dev/input/event2" dev="devtmpfs" ino=923 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1105.263642][ T10] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1105.287059][ T30] audit: type=1400 audit(1750178263.820:25754): avc: denied { ioctl } for pid=18803 comm="syz.0.3536" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1105.351885][ T30] audit: type=1400 audit(1750178263.900:25755): avc: denied { read write } for pid=17257 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1105.506643][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 1105.542712][ T30] audit: type=1400 audit(1750178263.979:25756): avc: denied { setopt } for pid=18809 comm="syz.5.3539" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1105.864851][ T30] audit: type=1400 audit(1750178263.989:25757): avc: denied { ioctl } for pid=18809 comm="syz.5.3539" path="socket:[60092]" dev="sockfs" ino=60092 ioctlcmd=0x64a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1105.898348][ T30] audit: type=1400 audit(1750178263.999:25758): avc: denied { read write open } for pid=17257 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1105.913152][ T5881] usb 4-1: USB disconnect, device number 84 [ 1105.931344][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1105.971275][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1105.981360][ T30] audit: type=1400 audit(1750178264.009:25759): avc: denied { ioctl } for pid=17257 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1106.037158][ T30] audit: type=1400 audit(1750178264.449:25760): avc: denied { ioctl } for pid=18803 comm="syz.0.3536" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1106.071470][ T10] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1106.086887][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.105138][ T10] usb 1-1: Product: syz [ 1106.109432][ T10] usb 1-1: Manufacturer: syz [ 1106.114058][ T10] usb 1-1: SerialNumber: syz [ 1106.126308][ T10] usb 1-1: config 0 descriptor?? [ 1106.140155][ T10] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1106.286367][ T30] audit: type=1400 audit(1750178264.569:25761): avc: denied { read write } for pid=16623 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1106.314354][ T30] audit: type=1400 audit(1750178264.569:25762): avc: denied { open } for pid=16623 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1106.384048][T18804] syz.0.3536: attempt to access beyond end of device [ 1106.384048][T18804] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1106.432752][ T5881] usb 1-1: USB disconnect, device number 93 [ 1107.437848][ T5943] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1107.801333][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 1107.815141][ T5943] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1107.916862][T18865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1107.950672][ T5943] usb 4-1: config 0 has no interface number 0 [ 1107.983584][ T5943] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1108.053078][ T5943] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1108.184297][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.209056][ T5943] usb 4-1: Product: syz [ 1108.232849][ T5943] usb 4-1: Manufacturer: syz [ 1108.254108][ T5943] usb 4-1: SerialNumber: syz [ 1108.266518][ T5943] usb 4-1: config 0 descriptor?? [ 1108.289024][ T5943] smsc75xx v1.0.0 [ 1108.488545][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1108.490224][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1109.769851][ T191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1109.789982][ T5943] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1109.810911][ T5943] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1109.823985][ T5943] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1109.866026][ T5943] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1110.129585][ T5943] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1110.171548][ T5943] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1110.859795][ T30] kauditd_printk_skb: 212 callbacks suppressed [ 1110.859834][ T30] audit: type=1400 audit(1750178269.397:25975): avc: denied { read write } for pid=18881 comm="syz.4.3563" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1110.889844][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.127435][ T5943] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1111.172460][T18883] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1111.283647][T18887] lo speed is unknown, defaulting to 1000 [ 1111.289549][T18887] lo speed is unknown, defaulting to 1000 [ 1111.296012][T18887] lo speed is unknown, defaulting to 1000 [ 1111.311639][T18887] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1111.375913][T18887] lo speed is unknown, defaulting to 1000 [ 1111.391591][T18887] lo speed is unknown, defaulting to 1000 [ 1111.407872][T18887] lo speed is unknown, defaulting to 1000 [ 1111.422739][T18887] lo speed is unknown, defaulting to 1000 [ 1111.437843][T18887] lo speed is unknown, defaulting to 1000 [ 1111.486783][ T30] audit: type=1400 audit(1750178269.397:25976): avc: denied { open } for pid=18881 comm="syz.4.3563" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1111.510354][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.558412][ T5943] usb 4-1: USB disconnect, device number 85 [ 1111.590388][ T30] audit: type=1400 audit(1750178269.827:25978): avc: denied { create } for pid=18884 comm="syz.7.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1111.661952][ T30] audit: type=1400 audit(1750178269.827:25979): avc: denied { write } for pid=18884 comm="syz.7.3564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1111.725438][ T30] audit: type=1400 audit(1750178269.397:25977): avc: denied { ioctl } for pid=18881 comm="syz.4.3563" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1111.810188][ T10] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1111.820085][ T30] audit: type=1400 audit(1750178270.056:25980): avc: denied { ioctl } for pid=18881 comm="syz.4.3563" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1111.845215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.930341][ T30] audit: type=1400 audit(1750178270.116:25981): avc: denied { read write } for pid=16623 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1112.037130][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1112.459973][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.471356][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.481741][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1112.515246][ T30] audit: type=1400 audit(1750178270.116:25982): avc: denied { open } for pid=16623 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1112.516276][ T10] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1112.580670][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.598308][ T30] audit: type=1400 audit(1750178270.116:25983): avc: denied { ioctl } for pid=16623 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1112.628212][ T10] usb 5-1: config 0 descriptor?? [ 1112.667339][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input37 [ 1112.716258][ T30] audit: type=1400 audit(1750178270.126:25984): avc: denied { prog_load } for pid=18890 comm="syz.0.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1112.863671][ T5177] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1113.006800][ T10] usb 5-1: USB disconnect, device number 90 [ 1113.027851][ T5177] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1113.260754][ T5881] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1113.410940][ T10] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1113.422248][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 1113.429077][ T5881] usb 1-1: config 0 has no interfaces? [ 1113.437803][ T5881] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1113.448147][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.477122][ T5881] usb 1-1: Product: syz [ 1113.644892][ T5881] usb 1-1: Manufacturer: syz [ 1113.651195][ T5881] usb 1-1: SerialNumber: syz [ 1113.658989][ T5881] usb 1-1: config 0 descriptor?? [ 1113.791083][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1113.803673][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1113.829659][ T10] usb 5-1: config 0 has no interface number 0 [ 1113.846131][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1113.872263][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1113.888727][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.921663][ T10] usb 5-1: Product: syz [ 1113.935849][ T10] usb 5-1: Manufacturer: syz [ 1113.946449][ T10] usb 5-1: SerialNumber: syz [ 1113.959119][T18911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3572'. [ 1113.969912][T18911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3572'. [ 1113.982852][ T10] usb 5-1: config 0 descriptor?? [ 1114.025746][ T10] smsc75xx v1.0.0 [ 1114.252374][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1114.252504][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1114.255676][ T10] usb 5-1: USB disconnect, device number 91 [ 1114.375893][T16755] usb 1-1: USB disconnect, device number 94 [ 1114.795838][T18934] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1114.796371][ T5881] IPVS: starting estimator thread 0... [ 1114.812007][ T191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1114.911750][T18936] IPVS: using max 50 ests per chain, 120000 per kthread [ 1115.133947][T18949] tipc: Started in network mode [ 1115.139486][T18949] tipc: Node identity b6dba7ab2a62, cluster identity 4711 [ 1115.171936][T18949] tipc: Enabled bearer , priority 0 [ 1115.194101][T18949] syzkaller0: entered promiscuous mode [ 1115.199743][T18949] syzkaller0: entered allmulticast mode [ 1115.254342][T18949] tipc: Resetting bearer [ 1115.274946][T18948] tipc: Resetting bearer [ 1115.286541][T18954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3584'. [ 1115.499299][T18948] tipc: Disabling bearer [ 1115.876103][ T30] kauditd_printk_skb: 210 callbacks suppressed [ 1115.876118][ T30] audit: type=1400 audit(1750178274.414:26195): avc: denied { create } for pid=18959 comm="syz.3.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1116.004198][ T30] audit: type=1400 audit(1750178274.414:26196): avc: denied { write } for pid=18959 comm="syz.3.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1116.111457][ T30] audit: type=1400 audit(1750178274.414:26197): avc: denied { read } for pid=18959 comm="syz.3.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1116.156280][ T30] audit: type=1400 audit(1750178274.414:26198): avc: denied { create } for pid=18959 comm="syz.3.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1116.208935][ T30] audit: type=1400 audit(1750178274.414:26199): avc: denied { write } for pid=18959 comm="syz.3.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1116.281118][ T30] audit: type=1400 audit(1750178274.624:26200): avc: denied { read write } for pid=16623 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1116.366892][ T30] audit: type=1400 audit(1750178274.624:26201): avc: denied { open } for pid=16623 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1116.396799][T18957] lo speed is unknown, defaulting to 1000 [ 1116.404995][T18957] lo speed is unknown, defaulting to 1000 [ 1116.418323][ T1604] hid-generic 0007:0005:0009.0037: unknown main item tag 0x1 [ 1116.425998][ T30] audit: type=1400 audit(1750178274.624:26202): avc: denied { ioctl } for pid=16623 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1116.550837][ T1604] hid-generic 0007:0005:0009.0037: unknown main item tag 0x3 [ 1116.571195][ T1604] hid-generic 0007:0005:0009.0037: hidraw0: HID v0.08 Device [syz1] on syz1 [ 1116.618046][ T30] audit: type=1400 audit(1750178274.774:26203): avc: denied { create } for pid=18962 comm="syz.3.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1116.638672][ T30] audit: type=1400 audit(1750178274.794:26204): avc: denied { setopt } for pid=18962 comm="syz.3.3586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1117.374942][T18978] 9pnet_fd: Insufficient options for proto=fd [ 1117.694173][T16755] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1117.830990][T18990] sctp: [Deprecated]: syz.7.3594 (pid 18990) Use of int in max_burst socket option deprecated. [ 1117.830990][T18990] Use struct sctp_assoc_value instead [ 1117.847285][ T10] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1117.873201][T16755] usb 5-1: Using ep0 maxpacket: 32 [ 1117.882814][T16755] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1117.895875][T16755] usb 5-1: config 0 has no interface number 0 [ 1117.917198][T18992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3595'. [ 1117.931878][T16755] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1117.956418][T16755] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1117.983447][T16755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.991880][T16755] usb 5-1: Product: syz [ 1117.998771][T16755] usb 5-1: Manufacturer: syz [ 1118.003575][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1118.010697][T16755] usb 5-1: SerialNumber: syz [ 1118.018387][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1118.028110][ T10] usb 1-1: config 0 has no interface number 0 [ 1118.036684][T16755] usb 5-1: config 0 descriptor?? [ 1118.041825][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1118.052115][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1118.064954][T16755] smsc75xx v1.0.0 [ 1118.068814][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.077262][ T10] usb 1-1: Product: syz [ 1118.081544][ T10] usb 1-1: Manufacturer: syz [ 1118.087103][ T10] usb 1-1: SerialNumber: syz [ 1118.199752][T18999] fuse: Bad value for 'fd' [ 1118.236438][ T10] usb 1-1: config 0 descriptor?? [ 1118.244331][ T10] smsc75xx v1.0.0 [ 1118.839401][T16755] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1118.969675][T16755] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1119.024305][T16755] usb 5-1: USB disconnect, device number 92 [ 1119.603433][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1119.624157][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1119.818536][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1119.898068][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1119.918285][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1119.937543][T19018] FAULT_INJECTION: forcing a failure. [ 1119.937543][T19018] name failslab, interval 1, probability 0, space 0, times 0 [ 1119.960975][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1119.997262][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 1120.007926][T19018] CPU: 0 UID: 0 PID: 19018 Comm: syz.4.3602 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1120.007955][T19018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1120.007964][T19018] Call Trace: [ 1120.007970][T19018] [ 1120.007976][T19018] dump_stack_lvl+0x16c/0x1f0 [ 1120.008005][T19018] should_fail_ex+0x512/0x640 [ 1120.008028][T19018] ? fs_reclaim_acquire+0xae/0x150 [ 1120.008049][T19018] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1120.008076][T19018] should_failslab+0xc2/0x120 [ 1120.008103][T19018] __kmalloc_noprof+0xd2/0x510 [ 1120.008132][T19018] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1120.008160][T19018] ? tomoyo_profile+0x47/0x60 [ 1120.008191][T19018] tomoyo_path_number_perm+0x245/0x580 [ 1120.008211][T19018] ? tomoyo_path_number_perm+0x237/0x580 [ 1120.008234][T19018] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1120.008258][T19018] ? find_held_lock+0x2b/0x80 [ 1120.008303][T19018] ? find_held_lock+0x2b/0x80 [ 1120.008322][T19018] ? hook_file_ioctl_common+0x145/0x410 [ 1120.008346][T19018] ? __fget_files+0x20e/0x3c0 [ 1120.008375][T19018] security_file_ioctl+0x9b/0x240 [ 1120.008402][T19018] __x64_sys_ioctl+0xb7/0x210 [ 1120.008424][T19018] do_syscall_64+0xcd/0x4c0 [ 1120.008452][T19018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.008471][T19018] RIP: 0033:0x7fec7638e929 [ 1120.008484][T19018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1120.008502][T19018] RSP: 002b:00007fec741f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1120.008519][T19018] RAX: ffffffffffffffda RBX: 00007fec765b6160 RCX: 00007fec7638e929 [ 1120.008530][T19018] RDX: 00002000000001c0 RSI: 0000000000005452 RDI: 0000000000000007 [ 1120.008541][T19018] RBP: 00007fec741f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.008551][T19018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1120.008560][T19018] R13: 0000000000000000 R14: 00007fec765b6160 R15: 00007ffcbf2fc258 [ 1120.008583][T19018] [ 1120.008603][T19018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1120.195381][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3605'. [ 1120.221160][ T10] usb 1-1: USB disconnect, device number 95 [ 1120.254703][T19024] mmap: syz.5.3605 (19024): VmData 37597184 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 1120.666499][ T1161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1120.985054][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 1120.985073][ T30] audit: type=1400 audit(1750178279.522:26385): avc: denied { prog_run } for pid=19027 comm="syz.0.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1121.019970][ T30] audit: type=1400 audit(1750178279.552:26386): avc: denied { create } for pid=19027 comm="syz.0.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1121.020120][ T30] audit: type=1400 audit(1750178279.552:26387): avc: denied { create } for pid=19027 comm="syz.0.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1121.020244][ T30] audit: type=1400 audit(1750178279.562:26388): avc: denied { write } for pid=19027 comm="syz.0.3606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1121.053647][ T30] audit: type=1400 audit(1750178279.592:26389): avc: denied { read write } for pid=16623 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1121.054022][ T30] audit: type=1400 audit(1750178279.592:26390): avc: denied { open } for pid=16623 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1121.054330][ T30] audit: type=1400 audit(1750178279.592:26391): avc: denied { ioctl } for pid=16623 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1121.195844][T19039] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1121.200606][ T30] audit: type=1400 audit(1750178279.732:26392): avc: denied { create } for pid=19036 comm="syz.5.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1121.207357][ T30] audit: type=1400 audit(1750178279.752:26393): avc: denied { read } for pid=19035 comm="syz.3.3607" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1121.207411][ T30] audit: type=1400 audit(1750178279.752:26394): avc: denied { open } for pid=19035 comm="syz.3.3607" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1121.285606][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.453163][ C1] vkms_vblank_simulate: vblank timer overrun [ 1121.524543][ C1] vkms_vblank_simulate: vblank timer overrun [ 1122.105322][ T10] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1122.268493][T19070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1122.313459][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.388597][ T10] usb 5-1: config 0 has no interfaces? [ 1122.463730][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1122.614739][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.640178][ T10] usb 5-1: config 0 descriptor?? [ 1122.665757][ T5881] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1122.731314][T19074] netlink: 'syz.5.3620': attribute type 7 has an invalid length. [ 1122.885617][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 1122.892995][ T5881] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1122.913198][ T5881] usb 4-1: config 0 has no interface number 0 [ 1122.939469][ T5881] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1122.950986][ T5881] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1122.971648][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.993422][ T5881] usb 4-1: Product: syz [ 1123.017841][ T5881] usb 4-1: Manufacturer: syz [ 1123.032727][ T5881] usb 4-1: SerialNumber: syz [ 1123.039848][ T42] usb 5-1: USB disconnect, device number 93 [ 1123.110033][ T5881] usb 4-1: config 0 descriptor?? [ 1123.165115][ T5881] smsc75xx v1.0.0 [ 1123.868137][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1124.004115][ T42] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1124.091811][ T5881] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1124.208574][ T5881] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1124.229441][T19102] overlayfs: failed to clone upperpath [ 1124.244201][ T5881] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1124.269721][ T5881] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1124.280951][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 1124.295738][ T42] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1124.304616][ T5881] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1124.318808][ T42] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.330216][ T5881] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1124.340333][ T42] usb 5-1: config 179 has no interface number 0 [ 1124.347253][ T5881] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1124.355698][ T42] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1124.370198][ T5881] usb 4-1: USB disconnect, device number 86 [ 1124.376470][ T42] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1124.395762][T19102] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1124.398317][ T42] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1124.412962][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.670041][T19097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.826621][T19097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.283657][T19122] ip6t_srh: unknown srh invflags 7863 [ 1125.535688][T19128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1125.812492][ T42] usb 5-1: USB disconnect, device number 94 [ 1126.063351][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 1126.063367][ T30] audit: type=1400 audit(1750178284.599:26648): avc: denied { read write } for pid=15041 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1126.127891][ T30] audit: type=1400 audit(1750178284.599:26649): avc: denied { open } for pid=15041 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1126.152293][ C1] vkms_vblank_simulate: vblank timer overrun [ 1126.194189][ T30] audit: type=1400 audit(1750178284.599:26650): avc: denied { ioctl } for pid=15041 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1126.219999][ C1] vkms_vblank_simulate: vblank timer overrun [ 1126.270344][ T30] audit: type=1400 audit(1750178284.639:26651): avc: denied { create } for pid=19121 comm="syz.5.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1126.301107][ T30] audit: type=1400 audit(1750178284.639:26652): avc: denied { write } for pid=19121 comm="syz.5.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1126.301301][ T30] audit: type=1400 audit(1750178284.639:26653): avc: denied { connect } for pid=19121 comm="syz.5.3634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1126.301499][ T30] audit: type=1400 audit(1750178284.639:26654): avc: denied { name_connect } for pid=19121 comm="syz.5.3634" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1126.301665][ T30] audit: type=1400 audit(1750178284.649:26655): avc: denied { name_connect } for pid=19121 comm="syz.5.3634" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1126.301845][ T30] audit: type=1400 audit(1750178284.659:26656): avc: denied { listen } for pid=19121 comm="syz.5.3634" lport=41479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1126.302036][ T30] audit: type=1400 audit(1750178284.669:26657): avc: denied { create } for pid=19131 comm="syz.7.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1126.439026][ T191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1126.555086][T19139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3637'. [ 1127.947080][T19175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1128.560649][T19183] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3650'. [ 1128.668498][ T1604] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1128.828483][ T1604] usb 4-1: Using ep0 maxpacket: 16 [ 1128.845368][ T1604] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1128.863933][ T1604] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1129.034379][ T1604] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1129.043948][ T1604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.052302][ T1604] usb 4-1: Product: syz [ 1129.057002][ T1604] usb 4-1: Manufacturer: syz [ 1129.062073][ T1604] usb 4-1: SerialNumber: syz [ 1129.068951][ T1604] usb 4-1: config 0 descriptor?? [ 1129.076430][ T1604] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1129.106717][ T1604] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1130.048014][ T1604] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1130.057594][ T1604] em28xx 4-1:0.0: Config register raw data: 0xfb [ 1130.064371][ T1604] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 1130.070834][ T1604] em28xx 4-1:0.0: No AC97 audio processor [ 1131.170336][T16755] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1131.394829][ T30] kauditd_printk_skb: 239 callbacks suppressed [ 1131.394849][ T30] audit: type=1400 audit(1750178289.377:26897): avc: denied { write } for pid=19209 comm="syz.5.3659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1131.486012][ T1604] usb 4-1: USB disconnect, device number 87 [ 1131.496038][ T30] audit: type=1400 audit(1750178289.697:26898): avc: denied { create } for pid=19213 comm="syz.7.3661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1131.522654][T16755] usb 1-1: device descriptor read/64, error -71 [ 1131.541365][ T191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1131.569176][ T30] audit: type=1400 audit(1750178289.697:26899): avc: denied { setopt } for pid=19213 comm="syz.7.3661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1131.617085][ T30] audit: type=1400 audit(1750178289.707:26900): avc: denied { module_request } for pid=19213 comm="syz.7.3661" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1131.660720][ T30] audit: type=1400 audit(1750178289.767:26901): avc: denied { ioctl } for pid=19206 comm="syz.0.3658" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1131.687673][ T30] audit: type=1400 audit(1750178289.847:26902): avc: denied { read write } for pid=17257 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1131.701324][T19232] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3666'. [ 1131.748915][ T30] audit: type=1400 audit(1750178289.847:26903): avc: denied { open } for pid=17257 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1131.773342][ C1] vkms_vblank_simulate: vblank timer overrun [ 1131.781790][ T30] audit: type=1400 audit(1750178289.847:26904): avc: denied { ioctl } for pid=17257 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1131.790170][T16755] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1131.807651][ C1] vkms_vblank_simulate: vblank timer overrun [ 1131.808913][ T30] audit: type=1400 audit(1750178289.867:26905): avc: denied { sys_module } for pid=19213 comm="syz.7.3661" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1131.828936][T19207] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1132.002583][T16755] usb 1-1: device descriptor read/64, error -71 [ 1132.138098][T16755] usb usb1-port1: attempt power cycle [ 1132.540627][T16755] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1132.571536][T16755] usb 1-1: device descriptor read/8, error -71 [ 1132.851118][T16755] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1132.914589][T16755] usb 1-1: device descriptor read/8, error -71 [ 1133.046929][T16755] usb usb1-port1: unable to enumerate USB device [ 1133.780783][T19268] 9pnet: Could not find request transport: da [ 1134.512851][T19299] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 1135.014307][T19301] tmpfs: Unknown parameter 'usrquotauencer' [ 1135.771752][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c596000: rx timeout, send abort [ 1136.282662][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c596000: abort rx timeout. Force session deactivation [ 1136.431518][ T30] kauditd_printk_skb: 286 callbacks suppressed [ 1136.431537][ T30] audit: type=1400 audit(1750178294.964:27190): avc: denied { allowed } for pid=19318 comm="syz.0.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1136.585965][ T30] audit: type=1400 audit(1750178294.994:27191): avc: denied { create } for pid=19320 comm="syz.3.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1136.867114][ T30] audit: type=1400 audit(1750178294.994:27192): avc: denied { write } for pid=19320 comm="syz.3.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1136.900748][ T30] audit: type=1400 audit(1750178294.994:27193): avc: denied { read } for pid=19320 comm="syz.3.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1136.961550][ T30] audit: type=1400 audit(1750178295.004:27194): avc: denied { execmem } for pid=19316 comm="syz.4.3694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1137.010040][ T30] audit: type=1400 audit(1750178295.094:27195): avc: denied { prog_load } for pid=19320 comm="syz.3.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1137.098803][ T30] audit: type=1400 audit(1750178295.094:27196): avc: denied { bpf } for pid=19320 comm="syz.3.3695" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1137.165089][ T30] audit: type=1400 audit(1750178295.094:27197): avc: denied { ioctl } for pid=19320 comm="syz.3.3695" path="socket:[62707]" dev="sockfs" ino=62707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1137.323077][ T191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1137.354237][ T30] audit: type=1400 audit(1750178295.104:27198): avc: denied { create } for pid=19320 comm="syz.3.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1137.400634][ T30] audit: type=1400 audit(1750178295.104:27199): avc: denied { write } for pid=19320 comm="syz.3.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1138.315567][T19351] trusted_key: encrypted_key: keylen parameter is missing [ 1138.421608][T19361] FAULT_INJECTION: forcing a failure. [ 1138.421608][T19361] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.450484][T19361] CPU: 1 UID: 0 PID: 19361 Comm: syz.0.3708 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1138.450516][T19361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1138.450528][T19361] Call Trace: [ 1138.450534][T19361] [ 1138.450542][T19361] dump_stack_lvl+0x16c/0x1f0 [ 1138.450574][T19361] should_fail_ex+0x512/0x640 [ 1138.450606][T19361] ? fs_reclaim_acquire+0xae/0x150 [ 1138.450628][T19361] ? tomoyo_encode2+0x100/0x3e0 [ 1138.450651][T19361] should_failslab+0xc2/0x120 [ 1138.450675][T19361] __kmalloc_noprof+0xd2/0x510 [ 1138.450696][T19361] ? d_absolute_path+0x136/0x1a0 [ 1138.450719][T19361] tomoyo_encode2+0x100/0x3e0 [ 1138.450745][T19361] tomoyo_encode+0x29/0x50 [ 1138.450766][T19361] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1138.450794][T19361] tomoyo_path_number_perm+0x245/0x580 [ 1138.450813][T19361] ? tomoyo_path_number_perm+0x237/0x580 [ 1138.450833][T19361] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1138.450855][T19361] ? find_held_lock+0x2b/0x80 [ 1138.450903][T19361] ? find_held_lock+0x2b/0x80 [ 1138.450922][T19361] ? hook_file_ioctl_common+0x145/0x410 [ 1138.450946][T19361] ? __fget_files+0x20e/0x3c0 [ 1138.450972][T19361] security_file_ioctl+0x9b/0x240 [ 1138.451002][T19361] __x64_sys_ioctl+0xb7/0x210 [ 1138.451024][T19361] do_syscall_64+0xcd/0x4c0 [ 1138.451056][T19361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.451076][T19361] RIP: 0033:0x7f1d2958e929 [ 1138.451095][T19361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.451113][T19361] RSP: 002b:00007f1d2a4dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1138.451134][T19361] RAX: ffffffffffffffda RBX: 00007f1d297b5fa0 RCX: 00007f1d2958e929 [ 1138.451146][T19361] RDX: 0000200000000040 RSI: 00000000c00c642e RDI: 0000000000000004 [ 1138.451157][T19361] RBP: 00007f1d2a4dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.451167][T19361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.451178][T19361] R13: 0000000000000000 R14: 00007f1d297b5fa0 R15: 00007ffed79786f8 [ 1138.451204][T19361] [ 1138.451238][T19361] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1138.496378][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3709'. [ 1138.685906][ T1604] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1138.792409][T19358] netlink: 'syz.5.3709': attribute type 4 has an invalid length. [ 1138.820732][T19358] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3709'. [ 1138.843900][ T1604] usb 5-1: Using ep0 maxpacket: 32 [ 1138.852623][ T1604] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1138.864527][ T1604] usb 5-1: config 0 has no interface number 0 [ 1138.891615][ T1604] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1138.903173][T19358] : renamed from bond0 (while UP) [ 1138.918496][ T1604] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1138.930735][ T1604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.940679][ T1604] usb 5-1: Product: syz [ 1138.947542][ T1604] usb 5-1: Manufacturer: syz [ 1138.952381][ T1604] usb 5-1: SerialNumber: syz [ 1138.969305][ T1604] usb 5-1: config 0 descriptor?? [ 1138.987185][ T1604] smsc75xx v1.0.0 [ 1139.054017][ T42] hid-generic 0007:0005:0009.0038: unknown main item tag 0x1 [ 1139.063073][ T42] hid-generic 0007:0005:0009.0038: unknown main item tag 0x3 [ 1139.220325][ T1604] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1139.233819][ T1604] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1139.246272][ T42] hid-generic 0007:0005:0009.0038: hidraw0: HID v0.08 Device [syz1] on syz1 [ 1139.259297][ T1604] usb 5-1: USB disconnect, device number 95 [ 1139.799007][ T5830] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1141.209952][ T5830] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1141.522280][ T30] kauditd_printk_skb: 251 callbacks suppressed [ 1141.522324][ T30] audit: type=1400 audit(1750178299.941:27451): avc: denied { create } for pid=19418 comm="syz.0.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1141.591831][ T42] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1141.659784][T19424] fuse: Unknown parameter '0x000000000000000301777777777777777777777' [ 1141.721827][ T1604] Process accounting resumed [ 1141.742142][T19424] Process accounting resumed [ 1141.751582][ T30] audit: type=1400 audit(1750178299.961:27452): avc: denied { ioctl } for pid=19415 comm="syz.3.3727" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1141.865084][ T42] usb 4-1: Using ep0 maxpacket: 16 [ 1142.123595][T19427] 9pnet_fd: Insufficient options for proto=fd [ 1142.413306][T15041] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1142.422024][ T30] audit: type=1400 audit(1750178300.011:27453): avc: denied { prog_load } for pid=19418 comm="syz.0.3729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1142.445158][T19417] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1142.465959][T19429] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1142.474764][T10851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1142.489903][T15041] audit: audit_lost=89 audit_rate_limit=0 audit_backlog_limit=64 [ 1142.513105][T19429] audit: audit_lost=90 audit_rate_limit=0 audit_backlog_limit=64 [ 1142.521024][T19417] audit: audit_lost=91 audit_rate_limit=0 audit_backlog_limit=64 [ 1142.547889][T15041] audit: backlog limit exceeded [ 1142.572925][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.584054][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1142.650152][ T42] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1142.675469][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.695943][ T42] usb 4-1: config 0 descriptor?? [ 1142.870177][T19443] overlayfs: failed to clone upperpath [ 1143.003202][ T5830] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1143.339700][ T42] usbhid 4-1:0.0: can't add hid device: -71 [ 1143.353665][ T42] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1143.366022][ T42] usb 4-1: USB disconnect, device number 88 [ 1144.346605][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1144.360239][T16755] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1144.587143][T19473] 9pnet_fd: Insufficient options for proto=fd [ 1144.628693][ T5830] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1144.653769][T19483] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1144.811218][T19487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42 sclass=netlink_tcpdiag_socket pid=19487 comm=syz.7.3754 [ 1144.854799][ T5830] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1145.124237][T19501] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3758'. [ 1145.144711][T19501] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3758'. [ 1145.157959][T19501] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3758'. [ 1145.167747][T19501] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3758'. [ 1146.156236][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1146.331776][ T10] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1146.498936][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.521122][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.541411][ T10] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1146.560679][ T30] kauditd_printk_skb: 248 callbacks suppressed [ 1146.560696][ T30] audit: type=1400 audit(1750178305.089:27700): avc: denied { create } for pid=19528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1146.560810][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.593135][ T30] audit: type=1400 audit(1750178305.099:27701): avc: denied { read write } for pid=19528 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1146.597580][T16755] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1146.627198][ T30] audit: type=1400 audit(1750178305.099:27702): avc: denied { open } for pid=19528 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1146.651802][ T10] usb 5-1: config 0 descriptor?? [ 1146.656029][ T30] audit: type=1400 audit(1750178305.109:27703): avc: denied { ioctl } for pid=19528 comm="syz-executor" path="socket:[63008]" dev="sockfs" ino=63008 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1146.657817][T19529] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1146.684994][ T30] audit: type=1400 audit(1750178305.149:27704): avc: denied { ioctl } for pid=19524 comm="syz.0.3765" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1146.719971][T19529] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1146.721702][ T30] audit: type=1400 audit(1750178305.149:27705): avc: denied { ioctl } for pid=19524 comm="syz.0.3765" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1146.758077][T19529] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1146.775798][T19529] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1146.787815][T19529] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1146.799856][T16755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1146.802384][T19165] bridge0: port 3(syz_tun) entered disabled state [ 1146.811460][T16755] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.823287][ T30] audit: type=1400 audit(1750178305.339:27706): avc: denied { ioctl } for pid=19528 comm="syz-executor" path="socket:[63008]" dev="sockfs" ino=63008 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1146.827741][T16755] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1146.874165][ T30] audit: type=1400 audit(1750178305.389:27707): avc: denied { read } for pid=19528 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1146.882548][T16755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.898723][ T30] audit: type=1400 audit(1750178305.389:27708): avc: denied { open } for pid=19528 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1146.920570][T19165] syz_tun (unregistering): left allmulticast mode [ 1146.928289][ T30] audit: type=1400 audit(1750178305.389:27709): avc: denied { mounton } for pid=19528 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1146.955979][T19165] syz_tun (unregistering): left promiscuous mode [ 1146.965196][T16755] usb 1-1: config 0 descriptor?? [ 1146.980763][T19165] bridge0: port 3(syz_tun) entered disabled state [ 1147.125390][T19513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3761'. [ 1147.196081][T19528] lo speed is unknown, defaulting to 1000 [ 1147.210946][T19528] lo speed is unknown, defaulting to 1000 [ 1147.374798][ T10] hid-led 0003:1D34:0004.0039: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.4-1/input0 [ 1147.657709][ T10] hid-led 0003:1D34:0004.0039: Dream Cheeky Webmail Notifier initialized [ 1147.672570][T19543] CIFS: iocharset name too long [ 1147.750443][T19547] trusted_key: encrypted_key: keyword 'updatIMfault' not recognized [ 1147.805545][ T10] usb 5-1: USB disconnect, device number 96 [ 1147.958712][T16755] usb 1-1: language id specifier not provided by device, defaulting to English [ 1148.100266][T19528] chnl_net:caif_netlink_parms(): no params data found [ 1148.164568][T19547] lo speed is unknown, defaulting to 1000 [ 1148.173682][T19547] lo speed is unknown, defaulting to 1000 [ 1148.191400][ T7316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1148.418093][T16755] uclogic 0003:256C:006D.003A: interface is invalid, ignoring [ 1148.908675][T19529] Bluetooth: hci5: command tx timeout [ 1149.161246][T19528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.168742][T19561] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1149.178842][T19528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.208925][T19528] bridge_slave_0: entered allmulticast mode [ 1149.216436][T19528] bridge_slave_0: entered promiscuous mode [ 1149.234456][T19528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.242603][T19528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.250484][T19528] bridge_slave_1: entered allmulticast mode [ 1149.283853][T19528] bridge_slave_1: entered promiscuous mode [ 1149.477088][T19528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1149.492684][T19528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1149.533754][T19528] team0: Port device team_slave_0 added [ 1149.542531][T19528] team0: Port device team_slave_1 added [ 1149.591278][T19528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1149.599214][T19528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.627642][T19528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.641389][T19528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.648437][T19528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.677796][T19528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.759781][T19528] hsr_slave_0: entered promiscuous mode [ 1149.785167][T19528] hsr_slave_1: entered promiscuous mode [ 1149.791612][T19528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1149.808720][T19528] Cannot create hsr debugfs directory [ 1150.113431][T19528] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.230947][T19528] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.269840][ T5881] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1150.307339][T16755] usb 1-1: USB disconnect, device number 100 [ 1150.343188][T19528] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.443226][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.478220][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.505444][T19528] : (slave netdevsim0): Releasing backup interface [ 1150.516385][ T5881] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1150.548060][T19528] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.559048][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.592871][ T5881] usb 4-1: config 0 descriptor?? [ 1150.990869][T19529] Bluetooth: hci5: command tx timeout [ 1151.115518][T19580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3784'. [ 1151.210416][ T191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1151.218356][ T191] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1151.323095][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1151.373874][T19528] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1151.409509][ T5881] hid-led 0003:1D34:0004.003B: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.3-1/input0 [ 1151.438458][ T5881] hid-led 0003:1D34:0004.003B: Dream Cheeky Webmail Notifier initialized [ 1151.449950][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1151.461972][T19528] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1151.487937][T19528] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1151.508418][T19528] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1151.576232][ T30] kauditd_printk_skb: 220 callbacks suppressed [ 1151.576258][ T30] audit: type=1400 audit(1750178310.066:27930): avc: denied { execmem } for pid=19593 comm="syz.0.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1151.613202][ T30] audit: type=1400 audit(1750178310.086:27931): avc: denied { prog_load } for pid=19597 comm="syz.4.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1151.635922][ T30] audit: type=1400 audit(1750178310.086:27932): avc: denied { bpf } for pid=19597 comm="syz.4.3791" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1151.694411][T16755] usb 4-1: USB disconnect, device number 89 [ 1151.716472][ T30] audit: type=1400 audit(1750178310.086:27933): avc: denied { perfmon } for pid=19597 comm="syz.4.3791" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1152.111447][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1152.154120][ T30] audit: type=1400 audit(1750178310.206:27934): avc: denied { read write } for pid=19579 comm="syz.3.3784" name="video8" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1152.210931][ T30] audit: type=1400 audit(1750178310.206:27935): avc: denied { open } for pid=19579 comm="syz.3.3784" path="/dev/video8" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1152.237936][ T30] audit: type=1400 audit(1750178310.206:27936): avc: denied { ioctl } for pid=19579 comm="syz.3.3784" path="/dev/video8" dev="devtmpfs" ino=954 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1152.296287][T19613] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3794'. [ 1152.308960][ T30] audit: type=1400 audit(1750178310.206:27937): avc: denied { read } for pid=19528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1152.359440][T19528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.420239][ T30] audit: type=1400 audit(1750178310.206:27938): avc: denied { write } for pid=19528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1152.445526][ T30] audit: type=1400 audit(1750178310.216:27939): avc: denied { read } for pid=19528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1153.241957][T19529] Bluetooth: hci5: command tx timeout [ 1153.482646][T19528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.580068][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.587414][ T7316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.604040][T16755] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1153.629989][T10851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.637198][T10851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.353078][T10851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1154.364260][T16755] usb 4-1: Using ep0 maxpacket: 16 [ 1154.382132][T16755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.422079][T16755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1154.518933][T16755] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1154.575790][T16755] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1154.591913][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1154.620453][T16755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.640767][T16755] usb 4-1: config 0 descriptor?? [ 1154.727013][T19528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1154.788783][T19648] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1154.864520][T19652] input: syz0 as /devices/virtual/input/input38 [ 1155.377946][T19528] veth0_vlan: entered promiscuous mode [ 1155.389622][T19528] veth1_vlan: entered promiscuous mode [ 1155.395689][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1155.437234][T19528] veth0_macvtap: entered promiscuous mode [ 1155.446248][T19528] veth1_macvtap: entered promiscuous mode [ 1155.463232][T19528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1155.472247][ T5898] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1155.483208][T19528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1155.492066][ T42] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1155.508231][T19528] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.517406][T19528] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.526672][T19528] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.536400][T19528] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.552445][T19529] Bluetooth: hci5: command tx timeout [ 1155.619677][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.652250][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.665788][ T5898] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 1155.675562][ T42] usb 1-1: not running at top speed; connect to a high speed hub [ 1155.681885][ T5898] usb 5-1: config 0 has no interface number 0 [ 1155.702097][ T5898] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1155.704077][ T42] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1155.719365][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.729389][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.762364][ T5898] usb 5-1: config 0 descriptor?? [ 1155.765019][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.772637][ T5898] cp210x 5-1:0.32: cp210x converter detected [ 1155.774859][ T42] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1155.818044][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1155.823666][T19663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.828269][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.849433][ T42] usb 1-1: Product: ෰捘钅膠ꉀ轁잲➝䂼䂳銝滆杦萼瑻㘊ਭ굜⯚쀁阺骷诉Ჭ닱ヲ鳊爻焭㉬酓둈묥뿰༼퇨땉р㉯ﭤᑝ苈謢엦槊밨쎼邧폆ᆚ冓弞몧 [ 1155.853253][T19663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1155.885367][ T42] usb 1-1: SerialNumber: 㩶쥬悀즾瀘ጝ [ 1155.896625][T19664] sctp: [Deprecated]: syz.7.3808 (pid 19664) Use of int in maxseg socket option. [ 1155.896625][T19664] Use struct sctp_assoc_value instead [ 1155.923376][T19659] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1156.061268][T19617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1156.068954][T19529] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1156.175973][ T5898] cp210x 5-1:0.32: failed to get vendor val 0x000e size 3: -32 [ 1156.999961][ T30] kauditd_printk_skb: 273 callbacks suppressed [ 1156.999984][ T30] audit: type=1400 audit(1750178314.954:28213): avc: denied { prog_load } for pid=19657 comm="syz.0.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1157.000066][ T30] audit: type=1400 audit(1750178314.954:28214): avc: denied { bpf } for pid=19657 comm="syz.0.3807" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1157.000126][ T30] audit: type=1400 audit(1750178314.964:28215): avc: denied { prog_load } for pid=19657 comm="syz.0.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1157.000163][ T30] audit: type=1400 audit(1750178314.964:28216): avc: denied { map_create } for pid=19657 comm="syz.0.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1157.000200][ T30] audit: type=1400 audit(1750178314.964:28217): avc: denied { map_read map_write } for pid=19657 comm="syz.0.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1157.000258][ T30] audit: type=1400 audit(1750178314.964:28218): avc: denied { perfmon } for pid=19657 comm="syz.0.3807" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1157.055873][T19674] lo speed is unknown, defaulting to 1000 [ 1157.062323][ T30] audit: type=1400 audit(1750178315.554:28219): avc: denied { ioctl } for pid=19654 comm="syz.4.3806" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1157.083852][T19674] lo speed is unknown, defaulting to 1000 [ 1157.101352][ T5898] cp210x 5-1:0.32: GPIO initialisation failed: -19 [ 1157.196701][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1157.253161][ T30] audit: type=1400 audit(1750178315.584:28220): avc: denied { ioctl } for pid=19654 comm="syz.4.3806" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1157.288510][ T5898] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1157.313105][ T30] audit: type=1400 audit(1750178315.754:28221): avc: denied { bpf } for pid=19671 comm="syz.5.3811" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1157.334727][ T30] audit: type=1400 audit(1750178315.754:28222): avc: denied { prog_load } for pid=19671 comm="syz.5.3811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1157.356648][T19680] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 1157.367212][T16755] usbhid 4-1:0.0: can't add hid device: -71 [ 1157.373488][T16755] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1157.408294][T16755] usb 4-1: USB disconnect, device number 90 [ 1157.484717][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3813'. [ 1157.586413][ T5898] usb 5-1: USB disconnect, device number 97 [ 1157.595502][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1157.618312][ T5898] cp210x 5-1:0.32: device disconnected [ 1158.140454][T19687] lo speed is unknown, defaulting to 1000 [ 1158.149658][T19687] lo speed is unknown, defaulting to 1000 [ 1158.403652][ T42] cdc_ncm 1-1:1.0: bind() failure [ 1158.442481][ T42] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1158.497335][ T42] cdc_ncm 1-1:1.1: bind() failure [ 1158.558253][ T42] usb 1-1: USB disconnect, device number 101 [ 1158.834275][T19529] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1159.253780][ T5881] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1159.436545][T16755] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1159.489792][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 1159.529539][ T5881] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 1159.556206][ T5881] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1159.623515][ T5881] usb 4-1: config 0 has no interface number 0 [ 1159.638286][T16755] usb 6-1: Using ep0 maxpacket: 32 [ 1159.646851][T16755] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1159.656699][T16755] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1159.667115][T16755] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.684861][T16755] usb 6-1: Product: syz [ 1159.692940][T16755] usb 6-1: Manufacturer: syz [ 1159.714702][T10846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1159.743829][T16755] usb 6-1: SerialNumber: syz [ 1159.761171][T16755] usb 6-1: config 0 descriptor?? [ 1159.851985][T19711] netlink: 'syz.7.3822': attribute type 10 has an invalid length. [ 1159.871106][T19711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.878430][T19711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.921714][T19711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.930644][T19711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.938322][T19711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.945539][T19711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1159.946822][ T5881] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1160.037365][ T5881] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1160.086768][ T5881] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1160.114194][ T5881] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has an invalid bInterval 109, changing to 10 [ 1160.134154][ T5881] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 25965, setting to 1024 [ 1160.150323][T19711] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1160.160573][ T5881] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1160.184821][ T5881] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1160.197218][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.266574][T16755] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1160.267165][ T5881] usb 4-1: config 0 descriptor?? [ 1160.354696][ T191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1160.394612][T19709] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1160.417759][T19709] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1160.444488][ T5881] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1160.821967][ T5881] usb 4-1: USB disconnect, device number 91 [ 1161.474708][T16755] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-ETIMEDOUT) [ 1162.020129][ T30] kauditd_printk_skb: 232 callbacks suppressed [ 1162.020148][ T30] audit: type=1400 audit(1750178321.540:28455): avc: denied { create } for pid=19744 comm="syz.3.3831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1162.099675][ T30] audit: type=1400 audit(1750178321.570:28456): avc: denied { module_request } for pid=19744 comm="syz.3.3831" kmod="net-pf-10-proto-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1162.148919][ T42] usb 6-1: USB disconnect, device number 8 [ 1162.167783][ T30] audit: type=1400 audit(1750178321.590:28457): avc: denied { read write } for pid=19744 comm="syz.3.3831" name="udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1162.202390][ T30] audit: type=1400 audit(1750178321.590:28458): avc: denied { open } for pid=19744 comm="syz.3.3831" path="/dev/udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1162.243606][ T30] audit: type=1400 audit(1750178321.590:28459): avc: denied { ioctl } for pid=19744 comm="syz.3.3831" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1162.285963][ T30] audit: type=1400 audit(1750178321.590:28460): avc: denied { ioctl } for pid=19744 comm="syz.3.3831" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1162.335775][ T5881] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1162.577544][ T1604] hid-generic 0007:0005:0009.003C: unknown main item tag 0x1 [ 1162.741852][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3834'. [ 1162.872565][T19760] syz_tun: entered allmulticast mode [ 1163.604701][T10851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1163.605291][ T1604] hid-generic 0007:0005:0009.003C: unknown main item tag 0x3 [ 1163.635313][ T30] audit: type=1400 audit(1750178321.610:28461): avc: denied { create } for pid=19748 comm="syz.0.3832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1163.797269][ T30] audit: type=1400 audit(1750178321.690:28462): avc: denied { read write } for pid=19528 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1163.823943][ T1604] hid-generic 0007:0005:0009.003C: hidraw0: HID v0.08 Device [syz1] on syz1 [ 1163.835134][ T30] audit: type=1400 audit(1750178321.690:28463): avc: denied { open } for pid=19528 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1163.875526][ T5881] usb 4-1: config 5 has an invalid interface number: 178 but max is 0 [ 1163.904273][ T5881] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 1163.913708][ T30] audit: type=1400 audit(1750178321.690:28464): avc: denied { ioctl } for pid=19528 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1163.939491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1163.994383][ T5881] usb 4-1: config 5 has no interface number 0 [ 1164.000632][ T5881] usb 4-1: config 5 interface 178 altsetting 253 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1164.033575][ T5881] usb 4-1: config 5 interface 178 altsetting 253 bulk endpoint 0xD has invalid maxpacket 64 [ 1164.091065][ T5881] usb 4-1: config 5 interface 178 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 1164.113463][ T5881] usb 4-1: config 5 interface 178 altsetting 253 endpoint 0x7 has invalid maxpacket 1536, setting to 64 [ 1164.190970][ T5881] usb 4-1: config 5 interface 178 altsetting 253 bulk endpoint 0x4 has invalid maxpacket 8 [ 1164.201383][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1164.209884][ T5881] usb 4-1: config 5 interface 178 altsetting 253 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 1164.221894][ T5881] usb 4-1: config 5 interface 178 altsetting 253 has a duplicate endpoint with address 0x8D, skipping [ 1164.280361][ T5881] usb 4-1: config 5 interface 178 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 1164.291716][ T5881] usb 4-1: config 5 interface 178 altsetting 253 has a duplicate endpoint with address 0x7, skipping [ 1164.302710][ T5881] usb 4-1: config 5 interface 178 altsetting 253 endpoint 0xC has an invalid bInterval 170, changing to 11 [ 1164.352792][ T5881] usb 4-1: config 5 interface 178 altsetting 253 endpoint 0x89 has invalid maxpacket 1024, setting to 64 [ 1164.754584][ T5881] usb 4-1: config 5 interface 178 altsetting 253 has 12 endpoint descriptors, different from the interface descriptor's value: 10 [ 1164.835076][ T5881] usb 4-1: config 5 interface 178 has no altsetting 0 [ 1164.844562][ T5881] usb 4-1: New USB device found, idVendor=2184, idProduct=0057, bcdDevice=4c.af [ 1164.854183][T10846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1164.945837][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.953936][ T5881] usb 4-1: Product: Л [ 1164.959854][ T5881] usb 4-1: Manufacturer: ᐌ [ 1164.966200][ T5881] usb 4-1: SerialNumber: 㸿ﺒ∽櫣槻䔿魡蓶ꞙ [ 1165.034615][ T5881] usb 4-1: can't set config #5, error -71 [ 1165.060924][ T5881] usb 4-1: USB disconnect, device number 92 [ 1165.220869][T19780] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3842'. [ 1166.017237][T19780] syz_tun (unregistering): left allmulticast mode [ 1166.162321][T19776] lo speed is unknown, defaulting to 1000 [ 1166.178064][T19776] lo speed is unknown, defaulting to 1000 [ 1166.185732][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1166.294390][T16755] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1166.466076][T16755] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.500661][T16755] usb 6-1: config 0 has no interfaces? [ 1166.523838][T16755] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1166.980716][T16755] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.002345][T16755] usb 6-1: config 0 descriptor?? [ 1167.032749][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 1167.032766][ T30] audit: type=1400 audit(1750178326.550:28596): avc: denied { ioctl } for pid=19791 comm="syz.5.3844" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1167.051750][T19803] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3846'. [ 1167.073577][T19803] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3846'. [ 1167.272818][T19803] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3846'. [ 1167.293437][ T30] audit: type=1400 audit(1750178326.560:28597): avc: denied { create } for pid=19797 comm="syz.0.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1167.339165][ T30] audit: type=1400 audit(1750178326.560:28598): avc: denied { ioctl } for pid=19797 comm="syz.0.3846" path="socket:[65050]" dev="sockfs" ino=65050 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1167.382350][ T30] audit: type=1400 audit(1750178326.570:28599): avc: denied { create } for pid=19797 comm="syz.0.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1167.413695][ T30] audit: type=1400 audit(1750178326.570:28600): avc: denied { write } for pid=19797 comm="syz.0.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1167.489432][ T5891] usb 6-1: USB disconnect, device number 9 [ 1167.510575][ T30] audit: type=1400 audit(1750178326.570:28601): avc: denied { read } for pid=19797 comm="syz.0.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1167.531456][ T30] audit: type=1400 audit(1750178326.570:28602): avc: denied { ioctl } for pid=19797 comm="syz.0.3846" path="socket:[65054]" dev="sockfs" ino=65054 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1167.582511][ T30] audit: type=1400 audit(1750178326.620:28603): avc: denied { sys_module } for pid=19793 comm="syz.7.3845" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1167.616694][ T30] audit: type=1400 audit(1750178326.620:28604): avc: denied { module_request } for pid=19793 comm="syz.7.3845" kmod="veth1_vlan" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1167.662576][ T30] audit: type=1400 audit(1750178326.740:28605): avc: denied { create } for pid=19797 comm="syz.0.3846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1168.180022][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'. [ 1168.449566][T16755] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1168.466022][ T5891] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1168.657440][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.670434][T16755] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1168.700047][ T5891] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 1168.714753][T16755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.743710][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.764545][T16755] usb 1-1: Product: syz [ 1168.768776][T16755] usb 1-1: Manufacturer: syz [ 1168.773375][T16755] usb 1-1: SerialNumber: syz [ 1168.784300][ T5891] usb 5-1: Product: syz [ 1168.794468][ T5891] usb 5-1: Manufacturer: syz [ 1168.809414][ T5891] usb 5-1: SerialNumber: syz [ 1168.813447][ T5881] hid-generic 0007:0005:0009.003D: unknown main item tag 0x1 [ 1168.827795][ T5881] hid-generic 0007:0005:0009.003D: unknown main item tag 0x3 [ 1168.850178][ T5881] hid-generic 0007:0005:0009.003D: hidraw0: HID v0.08 Device [syz1] on syz1 [ 1168.853878][ T5891] usb 5-1: config 0 descriptor?? [ 1168.885586][T16755] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1168.913808][ T5890] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1169.055009][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1169.604968][ T5891] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -5 [ 1169.613310][ T5891] f81534a_ctrl 5-1:0.0: failed to enable ports: -5 [ 1169.634355][ T5891] f81534a_ctrl 5-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 1169.684706][ T5891] usb 5-1: USB disconnect, device number 98 [ 1169.805699][T19834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.815412][T19834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1170.220529][ T5890] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1170.231476][ T5890] ath9k_htc: Failed to initialize the device [ 1170.347055][ T5890] usb 1-1: ath9k_htc: USB layer deinitialized [ 1170.594959][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1170.624435][T16755] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1170.795312][T16755] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 1170.841221][T16755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.884038][T16755] usb 4-1: config 0 descriptor?? [ 1170.900236][T16755] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1170.910205][T16755] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1170.919514][T16755] dvb-usb: bulk message failed: -22 (2/0) [ 1170.943451][T16755] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1171.090721][T16755] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 1171.108540][T16755] usb 4-1: USB disconnect, device number 93 [ 1171.559523][ T5881] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1171.585740][ T5890] usb 1-1: USB disconnect, device number 102 [ 1171.726422][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.736493][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1171.749974][ T5881] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1171.867843][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.876454][ T7316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1171.919576][ T5881] usb 5-1: config 0 descriptor?? [ 1172.034551][ T30] kauditd_printk_skb: 164 callbacks suppressed [ 1172.034580][ T30] audit: type=1400 audit(1750178331.550:28770): avc: denied { execmem } for pid=19852 comm="syz.7.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1172.092045][ T30] audit: type=1400 audit(1750178331.600:28771): avc: denied { read write } for pid=16623 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1172.244475][ T30] audit: type=1400 audit(1750178331.600:28772): avc: denied { read write open } for pid=16623 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1172.819459][ T30] audit: type=1400 audit(1750178331.600:28773): avc: denied { ioctl } for pid=16623 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1173.067049][ T30] audit: type=1400 audit(1750178331.640:28774): avc: denied { map_create } for pid=19854 comm="syz.0.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1173.187292][ T30] audit: type=1400 audit(1750178331.640:28775): avc: denied { bpf } for pid=19854 comm="syz.0.3862" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1173.210904][ T30] audit: type=1400 audit(1750178331.640:28776): avc: denied { map_read map_write } for pid=19854 comm="syz.0.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1173.235092][T19861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1173.249267][ T30] audit: type=1400 audit(1750178331.710:28777): avc: denied { read } for pid=19854 comm="syz.0.3862" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1173.381625][ T30] audit: type=1400 audit(1750178331.710:28778): avc: denied { open } for pid=19854 comm="syz.0.3862" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1173.441881][ T30] audit: type=1400 audit(1750178331.720:28779): avc: denied { ioctl } for pid=19846 comm="syz.4.3859" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1173.656978][ T1604] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1173.770714][T19870] qnx6: unable to read the first superblock [ 1173.824434][ T1604] usb 1-1: Using ep0 maxpacket: 8 [ 1173.853081][ T1604] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1173.866432][ T1604] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.881386][ T1604] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1173.891060][ T1604] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1173.899420][ T1604] usb 1-1: Product: syz [ 1173.904075][ T1604] usb 1-1: Manufacturer: syz [ 1173.925122][ T1604] usb 1-1: config 0 descriptor?? [ 1174.107642][T19877] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3869'. [ 1174.310400][ T1604] usb 1-1: USB disconnect, device number 103 [ 1174.364607][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1174.385040][ T5881] usbhid 5-1:0.0: can't add hid device: -71 [ 1174.391067][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1174.417820][ T5881] usb 5-1: USB disconnect, device number 99 [ 1174.441117][T19884] veth1_to_batadv: mtu less than device minimum [ 1174.733823][T19889] @: renamed from vlan0 (while UP) [ 1175.594440][ T5890] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1175.776395][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.801301][ T5890] usb 4-1: config 0 has no interfaces? [ 1175.810325][ T5890] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1175.811386][T19909] tmpfs: Bad value for 'rootcontext' [ 1175.819849][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.837769][ T5890] usb 4-1: config 0 descriptor?? [ 1175.885005][T19909] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1176.262751][ T5890] usb 4-1: USB disconnect, device number 94 [ 1176.387736][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1177.194469][ T30] kauditd_printk_skb: 207 callbacks suppressed [ 1177.194513][ T30] audit: type=1400 audit(1750178336.700:28987): avc: denied { execmem } for pid=19921 comm="syz.4.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1177.307490][ T30] audit: type=1400 audit(1750178336.710:28988): avc: denied { read write } for pid=16623 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1177.333115][ T30] audit: type=1400 audit(1750178336.710:28989): avc: denied { open } for pid=16623 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1177.357804][ T30] audit: type=1400 audit(1750178336.710:28990): avc: denied { ioctl } for pid=16623 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1177.641398][T19928] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3884'. [ 1177.783957][T10851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1177.794532][ T30] audit: type=1400 audit(1750178336.940:28991): avc: denied { create } for pid=19921 comm="syz.4.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1177.794597][ T30] audit: type=1400 audit(1750178336.950:28992): avc: denied { prog_load } for pid=19921 comm="syz.4.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1177.814467][ C1] vkms_vblank_simulate: vblank timer overrun [ 1177.843998][ T30] audit: type=1400 audit(1750178336.950:28993): avc: denied { bpf } for pid=19921 comm="syz.4.3884" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1177.865023][ T30] audit: type=1400 audit(1750178336.950:28994): avc: denied { perfmon } for pid=19921 comm="syz.4.3884" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1177.866672][ T1604] libceph: connect (1)[c::]:6789 error -101 [ 1177.886191][ T30] audit: type=1400 audit(1750178336.950:28995): avc: denied { prog_run } for pid=19921 comm="syz.4.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1177.886228][ T30] audit: type=1400 audit(1750178337.050:28996): avc: denied { read } for pid=19921 comm="syz.4.3884" dev="nsfs" ino=4026532972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1177.932746][ C1] vkms_vblank_simulate: vblank timer overrun [ 1177.946357][ T1604] libceph: mon0 (1)[c::]:6789 connect error [ 1178.022092][T19925] ceph: No mds server is up or the cluster is laggy [ 1178.203170][T19939] netlink: 'syz.0.3889': attribute type 1 has an invalid length. [ 1178.209019][T19941] netlink: 'syz.4.3890': attribute type 1 has an invalid length. [ 1178.224637][ T5890] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1178.256302][T19941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1178.263939][T19941] bond1: (slave bond2): making interface the new active one [ 1178.276643][T19941] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1178.368152][T19944] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1178.384458][T19944] bond1: (slave bond2): making interface the new active one [ 1178.392199][T19944] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1178.411022][ T5890] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 1178.434516][ T5890] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.474266][ T5890] usb 4-1: config 135 has no interface number 0 [ 1178.507004][ T5890] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1178.560286][ T5890] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1178.589973][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.610314][ T5890] usb 4-1: Product: syz [ 1178.620393][ T5890] usb 4-1: Manufacturer: syz [ 1178.640685][ T5890] usb 4-1: SerialNumber: syz [ 1178.864610][ T1604] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1179.797296][T10846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1179.808360][ T5830] Bluetooth: hci5: command 0x0405 tx timeout [ 1179.894304][ T1604] usb 1-1: Using ep0 maxpacket: 16 [ 1179.929139][ T1604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.008991][ T1604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.028419][ T1604] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1180.041783][ T1604] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1180.051095][ T1604] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.079768][ T1604] usb 1-1: config 0 descriptor?? [ 1180.374288][ T5881] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1180.507096][ T1604] ryos 0003:1E7D:31CE.003E: nested delimiters [ 1180.513304][ T1604] ryos 0003:1E7D:31CE.003E: item 0 4 2 10 parsing failed [ 1180.521175][ T1604] ryos 0003:1E7D:31CE.003E: parse failed [ 1180.526987][ T5881] usb 5-1: Using ep0 maxpacket: 32 [ 1180.532320][ T1604] ryos 0003:1E7D:31CE.003E: probe with driver ryos failed with error -22 [ 1180.578434][ T5881] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1180.589879][ T5881] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1180.607005][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.621719][ T5881] usb 5-1: Product: syz [ 1180.626776][ T5881] usb 5-1: Manufacturer: syz [ 1180.631784][ T5881] usb 5-1: SerialNumber: syz [ 1180.647645][ T5881] usb 5-1: config 0 descriptor?? [ 1180.975565][ T5943] usb 1-1: USB disconnect, device number 104 [ 1181.053880][ T5890] usb 4-1: USB disconnect, device number 95 [ 1181.329710][ T5881] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1181.849522][ T5881] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1181.858317][ T5881] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 1182.138429][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1182.358015][ T30] kauditd_printk_skb: 171 callbacks suppressed [ 1182.358030][ T30] audit: type=1400 audit(1750178341.880:29168): avc: denied { read write } for pid=19528 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1182.424397][ T30] audit: type=1400 audit(1750178341.880:29169): avc: denied { read write open } for pid=19528 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1182.502103][ T30] audit: type=1400 audit(1750178341.880:29170): avc: denied { ioctl } for pid=19528 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1182.554559][ T30] audit: type=1400 audit(1750178341.890:29171): avc: denied { read } for pid=19990 comm="syz.0.3904" dev="nsfs" ino=4026533135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1182.596497][ T30] audit: type=1400 audit(1750178341.890:29172): avc: denied { read open } for pid=19990 comm="syz.0.3904" path="net:[4026533135]" dev="nsfs" ino=4026533135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1182.653088][ T5891] hid-generic 0007:0005:0009.003F: unknown main item tag 0x1 [ 1182.662355][ T5891] hid-generic 0007:0005:0009.003F: unknown main item tag 0x3 [ 1182.754979][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1182.863715][ T30] audit: type=1400 audit(1750178341.890:29173): avc: denied { create } for pid=19990 comm="syz.0.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1183.296259][ T5890] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1183.309541][ T5891] hid-generic 0007:0005:0009.003F: hidraw0: HID v0.08 Device [syz1] on syz1 [ 1183.321502][ T30] audit: type=1400 audit(1750178341.920:29174): avc: denied { read write } for pid=19990 comm="syz.0.3904" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1183.395099][ T30] audit: type=1400 audit(1750178341.920:29175): avc: denied { open } for pid=19990 comm="syz.0.3904" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1183.396214][T10842] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1183.456937][ T30] audit: type=1400 audit(1750178341.920:29176): avc: denied { mounton } for pid=19990 comm="syz.0.3904" path="/236/file0" dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1183.496018][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 1183.558987][ T5881] usb 5-1: USB disconnect, device number 100 [ 1183.594554][ T30] audit: type=1400 audit(1750178341.920:29177): avc: denied { allowed } for pid=19990 comm="syz.0.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1183.617163][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.628345][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.641336][ T5890] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1183.653525][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.697978][ T5890] usb 4-1: config 0 descriptor?? [ 1184.210144][ T5890] hid (null): global environment stack underflow [ 1184.245979][ T5890] waterforce 0003:1044:7A4D.0040: global environment stack underflow [ 1184.270521][ T5890] waterforce 0003:1044:7A4D.0040: item 0 0 1 11 parsing failed [ 1184.291052][ T5890] waterforce 0003:1044:7A4D.0040: hid parse failed with -22 [ 1184.298993][ T5890] waterforce 0003:1044:7A4D.0040: probe with driver waterforce failed with error -22 [ 1184.447786][ T5898] usb 4-1: USB disconnect, device number 96 [ 1184.574768][ T5890] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1184.747839][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 1184.767377][ T5890] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1184.780713][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.789079][ T5890] usb 6-1: Product: syz [ 1184.794092][ T5890] usb 6-1: Manufacturer: syz [ 1184.798875][ T5890] usb 6-1: SerialNumber: syz [ 1184.814502][ T5890] usb 6-1: config 0 descriptor?? [ 1185.034845][ T5890] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1185.089818][ T5890] gspca_sunplus: reg_w_riv err -71 [ 1185.103820][ T5890] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1185.121042][T20045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3918'. [ 1185.132509][ T5890] usb 6-1: USB disconnect, device number 10 [ 1185.518545][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1187.183145][T20078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3927'. [ 1187.245257][ T5890] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1187.284350][ T5898] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1187.873204][T20084] FAULT_INJECTION: forcing a failure. [ 1187.873204][T20084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.875318][T20084] [ 1187.875328][T20084] ====================================================== [ 1187.875347][T20084] WARNING: possible circular locking dependency detected [ 1187.875352][T20084] 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 Not tainted [ 1187.875360][T20084] ------------------------------------------------------ [ 1187.875364][T20084] syz.5.3930/20084 is trying to acquire lock: [ 1187.875370][T20084] ffffffff8e4d1e00 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 1187.875416][T20084] [ 1187.875416][T20084] but task is already holding lock: [ 1187.875420][T20084] ffff8880b843bc98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1187.875447][T20084] [ 1187.875447][T20084] which lock already depends on the new lock. [ 1187.875447][T20084] [ 1187.875451][T20084] [ 1187.875451][T20084] the existing dependency chain (in reverse order) is: [ 1187.875455][T20084] [ 1187.875455][T20084] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1187.875469][T20084] _raw_spin_lock_nested+0x31/0x40 [ 1187.875489][T20084] raw_spin_rq_lock_nested+0x29/0x130 [ 1187.875501][T20084] task_rq_lock+0xcf/0x490 [ 1187.875513][T20084] cgroup_move_task+0x81/0x2a0 [ 1187.875528][T20084] css_set_move_task+0x288/0x5f0 [ 1187.875539][T20084] cgroup_post_fork+0x201/0x9e0 [ 1187.875551][T20084] copy_process+0x5cfc/0x76a0 [ 1187.875565][T20084] kernel_clone+0xfc/0x960 [ 1187.875577][T20084] user_mode_thread+0xc7/0x110 [ 1187.875592][T20084] rest_init+0x23/0x2b0 [ 1187.875602][T20084] start_kernel+0x3ee/0x4d0 [ 1187.875619][T20084] x86_64_start_reservations+0x18/0x30 [ 1187.875633][T20084] x86_64_start_kernel+0x130/0x190 [ 1187.875646][T20084] common_startup_64+0x13e/0x148 [ 1187.875657][T20084] [ 1187.875657][T20084] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1187.875670][T20084] _raw_spin_lock_irqsave+0x3a/0x60 [ 1187.875683][T20084] try_to_wake_up+0xb2/0x1680 [ 1187.875695][T20084] __wake_up_common+0x135/0x1f0 [ 1187.875711][T20084] __wake_up+0x31/0x60 [ 1187.875725][T20084] tty_port_default_wakeup+0x2a/0x40 [ 1187.875745][T20084] serial8250_tx_chars+0x68e/0x860 [ 1187.875765][T20084] serial8250_handle_irq+0x761/0xcb0 [ 1187.875774][T20084] serial8250_default_handle_irq+0x9a/0x210 [ 1187.875783][T20084] serial8250_interrupt+0x103/0x210 [ 1187.875794][T20084] __handle_irq_event_percpu+0x229/0x7d0 [ 1187.875806][T20084] handle_irq_event+0xab/0x1e0 [ 1187.875818][T20084] handle_edge_irq+0x28e/0xab0 [ 1187.875834][T20084] __common_interrupt+0xdf/0x250 [ 1187.875847][T20084] common_interrupt+0xba/0xe0 [ 1187.875859][T20084] asm_common_interrupt+0x26/0x40 [ 1187.875871][T20084] pv_native_safe_halt+0xf/0x20 [ 1187.875884][T20084] default_idle+0x13/0x20 [ 1187.875893][T20084] default_idle_call+0x6d/0xb0 [ 1187.875902][T20084] do_idle+0x391/0x510 [ 1187.875914][T20084] cpu_startup_entry+0x4f/0x60 [ 1187.875927][T20084] start_secondary+0x21d/0x2b0 [ 1187.875943][T20084] common_startup_64+0x13e/0x148 [ 1187.875951][T20084] [ 1187.875951][T20084] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1187.875965][T20084] _raw_spin_lock_irqsave+0x3a/0x60 [ 1187.875978][T20084] __wake_up+0x1c/0x60 [ 1187.875990][T20084] tty_port_default_wakeup+0x2a/0x40 [ 1187.876005][T20084] serial8250_tx_chars+0x68e/0x860 [ 1187.876021][T20084] serial8250_handle_irq+0x761/0xcb0 [ 1187.876030][T20084] serial8250_default_handle_irq+0x9a/0x210 [ 1187.876040][T20084] serial8250_interrupt+0x103/0x210 [ 1187.876050][T20084] __handle_irq_event_percpu+0x229/0x7d0 [ 1187.876062][T20084] handle_irq_event+0xab/0x1e0 [ 1187.876073][T20084] handle_edge_irq+0x28e/0xab0 [ 1187.876083][T20084] __common_interrupt+0xdf/0x250 [ 1187.876095][T20084] common_interrupt+0xba/0xe0 [ 1187.876104][T20084] asm_common_interrupt+0x26/0x40 [ 1187.876114][T20084] pv_native_safe_halt+0xf/0x20 [ 1187.876127][T20084] default_idle+0x13/0x20 [ 1187.876136][T20084] default_idle_call+0x6d/0xb0 [ 1187.876145][T20084] do_idle+0x391/0x510 [ 1187.876156][T20084] cpu_startup_entry+0x4f/0x60 [ 1187.876168][T20084] start_secondary+0x21d/0x2b0 [ 1187.876181][T20084] common_startup_64+0x13e/0x148 [ 1187.876189][T20084] [ 1187.876189][T20084] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1187.876207][T20084] _raw_spin_lock_irqsave+0x3a/0x60 [ 1187.876220][T20084] serial8250_console_write+0x181/0x1890 [ 1187.876230][T20084] console_flush_all+0x801/0xc60 [ 1187.876242][T20084] console_unlock+0xd8/0x210 [ 1187.876252][T20084] vprintk_emit+0x418/0x6d0 [ 1187.876264][T20084] _printk+0xc7/0x100 [ 1187.876271][T20084] register_console+0xc2d/0x11b0 [ 1187.876283][T20084] univ8250_console_init+0x5f/0x90 [ 1187.876301][T20084] console_init+0x14f/0x680 [ 1187.876315][T20084] start_kernel+0x29f/0x4d0 [ 1187.876328][T20084] x86_64_start_reservations+0x18/0x30 [ 1187.876341][T20084] x86_64_start_kernel+0x130/0x190 [ 1187.876354][T20084] common_startup_64+0x13e/0x148 [ 1187.876363][T20084] [ 1187.876363][T20084] -> #0 (console_owner){-.-.}-{0:0}: [ 1187.876375][T20084] __lock_acquire+0x126f/0x1c90 [ 1187.876391][T20084] lock_acquire+0x179/0x350 [ 1187.876405][T20084] console_lock_spinning_enable+0xb0/0xd0 [ 1187.876416][T20084] console_flush_all+0x7aa/0xc60 [ 1187.876428][T20084] console_unlock+0xd8/0x210 [ 1187.876454][T20084] vprintk_emit+0x418/0x6d0 [ 1187.876466][T20084] _printk+0xc7/0x100 [ 1187.876473][T20084] should_fail_ex+0x4e7/0x640 [ 1187.876488][T20084] strncpy_from_user+0x3b/0x2e0 [ 1187.876500][T20084] strncpy_from_user_nofault+0x7f/0x180 [ 1187.876518][T20084] bpf_probe_read_user_str+0x26/0x70 [ 1187.876536][T20084] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 1187.876544][T20084] bpf_trace_run4+0x366/0x5a0 [ 1187.876554][T20084] __bpf_trace_sched_switch+0x145/0x190 [ 1187.876568][T20084] __traceiter_sched_switch+0x6f/0xc0 [ 1187.876580][T20084] __schedule+0x1bee/0x5de0 [ 1187.876594][T20084] preempt_schedule_irq+0x51/0x90 [ 1187.876608][T20084] irqentry_exit+0x36/0x90 [ 1187.876621][T20084] asm_sysvec_call_function_single+0x1a/0x20 [ 1187.876632][T20084] unwind_next_frame+0x522/0x20a0 [ 1187.876650][T20084] arch_stack_walk+0x94/0x100 [ 1187.876660][T20084] stack_trace_save+0x8e/0xc0 [ 1187.876675][T20084] kasan_save_stack+0x33/0x60 [ 1187.876689][T20084] kasan_save_track+0x14/0x30 [ 1187.876701][T20084] __kasan_kmalloc+0xaa/0xb0 [ 1187.876713][T20084] __kvmalloc_node_noprof+0x27b/0x620 [ 1187.876726][T20084] seq_read_iter+0x826/0x12c0 [ 1187.876742][T20084] seq_read+0x39e/0x4e0 [ 1187.876753][T20084] proc_reg_read+0x240/0x330 [ 1187.876771][T20084] vfs_readv+0x5be/0x8b0 [ 1187.876784][T20084] do_preadv+0x1a6/0x270 [ 1187.876794][T20084] do_syscall_64+0xcd/0x4c0 [ 1187.876810][T20084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.876819][T20084] [ 1187.876819][T20084] other info that might help us debug this: [ 1187.876819][T20084] [ 1187.876823][T20084] Chain exists of: [ 1187.876823][T20084] console_owner --> &p->pi_lock --> &rq->__lock [ 1187.876823][T20084] [ 1187.876843][T20084] Possible unsafe locking scenario: [ 1187.876843][T20084] [ 1187.876846][T20084] CPU0 CPU1 [ 1187.876849][T20084] ---- ---- [ 1187.876852][T20084] lock(&rq->__lock); [ 1187.876858][T20084] lock(&p->pi_lock); [ 1187.876865][T20084] lock(&rq->__lock); [ 1187.876872][T20084] lock(console_owner); [ 1187.876879][T20084] [ 1187.876879][T20084] *** DEADLOCK *** [ 1187.876879][T20084] [ 1187.876881][T20084] 6 locks held by syz.5.3930/20084: [ 1187.876888][T20084] #0: ffff888032a0a418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 1187.876912][T20084] #1: ffffffff8e5c4880 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 1187.876941][T20084] #2: ffff8880b843bc98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1187.876966][T20084] #3: ffffffff8e5c4880 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1cf/0x5a0 [ 1187.876988][T20084] #4: ffffffff8e5b2240 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1187.877008][T20084] #5: ffffffff8e5b22b0 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 1187.877032][T20084] [ 1187.877032][T20084] stack backtrace: [ 1187.877041][T20084] CPU: 0 UID: 0 PID: 20084 Comm: syz.5.3930 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1187.877055][T20084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1187.877062][T20084] Call Trace: [ 1187.877067][T20084] [ 1187.877072][T20084] dump_stack_lvl+0x116/0x1f0 [ 1187.877092][T20084] print_circular_bug+0x275/0x350 [ 1187.877108][T20084] check_noncircular+0x14c/0x170 [ 1187.877127][T20084] __lock_acquire+0x126f/0x1c90 [ 1187.877146][T20084] lock_acquire+0x179/0x350 [ 1187.877162][T20084] ? console_lock_spinning_enable+0x9f/0xd0 [ 1187.877175][T20084] ? console_lock_spinning_enable+0x88/0xd0 [ 1187.877188][T20084] console_lock_spinning_enable+0xb0/0xd0 [ 1187.877201][T20084] ? console_lock_spinning_enable+0x9f/0xd0 [ 1187.877213][T20084] console_flush_all+0x7aa/0xc60 [ 1187.877227][T20084] ? __pfx_console_flush_all+0x10/0x10 [ 1187.877242][T20084] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1187.877257][T20084] console_unlock+0xd8/0x210 [ 1187.877269][T20084] ? __pfx_console_unlock+0x10/0x10 [ 1187.877282][T20084] ? do_raw_spin_unlock+0x120/0x230 [ 1187.877294][T20084] ? _printk+0xc7/0x100 [ 1187.877302][T20084] ? __down_trylock_console_sem+0xb0/0x140 [ 1187.877314][T20084] vprintk_emit+0x418/0x6d0 [ 1187.877327][T20084] ? __pfx_vprintk_emit+0x10/0x10 [ 1187.877340][T20084] ? __lock_acquire+0xb8a/0x1c90 [ 1187.877357][T20084] _printk+0xc7/0x100 [ 1187.877366][T20084] ? __pfx__printk+0x10/0x10 [ 1187.877376][T20084] ? __pfx____ratelimit+0x10/0x10 [ 1187.877391][T20084] ? __lock_acquire+0x622/0x1c90 [ 1187.877408][T20084] should_fail_ex+0x4e7/0x640 [ 1187.877423][T20084] strncpy_from_user+0x3b/0x2e0 [ 1187.877436][T20084] ? lock_acquire+0x179/0x350 [ 1187.877452][T20084] strncpy_from_user_nofault+0x7f/0x180 [ 1187.877469][T20084] bpf_probe_read_user_str+0x26/0x70 [ 1187.877485][T20084] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 1187.877493][T20084] bpf_trace_run4+0x366/0x5a0 [ 1187.877505][T20084] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1187.877517][T20084] ? sched_clock_cpu+0x6c/0x530 [ 1187.877532][T20084] ? lock_acquire+0x179/0x350 [ 1187.877549][T20084] __bpf_trace_sched_switch+0x145/0x190 [ 1187.877562][T20084] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1187.877577][T20084] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 1187.877594][T20084] __traceiter_sched_switch+0x6f/0xc0 [ 1187.877606][T20084] __schedule+0x1bee/0x5de0 [ 1187.877624][T20084] ? __pfx___schedule+0x10/0x10 [ 1187.877638][T20084] ? lockdep_hardirqs_on+0x7c/0x110 [ 1187.877657][T20084] preempt_schedule_irq+0x51/0x90 [ 1187.877672][T20084] irqentry_exit+0x36/0x90 [ 1187.877686][T20084] asm_sysvec_call_function_single+0x1a/0x20 [ 1187.877698][T20084] RIP: 0010:unwind_next_frame+0x522/0x20a0 [ 1187.877716][T20084] Code: 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f b6 04 02 4c 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 32 14 00 00 0f b6 41 05 <83> e0 07 0f 84 53 fe ff ff 3c 01 0f 84 7b fe ff ff 4c 8d 41 04 4c [ 1187.877728][T20084] RSP: 0018:ffffc9000452f5c8 EFLAGS: 00000246 [ 1187.877737][T20084] RAX: 000000000000000b RBX: 0000000000000001 RCX: ffffffff9136834a [ 1187.877744][T20084] RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffffffff90b4e9e0 [ 1187.877751][T20084] RBP: ffffc9000452f680 R08: ffffffff91368416 R09: 0000000000000000 [ 1187.877758][T20084] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc9000452f688 [ 1187.877765][T20084] R13: ffffc9000452f638 R14: ffffc9000452f66d R15: ffffffff9136834f [ 1187.877776][T20084] ? unwind_next_frame+0x2ec/0x20a0 [ 1187.877793][T20084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.877805][T20084] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1187.877820][T20084] arch_stack_walk+0x94/0x100 [ 1187.877836][T20084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.877848][T20084] stack_trace_save+0x8e/0xc0 [ 1187.877862][T20084] ? __pfx_stack_trace_save+0x10/0x10 [ 1187.877877][T20084] ? __pfx___schedule+0x10/0x10 [ 1187.877891][T20084] kasan_save_stack+0x33/0x60 [ 1187.877904][T20084] ? kasan_save_stack+0x33/0x60 [ 1187.877917][T20084] ? kasan_save_track+0x14/0x30 [ 1187.877930][T20084] ? __kasan_kmalloc+0xaa/0xb0 [ 1187.877942][T20084] ? __kvmalloc_node_noprof+0x27b/0x620 [ 1187.877955][T20084] ? seq_read_iter+0x826/0x12c0 [ 1187.877967][T20084] ? seq_read+0x39e/0x4e0 [ 1187.877979][T20084] ? proc_reg_read+0x240/0x330 [ 1187.877994][T20084] ? vfs_readv+0x5be/0x8b0 [ 1187.878005][T20084] ? do_preadv+0x1a6/0x270 [ 1187.878016][T20084] ? do_syscall_64+0xcd/0x4c0 [ 1187.878032][T20084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.878051][T20084] kasan_save_track+0x14/0x30 [ 1187.878065][T20084] __kasan_kmalloc+0xaa/0xb0 [ 1187.878078][T20084] __kvmalloc_node_noprof+0x27b/0x620 [ 1187.878092][T20084] ? seq_read_iter+0x826/0x12c0 [ 1187.878106][T20084] ? seq_read_iter+0x826/0x12c0 [ 1187.878118][T20084] seq_read_iter+0x826/0x12c0 [ 1187.878134][T20084] seq_read+0x39e/0x4e0 [ 1187.878147][T20084] ? __pfx_seq_read+0x10/0x10 [ 1187.878160][T20084] ? rcu_is_watching+0x12/0xc0 [ 1187.878179][T20084] ? __pfx_seq_read+0x10/0x10 [ 1187.878191][T20084] proc_reg_read+0x240/0x330 [ 1187.878207][T20084] ? __pfx_proc_reg_read+0x10/0x10 [ 1187.878223][T20084] vfs_readv+0x5be/0x8b0 [ 1187.878236][T20084] ? __pfx_vfs_readv+0x10/0x10 [ 1187.878248][T20084] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1187.878264][T20084] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 1187.878282][T20084] ? lock_acquire+0x61/0x350 [ 1187.878300][T20084] ? __fget_files+0x20e/0x3c0 [ 1187.878317][T20084] ? do_preadv+0x1a6/0x270 [ 1187.878328][T20084] do_preadv+0x1a6/0x270 [ 1187.878340][T20084] ? __pfx_do_preadv+0x10/0x10 [ 1187.878354][T20084] do_syscall_64+0xcd/0x4c0 [ 1187.878370][T20084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.878381][T20084] RIP: 0033:0x7fc88df8e929 [ 1187.878392][T20084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1187.878401][T20084] RSP: 002b:00007fc88ee3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1187.878411][T20084] RAX: ffffffffffffffda RBX: 00007fc88e1b6080 RCX: 00007fc88df8e929 [ 1187.878418][T20084] RDX: 0000000000000004 RSI: 0000200000000340 RDI: 0000000000000003 [ 1187.878425][T20084] RBP: 00007fc88ee3c090 R08: 0000000000004000 R09: 0000000000000000 [ 1187.878431][T20084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.878437][T20084] R13: 0000000000000000 R14: 00007fc88e1b6080 R15: 00007fffcb099e58 [ 1187.878447][T20084] [ 1189.304465][T20084] CPU: 0 UID: 0 PID: 20084 Comm: syz.5.3930 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1189.304482][T20084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1189.304490][T20084] Call Trace: [ 1189.304497][T20084] [ 1189.304504][T20084] dump_stack_lvl+0x116/0x1f0 [ 1189.304526][T20084] should_fail_ex+0x512/0x640 [ 1189.304544][T20084] strncpy_from_user+0x3b/0x2e0 [ 1189.304556][T20084] ? lock_acquire+0x179/0x350 [ 1189.304575][T20084] strncpy_from_user_nofault+0x7f/0x180 [ 1189.304593][T20084] bpf_probe_read_user_str+0x26/0x70 [ 1189.304616][T20084] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 1189.304625][T20084] bpf_trace_run4+0x366/0x5a0 [ 1189.304637][T20084] ? __pfx_bpf_trace_run4+0x10/0x10 [ 1189.304649][T20084] ? sched_clock_cpu+0x6c/0x530 [ 1189.304665][T20084] ? lock_acquire+0x179/0x350 [ 1189.304682][T20084] __bpf_trace_sched_switch+0x145/0x190 [ 1189.304696][T20084] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 1189.304711][T20084] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 1189.304725][T20084] __traceiter_sched_switch+0x6f/0xc0 [ 1189.304739][T20084] __schedule+0x1bee/0x5de0 [ 1189.304757][T20084] ? __pfx___schedule+0x10/0x10 [ 1189.304771][T20084] ? lockdep_hardirqs_on+0x7c/0x110 [ 1189.304791][T20084] preempt_schedule_irq+0x51/0x90 [ 1189.304807][T20084] irqentry_exit+0x36/0x90 [ 1189.304822][T20084] asm_sysvec_call_function_single+0x1a/0x20 [ 1189.304835][T20084] RIP: 0010:unwind_next_frame+0x522/0x20a0 [ 1189.304854][T20084] Code: 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f b6 04 02 4c 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 32 14 00 00 0f b6 41 05 <83> e0 07 0f 84 53 fe ff ff 3c 01 0f 84 7b fe ff ff 4c 8d 41 04 4c [ 1189.304865][T20084] RSP: 0018:ffffc9000452f5c8 EFLAGS: 00000246 [ 1189.304875][T20084] RAX: 000000000000000b RBX: 0000000000000001 RCX: ffffffff9136834a [ 1189.304882][T20084] RDX: 0000000000000007 RSI: 0000000000000000 RDI: ffffffff90b4e9e0 [ 1189.304888][T20084] RBP: ffffc9000452f680 R08: ffffffff91368416 R09: 0000000000000000 [ 1189.304895][T20084] R10: 0000000000000000 R11: 0000000000000001 R12: ffffc9000452f688 [ 1189.304901][T20084] R13: ffffc9000452f638 R14: ffffc9000452f66d R15: ffffffff9136834f [ 1189.304913][T20084] ? unwind_next_frame+0x2ec/0x20a0 [ 1189.304929][T20084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.304941][T20084] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1189.304957][T20084] arch_stack_walk+0x94/0x100 [ 1189.304970][T20084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.304982][T20084] stack_trace_save+0x8e/0xc0 [ 1189.304996][T20084] ? __pfx_stack_trace_save+0x10/0x10 [ 1189.305011][T20084] ? __pfx___schedule+0x10/0x10 [ 1189.305025][T20084] kasan_save_stack+0x33/0x60 [ 1189.305040][T20084] ? kasan_save_stack+0x33/0x60 [ 1189.305053][T20084] ? kasan_save_track+0x14/0x30 [ 1189.305066][T20084] ? __kasan_kmalloc+0xaa/0xb0 [ 1189.305078][T20084] ? __kvmalloc_node_noprof+0x27b/0x620 [ 1189.305092][T20084] ? seq_read_iter+0x826/0x12c0 [ 1189.305106][T20084] ? seq_read+0x39e/0x4e0 [ 1189.305117][T20084] ? proc_reg_read+0x240/0x330 [ 1189.305134][T20084] ? vfs_readv+0x5be/0x8b0 [ 1189.305147][T20084] ? do_preadv+0x1a6/0x270 [ 1189.305158][T20084] ? do_syscall_64+0xcd/0x4c0 [ 1189.305174][T20084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.305194][T20084] kasan_save_track+0x14/0x30 [ 1189.305207][T20084] __kasan_kmalloc+0xaa/0xb0 [ 1189.305222][T20084] __kvmalloc_node_noprof+0x27b/0x620 [ 1189.305236][T20084] ? seq_read_iter+0x826/0x12c0 [ 1189.305250][T20084] ? seq_read_iter+0x826/0x12c0 [ 1189.305262][T20084] seq_read_iter+0x826/0x12c0 [ 1189.305279][T20084] seq_read+0x39e/0x4e0 [ 1189.305292][T20084] ? __pfx_seq_read+0x10/0x10 [ 1189.305305][T20084] ? rcu_is_watching+0x12/0xc0 [ 1189.305323][T20084] ? __pfx_seq_read+0x10/0x10 [ 1189.305336][T20084] proc_reg_read+0x240/0x330 [ 1189.305354][T20084] ? __pfx_proc_reg_read+0x10/0x10 [ 1189.305370][T20084] vfs_readv+0x5be/0x8b0 [ 1189.305383][T20084] ? __pfx_vfs_readv+0x10/0x10 [ 1189.305395][T20084] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1189.305412][T20084] ? rcu_preempt_deferred_qs_irqrestore+0x4f5/0xbc0 [ 1189.305430][T20084] ? lock_acquire+0x61/0x350 [ 1189.305448][T20084] ? __fget_files+0x20e/0x3c0 [ 1189.305464][T20084] ? do_preadv+0x1a6/0x270 [ 1189.305475][T20084] do_preadv+0x1a6/0x270 [ 1189.305487][T20084] ? __pfx_do_preadv+0x10/0x10 [ 1189.305501][T20084] do_syscall_64+0xcd/0x4c0 [ 1189.305518][T20084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.305529][T20084] RIP: 0033:0x7fc88df8e929 [ 1189.305540][T20084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1189.305550][T20084] RSP: 002b:00007fc88ee3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1189.305560][T20084] RAX: ffffffffffffffda RBX: 00007fc88e1b6080 RCX: 00007fc88df8e929 [ 1189.305566][T20084] RDX: 0000000000000004 RSI: 0000200000000340 RDI: 0000000000000003 [ 1189.305573][T20084] RBP: 00007fc88ee3c090 R08: 0000000000004000 R09: 0000000000000000 [ 1189.305579][T20084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.305585][T20084] R13: 0000000000000000 R14: 00007fc88e1b6080 R15: 00007fffcb099e58 [ 1189.305595][T20084] [ 1189.305704][ C1] vkms_vblank_simulate: vblank timer overrun [ 1189.808633][ C1] vkms_vblank_simulate: vblank timer overrun [ 1189.810472][ T30] kauditd_printk_skb: 285 callbacks suppressed [ 1189.810491][ T30] audit: type=1400 audit(1750178349.330:29463): avc: denied { write } for pid=20076 comm="syz.3.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1189.842216][T10851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1189.845804][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1189.933548][ T30] audit: type=1400 audit(1750178349.360:29464): avc: denied { read } for pid=20076 comm="syz.3.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1189.934652][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 1190.103306][ T30] audit: type=1400 audit(1750178349.620:29465): avc: denied { read write } for pid=19528 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1190.128922][ T30] audit: type=1400 audit(1750178349.620:29466): avc: denied { open } for pid=19528 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1190.154936][ T30] audit: type=1400 audit(1750178349.620:29467): avc: denied { ioctl } for pid=19528 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1190.171409][ T5890] usb 1-1: device descriptor read/all, error -71 [ 1190.181678][ T30] audit: type=1400 audit(1750178349.620:29468): avc: denied { create } for pid=20076 comm="syz.3.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1190.230801][ T30] audit: type=1400 audit(1750178349.620:29469): avc: denied { write } for pid=20076 comm="syz.3.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1190.253550][ T30] audit: type=1400 audit(1750178349.620:29470): avc: denied { create } for pid=20071 comm="syz.4.3925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1190.274625][ T30] audit: type=1400 audit(1750178349.620:29471): avc: denied { read } for pid=20076 comm="syz.3.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1190.296249][ T30] audit: type=1400 audit(1750178349.620:29472): avc: denied { execute } for pid=20076 comm="syz.3.3927" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1190.364300][ T5898] usb 5-1: device not accepting address 101, error -71 [ 1191.074660][T10851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1192.514373][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 1194.914709][T10851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1195.554718][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1195.563551][T10851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1196.194607][ T191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration