last executing test programs: 26.375337435s ago: executing program 4 (id=53): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000580)={0x0, 0x1, 0x10026, 0x3, &(0x7f00000005c0)=[{0x5, 0x8, 0x9, 0x7fff}, {0x6, 0x2, 0x4d00, 0x8}, {0x2, 0x6, 0x8003, 0x7fff}]}) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000002c0)={0x2, 0xfffffffd, 0x10, 0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8000000, 0x800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x1ffb, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000280)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) io_cancel(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f0000000080)="2087e2efb7b64cb91d41954cca2f601680b8", 0x12, 0x7ff, 0x0, 0x2}, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) 25.385573262s ago: executing program 4 (id=57): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r3, &(0x7f0000000000)=[{0x0}], 0x1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x39) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, &(0x7f0000000300), {0x15}, 0x0, 0x0, &(0x7f00000003c0)=""/172, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r8}) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000"/51], 0x0) 20.779673962s ago: executing program 4 (id=65): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902600042010000000904000001", @ANYBLOB, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) syz_open_dev$media(0x0, 0x4007, 0x0) socket$kcm(0x2, 0x5, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x6, 0x900}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r5}, 0x38) 19.415724825s ago: executing program 1 (id=68): socket(0x80000000000000a, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r4, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/185, 0xb9, 0x0, 0x1, 0x2}}, 0x75) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 18.088805264s ago: executing program 1 (id=70): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x802) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0x1a52) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00'}, 0x10) r2 = syz_io_uring_setup(0x32b7, &(0x7f0000000180)={0x0, 0xc27c, 0x2, 0x3, 0x39a}, &(0x7f0000000080), &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f0000000140)={0x0, 0x0, 0x18, 0x8, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x9798, 0x0, 0x1}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x10) sendfile(r1, r1, 0x0, 0x200000) 16.21919398s ago: executing program 0 (id=74): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x7d, &(0x7f0000000080)={0x0, 0x86f7, 0x2000}, &(0x7f0000000300), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000002a0e83dd8000000040000"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000003a000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500), 0x0, 0x4) 15.477604573s ago: executing program 4 (id=77): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) syz_usb_ep_write(r0, 0x8d, 0x0, 0x0) 15.283990714s ago: executing program 1 (id=78): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r3, &(0x7f0000000000)=[{0x0}], 0x1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x39) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, &(0x7f0000000300), {0x15}, 0x0, 0x0, &(0x7f00000003c0)=""/172, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r8}) syz_emit_ethernet(0x72, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000"/51], 0x0) 13.551169484s ago: executing program 0 (id=80): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902600042010000000904000001", @ANYBLOB, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) syz_open_dev$media(0x0, 0x4007, 0x0) socket$kcm(0x2, 0x5, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x6, 0x900}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r5}, 0x38) 13.044965864s ago: executing program 1 (id=81): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/4096, 0x1000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210800000122f8040905a103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a00140800000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) setuid(0x0) 12.244603467s ago: executing program 4 (id=82): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) bind$inet(r0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de"], 0x0) syz_usb_disconnect(r4) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}}], 0x1, 0x0, &(0x7f0000000480)={r5, r6+60000000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) 12.035008339s ago: executing program 3 (id=83): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv2(r4, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) fcntl$setown(r5, 0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0600000004000000080000001100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000200"/28], 0x48) 11.077005939s ago: executing program 3 (id=84): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/14, 0xe) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 10.724037949s ago: executing program 2 (id=85): getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000100)) getresgid(&(0x7f00000009c0), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8012}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x43) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 9.770783855s ago: executing program 2 (id=86): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r3, &(0x7f0000000000)=[{0x0}], 0x1) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x39) syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, &(0x7f0000000300), {0x15}, 0x0, 0x0, &(0x7f00000003c0)=""/172, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r8}) syz_emit_ethernet(0x72, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000"/51], 0x0) 9.535599589s ago: executing program 0 (id=87): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x400000000}, {}, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0x5, 0x0, 0x0, 0x2000000}}, 0xe4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000"/158], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r6 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="14794ebb0f317b5784ba506be33abe9e6c847b2c85785b77cdd91c042d9657cc08e190bd760f8eae2444717e815ef9dea221e40bac95e4f89ebfd207ea09d78d629388fa42bd4d631508fa5cce", 0x4d, 0xffffffffffffffff) keyctl$set_timeout(0xf, r6, 0x2) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read(r7, &(0x7f0000000080)=""/152, 0x98) read(r7, &(0x7f0000001140)=""/212, 0xd4) socket$nl_audit(0x10, 0x3, 0x9) fsetxattr(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="fd5c59aacc495706d43045099f01"], 0x0, 0x0, 0x2) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000480)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000100)={0xc}) 9.534079209s ago: executing program 1 (id=88): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x802) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0x1a52) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00'}, 0x10) r2 = syz_io_uring_setup(0x32b7, &(0x7f0000000180)={0x0, 0xc27c, 0x2, 0x3, 0x39a}, &(0x7f0000000080), &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f0000000140)={0x0, 0x0, 0x18, 0x8, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x9798, 0x0, 0x1}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x10) sendfile(r1, r1, 0x0, 0x200000) 8.204025177s ago: executing program 3 (id=89): getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000100)) getresgid(&(0x7f00000009c0), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x43) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 8.165929555s ago: executing program 2 (id=90): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000580)={0x0, 0x1, 0x10026, 0x5, &(0x7f00000005c0)=[{0x0, 0x7, 0x7, 0xabcc}, {0x5, 0x8, 0x9, 0x7fff}, {0x3, 0x1000, 0x1000, 0x9}, {0x6, 0x2, 0x4d00, 0x8}, {0x2, 0x6, 0x8003, 0x7fff}]}) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000002c0)={0x2, 0xfffffffd, 0x10, 0x2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x94, &(0x7f0000000600)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e25, @remote}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x101}, @in6={0xa, 0x4e24, 0x7fffffff, @private1, 0x6}, @in6={0xa, 0x4e20, 0x10000, @mcast1, 0xc1a3}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x1000, @empty}}, 0x7fff, 0x0, 0xd78e, 0x0, 0x5a1, 0x0, 0x7}, 0x9c) pipe(0x0) r5 = userfaultfd(0x80801) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x1ffb, r5, 0x0, 0x0, 0x6}]) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000280)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) io_cancel(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x7, 0xffffffffffffffff, &(0x7f0000000080)="2087e2efb7b64cb91d41954cca2f601680b8571b7099d49b9d74596eab80265e53d869", 0x23, 0x7ff, 0x0, 0x2}, &(0x7f0000000240)) 7.172627508s ago: executing program 3 (id=91): socket$nl_route(0x10, 0x3, 0x0) socket$isdn(0x22, 0x3, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.148179343s ago: executing program 4 (id=92): socket$nl_route(0x10, 0x3, 0x0) socket$isdn(0x22, 0x3, 0x2) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.650395788s ago: executing program 2 (id=93): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv2(r4, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000001700)={'syz0\x00', {0x54f, 0x1, 0x5, 0xfff}, 0x1b, [0x7, 0x4, 0x7ff, 0x1000004, 0x8, 0x3, 0x1, 0x3, 0x19d2, 0xaa, 0x123, 0x7, 0x3, 0x65f, 0x6, 0xa, 0x3, 0x5, 0x6, 0xe, 0x7fff, 0x800, 0x0, 0xc, 0x2, 0x3, 0xae, 0x2, 0xf0, 0x9, 0x40055c, 0x7, 0xc, 0x4, 0x6, 0xc, 0x0, 0x9, 0x80000001, 0x1200000, 0x2, 0xfffff8e4, 0x0, 0xcb0, 0x4, 0x9, 0x8, 0x4, 0x0, 0x3, 0xfff, 0x3ff, 0x1, 0x5b, 0xffffe9ab, 0x9, 0x7, 0x2169, 0xffff8000, 0x5, 0xee, 0x9, 0xd7a, 0x7fffffff], [0x36, 0x200, 0x6, 0x10ff, 0x6, 0x2, 0xe00, 0x6, 0x10, 0xfffffff8, 0x1c, 0x3, 0xd1, 0xa, 0x800, 0x4, 0xf8b, 0x3, 0x9, 0x1, 0x6, 0x6, 0x627e, 0x10000, 0x784, 0x7dd, 0x8, 0x1000, 0x5, 0x9, 0xa, 0xfffffffa, 0xa80, 0x7, 0x3, 0x3, 0xb, 0x80000001, 0x7f, 0x6, 0xfff, 0x591b999d, 0x80000000, 0xa7c1, 0x4, 0x101, 0xffff7fff, 0x4, 0x7, 0x3, 0x401, 0x8000, 0x1, 0x0, 0x2, 0xd, 0x5, 0x4, 0x3, 0x9, 0x8001, 0x68a3, 0x100, 0x8], [0x400, 0x5, 0x2, 0x9e4, 0x1, 0x100, 0x6d, 0x7, 0x8854, 0x4, 0x6, 0x2f, 0xe7, 0x9, 0x1, 0x2, 0xd3, 0x6, 0x4, 0xffff, 0xfffffffe, 0x3, 0xffffffff, 0x1, 0x1500, 0x0, 0xb8, 0x5, 0x80, 0x572, 0x9, 0x4, 0xe, 0x0, 0x0, 0x8, 0xe, 0x76, 0x60, 0x4, 0xf6b2, 0x5, 0x80000000, 0x0, 0x0, 0x4, 0xa20, 0x7, 0x97, 0x5, 0x18c9, 0x0, 0x0, 0x1, 0x6c, 0x0, 0x1, 0xfffffffb, 0x9264, 0x3, 0x9f, 0x2, 0x60e, 0x10000], [0x7, 0x1, 0x1, 0x1, 0x80000000, 0x9, 0x9, 0x4, 0x5, 0x6, 0x3, 0x4, 0x6, 0x242, 0x3800, 0x1, 0x0, 0x5e, 0xfff, 0xffffffff, 0x0, 0x6, 0x1, 0x5, 0x6, 0x80000000, 0x9, 0x6, 0x0, 0x100, 0x9, 0x4, 0xb98c, 0x2, 0xae341edd, 0xac4d, 0x9, 0x5, 0x5375, 0x8000, 0x800, 0x5, 0x6, 0xffffff15, 0x8, 0x3, 0x3a1, 0x0, 0x7, 0x7, 0x1, 0x5, 0x7, 0x7fff, 0x0, 0x7, 0x8, 0x6, 0x1000, 0x9, 0xe42, 0x1e, 0x94, 0x9]}, 0x45c) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) fcntl$setown(r6, 0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0600000004000000080000001100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000000200"/28], 0x48) 6.459452952s ago: executing program 1 (id=94): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x7d, &(0x7f0000000080)={0x0, 0x86f7, 0x2000}, &(0x7f0000000300), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000002a0e83dd8000000040000"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000003a000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500), 0x0, 0x4) 6.4328196s ago: executing program 0 (id=95): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40048094) getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5.463398044s ago: executing program 2 (id=96): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv2(r4, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$uinput_user_dev(r5, &(0x7f0000001700)={'syz0\x00', {0x54f, 0x1, 0x5, 0xfff}, 0x1b, [0x7, 0x4, 0x7ff, 0x1000004, 0x8, 0x3, 0x1, 0x3, 0x19d2, 0xaa, 0x123, 0x7, 0x3, 0x65f, 0x6, 0xa, 0x3, 0x5, 0x6, 0xe, 0x7fff, 0x800, 0x0, 0xc, 0x2, 0x3, 0xae, 0x2, 0xf0, 0x9, 0x40055c, 0x7, 0xc, 0x4, 0x6, 0xc, 0x0, 0x9, 0x80000001, 0x1200000, 0x2, 0xfffff8e4, 0x0, 0xcb0, 0x4, 0x9, 0x8, 0x4, 0x0, 0x3, 0xfff, 0x3ff, 0x1, 0x5b, 0xffffe9ab, 0x9, 0x7, 0x2169, 0xffff8000, 0x5, 0xee, 0x9, 0xd7a, 0x7fffffff], [0x36, 0x200, 0x6, 0x10ff, 0x6, 0x2, 0xe00, 0x6, 0x10, 0xfffffff8, 0x1c, 0x3, 0xd1, 0xa, 0x800, 0x4, 0xf8b, 0x3, 0x9, 0x1, 0x6, 0x6, 0x627e, 0x10000, 0x784, 0x7dd, 0x8, 0x1000, 0x5, 0x9, 0xa, 0xfffffffa, 0xa80, 0x7, 0x3, 0x3, 0xb, 0x80000001, 0x7f, 0x6, 0xfff, 0x591b999d, 0x80000000, 0xa7c1, 0x4, 0x101, 0xffff7fff, 0x4, 0x7, 0x3, 0x401, 0x8000, 0x1, 0x0, 0x2, 0xd, 0x5, 0x4, 0x3, 0x9, 0x8001, 0x68a3, 0x100, 0x8], [0x400, 0x5, 0x2, 0x9e4, 0x1, 0x100, 0x6d, 0x7, 0x8854, 0x4, 0x6, 0x2f, 0xe7, 0x9, 0x1, 0x2, 0xd3, 0x6, 0x4, 0xffff, 0xfffffffe, 0x3, 0xffffffff, 0x1, 0x1500, 0x0, 0xb8, 0x5, 0x80, 0x572, 0x9, 0x4, 0xe, 0x0, 0x0, 0x8, 0xe, 0x76, 0x60, 0x4, 0xf6b2, 0x5, 0x80000000, 0x0, 0x0, 0x4, 0xa20, 0x7, 0x97, 0x5, 0x18c9, 0x0, 0x0, 0x1, 0x6c, 0x0, 0x1, 0xfffffffb, 0x9264, 0x3, 0x9f, 0x2, 0x60e, 0x10000], [0x7, 0x1, 0x1, 0x1, 0x80000000, 0x9, 0x9, 0x4, 0x5, 0x6, 0x3, 0x4, 0x6, 0x242, 0x3800, 0x1, 0x0, 0x5e, 0xfff, 0xffffffff, 0x0, 0x6, 0x1, 0x5, 0x6, 0x80000000, 0x9, 0x6, 0x0, 0x100, 0x9, 0x4, 0xb98c, 0x2, 0xae341edd, 0xac4d, 0x9, 0x5, 0x5375, 0x8000, 0x800, 0x5, 0x6, 0xffffff15, 0x8, 0x3, 0x3a1, 0x0, 0x7, 0x7, 0x1, 0x5, 0x7, 0x7fff, 0x0, 0x7, 0x8, 0x6, 0x1000, 0x9, 0xe42, 0x1e, 0x94, 0x9]}, 0x45c) r6 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(0x0, 0x5) fcntl$setown(r6, 0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0600000004000000080000001100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000000200"/28], 0x48) 4.66873207s ago: executing program 0 (id=97): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x5, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96e", 0x0, 0x300, 0x0, 0x0, 0x0}) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/173) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x56b, 0xfffffffffffffffc}) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) unshare(0x20000400) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) lsm_set_self_attr(0x6a, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) 4.468080301s ago: executing program 2 (id=98): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10) r4 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_disconnect(r4) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}}], 0x1, 0x0, &(0x7f0000000480)={r5, r6+60000000}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) 3.995545968s ago: executing program 3 (id=99): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000010) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='nfs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) 3.646871887s ago: executing program 0 (id=100): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r1 = gettid() ptrace$setregset(0x4205, r1, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)="47221ada7bad185b39ed6435c60c3a7092064e5ee740cd7332fc6c6f85f49ed432f73ccf4b1d5129b3ba8b68e30928bbd4887f44b3b28e096a26217004b9941ea08cb28f2cc277f263362d543065a75bbbf300dd09c44af918db0367774403edea1b51d8725aa842e464ea9f1288bae64c71925b1ef1ecb4469b0218986bf4cf081a9967fede220adc263aee5bd8bf343deff3bfbb24485eed970a3db44ff053d89ca217e4568c45a43dc448e2a401c72121f13b2a93bf54845754dae212b7089dbe2e363d550fb4f34ebb90509e10c89325af8fe99f33730d662c218f4478d6313d4a1e3e7aa5d987012076ec817b7aef6ccde382600d90cb", 0xf9}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) accept4$unix(r3, 0x0, 0x0, 0x80000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, 0x0, 0x0) 0s ago: executing program 3 (id=101): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x7d, &(0x7f0000000080)={0x0, 0x86f7, 0x2000}, &(0x7f0000000300), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000002a0e83dd8000000"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000003a00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500), 0x0, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 58.108626][ T30] audit: type=1400 audit(1755123744.625:62): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 58.112226][ T5831] cgroup: Unknown subsys name 'net' [ 58.131443][ T30] audit: type=1400 audit(1755123744.625:63): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.161647][ T30] audit: type=1400 audit(1755123744.685:64): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.386569][ T5831] cgroup: Unknown subsys name 'cpuset' [ 58.394570][ T5831] cgroup: Unknown subsys name 'rlimit' [ 58.600176][ T30] audit: type=1400 audit(1755123745.115:65): avc: denied { setattr } for pid=5831 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.623627][ T30] audit: type=1400 audit(1755123745.115:66): avc: denied { create } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.656757][ T30] audit: type=1400 audit(1755123745.115:67): avc: denied { write } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.678029][ T30] audit: type=1400 audit(1755123745.115:68): avc: denied { read } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.698752][ T30] audit: type=1400 audit(1755123745.145:69): avc: denied { mounton } for pid=5831 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.723867][ T30] audit: type=1400 audit(1755123745.145:70): avc: denied { mount } for pid=5831 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 58.747243][ T30] audit: type=1400 audit(1755123745.155:71): avc: denied { read } for pid=5513 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.773787][ T5833] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 59.743815][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.915661][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.923824][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.932098][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.940297][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.948403][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.956276][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.966358][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.988226][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.988694][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.996062][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.010852][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.019378][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.019793][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.028984][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.035758][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.042512][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.048641][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.057629][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.062853][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.070718][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.078959][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.091625][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.098981][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.113533][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.124453][ T5168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.604508][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 62.627920][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 62.676949][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 62.687882][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 62.746220][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 62.844568][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.851784][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.859882][ T5853] bridge_slave_0: entered allmulticast mode [ 62.866822][ T5853] bridge_slave_0: entered promiscuous mode [ 62.878293][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.885447][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.892574][ T5841] bridge_slave_0: entered allmulticast mode [ 62.899729][ T5841] bridge_slave_0: entered promiscuous mode [ 62.922368][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.929684][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.936880][ T5853] bridge_slave_1: entered allmulticast mode [ 62.944284][ T5853] bridge_slave_1: entered promiscuous mode [ 62.958117][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.965325][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.972516][ T5841] bridge_slave_1: entered allmulticast mode [ 62.979635][ T5841] bridge_slave_1: entered promiscuous mode [ 62.987071][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.994388][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.001526][ T5852] bridge_slave_0: entered allmulticast mode [ 63.008662][ T5852] bridge_slave_0: entered promiscuous mode [ 63.016580][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.023761][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.030897][ T5852] bridge_slave_1: entered allmulticast mode [ 63.037817][ T5852] bridge_slave_1: entered promiscuous mode [ 63.064591][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.071773][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.079091][ T5843] bridge_slave_0: entered allmulticast mode [ 63.085890][ T5843] bridge_slave_0: entered promiscuous mode [ 63.136528][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.146099][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.154142][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.161341][ T5843] bridge_slave_1: entered allmulticast mode [ 63.168206][ T5843] bridge_slave_1: entered promiscuous mode [ 63.176611][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.195527][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.214151][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.234871][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.245789][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.255456][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.263079][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.270229][ T5848] bridge_slave_0: entered allmulticast mode [ 63.277030][ T5848] bridge_slave_0: entered promiscuous mode [ 63.314636][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.321777][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.329385][ T5848] bridge_slave_1: entered allmulticast mode [ 63.336193][ T5848] bridge_slave_1: entered promiscuous mode [ 63.363176][ T5853] team0: Port device team_slave_0 added [ 63.371174][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.383335][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.409484][ T5852] team0: Port device team_slave_0 added [ 63.425300][ T5853] team0: Port device team_slave_1 added [ 63.433330][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.452554][ T5841] team0: Port device team_slave_0 added [ 63.460954][ T5841] team0: Port device team_slave_1 added [ 63.467913][ T5852] team0: Port device team_slave_1 added [ 63.487781][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.547742][ T5843] team0: Port device team_slave_0 added [ 63.555870][ T5843] team0: Port device team_slave_1 added [ 63.577818][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.585372][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.613214][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.626986][ T5848] team0: Port device team_slave_0 added [ 63.641878][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.649170][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.675319][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.687336][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.694756][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.721182][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.733002][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.739947][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.766148][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.778192][ T5848] team0: Port device team_slave_1 added [ 63.799389][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.806439][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.832508][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.849145][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.856183][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.882785][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.912348][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.919468][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.945478][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.957724][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.964714][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.990758][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.014648][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.021610][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.048218][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.083599][ T5168] Bluetooth: hci0: command tx timeout [ 64.090052][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.097134][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.123618][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.154042][ T5852] hsr_slave_0: entered promiscuous mode [ 64.160782][ T5852] hsr_slave_1: entered promiscuous mode [ 64.166547][ T5168] Bluetooth: hci4: command tx timeout [ 64.173112][ T5845] Bluetooth: hci2: command tx timeout [ 64.173116][ T5850] Bluetooth: hci1: command tx timeout [ 64.173266][ T5168] Bluetooth: hci3: command tx timeout [ 64.226099][ T5853] hsr_slave_0: entered promiscuous mode [ 64.232379][ T5853] hsr_slave_1: entered promiscuous mode [ 64.238504][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 64.244365][ T5853] Cannot create hsr debugfs directory [ 64.254621][ T5843] hsr_slave_0: entered promiscuous mode [ 64.260989][ T5843] hsr_slave_1: entered promiscuous mode [ 64.267228][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 64.273001][ T5843] Cannot create hsr debugfs directory [ 64.281836][ T5841] hsr_slave_0: entered promiscuous mode [ 64.288726][ T5841] hsr_slave_1: entered promiscuous mode [ 64.294861][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 64.300600][ T5841] Cannot create hsr debugfs directory [ 64.419961][ T5848] hsr_slave_0: entered promiscuous mode [ 64.427229][ T5848] hsr_slave_1: entered promiscuous mode [ 64.434140][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 64.439874][ T5848] Cannot create hsr debugfs directory [ 64.730383][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.741359][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.758139][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.775321][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.820953][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.833446][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.845700][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.856118][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.923446][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.946835][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.961979][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.972439][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.041746][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.058092][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.075831][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.106017][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.188207][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.201091][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.213783][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.238948][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.249468][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.273885][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.283082][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.291842][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.320412][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.340228][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.347479][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.369228][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.380134][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.387685][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.420303][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.427457][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.442109][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.449255][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.485462][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.492572][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.506290][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.513438][ T4526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.594679][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.626675][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.687031][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.705537][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 65.705551][ T30] audit: type=1400 audit(1755123752.225:86): avc: denied { sys_module } for pid=5841 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.721505][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.758418][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.799436][ T4526] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.806583][ T4526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.839908][ T4526] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.847090][ T4526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.885216][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.892351][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.960868][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.968012][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.056450][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.085506][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.141534][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.165641][ T5168] Bluetooth: hci0: command tx timeout [ 66.243752][ T5168] Bluetooth: hci3: command tx timeout [ 66.244134][ T5850] Bluetooth: hci2: command tx timeout [ 66.249182][ T5168] Bluetooth: hci4: command tx timeout [ 66.256170][ T5845] Bluetooth: hci1: command tx timeout [ 66.331054][ T5843] veth0_vlan: entered promiscuous mode [ 66.345209][ T5852] veth0_vlan: entered promiscuous mode [ 66.387836][ T5843] veth1_vlan: entered promiscuous mode [ 66.416639][ T5852] veth1_vlan: entered promiscuous mode [ 66.488273][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.501688][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.532012][ T5843] veth0_macvtap: entered promiscuous mode [ 66.559566][ T5852] veth0_macvtap: entered promiscuous mode [ 66.577096][ T5843] veth1_macvtap: entered promiscuous mode [ 66.592117][ T5852] veth1_macvtap: entered promiscuous mode [ 66.628934][ T5848] veth0_vlan: entered promiscuous mode [ 66.642089][ T5848] veth1_vlan: entered promiscuous mode [ 66.655688][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.676599][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.687384][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.719343][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.730003][ T4526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.745284][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.755299][ T5853] veth0_vlan: entered promiscuous mode [ 66.769828][ T4526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.779022][ T4526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.818210][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.839743][ T5853] veth1_vlan: entered promiscuous mode [ 66.851203][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.860852][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.874802][ T5848] veth0_macvtap: entered promiscuous mode [ 66.895913][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.911329][ T5848] veth1_macvtap: entered promiscuous mode [ 66.919512][ T5841] veth0_vlan: entered promiscuous mode [ 66.980379][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.999407][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.006676][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.028511][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.041198][ T5841] veth1_vlan: entered promiscuous mode [ 67.047452][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.056489][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.079715][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.090093][ T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.101630][ T5853] veth0_macvtap: entered promiscuous mode [ 67.122118][ T79] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.132353][ T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.144124][ T5853] veth1_macvtap: entered promiscuous mode [ 67.155481][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.164205][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.195223][ T4526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.203010][ T30] audit: type=1400 audit(1755123753.705:87): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/root/syzkaller.Xnypo3/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.204423][ T4526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.261290][ T5841] veth0_macvtap: entered promiscuous mode [ 67.270935][ T30] audit: type=1400 audit(1755123753.715:88): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.282218][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.297229][ T30] audit: type=1400 audit(1755123753.715:89): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/root/syzkaller.Xnypo3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 67.315464][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.336207][ T30] audit: type=1400 audit(1755123753.715:90): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.378130][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.394267][ T30] audit: type=1400 audit(1755123753.755:91): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/root/syzkaller.Xnypo3/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 67.406887][ T5841] veth1_macvtap: entered promiscuous mode [ 67.422952][ T30] audit: type=1400 audit(1755123753.755:92): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/root/syzkaller.Xnypo3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 67.455974][ T30] audit: type=1400 audit(1755123753.775:93): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 67.477650][ T30] audit: type=1400 audit(1755123753.785:94): avc: denied { mounton } for pid=5843 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 67.502475][ T30] audit: type=1400 audit(1755123753.785:95): avc: denied { mount } for pid=5843 comm="syz-executor" name="/" dev="gadgetfs" ino=7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 67.539991][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.548970][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.571078][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.571075][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.571125][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.582839][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.727079][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.736876][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.887051][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.898487][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.283776][ T5850] Bluetooth: hci0: command tx timeout [ 68.323086][ T5850] Bluetooth: hci4: command tx timeout [ 68.328818][ T5850] Bluetooth: hci3: command tx timeout [ 68.334709][ T5850] Bluetooth: hci2: command tx timeout [ 68.342810][ T5845] Bluetooth: hci1: command tx timeout [ 68.425251][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.450719][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.462930][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.496580][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.511328][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.531025][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.832949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.844911][ T3580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.871183][ T3580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.291439][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.329598][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.339892][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.369869][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.006265][ T5982] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 70.222171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.231172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.324528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 70.333652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.363786][ T5850] Bluetooth: hci0: command tx timeout [ 70.403328][ T5850] Bluetooth: hci2: command tx timeout [ 70.410062][ T5850] Bluetooth: hci4: command tx timeout [ 70.415930][ T5850] Bluetooth: hci1: command tx timeout [ 70.415963][ T5845] Bluetooth: hci3: command tx timeout [ 70.433235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.441766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.729767][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 70.729783][ T30] audit: type=1400 audit(1755123757.245:124): avc: denied { write } for pid=5988 comm="syz.0.9" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.872315][ T30] audit: type=1400 audit(1755123757.385:125): avc: denied { sys_admin } for pid=5972 comm="syz.2.7" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 71.363598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.504400][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.530057][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.536770][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.683469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.705343][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.715755][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.730014][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.741762][ T30] audit: type=1400 audit(1755123758.245:126): avc: denied { create } for pid=5972 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.828814][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.866136][ T30] audit: type=1400 audit(1755123758.375:127): avc: denied { create } for pid=6004 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.893092][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.902471][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.943801][ T30] audit: type=1400 audit(1755123758.385:128): avc: denied { connect } for pid=6004 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.978624][ T24] usb 1-1: Product: syz [ 72.005673][ T24] usb 1-1: Manufacturer: syz [ 72.232880][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.328106][ T30] audit: type=1400 audit(1755123758.455:129): avc: denied { read } for pid=6002 comm="syz.3.12" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.408933][ T30] audit: type=1400 audit(1755123758.455:130): avc: denied { open } for pid=6002 comm="syz.3.12" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 72.464817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 72.673085][ T30] audit: type=1400 audit(1755123758.535:131): avc: denied { create } for pid=6002 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.692922][ C1] vkms_vblank_simulate: vblank timer overrun [ 72.700918][ T30] audit: type=1400 audit(1755123758.545:132): avc: denied { read } for pid=6002 comm="syz.3.12" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 72.751478][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 72.762868][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 72.820965][ T43] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 72.849359][ T30] audit: type=1400 audit(1755123758.545:133): avc: denied { open } for pid=6002 comm="syz.3.12" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 72.914195][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.128985][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.430345][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.497996][ T6026] Zero length message leads to an empty skb [ 74.040580][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.463962][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.645317][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.664693][ T43] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 74.933051][ T5857] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.271375][ T5857] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.283391][ T5857] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.303753][ T10] usb 2-1: USB disconnect, device number 2 [ 75.537258][ T24] usb 1-1: USB disconnect, device number 2 [ 75.586037][ T5857] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.658916][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.679133][ T6038] binder: 6037:6038 ioctl c0306201 200000000080 returned -14 [ 75.739696][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 75.739707][ T30] audit: type=1400 audit(1755123762.255:173): avc: denied { call } for pid=6037 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 75.779902][ T6034] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 75.795778][ T5857] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 76.093167][ T6034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.103083][ T6034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.245064][ T30] audit: type=1400 audit(1755123762.665:174): avc: denied { create } for pid=6039 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.095438][ T5926] usb 3-1: USB disconnect, device number 2 [ 79.362740][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.522389][ T30] audit: type=1400 audit(1755123766.035:175): avc: denied { create } for pid=6071 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 79.546216][ T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.609724][ T43] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 79.733332][ T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.753478][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.765365][ T30] audit: type=1400 audit(1755123766.045:176): avc: denied { create } for pid=6071 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.858022][ T6079] fuse: Unknown parameter 'user_i00000000000000000000' [ 80.290323][ T30] audit: type=1400 audit(1755123766.365:177): avc: denied { read write } for pid=6075 comm="syz.3.29" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.313383][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.329732][ T30] audit: type=1400 audit(1755123766.365:178): avc: denied { open } for pid=6075 comm="syz.3.29" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 80.358627][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.370236][ T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.386596][ T43] usb 5-1: invalid MIDI out EP 0 [ 80.420467][ T30] audit: type=1400 audit(1755123766.375:179): avc: denied { mounton } for pid=6075 comm="syz.3.29" path="/6/file0" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.442722][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.573142][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.593323][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.723944][ T30] audit: type=1400 audit(1755123766.905:180): avc: denied { read write } for pid=6081 comm="syz.1.30" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.746878][ C1] vkms_vblank_simulate: vblank timer overrun [ 80.889089][ T24] usb 1-1: config 0 has no interfaces? [ 80.949305][ T6084] netlink: 68 bytes leftover after parsing attributes in process `syz.1.30'. [ 80.987543][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 81.016615][ T43] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 81.027007][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.029783][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.038099][ T24] usb 1-1: Product: syz [ 81.056007][ T30] audit: type=1400 audit(1755123766.905:181): avc: denied { open } for pid=6081 comm="syz.1.30" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.078770][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.087082][ T24] usb 1-1: Manufacturer: syz [ 81.092980][ T24] usb 1-1: SerialNumber: syz [ 81.101329][ T30] audit: type=1400 audit(1755123767.035:182): avc: denied { setopt } for pid=6081 comm="syz.1.30" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.124896][ T24] usb 1-1: config 0 descriptor?? [ 81.130151][ T30] audit: type=1400 audit(1755123767.465:183): avc: denied { create } for pid=6081 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.150857][ T30] audit: type=1400 audit(1755123767.465:184): avc: denied { write } for pid=6081 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.252879][ T30] audit: type=1400 audit(1755123767.465:185): avc: denied { nlmsg_write } for pid=6081 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.416135][ T5898] usb 5-1: USB disconnect, device number 2 [ 81.533966][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.575915][ T1207] cfg80211: failed to load regulatory.db [ 81.609199][ T6074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.623630][ T6074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.731643][ T6073] netlink: 96 bytes leftover after parsing attributes in process `syz.2.25'. [ 81.792689][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 81.803703][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 81.817747][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.866072][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.902666][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 81.930322][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 81.940699][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 81.949879][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.995632][ T24] usb 4-1: config 0 descriptor?? [ 82.101260][ T6089] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 82.955903][ T5845] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 82.964667][ T93] usb 4-1: USB disconnect, device number 2 [ 83.057445][ T10] usb 1-1: USB disconnect, device number 3 [ 84.161408][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.195112][ T6102] netlink: 96 bytes leftover after parsing attributes in process `syz.1.32'. [ 84.278919][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.322202][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.453898][ T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.463818][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.485067][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.516102][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.577306][ T10] usb 4-1: config 0 has no interfaces? [ 84.588704][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 84.602485][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 84.631310][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 84.641082][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 84.649530][ T24] usb 1-1: Product: syz [ 84.659421][ T24] usb 1-1: Manufacturer: syz [ 84.672356][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.702764][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.763615][ T10] usb 4-1: Product: syz [ 84.804777][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 84.893432][ T10] usb 4-1: Manufacturer: syz [ 84.923736][ T10] usb 4-1: SerialNumber: syz [ 84.928984][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 85.152098][ T10] usb 4-1: config 0 descriptor?? [ 85.169538][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 85.207614][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 85.276182][ T9] usb 5-1: Product: syz [ 85.291642][ T9] usb 5-1: Manufacturer: syz [ 85.540984][ T6113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.549973][ T6113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.630745][ T30] audit: type=1400 audit(1755123772.145:186): avc: denied { bind } for pid=6123 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 85.691626][ T30] audit: type=1400 audit(1755123772.175:187): avc: denied { name_bind } for pid=6123 comm="syz.1.40" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 85.754706][ T30] audit: type=1400 audit(1755123772.175:188): avc: denied { node_bind } for pid=6123 comm="syz.1.40" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 87.293508][ T24] usb 1-1: USB disconnect, device number 4 [ 87.723487][ T9] usb 5-1: USB disconnect, device number 3 [ 87.805385][ T10] usb 4-1: USB disconnect, device number 3 [ 87.892892][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.147912][ T30] audit: type=1400 audit(1755123774.525:189): avc: denied { connect } for pid=6148 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.482760][ T30] audit: type=1400 audit(1755123774.525:190): avc: denied { ioctl } for pid=6148 comm="syz.4.44" path="socket:[8827]" dev="sockfs" ino=8827 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.507451][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.508020][ T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.606859][ T43] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.617232][ T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 89.093925][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.104060][ T30] audit: type=1400 audit(1755123774.715:191): avc: denied { read write } for pid=6147 comm="syz.2.45" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 89.263112][ T6144] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 89.270942][ T30] audit: type=1400 audit(1755123774.715:192): avc: denied { open } for pid=6147 comm="syz.2.45" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 89.303330][ T9] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 89.306243][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 89.451641][ T30] audit: type=1400 audit(1755123774.815:193): avc: denied { ioctl } for pid=6146 comm="syz.3.46" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8832 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.510810][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.526524][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.551728][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 89.583092][ T9] usb 4-1: config 0 has no interface number 0 [ 89.613564][ T30] audit: type=1400 audit(1755123774.825:194): avc: denied { read } for pid=6146 comm="syz.3.46" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.689031][ T30] audit: type=1400 audit(1755123774.825:195): avc: denied { open } for pid=6146 comm="syz.3.46" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.850201][ T30] audit: type=1400 audit(1755123774.825:196): avc: denied { ioctl } for pid=6146 comm="syz.3.46" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.878146][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 89.923395][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 89.942092][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.961625][ T30] audit: type=1400 audit(1755123775.995:197): avc: denied { append } for pid=6165 comm="syz.0.49" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.010693][ T5898] usb 2-1: USB disconnect, device number 3 [ 90.063133][ T43] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 90.094628][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.212037][ T6166] ubi31: attaching mtd0 [ 90.217415][ T6166] ubi31: scanning is finished [ 90.222090][ T6166] ubi31: empty MTD device detected [ 90.229549][ T30] audit: type=1400 audit(1755123776.725:198): avc: denied { append } for pid=6165 comm="syz.0.49" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.536062][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.541502][ T9] usb 4-1: config 0 descriptor?? [ 90.566210][ T43] usb 5-1: config 0 has no interface number 0 [ 90.579051][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 90.627643][ T6158] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 90.667671][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 90.675842][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 90.689071][ T6166] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 90.696734][ T6166] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 90.704609][ T6166] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 90.711632][ T6166] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 90.719101][ T6166] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 90.726017][ T6166] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 90.734064][ T6166] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 681259640 [ 90.744041][ T6166] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 90.762808][ T6175] ubi31: background thread "ubi_bgt31d" started, PID 6175 [ 90.916521][ T43] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.945936][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.033350][ T43] usb 5-1: config 0 descriptor?? [ 91.044805][ T6170] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 91.065864][ T43] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 91.112282][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 91.122327][ T43] usb 4-1: USB disconnect, device number 4 [ 91.351751][ T43] usb 5-1: USB disconnect, device number 4 [ 93.974420][ T6208] fuse: Unknown parameter 'user_i00000000000000000000' [ 96.903217][ T6225] syz.0.60 uses obsolete (PF_INET,SOCK_PACKET) [ 97.138918][ T6231] process 'syz.1.62' launched './file0' with NULL argv: empty string added [ 97.232799][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 97.232837][ T30] audit: type=1400 audit(1755123783.655:201): avc: denied { remount } for pid=6227 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.258320][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.442874][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.533152][ T30] audit: type=1400 audit(1755123783.655:202): avc: denied { execute } for pid=6227 comm="syz.1.62" name="file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.564087][ T30] audit: type=1400 audit(1755123783.665:203): avc: denied { execute_no_trans } for pid=6227 comm="syz.1.62" path="/16/file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.588282][ T30] audit: type=1400 audit(1755123783.965:204): avc: denied { create } for pid=6220 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.607683][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.620966][ T30] audit: type=1400 audit(1755123783.965:205): avc: denied { ioctl } for pid=6220 comm="syz.0.60" path="socket:[8123]" dev="sockfs" ino=8123 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 97.645486][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.757040][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 97.791173][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.862788][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.874057][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 97.883459][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.904699][ T10] usb 2-1: config 0 descriptor?? [ 97.982842][ T5926] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.346364][ T10] sony 0003:054C:024B.0001: unexpected long global item [ 98.763570][ T10] sony 0003:054C:024B.0001: parse failed [ 98.769458][ T10] sony 0003:054C:024B.0001: probe with driver sony failed with error -22 [ 98.794762][ T5926] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.817552][ T5926] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.856870][ T5926] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.878919][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.938781][ T6236] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.989300][ T5926] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 99.043666][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.252367][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.579795][ T5846] usb 2-1: USB disconnect, device number 4 [ 99.654868][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.665723][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.701219][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.745116][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.756213][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.776596][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.791331][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.499277][ T10] usb 5-1: Product: syz [ 100.561471][ T10] usb 5-1: Manufacturer: syz [ 100.567350][ T93] usb 3-1: USB disconnect, device number 3 [ 100.912644][ T30] audit: type=1400 audit(1755123787.335:206): avc: denied { bind } for pid=6254 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.142087][ T30] audit: type=1400 audit(1755123787.345:207): avc: denied { connect } for pid=6254 comm="syz.3.69" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.175687][ T30] audit: type=1400 audit(1755123787.345:208): avc: denied { write } for pid=6254 comm="syz.3.69" laddr=::1 lport=1 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.721474][ T6274] netlink: 68 bytes leftover after parsing attributes in process `syz.3.72'. [ 102.579270][ T30] audit: type=1400 audit(1755123788.945:209): avc: denied { sqpoll } for pid=6260 comm="syz.1.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.392771][ T5926] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.421422][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 103.563776][ T5926] usb 3-1: device descriptor read/64, error -32 [ 103.822773][ T5926] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.928247][ T10] usb 5-1: USB disconnect, device number 5 [ 104.341738][ T6303] netlink: 96 bytes leftover after parsing attributes in process `syz.0.74'. [ 104.545042][ T5926] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.556820][ T5926] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.785994][ T6292] netlink: 96 bytes leftover after parsing attributes in process `syz.3.76'. [ 104.833924][ T5926] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.858597][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.969675][ T6289] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.066970][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.090275][ T5926] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.269164][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.280197][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 105.296835][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 105.331059][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.366268][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.391759][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.482066][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 105.540513][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 105.863535][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 105.929312][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.997790][ T5926] usb 3-1: USB disconnect, device number 5 [ 106.061255][ T10] usb 5-1: config 0 descriptor?? [ 106.117338][ T5845] Bluetooth: hci5: urb ffff888028c8d800 submission failed (90) [ 106.156512][ T5846] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.328580][ T5846] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.337414][ T5846] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.798800][ T5898] usb 5-1: USB disconnect, device number 6 [ 106.862771][ T5846] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.887064][ T5846] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.902174][ T5846] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.915609][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.924344][ T5846] usb 1-1: Product: syz [ 106.928639][ T5846] usb 1-1: Manufacturer: syz [ 107.023005][ T5926] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.234269][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 107.246285][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.257252][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.267099][ T5926] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 107.276185][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.728907][ T5926] usb 2-1: config 0 descriptor?? [ 107.852908][ T5898] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 108.186601][ T5926] sony 0003:054C:024B.0002: unexpected long global item [ 108.207029][ T5926] sony 0003:054C:024B.0002: parse failed [ 108.214872][ T5898] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.223744][ T5926] sony 0003:054C:024B.0002: probe with driver sony failed with error -22 [ 108.350281][ T5898] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.376218][ T5898] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.399082][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.565169][ T6326] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 108.575151][ T5898] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.167997][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.177100][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.433479][ T5926] usb 2-1: USB disconnect, device number 5 [ 109.468380][ T5898] usb 5-1: USB disconnect, device number 7 [ 109.573223][ T5846] usb 1-1: USB disconnect, device number 5 [ 109.749441][ T6352] netlink: 68 bytes leftover after parsing attributes in process `syz.0.87'. [ 110.127640][ T30] audit: type=1400 audit(1755123796.625:210): avc: denied { setattr } for pid=6345 comm="syz.0.87" name="video37" dev="devtmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 112.892930][ T5846] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 113.295483][ T5905] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 113.673423][ T5846] usb 5-1: config 0 has no interfaces? [ 113.686956][ T5846] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 114.405890][ T5905] usb 4-1: config 0 has no interfaces? [ 114.415966][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.438009][ T5846] usb 5-1: Product: syz [ 114.443598][ T5846] usb 5-1: Manufacturer: syz [ 114.450267][ T5905] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 114.463965][ T5846] usb 5-1: SerialNumber: syz [ 114.471229][ T5846] usb 5-1: config 0 descriptor?? [ 114.479047][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.524760][ T5905] usb 4-1: Product: syz [ 114.528948][ T5905] usb 4-1: Manufacturer: syz [ 114.732885][ T5905] usb 4-1: SerialNumber: syz [ 114.755215][ T5905] usb 4-1: config 0 descriptor?? [ 114.962075][ T6375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.978273][ T6375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.082425][ T93] usb 4-1: USB disconnect, device number 5 [ 115.472936][ T5905] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 115.717289][ T5905] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.729282][ T5905] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.741685][ T5905] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.753825][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.853271][ T6396] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 116.995269][ T5905] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.050809][ T5905] usb 5-1: USB disconnect, device number 8 [ 133.052148][ T24] usb 3-1: USB disconnect, device number 6 [ 133.725275][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.775634][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.798640][ T16] sched: DL replenish lagged too much [ 192.864187][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 192.870254][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 192.887952][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 192.905606][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 194.462942][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.478230][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.911551][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 301.099262][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 302.188765][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 307.632553][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 307.639536][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5971/1:b..l P5218/1:b..l [ 307.648875][ C1] rcu: (detected by 1, t=10503 jiffies, g=11025, q=1567718 ncpus=2) [ 307.656940][ C1] task:udevd state:R running task stack:25864 pid:5218 tgid:5218 ppid:1 task_flags:0x400140 flags:0x00004002 [ 307.671120][ C1] Call Trace: [ 307.674404][ C1] [ 307.677332][ C1] __schedule+0x1190/0x5de0 [ 307.681859][ C1] ? __pfx___schedule+0x10/0x10 [ 307.686718][ C1] ? check_irq_usage+0x188/0x920 [ 307.691689][ C1] ? mark_held_locks+0x49/0x80 [ 307.696459][ C1] preempt_schedule_irq+0x51/0x90 [ 307.701485][ C1] irqentry_exit+0x36/0x90 [ 307.705900][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.712153][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 307.717371][ C1] Code: 77 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 6c 13 0f 0f 82 74 02 00 00 8b 35 2a 9e 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 b9 76 3e 12 0f 85 c7 02 00 00 48 83 c4 [ 307.736983][ C1] RSP: 0018:ffffc90003bdf1e8 EFLAGS: 00000206 [ 307.743057][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c11e0 RCX: 00000000ef1858c5 [ 307.751027][ C1] RDX: 0000000000000000 RSI: ffffffff8de29d40 RDI: ffffffff8c162500 [ 307.759001][ C1] RBP: 0000000000000002 R08: db298b93a8ea9d6c R09: 0000000000000000 [ 307.766974][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 307.774943][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.782931][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 307.788139][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 307.794299][ C1] unwind_next_frame+0xd1/0x20a0 [ 307.799237][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 307.804348][ C1] ? path_openat+0x1de4/0x2cb0 [ 307.809119][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 307.815286][ C1] arch_stack_walk+0x94/0x100 [ 307.819995][ C1] ? path_openat+0x1de4/0x2cb0 [ 307.824763][ C1] stack_trace_save+0x8e/0xc0 [ 307.829447][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 307.834830][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 307.839790][ C1] save_stack+0x160/0x1f0 [ 307.844125][ C1] ? __pfx_save_stack+0x10/0x10 [ 307.848978][ C1] ? __free_frozen_pages+0x7d5/0x10f0 [ 307.854372][ C1] ? __put_partials+0x165/0x1c0 [ 307.859260][ C1] ? qlist_free_all+0x4d/0x120 [ 307.864037][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 307.869678][ C1] ? __kasan_kmalloc+0x8a/0xb0 [ 307.874439][ C1] ? __kmalloc_noprof+0x223/0x510 [ 307.879456][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 307.884309][ C1] ? tomoyo_encode+0x29/0x50 [ 307.888903][ C1] ? tomoyo_realpath_from_path+0x18f/0x6e0 [ 307.894711][ C1] ? tomoyo_check_open_permission+0x2ab/0x3c0 [ 307.900777][ C1] ? tomoyo_file_open+0x6b/0x90 [ 307.905624][ C1] ? security_file_open+0x84/0x1e0 [ 307.910740][ C1] ? do_dentry_open+0x596/0x1530 [ 307.915681][ C1] ? vfs_open+0x82/0x3f0 [ 307.919925][ C1] ? path_openat+0x1de4/0x2cb0 [ 307.924691][ C1] ? page_ext_put+0x3e/0xd0 [ 307.929200][ C1] __reset_page_owner+0x84/0x1a0 [ 307.934148][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 307.939378][ C1] __put_partials+0x165/0x1c0 [ 307.944081][ C1] qlist_free_all+0x4d/0x120 [ 307.948668][ C1] ? tomoyo_encode2+0x100/0x3e0 [ 307.953520][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 307.959504][ C1] __kasan_kmalloc+0x8a/0xb0 [ 307.964101][ C1] __kmalloc_noprof+0x223/0x510 [ 307.968950][ C1] ? d_absolute_path+0x136/0x1a0 [ 307.973917][ C1] tomoyo_encode2+0x100/0x3e0 [ 307.978613][ C1] tomoyo_encode+0x29/0x50 [ 307.983034][ C1] tomoyo_realpath_from_path+0x18f/0x6e0 [ 307.988681][ C1] tomoyo_check_open_permission+0x2ab/0x3c0 [ 307.994576][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 308.001046][ C1] ? find_held_lock+0x2b/0x80 [ 308.005739][ C1] tomoyo_file_open+0x6b/0x90 [ 308.010421][ C1] security_file_open+0x84/0x1e0 [ 308.015365][ C1] do_dentry_open+0x596/0x1530 [ 308.020139][ C1] vfs_open+0x82/0x3f0 [ 308.024222][ C1] path_openat+0x1de4/0x2cb0 [ 308.028822][ C1] ? __pfx_path_openat+0x10/0x10 [ 308.033764][ C1] do_filp_open+0x20b/0x470 [ 308.038269][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 308.043312][ C1] ? alloc_fd+0x471/0x7d0 [ 308.047649][ C1] do_sys_openat2+0x11b/0x1d0 [ 308.052327][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 308.057529][ C1] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 308.063603][ C1] __x64_sys_openat+0x174/0x210 [ 308.068456][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 308.073840][ C1] do_syscall_64+0xcd/0x4c0 [ 308.078350][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.084244][ C1] RIP: 0033:0x7f35190a7407 [ 308.088675][ C1] RSP: 002b:00007ffd9afa2ff0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 308.097085][ C1] RAX: ffffffffffffffda RBX: 00007f35197f2880 RCX: 00007f35190a7407 [ 308.105058][ C1] RDX: 0000000000080141 RSI: 0000561e715e002e RDI: ffffffffffffff9c [ 308.113038][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 308.121031][ C1] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 308.129002][ C1] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 308.136988][ C1] [ 308.140006][ C1] task:udevd state:R running task stack:26248 pid:5971 tgid:5971 ppid:5218 task_flags:0x400140 flags:0x00004002 [ 308.153496][ C1] Call Trace: [ 308.156777][ C1] [ 308.160230][ C1] __schedule+0x1190/0x5de0 [ 308.164747][ C1] ? __lock_acquire+0x5c1/0x1ce0 [ 308.169696][ C1] ? __pfx___schedule+0x10/0x10 [ 308.174557][ C1] ? mark_held_locks+0x49/0x80 [ 308.179326][ C1] preempt_schedule_irq+0x51/0x90 [ 308.184347][ C1] irqentry_exit+0x36/0x90 [ 308.188763][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.194754][ C1] RIP: 0010:__orc_find+0x20/0xf0 [ 308.199714][ C1] Code: 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 49 89 cd 89 d1 41 54 4c 8d 64 8f fc 55 53 48 83 ec 08 85 d2 0f 84 99 00 00 00 <49> 89 fe 48 89 f0 49 39 fc 72 7b 48 b9 00 00 00 00 00 fc ff df 49 [ 308.219331][ C1] RSP: 0018:ffffc9000528f270 EFLAGS: 00000202 [ 308.225402][ C1] RAX: ffffffff9179656e RBX: 0000000000000001 RCX: 0000000000000008 [ 308.233392][ C1] RDX: 0000000000000008 RSI: ffffffff9179656e RDI: ffffffff90e20404 [ 308.241364][ C1] RBP: ffffc9000528f368 R08: ffffffff9179659e R09: 0000000000000000 [ 308.249802][ C1] R10: 0000000000000002 R11: 000000000003a1fb R12: ffffffff90e20420 [ 308.257779][ C1] R13: ffffffff84a1fbc1 R14: ffffc9000528f355 R15: ffffffff84a1fbc1 [ 308.265754][ C1] ? tomoyo_realpath_from_path+0xc1/0x6e0 [ 308.271486][ C1] ? tomoyo_realpath_from_path+0xc1/0x6e0 [ 308.277230][ C1] ? tomoyo_realpath_from_path+0xc1/0x6e0 [ 308.282973][ C1] unwind_next_frame+0x2ec/0x20a0 [ 308.288012][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 308.293746][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.299911][ C1] arch_stack_walk+0x94/0x100 [ 308.304594][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 308.310326][ C1] stack_trace_save+0x8e/0xc0 [ 308.315011][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 308.320392][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 308.325356][ C1] save_stack+0x160/0x1f0 [ 308.329699][ C1] ? __pfx_save_stack+0x10/0x10 [ 308.334556][ C1] ? __free_frozen_pages+0x7d5/0x10f0 [ 308.339934][ C1] ? __put_partials+0x165/0x1c0 [ 308.345398][ C1] ? qlist_free_all+0x4d/0x120 [ 308.350166][ C1] ? kasan_quarantine_reduce+0x195/0x1e0 [ 308.355798][ C1] ? __kasan_kmalloc+0x8a/0xb0 [ 308.360564][ C1] ? __kmalloc_noprof+0x223/0x510 [ 308.365588][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 308.371320][ C1] ? page_ext_put+0x3e/0xd0 [ 308.375825][ C1] __reset_page_owner+0x84/0x1a0 [ 308.380760][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 308.386061][ C1] ? mod_node_page_state+0xb0/0x150 [ 308.391294][ C1] __put_partials+0x165/0x1c0 [ 308.395989][ C1] qlist_free_all+0x4d/0x120 [ 308.400577][ C1] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 308.406309][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 308.411775][ C1] __kasan_kmalloc+0x8a/0xb0 [ 308.416364][ C1] __kmalloc_noprof+0x223/0x510 [ 308.421229][ C1] tomoyo_realpath_from_path+0xc2/0x6e0 [ 308.426791][ C1] tomoyo_check_open_permission+0x2ab/0x3c0 [ 308.432707][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 308.439166][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 308.444210][ C1] tomoyo_file_open+0x6b/0x90 [ 308.448890][ C1] security_file_open+0x84/0x1e0 [ 308.453835][ C1] do_dentry_open+0x596/0x1530 [ 308.458610][ C1] vfs_open+0x82/0x3f0 [ 308.462685][ C1] path_openat+0x1de4/0x2cb0 [ 308.467300][ C1] ? __pfx_path_openat+0x10/0x10 [ 308.472243][ C1] do_filp_open+0x20b/0x470 [ 308.476750][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 308.481790][ C1] ? alloc_fd+0x471/0x7d0 [ 308.486127][ C1] do_sys_openat2+0x11b/0x1d0 [ 308.490810][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 308.496036][ C1] ? __sys_recvmsg+0x189/0x220 [ 308.500798][ C1] ? __pfx___sys_recvmsg+0x10/0x10 [ 308.505917][ C1] __x64_sys_openat+0x174/0x210 [ 308.510864][ C1] ? __pfx___x64_sys_openat+0x10/0x10 [ 308.516268][ C1] do_syscall_64+0xcd/0x4c0 [ 308.521495][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.527402][ C1] RIP: 0033:0x7f35190a7407 [ 308.531823][ C1] RSP: 002b:00007ffd9af9e910 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 308.540240][ C1] RAX: ffffffffffffffda RBX: 00007f35197f2880 RCX: 00007f35190a7407 [ 308.548215][ C1] RDX: 0000000000080000 RSI: 00007ffd9af9ea80 RDI: ffffffffffffff9c [ 308.556187][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 308.564165][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561e715e07f5 [ 308.572137][ C1] R13: 0000561e715e07f5 R14: 0000000000000001 R15: 0000561e715fb140 [ 308.580127][ C1]