last executing test programs: 8m39.083146961s ago: executing program 3 (id=740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) syz_emit_ethernet(0x1096, &(0x7f0000000600)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "bc2fcd", 0x1060, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0x11, 0x7, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x4, 0x5, [0xfffffffffffffffd, 0x6, 0x2fc, 0xfffffffffffff05c]}}, @jumbo={0xc2, 0x4, 0x1c9}, @jumbo={0xc2, 0x4, 0xa}, @jumbo={0xc2, 0x4, 0xffff}]}], {0x4e23, 0x4e24, 0x1018, 0x0, @wg=@data={0x4, 0x4, 0x3, "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"}}}}}}}, 0x0) (fail_nth: 7) 8m38.367388998s ago: executing program 3 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) ptrace$cont(0x9, r0, 0x331b8f99, 0xfffffffffffffffb) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) timer_create(0x5, &(0x7f0000000200)={0x0, 0x80005, 0x0, @tid=r0}, &(0x7f0000000300)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write$binfmt_script(r7, &(0x7f0000000400)={'#! ', './file0'}, 0xb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000680)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="01002cbd7000fedbdf0c01", @ANYBLOB="8642275c27171f1301f3e5ec096bcaba61a2fea1d2d07de4a2549cfa0f0915e9e51e987ecc04d9ae9aca5671341f112c895074291f38a73f5fbf8ddd21f74bef1e121f1f6158dad158682604563537a1795b0f71ac59c1b16acf36291918bef14dac938a55b22d2f5c3298bc"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000280)={'gretap0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000000c0)={0x7, 0x10, 0x3}) 8m37.46028028s ago: executing program 3 (id=742): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) flock(r0, 0x5) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 8m35.475653585s ago: executing program 3 (id=745): socket$inet(0x2, 0xa, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000030a030000000000000000000a0000090c00024000000000000000010900030073797a30000000000900010073797a3100000000140000001100010000000000000000000100000a884ba733d215c9f58cbaa51805054215e5ed423281ee47"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x410) gettid() timer_create(0x2, 0x0, &(0x7f0000000040)) timer_create(0x3, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b22, &(0x7f0000000040)) ioperm(0x0, 0xa, 0x400000000000001d) iopl(0x3) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000300)={'s526\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0x10001, 0x20000004, 0x6, 0xffe, 0xe3b3, 0x1, 0x1, 0x4, 0x100007, 0xa9, 0x6, 0x5, 0x40000009, 0x830, 0x2, 0xfffd, 0x8, 0xa4df, 0x101, 0x2, 0x0, 0x100007, 0x3, 0x8, 0x5, 0x713]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xff92, &(0x7f0000000080)=[0x3, 0x3, 0x4, 0x7, 0x4660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x200, 0x4, 0x6], 0x3, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x45, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x1, 0x8, 0x3, 0x66}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xbe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000280)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') 8m34.363398132s ago: executing program 3 (id=752): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read$midi(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='auxv\x00') read$FUSE(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x10) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x3, 0x2, 0x405, 0x1, 0x3, 0xfff, 0xffff, 0x5, 0x3ff, 0x8802, 0x9, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x6, 0x395, 0x80000089, 0x8000, 0x2f, 0x113e80, 0xffffeadb, 0x8, 0x3a, 0x8, 0x6000000, 0x7fffffd, 0xdffffffa, 0x1]}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xffffffff, @mcast2, 0xf}, r5}}, 0x30) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r5, r3}}, 0x18) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3, 0x0, 0x7}, 0x18) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r10 = fanotify_init(0xf00, 0x0) fanotify_mark(r10, 0x1, 0x50001009, r9, 0x0) 8m34.181729642s ago: executing program 3 (id=754): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x8001, 0xffffffffffffffff, 'id0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x21, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, 0x8500, 0x4006}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000000c0)={0x13, 0x2, 0x8, {0x0, r10}}, 0x18) 8m18.875215805s ago: executing program 32 (id=754): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000280)={0x8001, 0xffffffffffffffff, 'id0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x21, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, 0x8500, 0x4006}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r8, &(0x7f00000000c0)={0x13, 0x2, 0x8, {0x0, r10}}, 0x18) 8m5.912452286s ago: executing program 2 (id=830): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x1, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@deltclass={0x74, 0x29, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1}, {0xfff1, 0x2}, {0xc, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0xfe}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x4}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x55}, 0x84) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) 8m4.57696533s ago: executing program 2 (id=833): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x6}, [], {}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x2}}, 0x2c, 0x2) 8m4.467307272s ago: executing program 2 (id=834): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001980)="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", 0x42f}], 0x1, 0x0, 0x0, 0x41024}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x3) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000080)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40580) ioctl$TCSETS(r4, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x3e00, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x74, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 8m3.48780712s ago: executing program 2 (id=835): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x25) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80, 0xab}, 'port1\x00', 0xe2, 0xb1c07, 0x8, 0x4c, 0x7, 0x0, 0xfffffffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./file0/file0\x00', 0x1ea) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f00000010c0)='./file0/file0\x00', 0x1) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000000440)="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", 0x564}], 0x1, 0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x2e19f866, @mcast1, 0x10001}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') 7m58.381198844s ago: executing program 2 (id=852): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) 7m58.212904306s ago: executing program 2 (id=855): mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x19c04, 0x55047}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) io_uring_setup(0x85a, &(0x7f0000000180)={0x0, 0x58b9, 0x1, 0x2, 0x383}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x400, 0x1c5) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000f357845c54badc80a045676006b77c7f4bdbc34de164144d19e61a8f1ffbdfd98cac9406d76b54be9e514e3aab84ea271f450a3db4306e9735dc83", @ANYRES16, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000000014000380100003800c0001800800010032000000"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='j\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf25100000000e0001006e657464657673696d0000000f0002006e657464d3d472f30cb53d3808000b000500000006001100ff01000008001300090000000500140000000000"], 0x54}, 0x1, 0x0, 0x0, 0x891}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="00010000", @ANYRES16=r9, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x78, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) 7m57.942248895s ago: executing program 33 (id=855): mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x4c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x19c04, 0x55047}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) io_uring_setup(0x85a, &(0x7f0000000180)={0x0, 0x58b9, 0x1, 0x2, 0x383}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x400, 0x1c5) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000f357845c54badc80a045676006b77c7f4bdbc34de164144d19e61a8f1ffbdfd98cac9406d76b54be9e514e3aab84ea271f450a3db4306e9735dc83", @ANYRES16, @ANYBLOB="070002000000fddbdf2505000000180001801400020073797a5f74756e00000000000000000014000380100003800c0001800800010032000000"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='j\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf25100000000e0001006e657464657673696d0000000f0002006e657464d3d472f30cb53d3808000b000500000006001100ff01000008001300090000000500140000000000"], 0x54}, 0x1, 0x0, 0x0, 0x891}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="00010000", @ANYRES16=r9, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x78, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) 1m37.522938318s ago: executing program 0 (id=1986): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x401}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e5c6000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="050001"], 0x38}, 0x1, 0x0, 0x0, 0xfb440c942bbb5e5b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x2, 0x0) splice(r6, 0x0, r5, 0x0, 0x1c, 0xe) ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x801, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) finit_module(r8, &(0x7f0000000000)='/dev/cpu/#/msr\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, 0x0) 1m34.446805127s ago: executing program 0 (id=1996): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000240)={0x4, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e22, @loopback}}}, 0x108) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xd9db}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfff0}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10001}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, 0x58}}, 0x0) socketpair(0x1, 0x80004, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x52000775) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000010", 0x8, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x2, 0x0, 0x8}}}}}}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x104) mkdirat(r3, &(0x7f0000002040)='./file1\x00', 0x10) r4 = dup(r2) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1m32.616906016s ago: executing program 0 (id=2000): syz_open_dev$evdev(&(0x7f0000000040), 0x1fff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x76141, 0x0) read$ptp(r0, &(0x7f00000000c0)=""/250, 0xfa) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f00000001c0)=0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_freezer_state(r8, &(0x7f0000000140), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f000000c000)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000240)}, {&(0x7f0000000180)}, {0x0}, {&(0x7f00000004c0)="7cf85901e0edb5fffbc372c6d5dfcdbe4ed62f749ef2e7caf094c9b54042af453853a7f0e8032b635fe476533495ae3e8d7b2874913eac02fb044d54d1b9f77379719bdc7beefe779b2b6ca110519b32de58523ab5b2c400b9c97159ad4c0fbc1df78d2721da73985e8373312602e2e871bf30e54eaff39833fbe963375163a9baebda845cbc0b4aa12f3576e95f655551c2dc8ba00c71124c64946360a1f19a75e0b47aa6a7f598a386f72ee9a6845cca6c7084b4988bf57b971f494a6203baf8", 0xc1}, {&(0x7f0000000380)="1b9ab6f0797b95e1ab382a7f33ca233ac2c6685afd5a1166", 0x18}, {&(0x7f00000016c0)="b6d15a598956384aed685848ee2661ef3ef39ea8a0a7e02b2008fa3e9f434e6ea6c47aa8754fb384c26a318622507265b08758d43bdcde6bbdf4111f45d5562a72ff4be6b4c0c45d38d4acdf0a08eccce423e454ee3193d5df2625e4294573e59cd4d21e2d0772d3a1aee8a199068e11fec2fde0f553980b63b9000f37e605387a13bb068fcc7c04703b23479d00b355405714cd321484bf412743f8336e26c539dfcb6149ea2f2885a4d6ac535312abae", 0xb1}, {&(0x7f0000001780)="fced39bb3afba715878e481af1d490be3acbe711a22fccacec336239a4ec05710a4b22e89a17bbb310f64f6b25a0def4be17f5567e7a6107fb0069de9e4f4c19dcbba75acf2146ba569a5ab8e74f87a6636fcebbfdc1e0f2a6c8afcc08c8d8c165a47c3c2b6b7b2091b550658d", 0x6d}, {&(0x7f0000001800)="deb366f25589b525db9c12bba623aebb9322b1ee324a95ca529f442fb66bed4df563291e0291e9d8d0ba75f26050e2e832948544d3e763ad03ef219b4143bc666538ceb452143996079c886dca40413b4152c44e3035d6f7934d794f8df71cfec0e3089707272bc6e517b3c486514230a481b347f40504d987e0b0f88d93", 0x7e}, {&(0x7f00000018c0)="2a7bf84a26cb74ec8fe7ca6ca1255938421f579c7a2d92e5bfbb471d8bedda13d837dce4d0c4426d0a8d897a64c53e4c6413998929d17598c6f2fcfe56bca4b500af09aa2c12466fe1e0086255445248ba4942e97c52670c9915dfb263a90a373aad2ff9f5fa5b773e5c6deda9ff6f3ea0cdb31dcec6d72ed9a167aee076758bcac463818f2710bbcc831b5da35037e86c2cc3bba96c3f6bdf72ac2c2f52d464df5f8edfec5d0d4664eebd4d53d8d9550b2f3145e8b78bf5d786b861bcf84705b329d7e5cb57da9f4ec68b1947719c3c4225c3d237f7f069", 0xd8}], 0x9, &(0x7f00000020c0)=[@rights={{0x24, 0x1, 0x1, [r8, r7, r7, r3, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r7, r5, r5, r5, r9]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, r5, r7, r9, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8, 0x1}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002280)="ee1fd6ae37fba096b808ad02ccec587c66148c701045f3271dba0e6b3de9521ed63efabd63f0b205631a713df5e8fa817a1104d10e65c11a38bfcdddf125982288013ccfa9980a00430d0c63d8990c210848813bd3ae6faa8d7ea7c9b0daccbee04da5b95c371e26cfe9e4d03d85dc9ee4f6030537f1997dc991f171ddaf144be4684f2a6373b673b8875aed1fe0043ae793dbb59d1abadcbd18865e526f1e0abe061508293725b3ca4873062c9a00dc8e4abb2e8b0c5f607cac60eedab470ca1db0c362cdab881c9423688178035e656e94becebca8d312d7a71149d1c6a22d0e3d4bb0b25a", 0xe6}, {0x0}], 0x2, &(0x7f0000002680)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, r5, r9, r2, r2, r5, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8, 0xc000}}, {{&(0x7f0000006d40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000080c0)=[{&(0x7f0000006dc0)="6d5e2d10149ae7f72debe137e9387fca0a65dab3908aee272884393f4dacabe3d3eb5c6b4ea94644c788f3110ece8ef4e8c922a00a2233822cb188ae6040264337c343b11a8943d7a9664898578986c061d4aba0ec7e31fb4bf2f8563ef5f824fbbd0f74d1452c979db5d6cd071d97e11a1e3905397ceeaebe236bc11adbe542f395ef2060bd418a59103e2d4ff9520a587907aa90ff61d6a8c7d4ce1d0b592e5745d1ab380cb257f3f8bce6e83822f2bcc33a69b5d7cde3c80f8ef62b7bd71763ad72dfda26718609aba2d66f8b07", 0xcf}, {&(0x7f0000006ec0)="704800cc132f079ceb74cb50b2203d419c5063f3f85d0df60d63fbfb1f88de44d9cf8105772b5023a8cfaf088d20f51ddfd2b8b22072676ff8aa42", 0x3b}, {&(0x7f0000006f00)="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", 0xffe}, {0x0}, {&(0x7f0000007f80)="b5664ff4297c00e625c7868d7e5a244e3b97288d694ff0c710ab0d26c73ed9974257e3ac859bb730fe61c870a4263e86d46bbb6db1cc", 0x36}, {&(0x7f0000007fc0)="fa445b53c4aee9476add60bcb531400631f3fbe88d52a21249ed82feefb68ab33fb75c6ed17e6b5d095a3d684ca6056ac89160f6b7a5bfcb218965a243181f84ccdfe0b4c5871d1f659c06de330f1be0928f9f12021e96602a06f5400ccc7f8915dd3e96209c1ec1d37a6ab1f942a96e8bbacaa0", 0x74}, {&(0x7f0000008080)="7ddf9e31", 0x4}], 0x7, &(0x7f0000008280)}}, {{0x0, 0x0, &(0x7f000000a840)=[{&(0x7f000000a780)}], 0x1, &(0x7f000000aa00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, r4, r9]}}], 0x40, 0x4000004}}, {{&(0x7f000000aa40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000bcc0)=[{&(0x7f000000aac0)="f54f0906301bb764a6b6a0274ff8a7aa28a89264aaf840a836abe1627f68a5541d58037adb4524c6701817cc635da3f4b0238746fd4feb17a72e0002ac445c384b0886c392683fa72e03", 0x4a}, {&(0x7f000000ab40)="4932b643fdcf11badb4ee111a2c0dbd28d950a8aae4d1b901eb8a4e68035405025139aacdffb9b2cab1f963d02d7de4156536455d0cc6a3585f108f57727e5bdf213167e8f9c723f076fdf4d9983e78117cf9dea241c6f27a2ecdebd42436fc98166641c1db5d03634deda9fbd81d7ead123c90e22bec5398f86aedb6587f7300e9ebbf0d27192731d9fc4a3eb3d55d210eb85e762b4bae7c19c36c517ff23a85d7cfe33d95befc49d2ad6e1a7129cd6d8941c6157f1b3df2c448d09a2f31b6512d47d1bab6a14e5940c922ebde7bb3fe2c298f4261303d045ca92b26f638316fff656f23380e1dfefb65371693e499aabcda7ad8bb6eaef54a7d7fdc1b14111f8f6c4c524145b20117e1c902ac0fb7525accfc27d8e0d720e3262a39594fe64ff2d97868d98d7715b57fd916f1a1bfdb4a1452eb0be8c7d74fcd7557f9ed84b7320c1cd30f2f5af0bd651cbe4d1d0ff310319156c23257e1f8cad40d7bb73df5454722a2f086794819827f57727dc9d6e3debd285cca58a8e3f0c9c03b5c73cb5e8f0d7e380986e96fa01a1f07f2b8e8cdd887b77d06bddd2af6b035927f7c6354c3a73efd83f18bf13f75772021c799c111e97f7bf3d42dc6c53a5d9139581564bd5dddac028a7c99861a958fbf8176727e8f4279d16a471ffe32cd81540af6162eac23c7a21341b9182e8c6f8e406b24862cdf9ff92ac6e1e1ef9e1aed821497b2858783db3dcf0189fd558b367159542ec14ce2a4576d87624d2305110f31dcfd57855e13806b2b6680e84f7146709534aef8a08741d9621c815a93c7e78a1a85269b6f7bbdc688ba40555814a1da8ac6bc953f3855eefb2055565cc1c1a31e74716e47ddd00cc019e5000b28d01745fdf20784b99854c257ea82ab87802b008eacbcd20f950aa257c0e74e2f61d901a3dc0a34db51d609fef79c9d63d1ea2a35c1817e910724db2fc048641a90e96d3375e905fffe2059dd13a9be2cc9edf012e3b4dc7f67221b60b1127b1fd67a42059f79ca0fab82d7773c7304f2b07b52318bb66ba11334436a2ce6a2ee8519be6494d76f761e3d151579ae8e9a14182b17c3c29e8c330d64400c60c7d84b0b566dc804a2c1ce0217d2142c874187aea125e977ee310d9836ba4e1baec91f2b6b5c4fc8c59b27ed14569d871080d135e60467e6f6ce764d3ea933154f2d62a454955dd1fa1e71083408966b7969243146c718fdeaf1496dc0c422f16614241c601aac4a4f2efeb322fa433e4ff178c2f0ce56cb94fbcf4dc4ab6eec346b52da3f6379a895a9d6d4d827afbac4d2e6a3d51e76db398fdc1f4b16bd44a99d56e22bbb8c83b3c682ffffbf3d4bffa21fe6208fd6667f7f3807a2d93496277803adccad4b307f25284b12d530fc6eeedb34f94f73c78340f91b22f1963475cdeb8e53e9f908bd198e4e3af39fbf661f51d9ed55a3925b61020f7c9a9c99d05623e53a04873fb672a9f9c2aeadad9a1ffdbfb8b43b74172d3e5788327793dc18b80a2d2078635958882d866987df7fb9bf254a0780176ae8dce0f532e2fd1560fc05cc02e3f7d02185583f2e374df2c1420a56ea1cd1bd27dd7292315e2191eab2886008040ba2326ed0d00df738126545f119b7affa6dcf9a2a29b3d292bf86721e07afb70752d6c5316a55f5f2b41bf56d5f65fed91453606f9f288cf7df66ad616a91a3b6138f6ed74f907d0a066b3075569d29d45193c34309d4bf4874dfc965d412975b1007d40a6f9d5be01db793143c696a2d40043fdaa2e3bc8f1bc0c7dcd8c559b8a2e526f30a2a9e239857a805c4156b67a9b44e697e0b4c03d9f708bf0d533ea98259915bec90344ac69a4423f81dc963bf2d94b56a73b118bd709a4fb5582e0583c2b015dec4a57c969c941a3ba8e6d4047c9ccb87a3502abdf4c37d99deeeff9d8915f2066ee171972989271d8fc58274032ef9a83b8f0f263dcc98682efebfa37b29e554a65de563299963ae597ff23cafca958b2e2995f12180a15d6970658595bcae70c74af31380cc58126f86bdc5c913f3daad6b452026b05a02bd47e8e7956ba4782583f65103a7e428738f8ea76cfd3f9b6291d32e2a87a08ff2d769035056f63d5d02ff39ed92ba243aee2c46ef55a8a5ce89904b7081d277a611ffc726e907f242ae8151f274aceb5fa083487ef47219b77f47c0ff39c3c140a92f3e2cb43e18bb474bb5e9ed294ee3b9ae18ca61442511265bb2ca4810d1335e4888d778b78a9b60200788a5839f292fb1567cdde31764f92b4a722ae7f424b1a3ed82bac7bf2762b63a1fdeb0c33d614a609f98928c9308c1d7cb1eb33ba4cf8bf52e0ce19845d9191f23fd854ca3a305ecd1d2b217cc4a3a0e1b23b68416bcd94ab4cd410f02fda94fb056cab8ed70eb4e6276a1e153c450541f96885b066766df4b21431211eb6e16722117341f8ef510c517fdd5d64715e1138c07fc3c7f21c1063ddd4d92aaa438642b91582ffd45389d7a80ba1fffb285ac0b9a59db3231031c10cffeabc13dac30edd148768f3653379678207f3a7df80f53df3e9f15c412b746340286c175b301649060eb250ab3017fce02c7f3bc1b7f4fb14bd64ed9b5fcc4c0e180f1340355de747a3b609e5cb8a21b9b471a8be0cf658e58e8e1c2967d7fd81da5989172e287ef0d5f9c5b583bec38d2fb3b3cbd32ceec0401d6f39401eb7522c0dddf6c1bef16d0f5087ea989e36765596e9689b963a2dd7ab926c89ce7b176cd48e0c692256f5f7aeab145d77054f45f3dbbae132df0a997dd0e6454547d10c2d55b89ed36b4082088db79fe34d98e911111abd31a994622df32704aaa6ca433bbaa3f7a772a516c2ebbd18babc8fb67289bd5b91588fad88582dae53bfb47f503134351f42e09e098f80a170ffb6d59f0f1646c8ae08e806f76cbcedc0eadb4658b719fe38c52be2dcd311fe6e1a69469efa03aa1f4934854285b1a07bd2b15c72da9ae2973ec3a0285c90b957a9f7b113ca49538562a8c3b27c535c0945e39c87c7e656c50ee097c2a319aff999f8ced5980bcb6493fa68eda781c69f4e41a46e1269a6c1dcfcdbfffce05460096491c9099a42cb05a2f3d914612317e02d579661f3f4cf2dbfd3c0fa3a68fff267ff88352e17a2994011ed84400af3f7c671567cb7cc3f12e0ae23d9e0ce6e1002994ad1698a06268d7bc7df976efdd2f57ba30359958673ce938bc0442fcc238fe6db9c563210b310e4579609edcaadbe910785c2c83de667bb3d3e541971d5f0c456722e9da5f24614768333b5a220d58c807638573cef01d75703bd3bcb1d4e4ca56af0d97dfb8d1effec37eed247441489253cbcc0a14808d9cb5c59ab1cd1ac84cd9a548834f1e7b0591e9db842660a8bd7d826670cca9b29e6f5bbdf11388b7c07bd244aaeff3dd9ed187def2205102905ae54d173454a131ebf7da7cccd7d65250764bb7e40ea765fc92d63781878d2ff67828a6fbbabd9a59f83ddcb52d616a3584bd95ebbdbfc28d237e9da4bf016b75ead08789206c77143039723aa7a3d2aa9a68d7f3050e763f897209a1ddf8f0b905bf715761466607ecee55368dee33e9a93c35d1e6100158fc04738f81df345bfac280762bcf8b40d0f3d10a09a4be9b8a1d2d76337a282849beb7e02457df44599de28fad4cb1666804d8c32e6a63ea7e1eb9f1cf4fe5cad64060f5909f09c11627f94bd78db17a7f37d89baced1e5b7954c6d2aa035881f1b0e2a6c02e1b9eddc35263e806851ca1d538ee17620d19f862f5012c108e5d3b5a5ba5791439506f5e97591db10eaec87975968a30a2cb0cd9d05f987cfc5be3a4f5828405700089ea37f1e6946071820d65a292c421c52ece432326d272c01a9c8c168da9dfdfa1d59baf57d7f16d7ccd0e1a821882183c24002e080ae4837e352d9c7198ca6d16a83895b304cc8b858a0852ce7e82a4e5c609a095029c88495af13aaff40d63269c18231df5c3a7e8eb2ae378153225d61456918504038bf01060381f71603b6f7b4b38587118251f2aced184c17e77f4bbf6ba3c1b4638563534307d5eaffd32d55ba32a8b5438c798895f535a646cf21169078140fe50572a03b1bc25394aef47bb32967df89a291f1feeec3740f5792ce7c3ab5039b076d3e281a62ec5929db7631276ac4c5219fd2f307fcfc336f83f1779490c847d8bfcedc6ef2c947e9706fe60ed2532c1e69572105ad0df25490d39466cfc365a5d1633d65b5031b42baf9afce5b541de7e0ba014ce4e15b2144cc59f7ce6b9893c7efd6f1d22737765436854df49e6dc6deaf20562c3e930b8de9c474d28f15f51cd1b9fdffe650add8cb1b46e2f5c84b616102e9c1a299220cc77c5e2e072e726768fe9e4e39b1cf65d9d86fe0c1843c5724b17dbf21c0a94377e5046deb091a728dcacca758a74276613680092232326bb6bb22eb138593968b741b32be4403d3b280b3e87a65f3f829794c71c91df4428241d566ab0b3680cbdfebccea64258d10f3446cb7b9a936bac85006cb6a1c55fa700fc1a0943b157a932626c6722927ae2cfdf8990d96ee18aef06fa86f3a554888aa3fd880dc36de9a86435b73482c93c423e667facf8ab71115ce208e83f85f45b38687a3a2720a0c70d64128d28c9b1293907ae7510bba5e3407b8571f2b21587afcffd705135a2f0d1cb95ca81636d760ae2c4731af0c082ebbd9a736cb76fbe5401b383d910bfe896e0ff7721323c9dc87bf9cb67cc6bdfade44dffb4248111f2770bc740f68b9581d28f9678f30ebca0965f32b2dcdd2155035a462bbf7b9b1b5d2a703a2116a87a9d1a6c7e17e61ba63c246ee5419bc53776d3cd2b681ea02060ad7c7386141ca8daa881efb460438ec6a6203ea345166fd4e3c56d27a283f5b53370468a15e8a046951cd70990246fac174c190cfad3cdb6a53ecb1bda461a33f682fac7e91c3ff54ade1db91634bfed4867557e9070266cdfd04392b828797f6be8d9d06f2c6196a28fcc1217aa7a0dfb07e19a33276359b62c7a580a20e8fc3e96b42824eeffd4f9116ee088f4a4343e94775f968026049d7c6ff373c856da181d8044372d7f1207f799a09dbb1e95b5ef33641da5add8bf7d82c1470aebde2e0e083d5bd8c6676d8a6ea193ae3475fe611aa95b5adf68befd716af8717099d718014f141a4a4662ac03474f5b897057f80cfbd574d7c721d0828e367235dfce452b6d177ea5ba5dfa33bb420393bb7da3da111d1228b11e7df42acc3c35aac14a57acf38be520669aee49c46d0980395ad659f2268ac379bbd842bbbed597f550b4d05eae0fa1f6d269f32718ddb0932615826cb028c1c49f0641d66caf60a0a064137d4d3edcaf28a152c6fee3f509ff4486656f89283877df632313b47341bc6f9acca593da8c58a76d17e9aa89d59d884f172bd976d8ae65f76b2cf22c4201f250f80ac5dd3910459c35a22ec68700b8f165941f880a377d8dfbc62388cfed0fe42b1b09b055d83733ea70028a534eb9ae10ac545be9603c7429336e21e64fa6bdaa2d1675333060eee10364450cf208c1c1ffc7e4c9df6362f5a35d3d043118bcd46c55c74e4302bf2bfefe2f9b2601874cc552f3aa122ec4cd448a9f72be9a55a69ef4a857976102d77cd294ed841734ce589f3f66924a69d4dfca33f0737bfd026cb3a52fe7d3be6e61eafa06eaa240a58614d37f224a789347798b3d06bc29af059ad153b443669555334580df53b929dd1222921c4043e6ccb4276550896a6f15b62e451f716f8782cfdbbf6ac95a6", 0x1000}, {&(0x7f000000bb40)="909477481a3221da11cc065716b47212454f6577c3c2b1a3a93977082d11e7795ad8cb30dc4bf219abf50e1282dd72ac217c659953865d42e90b177431b9e74cfecc0304164d37c41111766ee9d00714d6d4840b578cd67acb66d9f4d4dd021b3f19333d4b737dd7c529d464fff4111dfdc537ff12e0449131c4795266272350534c11459ba07dd1c2da3536d60032cc07e18b3b27301ba78f08d67f5a08607a3a5d8f269745806a9bceec32b5f08af01db69d999b56e50223bfd6f516", 0xbd}, {&(0x7f000000bc40)="431b94f2257b9bf5b407", 0xa}, {0x0}], 0x5, &(0x7f000000bfc0)=[@cred={{0x1c}}], 0x20, 0x4000}}], 0x5, 0x48000) write$cgroup_freezer_state(r9, &(0x7f0000000040)='FROZEN\x00', 0x7) 1m27.549959418s ago: executing program 0 (id=2017): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x24040084) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x1, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) r4 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r4}, 0x20) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r4, 0x1}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000003680)=""/147, 0x93}, {&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/224, 0xe0}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4093, 0xffd}, {&(0x7f00000022c0)=""/71, 0x47}, {&(0x7f0000002340)=""/65, 0x41}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x8, &(0x7f0000003440)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, 0x2002) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f00000035c0)={0x3, 0x200, 0x2, 0x8, 0x5, 0x5}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m25.675793685s ago: executing program 0 (id=2024): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) (fail_nth: 5) 1m25.272818584s ago: executing program 0 (id=2026): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r3, &(0x7f00000003c0), 0x100000000000022d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x876, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r8, 0xc0044d00, &(0x7f0000000280)=0x5b) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r7, 0x4, 0x0, 0x2, 0x0, 0x1, {0x0, r9}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/203) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 1m10.027976113s ago: executing program 34 (id=2026): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r3, &(0x7f00000003c0), 0x100000000000022d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x876, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r8, 0xc0044d00, &(0x7f0000000280)=0x5b) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r7, 0x4, 0x0, 0x2, 0x0, 0x1, {0x0, r9}}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/203) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 18.69524797s ago: executing program 5 (id=2176): pipe2(0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x8080000, 0x2000, 0x10000000}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x0, 0x24, 0x17, {0x17, 0xe, "d4fd7c62914f9f344bdccde21f8b192ad45324a176"}}, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0x0, 0x0, "8ecbd0a3", "9031f0af"}}, 0x0}, &(0x7f0000000a40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x2fd3}, 0x0, 0x0, 0x0}) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x10300, 0x43) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000300)={0x8, {{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}}}, 0x88) 17.98230517s ago: executing program 7 (id=2177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x7c}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 16.899500819s ago: executing program 7 (id=2180): r0 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4) userfaultfd(0x509df34b049dab42) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) utime(0x0, &(0x7f0000000080)={0x0, 0x2}) 15.373593277s ago: executing program 4 (id=2183): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0x8}}, 0x10) 15.249649949s ago: executing program 7 (id=2184): r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) io_uring_enter(0xffffffffffffffff, 0x3, 0x10a5, 0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) msgsnd(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="03"], 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0200000071"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 13.583211845s ago: executing program 7 (id=2188): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r2, 0x2, 0x5e, "f6f2b8f39c6d9a7cb2ea182e4045563cc9842662f05c6647d70a0d361af65183b5c991f1f2bc2b943f885746643426e253af69a1d110ec07df7c9d3752042c81e69e017f50ba2e2ce25ca7486376399dccdefb79396dfc21316fff8cc43a"}, 0x66) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000180)=""/108, &(0x7f0000000080)=0x6c) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDSETMODE(r0, 0x4b45, 0x0) (async) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r2, 0x2, 0x5e, "f6f2b8f39c6d9a7cb2ea182e4045563cc9842662f05c6647d70a0d361af65183b5c991f1f2bc2b943f885746643426e253af69a1d110ec07df7c9d3752042c81e69e017f50ba2e2ce25ca7486376399dccdefb79396dfc21316fff8cc43a"}, 0x66) (async) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000180)=""/108, &(0x7f0000000080)=0x6c) (async) 13.582651702s ago: executing program 6 (id=2189): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000200)}) 13.528601791s ago: executing program 5 (id=2190): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0x8}}, 0x10) 13.524830506s ago: executing program 4 (id=2191): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000040)='y', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r0, 0x9, 0x0) 10.32099429s ago: executing program 7 (id=2194): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) 9.983232481s ago: executing program 4 (id=2195): mq_unlink(&(0x7f0000000000)='*:\x00') r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x220422) close(r0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) write$char_usb(r0, &(0x7f0000000080)="4458d453464ef373287869e9dfd9732b0f780a9baabe6e58105bfc23ad93d5a99d3e535d594146e8023df0ea6297c1b19d521891fd8a728cd2abcb2a8c943fdbf63f468f73d22a443dd7e7e0072bc30708c1df0d00b58886cb1f50ed4df1ca1bd99ea5b8e4318b109eec83e4371af7361e55d1b6606992d26d4e9de6eb84d52751a7b5e9f4bb6b656104f6b5b0c60335dcfc0418861dde95534ac6cf7ee186091b9820b900f184f3218c55f6", 0xac) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @private1, 0x3}, 0x1c) mq_unlink(&(0x7f0000000180)='\x00') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, r0, 0x4, 0x4, 0x3}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) mq_unlink(&(0x7f0000000240)='\x00') ptrace$pokeuser(0x6, 0x0, 0x3, 0x8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r4, &(0x7f0000002300)={0x18, 0x0, r5, {0x3}}, 0x18) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20010, r3, 0x67ad7000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000002340)={0xfffffffb, 0x10, [0x8, 0x4, 0x7, 0x8]}) mq_unlink(&(0x7f0000002380)='\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) chown(&(0x7f00000023c0)='./file0\x00', r6, r7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000002400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000002440)=@req3={0x7ff, 0xe915, 0x6, 0x3, 0x3, 0x2, 0x1ff}, 0x1c) mq_unlink(&(0x7f0000002480)='&8\x00') syz_emit_ethernet(0x1e, &(0x7f00000024c0)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@x25={0x805, {0x0, 0x0, 0xb, "e2ef7b91285a7cc82f"}}}}, &(0x7f0000002500)={0x1, 0x3, [0xe81, 0xbc6, 0x3d8, 0x89e]}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000002540)={0x200, 0xc8a, 0x8000, 0x7ff, 0x5, 0x6}) sendmsg$kcm(r8, &(0x7f0000004900)={&(0x7f0000002580)=@ax25={{0x3, @null, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null]}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002600)="92a94655631475c369dd680df9f60401a10356b05e49d4f97dfd236867bde75cda95573eff1126c33070edbfd0a1c81ae762f212c776d62e9d04088feb85780f46545d02385fad123b1456e77e30dc1d75c57033511e07b9b57f53dfe2b8fedc99a935c57cfd493c9ceb5fbcdd6682958c33768c48d891d26d17d53af5f2bd05bf1836cfacc60f2cb9a040601401d075ae80e94331e04c13b8b8666a03d133a8aa7b82824023324c1bffbc4f3fbe15df25814bbe94fa0dc82ea43bec", 0xbc}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f00000036c0)="38fd6600f36ea41a6ddb76731d65ed97c787839e3e38edecb97ffb67efb8fc0be53be9e8a02d962c80bbb72ec7e7f69e1673c8c47c10f58768ff4d89d7cb91d7a3d32de3b567bb700f22d872a74f129a9dbc9bd6737ff0e976106b143fa76451fe0f5dbbb5daff39677e6256d7c962271c7cd328676e5d3cb40923bdb026be0fa46e1f0587bd704b004e77f37cc186dfaed8132b7e4e5c8b9e0e31e3e93795bcf94b56c6e19387d7b2b87e3fc1df3716c4a2a035afd292d89ca21bec1071636a06f0804395ed9516cf154ccba0", 0xcd}], 0x3, &(0x7f0000003800)=[{0xa0, 0x117, 0x0, "0b04f6edd353b177ae77e5558114c1a3cd2b3ea03ab5f5555f4f9ca71441298d07ac3f26d169e7ab15c90af183e37e862f2562985ed707cf30a8a73fe77e646b2c35bfc36ca8a0047079f171d646db36d6875b5ce90e600bb8bdd3562cb167c240dc945f69c65a7193360856792491682d8a18d8da5085f79a4d605bc4d22378723535290babd0711d141bee"}, {0x1010, 0x109, 0x5, "2978554daab4b9a13e0a8b9408261077ccc68dce0b0edee14d62be8fa97fd5aa2f3a16635d71173b4ea72179ded34863dd6b527348f00864e5c68800802733c5f1c4ef4a946c2d1cfb4d2b179809aa96849f585b42ce7992ef159350c5a186b5edde302583d6d4dcca206da678d49a62fa84d06ef94a564b566f62364ee31449049ff88fb0b6eebf0d5e86dd37eaac4c0c861d5158bb276844b76433541bc4759304bb1692931740fc5c94a8e43fcb7b045c1845f4bac60c15d21fce6de4904b79b7de74805fc9544b85452812f6a309af89de9c2e9ae4b0f85f77f655badd9cc887e93fb4c9588ca0645850d5415179663e67cd363b4640de5fcdfcb18f4a0fa90a01d56ebd09a89c632b41ea6b550a8ebfa5d50962e3808834a8a107d0ea8d88c14df6cd5897b5addf3a6263d6638a12eaab268636e3bf8b6041be357aa9bce3ce54c983b304470b4a18870fdde3e99ff0fd56c9f7c304e65d7548936c311205e2db0d65658c2ab9ad2538bee4a60e735e293073faca519e50ff1b7f8cff18b1570f6e7c2a2d3f83ec2c5b82a4a9f6dc8c77ab482ff5af9e44744a7fd7205b1f9f5fb9f473a838d9a7226a24d55f5a63291a8a2bde5fb80816ef518312246d5941e303625047d1110cbff3211f5c3fc25f0d60894202977f8a2580de074c03594c31f3de5828ec5d3786495f3c65f266d3786c23324f87b103fcb627dd1081210d7d4f4c9ba672769e2339a55294ba899b7bd71c4af4e02ff7c0144f4b770dc86215d1877024245d1d94126862427ec39118c71b5fc0c540c5b715b3e8cdfdd772456ff9a9ae55f5c08a4d6a06ebc6d1febc166b3b976b6767f99af47a3e0c62f43da70b8298010e71f27e6ea3e3fed993b0e61b4347d98d783dcfb7938fd54989c186a18b3618f8bfcadeeec8f0dd8404ca585f848e13060cecac83b5699bbacbd70c18754bf1fdca5b0d542a6ea5fa77faa1886d06974e6df8e70bab8a4c39934e9d61ffbb29d875bd68251d751ff229b0dc4db99c9e4173430ed6356860debbefbd16770110f506675d6b8a54588a769e89ae05c06ca4c16bda6424b2f8f621e90a003b724ce445abe0f5f35915de3a52720912a8bc45956c911d359d0e726710fc36e59e3f667420d20bf3542697a7fe446b6c201c83d413e9cc45fe0b05acd1cc9073ec612998168d560462343c3e407bab3fea8db5c2bd3bdcb41594d1d2d32bd475e334cf92a8e3064984cdcc07ca460aef022136b613fa4f59306cc027897e3fb3f9f5b9c7daa1a51b1da1bff4b047bd844ac1793a7e00589885d3abd8cd4e0c63cc9a5d1e93fc89669e098bb722a003db79314f7312ee79863c7387d6845f071497bf4474a6b6ccb2b9fdaa62c3c2982c51597ad8913df42536267602982c077bf9208a6ecfc5b3802b44ed566737ec0c27a0556a51e6358be673f7e93092fc573e9a14c62c8fafc37e152211ac15e960f37b62d3972ff31a61b257c13db5c351e3b9c804888eb07975606e7fc7993e397d1ec98bf5feda57f6ad73c89adc9c94587d54091d7326313864de7d18f5fee0fb9d64264e3e6b67868342b98d8c1751b2602bd9fb638d716f9e2f4caaef75c855132c90a6f82f7d564d2fe1d851b62e135f3fcac87c5c91d7f3fed8eea5deff7839bb70dc8d897318f5140464a9f16bd93f810487e906435e56d168ef398aa4cf330157b98776c77200fdc85e2d229cdc87a341f181925d85160637bca0a34fee243782435e4a5b8702876ce9654ecf44491945b68006e402ba2a415bf8b1968e002c761a527a1c1be510c4627fac38fd256bb178a511a330e1eaf28bb90002ee8d080cae383a3a10b7a970af0e15a589ccf1203cbc4c683953dc079e8a6f5fef252c0b125fc418da531c5d3ddd11404a732430e960892eb08024115149e25d00fc3fc0e48297d82a2f86c8881930712cdfe310074431c47c64be942b979ebf0ef7f5986a19992b7fe1064048e1d51407bb884c62b1eb83a4edf42d2644bdd74b973453b394c25a9ddd9fcfa47f18ca61a1d2d1fe3392eca7543455800fe8dbf98f013f40649d1cd83029a594c3ae6dd99ec5a93bbfd0fb943e08c70f691c25be133db73b40dbc2c9453d90b6fb539d45a7ec1223e97968fd47f637b3a6ea9890be8397450e188bb7ae93f88f675b7d30ec1fbf73a3b81926a79d3264655a266a4c987ea0f22c4e17b8b76f5293ce98c23301aec37beaf437ba1a6d33483a66ff04a4825d30e1828eb0567533a60568807993fbd0c5e0f05dc7aa839529e938e19fde76171eec6fa2a86a54a44ea020f814c36b4f934516ee4c4032dd717924ec8fb27a3ffa5f9277d325fb4aeee88278d6fb7e271a930e8bed61cdd9871b5333d1477d4a3d09e13117b58f0ac2d81654a0a151c6dac6fabf7c5ab8c5a35f1367c5c82110699a186fea0ec1e198619a3b2568fda2cdd50dbb077cd3950a8b0481052e6ca16a3d2648c420e019c6983085fddd063498d2b3b5c81e2b3594fbcbd70018c9a0ad5d915d124c5ae0a412c4d812c20b804b5177e289178232190c2ab13144d847e96b2b1a2370fc60870237ad0e8e89ff324fb1641eef740ff6e3bcbcf9b5450c0dd672f7bf2604d281177faf18495a026315e43db9f1b16de43c9468acf0ae4e4be2fbd66d8c0c024262e75e4c50571c29c21d518d9bf60da4508fae002172a38acd55ce97bdef41f21603f0deafee368b6298e654dac486b94ed8a8a5e20edeeb336d61a74b9eabeac765c7580230ded36cba62552907d8ec20d812936085d45eb2f12a4544e2d1f5148bf34bd5cf65412d177c2e7e3a5980576f9231bed2173bf955efc147c5b46b1f93bf0951911e8cede1143df14625d79de4c7b951919bf6f26f905598c3aa4d5e5c6da9d217fd329905e69267cd6ac97f0c53d95102701e6829a70b2eab46e087e5c977db7f9817e5006a22eb7f657dadc04aebc5c9c9dbf419f7a1aea66f62932864a90cd82e8576d4baedf7daabbc1aa73d33b08e691befcd93d0b18019c9626c81876c6352076408a373a0f1725c68cc33f6caf0494877d9d508fced8adb3c13c2afaee4ed8e7e0510e804f1387c58150795600c1f180ef1483cc90e6a8c22ce523ca0b2d4bedb90350b2ae0c89523a804a6ce1a4fca430e63cdaacd55790d18edd6ffb0191974a03d6a7822544a19011aa6c514c9c5d4a5eaa22ac9294203d0468dafe5edaa498442508f214ccfbe526406869cce286e1ff9c9ccfb09fdedf284690b186b62f1b2ebeb0d5d660a61c62235cae280974b09eff4534965cb64bb31bbd7f3d0462c233123dec4b6d2e508eaf7e37de9d53e2ec48a030545fdad32be27f2fa619b8eaae115cde33a6b2e6a297d72ac868b17d3e70648d77fbd80f2ba003e31dabb92d156ab53e39a25f4139ec560b34dbe327f2c136f0079749315dac180ca2299fadbf7c57d0ce36d98f90c78f5baf1c40175c537edd7734ffb082e51f0637035fd4bab39ee37f3a6218b7b42eaeefeb7bab1fec2182c232a7c81f455fdea4311e7949bfec3b872a608bb180e48a33ae76f4238fb5aba146b4d0adfca95fca02c5dbbf9c566b083771bab75289c8dd12018ab2b8def3a0b133486ab663764703be3d17423d0a5e829d60085e5eedf761e531bf830cede527b955511f7053024aeafc7376e2eadcabc3af6ecef8dee2fc99b1be579e8932fd565a4113c890209d7b7526cb6d128dce2e175ec0fb88df0540b1fff79d8783199c79c13fb946fde1f90fd664ed3b3a1ffc9d4cc0b02ae5043e53adc855699c4210abd8a7944f8ca33be9da11893d47d2634dd01a08b49a517b2f17da66bec6f7795fda2185123406899bb63bc1198948df6393bdedf597f5f02901c5dba07005513a212e7a63cf662c05d259eb38a898bf6af77bf454733baeabd9d98eb4e93afb9cb6bc7f23632b8ed7f2b3dec92366d8055a040d7b415ae1ea6f8c3d3d13da5466de815da714cacb04eb7566eb8cf2ebc392c7980862fb349469e1ff1261ef542c3d7859608f9ebbe9086705222296c7db0fbd70ccef5f953996a613758f0cd8c81849cd57b98784ddd6c749b3562ee27c9ab98d8582a78f6b01c39b2da26cad466dff82724efe207f70a0cd73f82935fead1dede1407292880f2ba98387e05bafb8fa3ffd2f47c67165ebb4a0d6ca92af4b56ef62ecd08628328a51dd8d22b59f304f39aece533c194074a8aa6589de1be7a15c5d7af583c80c2ab949156157fb0397a10ba141231593b6f40542df469b168739af4fa28e1ec70949e2cfe1ca1d171f78968e02d96e2821aa4cfbb2ca8c5436082e4fb332eb2b718145fe13176afa690a447e912fac9e0e6fac6775e30c2b0d204d828065eaf10cf8391e24bb0b18e2964c4971748e54462d763cc27b15bd22028d0ef692df78ce12b678d76775d7b90d4adfb53b44d5ed112bbcf0b7901a9202aa69bb124796b5bafa6489774d230e3fd48930e496bd4edde9a04fdcb5a4cced89e4243feff28d8ea29ba18e871e2d70e02c3b6f15fee216762f5b9fba7eb1d922f9b90974c90474e79e2d14e3c303e710005845bce3af9cefabbb3a14602bd818b41f152c00ee0c2bb3f2039f5ba0e85a4f64055a2ce965f35901fe94bbc3b2960fef94c0ddf9209057637b2f42bad6b6528b9c6830503691c5333faa271fc412e7f931e1388ee07134651294bde9484c34c94ef916ec8b1a8ecd86ab18e86e923a7eca216269aeefb1b8b0143a9560ffa3be863834dc45a0c1cd9fb2770d471977e82d4e67d30b06a1385f21c23c5565a89dce85934787461d50ecb179d5245ea5b1af9ac1031a24f6016786117839176534cffdbd0d9137ed505d0a14cb1692cfcdd54e88ac513fd9047c0a2e0e2d6d28901d484707bfb139638c9e349eea604fc17505bc12579572f823a7f43c1982ba7e96d03c12b7cb0680a9bfad409979c79fc357707ecd4f4c5901a803e2ae2706d48e85dcce51f444f9f0a0bd498238dce1fc0485c67cfdd3a4b1b78efbc0e1edc6510abc9299f75afa02c676222db396e8a3dee2822dc3c48ac27ff960be927624027255e129460b12810a360a36c341b8814b23d025a07bd6c89a32c9e40fe36d845de8567ef1bf0853d6ab6444b09231dd5d418ecf05929beab6c1ff93c51c41565570122006b97bb4b367da5a9528eb78ea07249d756934bbd71a842992efc56e4d9930bf81aae91d828331c5cba7cb2fb0fab536af6ca85b65fcbb075014444c2994a6129df2541a393c209b2c63bb7f860669be3898a0e9544741e9ba157b064af2dd3e04963a983e3a06e6734dccc63d95f70d2c547dcddcbddd1512baac3670a64e587d9f190eb664e17c924b46b471135b70fda5d3811ece2e29be644bf7fae69c3c9c49736f2079682ebaaae74b2a1f217a38246fedd5ca6d323e0bec95877e8f61d98efeaf22abd17962b18b400360620ced380eb1ecab2e6476274712ae3489c37ea27a7b846df55ff3ff783e625708f6d6653a279681722a974c3e9a1dad88209448d23611c696127bce4e329ed45093646bdc1062aca0168f6e67e48fd6923f1c42efefd4bf79166411b9f6c0b74810613a5afd5827f431798a3df3648d3065f87d0c5ad26333c48f484192b40c9fbcc3c64185ec65819643ca324112dd8dafcb89856253296b908f7bc505d74e1cf224160db0a9b6732e4bb80dca833b273efa8ca187d297c47fe4d08feabf2d077e31721b233cb4825e9532688f0b78c31cba512261c5adb88e797fd941b40d4e3"}, {0x30, 0x119, 0xffffffff, "7773cd6ec80b8ce1f8b1653d6f9cdcf4405f64bcebe2280a6b31559f"}], 0x10e0}, 0x800) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) read$FUSE(r0, &(0x7f0000004940)={0x2020}, 0x2020) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000006980)={0x2, 0x1, "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"}) mq_unlink(&(0x7f0000006ac0)='\x00') 9.811681389s ago: executing program 1 (id=2196): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0xe1a, &(0x7f0000000240)={0x0, 0xf803, 0x10100, 0x0, 0x229, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4004, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x260}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) read(r5, &(0x7f0000000200)=""/202, 0xca) 9.08707427s ago: executing program 4 (id=2197): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000115813ae1f4077332c69084357031f"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) tkill(r2, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090500"/20, @ANYRES32=0x0, @ANYBLOB="00000000480600000000000c000300000000000000e6ffffff00"/40, @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0xd, 0x0, 0x24000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1c", 0x1, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 8.973807761s ago: executing program 5 (id=2198): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000006000000080000000300000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000003a000000000000000000000006000000000000000000"], 0x50) r3 = syz_open_dev$evdev(0x0, 0x3, 0x101200) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000240)=[0x10000, 0x8]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0009000000000000000000000000030000000000ff00d31c398ecfc38f68dd6053c4ec9986ca72b1e26203d48f5c40e6a3ebab5af4c0fb8f38d3d1f8276722ab88f419a25f9ca85608a84a18c02ce2f9f58732a6b5d8f2c5fcbbd2c2ab92971917a7f3ccce45832e241bdd0c5f26f14dcf2ab59d826ced27f1f6b63d476b097d8f476991aa91c4f6d66a234002b86e66a9f443db9b73d106e4b1d4b9662896b144e46550bf9c7c44934669f328edfb"], 0x50) syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) quotactl$Q_SYNC(0xffffffff8000011f, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000018110000", @ANYRES32=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 8.790009052s ago: executing program 1 (id=2199): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x4}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) io_uring_enter(0xffffffffffffffff, 0x3, 0x10a5, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) msgsnd(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="03"], 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0200000071"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 7.393952417s ago: executing program 1 (id=2200): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r1, 0x0, 0x22, 0x0, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019a00)=""/102376, 0x18fe8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) unshare(0x2c020400) clock_adjtime(0x5, 0x0) pipe2$watch_queue(&(0x7f00000006c0), 0x80) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 6.915000477s ago: executing program 6 (id=2201): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x1, 0xe, 0xbf2}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) (fail_nth: 5) 6.854243989s ago: executing program 5 (id=2202): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0xb9eb0eb005d40dc0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x401}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000006000000080000000300000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000003a000000000000000000000006000000000000000000"], 0x50) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x3, 0x101200) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000240)=[0x10000, 0x8]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r5 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) quotactl$Q_SYNC(0xffffffff8000011f, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000080)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0000000800000000000026006c090000000000000000000000000000d4171447389bd3c93a0b0b3d91f2ee9d4f7045261f"], 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000018110000", @ANYRES32=r4], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 6.539615099s ago: executing program 7 (id=2203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x41, 0x1ff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) fcntl$dupfd(0xffffffffffffffff, 0x406, r3) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000e40)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r7, 0x4068aea3, &(0x7f0000000080)={0xcc, 0x0, 0x1}) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400e6000f0605b7e518832296a186aa0000000008000000f800000007"], 0x14}}, 0x4008010) 4.963564558s ago: executing program 4 (id=2204): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000760001040000c0140d8e52541a6c000000000000080001"], 0x20}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040)='E\xe1\x85\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getgroups(0x0, 0x0) setregid(0x0, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffdf}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b0000000006001473"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xa}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48004}, 0x8840) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x500, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 4.962820922s ago: executing program 6 (id=2205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0xff00) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) setrlimit(0x0, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xa4, 0xf, 0x9, 0x6, 0x6, 0x0, 0x9, 0x0, 0xd, 0xd5, 0x2, 0xa, 0x7, 0x10}, 0xe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) io_setup(0x8, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="2bda", 0x2}], 0x1}}], 0x1, 0x4000001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/238, 0xee, 0x1, 0x0}, &(0x7f00000005c0)=0x40) 4.954904518s ago: executing program 1 (id=2206): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1) 3.705718358s ago: executing program 6 (id=2207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x2018, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 3.631706073s ago: executing program 5 (id=2208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x6}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x2018, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 3.074649289s ago: executing program 4 (id=2209): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000580)={@private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x3, 0x1, [0x9, 0x59]}}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x8000, 0x40, 0x8, 0x79955488, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x66, 0x0, 0x0, 0x29, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x87, 0x1, 0x5, [{@broadcast, 0xb9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x4d, 0x0, 0xa, [0x4, 0x2]}, @rr={0x7, 0x17, 0xad, [@multicast2, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @lsrr={0x83, 0x3, 0x9a}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x40, 0x0, 0x4000000000000009, 0x10200}) fstat(0xffffffffffffffff, 0x0) r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) 2.154205791s ago: executing program 6 (id=2210): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000004c0)=""/139, &(0x7f0000000200)=0x8b) 2.14209672s ago: executing program 5 (id=2211): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000200)=[{0x1a00, 0x4200, 0x0, 0x0}], 0x1}) 691.608906ms ago: executing program 6 (id=2212): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xe}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) (async) recvmmsg$unix(r2, &(0x7f00000045c0), 0x0, 0x103, &(0x7f0000004680)={0x0, 0x3938700}) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000100)=0x1f, 0x4) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)=ANY=[@ANYRES32=r1]) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000200), 0x4, 0x101040) syz_open_pts(0xffffffffffffffff, 0x248401) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r9, 0xc0106407, &(0x7f0000000140)={0x1, 0x1}) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r9, 0xc0106401, &(0x7f00000002c0)={0xfffffffffffffd84, 0x0}) (async, rerun: 32) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000046c0)={&(0x7f0000004700)=ANY=[@ANYBLOB="90010000", @ANYRES16=r8, @ANYBLOB="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"], 0xfffffffffffffe73}}, 0x1) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0x80, 0x5, 0x400, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x8}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000048c0)=ANY=[@ANYBLOB="0d000000fcffffff040000000100000001000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) 431.52778ms ago: executing program 1 (id=2213): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3000c81c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e36fd8270ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) 0s ago: executing program 1 (id=2214): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) sendmsg$rds(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r6, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x80) writev(0xffffffffffffffff, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000b00)={'pcl711\x00', [0x4f2f, 0x0, 0x10000, 0x4, 0x7, 0x5, 0x4, 0x7, 0x54c6cff3, 0x30d, 0x2, 0x1, 0x1, 0xffffffff, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x0, 0x20001e58, 0x3, 0xe66, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) write$P9_RCREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x73, 0x2, {{0x8, 0x2, 0x8}, 0x7}}, 0x18) kernel console output (not intermixed with test programs): ink: 'syz.1.1756': attribute type 1 has an invalid length. [ 635.801058][T12905] netlink: 'syz.1.1756': attribute type 2 has an invalid length. [ 635.953241][ T30] audit: type=1400 audit(1759273395.931:797): avc: denied { ioctl } for pid=12909 comm="syz.1.1758" path="socket:[43733]" dev="sockfs" ino=43733 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 636.092921][ T5885] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 636.178077][ T30] audit: type=1400 audit(1759273396.151:798): avc: denied { map } for pid=12911 comm="syz.1.1759" path="socket:[42693]" dev="sockfs" ino=42693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 636.264607][ T5885] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 636.285073][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.319420][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.337929][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 636.341662][T12854] syz.0.1738 (12854): drop_caches: 1 [ 636.353475][ T5885] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 636.380321][ T5885] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 636.395444][ T5885] usb 5-1: Manufacturer: syz [ 636.403218][ T5885] usb 5-1: config 0 descriptor?? [ 636.663817][ T5892] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 636.900576][T12930] veth2: entered promiscuous mode [ 637.191043][ T5892] usb 6-1: device descriptor read/64, error -71 [ 637.217967][ T5935] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 637.226375][ T5885] appleir 0003:05AC:8243.0016: unknown main item tag 0x0 [ 637.237140][ T5885] appleir 0003:05AC:8243.0016: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 637.384260][ T5935] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 637.392814][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.403507][ T5935] usb 1-1: config 0 has no interface number 0 [ 637.409723][ T5935] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 637.421053][ T5935] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 637.449322][ T5892] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 637.457046][ T5935] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 637.485298][ T5935] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 637.497564][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.506925][ T5935] usb 1-1: Product: syz [ 637.511237][ T5935] usb 1-1: Manufacturer: syz [ 637.521616][ T5935] usb 1-1: SerialNumber: syz [ 637.834077][ T5935] usb 1-1: config 0 descriptor?? [ 637.874855][ T5935] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 637.947081][ T5892] usb 6-1: device descriptor read/64, error -71 [ 638.073683][ T5892] usb usb6-port1: attempt power cycle [ 638.254238][T12451] usb 1-1: USB disconnect, device number 57 [ 638.303570][T12945] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.1767'. [ 638.377283][ T30] audit: type=1400 audit(1759273398.351:799): avc: denied { map } for pid=12944 comm="syz.0.1767" path="socket:[42733]" dev="sockfs" ino=42733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 638.472858][ T5892] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 638.498447][ T5892] usb 6-1: device descriptor read/8, error -71 [ 638.743083][ T5892] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 638.785781][ T5892] usb 6-1: device descriptor read/8, error -71 [ 638.903483][ T5892] usb usb6-port1: unable to enumerate USB device [ 639.057124][ T5892] usb 5-1: USB disconnect, device number 48 [ 640.137057][T12969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12969 comm=syz.4.1772 [ 641.166053][T12981] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 641.261691][T12981] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 641.368171][ T30] audit: type=1400 audit(1759273401.291:800): avc: denied { getopt } for pid=12977 comm="syz.1.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 641.414363][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1778'. [ 641.523033][ T5935] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 641.601817][T12989] tipc: Enabling of bearer rejected, already enabled [ 642.053352][ T5935] usb 6-1: Using ep0 maxpacket: 8 [ 642.087498][ T5935] usb 6-1: unable to get BOS descriptor or descriptor too short [ 642.259864][T12994] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1780'. [ 643.190644][ T5935] usb 6-1: config 8 has an invalid interface number: 103 but max is 1 [ 643.198983][ T5935] usb 6-1: config 8 has an invalid interface number: 179 but max is 1 [ 643.207334][ T5935] usb 6-1: config 8 has no interface number 0 [ 643.221108][ T5935] usb 6-1: config 8 has no interface number 1 [ 643.227464][ T5935] usb 6-1: config 8 interface 103 has no altsetting 0 [ 643.234349][ T5935] usb 6-1: config 8 interface 179 has no altsetting 0 [ 643.243016][ T5935] usb 6-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=31.12 [ 643.262341][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.270537][ T5935] usb 6-1: Product: syz [ 643.280830][ T5935] usb 6-1: Manufacturer: syz [ 643.285853][ T5935] usb 6-1: SerialNumber: syz [ 643.415779][T12996] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 643.533326][T12984] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1779'. [ 643.560869][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1779'. [ 643.572317][T12984] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1779'. [ 643.656126][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1782'. [ 644.879771][T13009] 9pnet_fd: Insufficient options for proto=fd [ 645.409639][ T5935] msi2500 6-1:8.103: Registered as swradio24 [ 645.429730][ T5935] msi2500 6-1:8.103: SDR API is still slightly experimental and functionality changes may follow [ 645.734447][ T5885] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 645.796584][ T5935] videodev: could not get a free minor [ 645.802484][ T5935] msi2500 6-1:8.179: Failed to register as video device (-23) [ 645.946245][ T5935] msi2500 6-1:8.179: probe with driver msi2500 failed with error -23 [ 645.977482][ T5885] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 645.988722][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.035682][ T5935] usb 6-1: USB disconnect, device number 36 [ 646.055510][ T5885] usb 5-1: Product: syz [ 646.065851][ T5885] usb 5-1: Manufacturer: syz [ 646.070504][ T5885] usb 5-1: SerialNumber: syz [ 646.136088][ T5885] usb 5-1: config 0 descriptor?? [ 646.170693][ T5885] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 646.211474][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 646.254470][ T5885] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 646.274673][T13035] netlink: 'syz.0.1792': attribute type 21 has an invalid length. [ 646.284769][ T5885] usb 5-1: media controller created [ 646.291766][T13035] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1792'. [ 646.331757][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 646.552758][ T5935] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 646.644553][ T5885] DVB: Unable to find symbol mt352_attach() [ 646.714768][ T5935] usb 6-1: Using ep0 maxpacket: 8 [ 646.726038][ T5885] DVB: Unable to find symbol nxt6000_attach() [ 646.741375][ T5935] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 646.776298][ T5885] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 646.806025][ T5935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 646.912995][ T5885] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 646.931976][ T5935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 646.970991][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1796'. [ 646.991400][ T5885] dvb-usb: schedule remote query interval to 1000 msecs. [ 647.011607][ T5935] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.051653][ T5885] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 647.076131][ T5935] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 647.085918][ T5885] dvb-usb: bulk message failed: -22 (7/0) [ 647.093433][ T5885] dvb-usb: bulk message failed: -22 (7/0) [ 647.099354][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.114135][ T5885] usb 5-1: USB disconnect, device number 49 [ 647.315401][ T5885] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 647.369683][ T5935] usb 6-1: GET_CAPABILITIES returned 0 [ 647.425439][ T5935] usbtmc 6-1:16.0: can't read capabilities [ 647.449637][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1797'. [ 648.729887][ T30] audit: type=1800 audit(1759273408.701:801): pid=13075 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1800" name="file1" dev="overlay" ino=1902 res=0 errno=0 [ 650.342014][ T5938] usb 6-1: USB disconnect, device number 37 [ 650.448603][T13102] lo speed is unknown, defaulting to 1000 [ 650.726445][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1806'. [ 650.943261][T13108] syz.6.1806: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 650.958578][T13108] CPU: 0 UID: 0 PID: 13108 Comm: syz.6.1806 Not tainted syzkaller #0 PREEMPT(full) [ 650.958607][T13108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 650.958619][T13108] Call Trace: [ 650.958627][T13108] [ 650.958635][T13108] dump_stack_lvl+0x16c/0x1f0 [ 650.958672][T13108] warn_alloc+0x248/0x3a0 [ 650.958696][T13108] ? __pfx_warn_alloc+0x10/0x10 [ 650.958716][T13108] ? __pfx_stack_trace_save+0x10/0x10 [ 650.958752][T13108] ? kasan_save_stack+0x42/0x60 [ 650.958771][T13108] ? kasan_save_stack+0x33/0x60 [ 650.958788][T13108] ? kasan_save_track+0x14/0x30 [ 650.958806][T13108] ? xskq_create+0x52/0x1d0 [ 650.958830][T13108] ? xsk_setsockopt+0x74e/0x9a0 [ 650.958854][T13108] ? do_sock_setsockopt+0xf0/0x1d0 [ 650.958875][T13108] ? xskq_create+0xfb/0x1d0 [ 650.958901][T13108] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 650.958938][T13108] ? xskq_create+0xfb/0x1d0 [ 650.958968][T13108] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 650.959006][T13108] ? xskq_create+0xfb/0x1d0 [ 650.959030][T13108] vmalloc_user_noprof+0x9e/0xe0 [ 650.959057][T13108] ? xskq_create+0xfb/0x1d0 [ 650.959082][T13108] xskq_create+0xfb/0x1d0 [ 650.959109][T13108] xsk_setsockopt+0x74e/0x9a0 [ 650.959133][T13108] ? __pfx_xsk_setsockopt+0x10/0x10 [ 650.959156][T13108] ? find_held_lock+0x2b/0x80 [ 650.959185][T13108] ? selinux_socket_setsockopt+0x6a/0x80 [ 650.959218][T13108] ? __pfx_xsk_setsockopt+0x10/0x10 [ 650.959243][T13108] do_sock_setsockopt+0xf0/0x1d0 [ 650.959266][T13108] __sys_setsockopt+0x1a0/0x230 [ 650.959298][T13108] __x64_sys_setsockopt+0xbd/0x160 [ 650.959323][T13108] ? do_syscall_64+0x91/0x4e0 [ 650.959351][T13108] ? lockdep_hardirqs_on+0x7c/0x110 [ 650.959380][T13108] do_syscall_64+0xcd/0x4e0 [ 650.959411][T13108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.959431][T13108] RIP: 0033:0x7f99d8d8eec9 [ 650.959447][T13108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.959465][T13108] RSP: 002b:00007f99d9bbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 650.959484][T13108] RAX: ffffffffffffffda RBX: 00007f99d8fe6270 RCX: 00007f99d8d8eec9 [ 650.959496][T13108] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 650.959508][T13108] RBP: 00007f99d8e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 650.959521][T13108] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 650.959533][T13108] R13: 00007f99d8fe6308 R14: 00007f99d8fe6270 R15: 00007fffd17b7ff8 [ 650.959561][T13108] [ 650.959568][T13108] Mem-Info: [ 651.161070][T13107] loop6: detected capacity change from 0 to 2560 [ 651.240455][T13107] buffer_io_error: 27 callbacks suppressed [ 651.246424][T13107] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.258184][T13107] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.262744][T13108] active_anon:39735 inactive_anon:1 isolated_anon:0 [ 651.262744][T13108] active_file:1870 inactive_file:4352 isolated_file:0 [ 651.262744][T13108] unevictable:768 dirty:279 writeback:0 [ 651.262744][T13108] slab_reclaimable:12431 slab_unreclaimable:109111 [ 651.262744][T13108] mapped:41306 shmem:27011 pagetables:1598 [ 651.262744][T13108] sec_pagetables:0 bounce:0 [ 651.262744][T13108] kernel_misc_reclaimable:0 [ 651.262744][T13108] free:1317453 free_pcp:6240 free_cma:0 [ 651.266254][T13107] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.311404][T13108] Node 0 active_anon:158940kB inactive_anon:4kB active_file:7384kB inactive_file:17192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165080kB dirty:1116kB writeback:0kB shmem:106508kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13616kB pagetables:6224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 651.319502][T13107] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.351666][T13108] Node 1 active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 651.359235][T13107] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.389216][T13108] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 651.397403][T13107] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.425843][T13108] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 651.425881][T13108] Node 0 DMA32 free:1340600kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:158940kB inactive_anon:4kB active_file:7384kB inactive_file:17104kB unevictable:1536kB writepending:1116kB present:3129332kB managed:2547948kB mlocked:0kB bounce:0kB free_pcp:22892kB local_pcp:9068kB free_cma:0kB [ 651.425933][T13108] lowmem_reserve[]: 0 0 0 0 0 [ 651.425965][T13108] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 651.426014][T13108] lowmem_reserve[]: 0 0 0 0 0 [ 651.426047][T13108] Node 1 Normal free:3913852kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:216kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 651.433948][T13107] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.439560][T13108] lowmem_reserve[]: 0 [ 651.472013][T13107] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.560340][T13107] ldm_validate_partition_table(): Disk read failed. [ 651.567544][T13107] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.575511][T13107] Buffer I/O error on dev loop6, logical block 0, async page read [ 651.583587][T13107] Dev loop6: unable to read RDB block 0 [ 651.589531][T13107] loop6: unable to read partition table [ 651.600639][T13107] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 651.692735][T13108] 0 0 0 0 [ 651.695934][T13108] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 651.708690][T13108] Node 0 DMA32: 244*4kB (UME) 467*8kB (UME) 135*16kB (UME) 369*32kB (UME) 268*64kB (UME) 225*128kB (UME) 132*256kB (UME) 40*512kB (UM) 27*1024kB (ME) 19*2048kB (UM) 282*4096kB (UM) = 1340536kB [ 651.727791][T13108] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 651.739563][T13108] Node 1 Normal: 175*4kB (UME) 58*8kB (UME) 39*16kB (UME) 210*32kB (UME) 95*64kB (UME) 31*128kB (UME) 20*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 5*2048kB (UME) 946*4096kB (M) = 3913852kB [ 651.758198][T13108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.767859][T13108] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 651.777167][T13108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 651.786806][T13108] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 651.796222][T13108] 33259 total pagecache pages [ 651.800959][T13108] 1 pages in swap cache [ 651.805146][T13108] Free swap = 124992kB [ 651.809287][T13108] Total swap = 124996kB [ 651.813517][T13108] 2097051 pages RAM [ 651.817310][T13108] 0 pages HighMem/MovableOnly [ 651.821968][T13108] 428422 pages reserved [ 651.826171][T13108] 0 pages cma reserved [ 653.268325][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1816'. [ 654.205784][T13159] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 654.403423][ T5938] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 655.272988][ T5938] usb 6-1: Using ep0 maxpacket: 16 [ 655.291499][T13159] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 655.332876][ T5938] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 655.389182][ T5938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 655.445819][ T5938] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 655.455146][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.485126][ T5938] usb 6-1: Product: syz [ 655.489334][ T5938] usb 6-1: Manufacturer: syz [ 655.561908][ T5938] usb 6-1: SerialNumber: syz [ 655.641962][ T5938] usb 6-1: config 0 descriptor?? [ 655.852561][ T5938] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 655.878987][ T5938] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 655.928005][ T30] audit: type=1400 audit(1759273415.901:802): avc: denied { setopt } for pid=13155 comm="syz.5.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 655.959903][T13175] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1825'. [ 655.970004][T13175] bond0: left promiscuous mode [ 655.980391][T13175] bond0: left allmulticast mode [ 655.990251][T13175] loop6: detected capacity change from 0 to 2640 [ 656.013704][ T9614] ldm_validate_partition_table(): Disk read failed. [ 656.022468][ T9614] Dev loop6: unable to read RDB block 0 [ 656.035894][ T9614] loop6: unable to read partition table [ 656.087968][T13175] ldm_validate_partition_table(): Disk read failed. [ 656.096524][T13175] Dev loop6: unable to read RDB block 0 [ 656.310048][T13175] buffer_io_error: 34 callbacks suppressed [ 656.316646][T13175] Buffer I/O error on dev loop6, logical block 0, async page read [ 656.377282][T13175] Buffer I/O error on dev loop6, logical block 3, async page read [ 656.477558][ T5938] em28xx 6-1:0.0: unknown em28xx chip ID (28) [ 656.491382][T13175] Buffer I/O error on dev loop6, logical block 0, async page read [ 656.554819][T13175] Buffer I/O error on dev loop6, logical block 0, async page read [ 656.574900][T13175] loop6: unable to read partition table [ 656.584661][ T9614] Buffer I/O error on dev loop6, logical block 0, async page read [ 656.611060][ T9614] Buffer I/O error on dev loop6, logical block 0, async page read [ 656.630634][T13175] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 656.640832][ T9614] Buffer I/O error on dev loop6, logical block 0, async page read [ 656.665818][ T9614] Buffer I/O error on dev loop6, logical block 0, async page read [ 656.687147][ T5938] em28xx 6-1:0.0: Config register raw data: 0x71 [ 656.689856][ T9614] Buffer I/O error on dev loop6, logical block 0, async page read [ 656.749167][ T5938] em28xx 6-1:0.0: I2S Audio (3 sample rate(s)) [ 656.768581][ T9614] Buffer I/O error on dev loop6, logical block 0, async page read [ 656.802958][ T5938] em28xx 6-1:0.0: No AC97 audio processor [ 656.927019][ T5938] usb 6-1: USB disconnect, device number 38 [ 658.462585][T13221] lo speed is unknown, defaulting to 1000 [ 658.793592][ T5935] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 658.944090][ T5885] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 659.072901][T12451] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 659.164435][ T5935] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.175046][ T5935] usb 5-1: config 0 has no interfaces? [ 659.180542][ T5935] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 659.189609][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.199777][ T5935] usb 5-1: config 0 descriptor?? [ 659.224008][ T5885] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 659.235320][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.246305][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.249326][T12451] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 659.256125][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 659.259853][ T5885] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 659.266410][T12451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.281542][ T5885] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 659.288337][T12451] usb 1-1: Product: syz [ 659.299020][ T5885] usb 6-1: Manufacturer: syz [ 659.304634][T12451] usb 1-1: Manufacturer: syz [ 659.310309][ T5885] usb 6-1: config 0 descriptor?? [ 659.313218][T12451] usb 1-1: SerialNumber: syz [ 659.340402][T12451] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 659.374133][ T5938] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 659.590458][ T5935] usb 1-1: USB disconnect, device number 58 [ 659.789856][ T5885] appleir 0003:05AC:8243.0017: unknown main item tag 0x0 [ 659.810861][ T5885] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 660.465274][ T5938] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 660.474577][ T5938] ath9k_htc: Failed to initialize the device [ 660.837418][ T5935] usb 1-1: ath9k_htc: USB layer deinitialized [ 661.438403][ T5892] usb 5-1: USB disconnect, device number 50 [ 662.507959][ T5935] usb 6-1: USB disconnect, device number 39 [ 662.874306][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1852'. [ 663.668869][T13284] netlink: 'syz.5.1853': attribute type 10 has an invalid length. [ 663.745219][T13284] batman_adv: batadv0: Adding interface: team0 [ 663.837071][T13284] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.871847][T13284] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 663.890774][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1853'. [ 664.301614][ T5885] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 664.552836][ T5885] usb 5-1: Using ep0 maxpacket: 8 [ 664.587242][ T5885] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 664.598094][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.812321][ T5885] usb 5-1: Product: syz [ 664.830090][ T5885] usb 5-1: Manufacturer: syz [ 664.852726][ T5885] usb 5-1: SerialNumber: syz [ 664.903516][ T5885] usb 5-1: config 0 descriptor?? [ 664.944974][ T5885] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 664.977134][T13298] netlink: 'syz.0.1859': attribute type 1 has an invalid length. [ 665.049801][T13298] 8021q: adding VLAN 0 to HW filter on device bond6 [ 666.468675][T13317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.992812][ T43] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 668.746178][ T5885] usb 5-1: USB disconnect, device number 51 [ 668.882710][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 669.391242][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 669.459665][ T43] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 669.469271][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.521780][ T43] usb 6-1: config 0 descriptor?? [ 669.535190][T13341] block nbd4: not configured, cannot reconfigure [ 669.776138][ T43] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 669.864076][ T30] audit: type=1400 audit(1759273429.831:803): avc: granted { setsecparam } for pid=13347 comm="syz.0.1876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 670.293622][ T43] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 670.472876][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 670.494159][ T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 670.537351][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.552733][ T43] usb 5-1: Product: syz [ 670.557573][ T43] usb 5-1: Manufacturer: syz [ 670.563514][ T43] usb 5-1: SerialNumber: syz [ 670.572211][ T43] usb 5-1: config 0 descriptor?? [ 670.788184][ T43] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 671.047249][T12451] usb 6-1: USB disconnect, device number 40 [ 671.049584][ T30] audit: type=1326 audit(1759273430.941:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13331 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8ce98eec9 code=0x7fc00000 [ 671.344205][ T43] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 671.552564][ T43] usb 5-1: USB disconnect, device number 52 [ 674.782917][ T30] audit: type=1400 audit(1759273434.401:805): avc: granted { setsecparam } for pid=13400 comm="syz.5.1893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 676.364757][T13418] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1895'. [ 676.649347][ T30] audit: type=1400 audit(1759273436.621:806): avc: denied { read } for pid=13419 comm="syz.0.1898" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 676.859034][ T30] audit: type=1400 audit(1759273436.631:807): avc: denied { open } for pid=13419 comm="syz.0.1898" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 676.883775][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.989295][ T30] audit: type=1400 audit(1759273436.831:808): avc: denied { sys_module } for pid=13408 comm="syz.5.1895" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 677.058663][ T30] audit: type=1400 audit(1759273436.841:809): avc: denied { mounton } for pid=13408 comm="syz.5.1895" path="/209/file0" dev="tmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 677.090819][ T30] audit: type=1400 audit(1759273436.931:810): avc: denied { allowed } for pid=13424 comm="syz.4.1900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 677.394901][ T30] audit: type=1400 audit(1759273436.961:811): avc: denied { create } for pid=13424 comm="syz.4.1900" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 677.416155][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.496133][ T30] audit: type=1400 audit(1759273437.051:812): avc: denied { create } for pid=13426 comm="syz.1.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 677.515717][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.663739][ T30] audit: type=1400 audit(1759273437.061:813): avc: denied { ioctl } for pid=13426 comm="syz.1.1901" path="socket:[45020]" dev="sockfs" ino=45020 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 677.688443][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.762741][ T30] audit: type=1400 audit(1759273437.061:814): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.786929][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.879671][ T30] audit: type=1400 audit(1759273437.061:815): avc: denied { read write open } for pid=5823 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 677.904709][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.363979][T13435] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 679.073700][T12451] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 679.306671][T12451] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 679.334794][T12451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.355368][T12451] usb 5-1: Product: syz [ 679.364805][T12451] usb 5-1: Manufacturer: syz [ 679.407619][T12451] usb 5-1: SerialNumber: syz [ 679.466172][T12451] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 679.592920][ T5938] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 679.813338][T12451] usb 5-1: USB disconnect, device number 53 [ 680.710236][ T5938] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 680.735241][ T5938] ath9k_htc: Failed to initialize the device [ 680.787426][T12451] usb 5-1: ath9k_htc: USB layer deinitialized [ 681.673584][ T30] kauditd_printk_skb: 344 callbacks suppressed [ 681.673607][ T30] audit: type=1400 audit(1759273441.621:1160): avc: denied { create } for pid=13466 comm="syz.4.1911" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 681.787101][ T30] audit: type=1400 audit(1759273441.641:1161): avc: denied { ioctl } for pid=13466 comm="syz.4.1911" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45756 ioctlcmd=0xaa08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 681.919050][ T30] audit: type=1400 audit(1759273441.681:1162): avc: denied { read write } for pid=13466 comm="syz.4.1911" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 682.033480][ T30] audit: type=1400 audit(1759273441.691:1163): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 682.133146][ T30] audit: type=1400 audit(1759273441.711:1164): avc: denied { read write open } for pid=13466 comm="syz.4.1911" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 682.191437][ T30] audit: type=1400 audit(1759273441.751:1165): avc: denied { create } for pid=13466 comm="syz.4.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 682.212177][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.459874][ T30] audit: type=1400 audit(1759273441.751:1166): avc: denied { read write } for pid=13466 comm="syz.4.1911" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 682.587723][ T30] audit: type=1400 audit(1759273441.771:1167): avc: denied { ioctl open } for pid=13466 comm="syz.4.1911" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 682.611429][ C0] vkms_vblank_simulate: vblank timer overrun [ 682.649594][ T30] audit: type=1400 audit(1759273441.771:1168): avc: denied { ioctl } for pid=13466 comm="syz.4.1911" path="/dev/nullb0" dev="devtmpfs" ino=695 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 682.832769][T13490] SELinux: policydb magic number 0x68706563 does not match expected magic number 0xf97cff8c [ 682.843997][T13490] SELinux: failed to load policy [ 682.950618][T13490] audit: audit_backlog=65 > audit_backlog_limit=64 [ 683.898925][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'. [ 684.613486][ T5938] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 684.821581][ T5938] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 684.840996][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.872109][ T5938] usb 6-1: config 0 descriptor?? [ 684.909229][ T5938] cp210x 6-1:0.0: cp210x converter detected [ 685.372894][ T43] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 685.385081][ T5938] usb 6-1: cp210x converter now attached to ttyUSB0 [ 685.656352][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.663207][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.696418][ T5938] usb 6-1: USB disconnect, device number 41 [ 685.851183][ T5938] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 685.888252][T13526] FAULT_INJECTION: forcing a failure. [ 685.888252][T13526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.900598][ T5938] cp210x 6-1:0.0: device disconnected [ 686.009784][T13526] CPU: 0 UID: 0 PID: 13526 Comm: syz.6.1925 Not tainted syzkaller #0 PREEMPT(full) [ 686.009813][T13526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 686.009824][T13526] Call Trace: [ 686.009830][T13526] [ 686.009837][T13526] dump_stack_lvl+0x16c/0x1f0 [ 686.009872][T13526] should_fail_ex+0x512/0x640 [ 686.009901][T13526] _copy_from_iter+0x29f/0x1720 [ 686.009933][T13526] ? __alloc_skb+0x200/0x380 [ 686.009959][T13526] ? __pfx__copy_from_iter+0x10/0x10 [ 686.009987][T13526] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 686.010022][T13526] netlink_sendmsg+0x829/0xdd0 [ 686.010043][T13526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 686.010079][T13526] ____sys_sendmsg+0xa95/0xc70 [ 686.010101][T13526] ? copy_msghdr_from_user+0x10a/0x160 [ 686.010126][T13526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 686.010156][T13526] ___sys_sendmsg+0x134/0x1d0 [ 686.010182][T13526] ? __pfx____sys_sendmsg+0x10/0x10 [ 686.010238][T13526] __sys_sendmsg+0x16d/0x220 [ 686.010264][T13526] ? __pfx___sys_sendmsg+0x10/0x10 [ 686.010304][T13526] do_syscall_64+0xcd/0x4e0 [ 686.010333][T13526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.010350][T13526] RIP: 0033:0x7f99d8d8eec9 [ 686.010365][T13526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.010383][T13526] RSP: 002b:00007f99d9caa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 686.010401][T13526] RAX: ffffffffffffffda RBX: 00007f99d8fe5fa0 RCX: 00007f99d8d8eec9 [ 686.010412][T13526] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 686.010423][T13526] RBP: 00007f99d9caa090 R08: 0000000000000000 R09: 0000000000000000 [ 686.010433][T13526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.010443][T13526] R13: 00007f99d8fe6038 R14: 00007f99d8fe5fa0 R15: 00007fffd17b7ff8 [ 686.010466][T13526] [ 686.198595][ C0] vkms_vblank_simulate: vblank timer overrun [ 686.340424][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 686.364187][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.372225][ T43] usb 1-1: Product: syz [ 686.470340][ T43] usb 1-1: Manufacturer: syz [ 686.510225][ T43] usb 1-1: SerialNumber: syz [ 686.594990][ T43] usb 1-1: config 0 descriptor?? [ 686.691262][ T30] kauditd_printk_skb: 542 callbacks suppressed [ 686.691279][ T30] audit: type=1400 audit(1759273446.661:1697): avc: denied { execute_no_trans } for pid=13527 comm="syz.4.1926" path="/403/file1" dev="tmpfs" ino=2156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 686.777640][ T30] audit: type=1400 audit(1759273446.721:1698): avc: denied { search } for pid=13538 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.928146][ T43] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 687.025281][ T30] audit: type=1400 audit(1759273446.721:1699): avc: denied { search } for pid=13538 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.095666][ T30] audit: type=1400 audit(1759273446.721:1700): avc: denied { search } for pid=13538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 687.509834][ T30] audit: type=1400 audit(1759273446.741:1701): avc: denied { prog_load } for pid=13534 comm="syz.6.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 687.530979][ T30] audit: type=1400 audit(1759273446.741:1702): avc: denied { bpf } for pid=13534 comm="syz.6.1928" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.554094][ T30] audit: type=1400 audit(1759273446.741:1703): avc: denied { perfmon } for pid=13534 comm="syz.6.1928" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.576281][ T30] audit: type=1400 audit(1759273446.741:1704): avc: denied { perfmon } for pid=13534 comm="syz.6.1928" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.598433][ T30] audit: type=1400 audit(1759273446.741:1705): avc: denied { perfmon } for pid=13534 comm="syz.6.1928" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.650414][ T30] audit: type=1400 audit(1759273446.751:1706): avc: denied { perfmon } for pid=13534 comm="syz.6.1928" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.672151][ T43] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 687.748497][ T43] usb 1-1: USB disconnect, device number 59 [ 691.677679][T13592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1941'. [ 691.704835][ T30] kauditd_printk_skb: 205 callbacks suppressed [ 691.704877][ T30] audit: type=1400 audit(1759273451.681:1912): avc: denied { read } for pid=13585 comm="syz.0.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 692.060105][ T30] audit: type=1400 audit(1759273451.681:1913): avc: denied { read } for pid=13585 comm="syz.0.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 692.150709][T13595] audit: audit_backlog=65 > audit_backlog_limit=64 [ 692.157335][T13595] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 692.165004][T13595] audit: backlog limit exceeded [ 692.170447][T13595] audit: audit_backlog=65 > audit_backlog_limit=64 [ 692.177102][T13595] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 692.184773][T13595] audit: backlog limit exceeded [ 692.191164][T13595] audit: audit_backlog=65 > audit_backlog_limit=64 [ 692.197706][T13595] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 692.988889][T13598] comedi comedi1: bad chanlist[0]=0x00040604 chan=1540 range length=1 [ 693.517245][T13600] ip6tnl0: entered promiscuous mode [ 694.643784][ T43] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 694.917814][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 695.529677][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 695.908633][ T43] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 695.954643][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.983082][ T43] usb 5-1: Product: syz [ 696.002823][ T43] usb 5-1: Manufacturer: syz [ 696.007467][ T43] usb 5-1: SerialNumber: syz [ 696.074334][ T43] usb 5-1: config 0 descriptor?? [ 696.139289][ T43] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 696.993954][ T30] kauditd_printk_skb: 505 callbacks suppressed [ 696.993977][ T30] audit: type=1400 audit(1759273456.911:2385): avc: denied { search } for pid=13637 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.243915][ T43] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 697.297140][ T43] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 697.332035][ T43] usb 5-1: USB disconnect, device number 54 [ 697.342947][ T30] audit: type=1400 audit(1759273456.911:2386): avc: denied { search } for pid=13637 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.532753][ T30] audit: type=1400 audit(1759273456.911:2387): avc: denied { search } for pid=13637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.662724][ T30] audit: type=1400 audit(1759273456.911:2388): avc: denied { search } for pid=13637 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 697.680163][T13650] audit: audit_lost=21 audit_rate_limit=0 audit_backlog_limit=64 [ 697.697601][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1950'. [ 697.766230][T13650] audit: out of memory in audit_log_start [ 698.366348][ T30] audit: type=1400 audit(1759273456.961:2389): avc: denied { search } for pid=13639 comm="sed" name="resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.567493][ T30] audit: type=1400 audit(1759273456.961:2390): avc: denied { read } for pid=13639 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 698.615838][T13614] audit: audit_backlog=65 > audit_backlog_limit=64 [ 698.634641][T13653] audit: audit_backlog=65 > audit_backlog_limit=64 [ 699.004359][T13661] sctp: [Deprecated]: syz.5.1954 (pid 13661) Use of int in maxseg socket option. [ 699.004359][T13661] Use struct sctp_assoc_value instead [ 699.671655][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1955'. [ 699.706991][T13657] binder: 13656:13657 unknown command 1885300084 [ 699.723299][T13657] binder: 13656:13657 ioctl c0306201 200000000080 returned -22 [ 700.162769][ T5885] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 700.495571][ T5885] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 700.595367][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.640142][ T5885] usb 5-1: config 0 has no interface number 0 [ 700.675070][ T5885] usb 5-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 700.749739][ T5885] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 700.822767][ T5885] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 701.035383][ T5885] usb 5-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 701.671844][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.695470][ T5885] usb 5-1: Product: syz [ 701.719259][ T5885] usb 5-1: Manufacturer: syz [ 701.739069][ T5885] usb 5-1: SerialNumber: syz [ 701.792764][ T5885] usb 5-1: config 0 descriptor?? [ 701.875869][ T5885] usb 5-1: can't set config #0, error -71 [ 701.922428][ T5885] usb 5-1: USB disconnect, device number 55 [ 702.022693][ T30] kauditd_printk_skb: 385 callbacks suppressed [ 702.022716][ T30] audit: type=1400 audit(1759273461.991:2694): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 702.599087][ T30] audit: type=1400 audit(1759273462.571:2695): avc: denied { create } for pid=13693 comm="syz.4.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 703.067665][T13699] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1964'. [ 703.902828][ T30] audit: type=1400 audit(1759273462.601:2696): avc: denied { bind } for pid=13693 comm="syz.4.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 703.941653][ T30] audit: type=1400 audit(1759273462.611:2697): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 703.965903][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.012702][ T30] audit: type=1400 audit(1759273462.611:2698): avc: denied { read write open } for pid=5823 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.457579][ T30] audit: type=1400 audit(1759273462.621:2699): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3083 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.483239][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.553641][ T30] audit: type=1400 audit(1759273462.751:2700): avc: denied { read write } for pid=8882 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.577812][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.721456][ T30] audit: type=1400 audit(1759273462.751:2701): avc: denied { read write open } for pid=8882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.730439][ T8882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 704.746553][ C0] vkms_vblank_simulate: vblank timer overrun [ 704.760389][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 704.942701][ T5885] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 705.152160][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.590295][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.650701][ T5885] usb 5-1: string descriptor 0 read error: -71 [ 706.657095][ T5885] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 706.669133][ T5885] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 706.685049][ T5885] usb 5-1: config 0 descriptor?? [ 706.690579][ T5885] usb 5-1: can't set config #0, error -71 [ 706.702570][ T5885] usb 5-1: USB disconnect, device number 56 [ 707.034176][ T30] kauditd_printk_skb: 223 callbacks suppressed [ 707.034195][ T30] audit: type=1400 audit(1759273467.011:2883): avc: denied { write } for pid=13726 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 707.152697][ T30] audit: type=1400 audit(1759273467.011:2884): avc: denied { read } for pid=13726 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 707.297053][ T30] audit: type=1400 audit(1759273467.011:2885): avc: denied { read } for pid=13726 comm="syz.4.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 707.382406][ T30] audit: type=1400 audit(1759273467.051:2886): avc: denied { write } for pid=13726 comm="syz.4.1973" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 707.544824][ T30] audit: type=1400 audit(1759273467.051:2887): avc: denied { write open } for pid=13726 comm="syz.4.1973" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 707.789190][T13739] audit: audit_backlog=65 > audit_backlog_limit=64 [ 707.798687][T13740] audit: audit_backlog=65 > audit_backlog_limit=64 [ 707.827401][ T5823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 707.846814][T13739] audit: audit_lost=65 audit_rate_limit=0 audit_backlog_limit=64 [ 707.861231][ T9120] audit: audit_backlog=65 > audit_backlog_limit=64 [ 708.030183][ T5938] IPVS: starting estimator thread 0... [ 708.093630][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1978'. [ 708.106057][T13747] netlink: 'syz.6.1977': attribute type 1 has an invalid length. [ 708.133609][T13746] IPVS: using max 52 ests per chain, 124800 per kthread [ 708.325651][T13747] 8021q: adding VLAN 0 to HW filter on device bond3 [ 709.944459][T13774] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1983'. [ 709.961563][T13774] SQUASHFS error: Failed to read block 0x0: -5 [ 709.967871][T13774] unable to read squashfs_super_block [ 711.939839][T13802] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1986'. [ 712.168813][ T30] kauditd_printk_skb: 563 callbacks suppressed [ 712.168830][ T30] audit: type=1400 audit(1759273472.141:3436): avc: denied { mounton } for pid=13801 comm="syz.4.1989" path="/414/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 712.309724][ T30] audit: type=1400 audit(1759273472.181:3437): avc: denied { create } for pid=13781 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 712.337445][ T30] audit: type=1400 audit(1759273472.201:3438): avc: denied { create } for pid=13781 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 712.390023][ T30] audit: type=1400 audit(1759273472.251:3439): avc: denied { sys_module } for pid=13781 comm="syz.0.1986" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 712.550375][ T30] audit: type=1400 audit(1759273472.261:3440): avc: denied { mounton } for pid=13781 comm="syz.0.1986" path="/395/file0" dev="tmpfs" ino=2129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 712.644573][T13812] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 712.677551][T13812] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 712.893339][ T30] audit: type=1400 audit(1759273472.341:3441): avc: denied { map_create } for pid=13806 comm="syz.1.1990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 712.928272][ T5825] audit: audit_backlog=65 > audit_backlog_limit=64 [ 712.936997][ T5825] audit: audit_lost=72 audit_rate_limit=0 audit_backlog_limit=64 [ 712.949748][T13817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 712.957772][ T5825] audit: backlog limit exceeded [ 712.965212][T13816] FAULT_INJECTION: forcing a failure. [ 712.965212][T13816] name failslab, interval 1, probability 0, space 0, times 0 [ 713.011564][T13816] CPU: 0 UID: 0 PID: 13816 Comm: syz.5.1993 Not tainted syzkaller #0 PREEMPT(full) [ 713.011590][T13816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 713.011602][T13816] Call Trace: [ 713.011608][T13816] [ 713.011616][T13816] dump_stack_lvl+0x16c/0x1f0 [ 713.011647][T13816] should_fail_ex+0x512/0x640 [ 713.011672][T13816] ? __kmalloc_noprof+0xbf/0x510 [ 713.011691][T13816] ? ioctl_standard_iw_point+0x414/0xca0 [ 713.011714][T13816] should_failslab+0xc2/0x120 [ 713.011736][T13816] __kmalloc_noprof+0xd2/0x510 [ 713.011760][T13816] ioctl_standard_iw_point+0x414/0xca0 [ 713.011788][T13816] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 713.011817][T13816] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 713.011847][T13816] ? __pfx___mutex_lock+0x10/0x10 [ 713.011881][T13816] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 713.011905][T13816] ioctl_standard_call+0x166/0x1d0 [ 713.011932][T13816] ? __pfx_ioctl_standard_call+0x10/0x10 [ 713.011957][T13816] ? __pfx_cfg80211_wext_giwscan+0x10/0x10 [ 713.011981][T13816] wireless_process_ioctl.constprop.0+0x28e/0x3d0 [ 713.012013][T13816] wext_handle_ioctl+0x168/0x2a0 [ 713.012041][T13816] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 713.012071][T13816] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 713.012100][T13816] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 713.012134][T13816] sock_ioctl+0x3a1/0x6b0 [ 713.012158][T13816] ? __pfx_sock_ioctl+0x10/0x10 [ 713.012177][T13816] ? hook_file_ioctl_common+0x145/0x410 [ 713.012205][T13816] ? selinux_file_ioctl+0x180/0x270 [ 713.012230][T13816] ? selinux_file_ioctl+0xb4/0x270 [ 713.012258][T13816] ? __pfx_sock_ioctl+0x10/0x10 [ 713.012280][T13816] __x64_sys_ioctl+0x18e/0x210 [ 713.012309][T13816] do_syscall_64+0xcd/0x4e0 [ 713.012338][T13816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.012356][T13816] RIP: 0033:0x7fb8ce98eec9 [ 713.012372][T13816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.012389][T13816] RSP: 002b:00007fb8cf87c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 713.012407][T13816] RAX: ffffffffffffffda RBX: 00007fb8cebe5fa0 RCX: 00007fb8ce98eec9 [ 713.012419][T13816] RDX: 0000200000000080 RSI: 0000000000008b19 RDI: 0000000000000003 [ 713.012435][T13816] RBP: 00007fb8cf87c090 R08: 0000000000000000 R09: 0000000000000000 [ 713.012446][T13816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.012457][T13816] R13: 00007fb8cebe6038 R14: 00007fb8cebe5fa0 R15: 00007fffe2e6d368 [ 713.012482][T13816] [ 713.260001][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.414745][T13838] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 715.438071][T13838] overlay: filesystem on ./bus not supported as upperdir [ 715.683540][ T5885] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 716.422549][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 716.469709][ T5885] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 716.517519][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 716.697539][ T5885] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 716.711499][ T5885] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.728629][ T5885] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 716.752658][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.932348][T13852] sd 0:0:1:0: device reset [ 717.188158][ T30] kauditd_printk_skb: 277 callbacks suppressed [ 717.188179][ T30] audit: type=1400 audit(1759273477.161:3690): avc: denied { ioctl } for pid=13840 comm="syz.0.2000" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 717.403996][ T30] audit: type=1400 audit(1759273477.221:3691): avc: denied { search } for pid=13849 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.545118][ T5885] usb 1-1: GET_CAPABILITIES returned 0 [ 717.552218][ T5885] usbtmc 1-1:16.0: can't read capabilities [ 717.589182][ T30] audit: type=1400 audit(1759273477.221:3692): avc: denied { search } for pid=13849 comm="rm" name="dhcpcd" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.836485][ T30] audit: type=1400 audit(1759273477.221:3693): avc: denied { search } for pid=13849 comm="rm" name="hook-state" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.874220][ T30] audit: type=1400 audit(1759273477.251:3694): avc: denied { prog_load } for pid=13825 comm="syz.6.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 718.040954][ T30] audit: type=1400 audit(1759273477.251:3695): avc: denied { bpf } for pid=13825 comm="syz.6.1997" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 718.147942][ T30] audit: type=1400 audit(1759273477.311:3696): avc: denied { search } for pid=13730 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.301741][ T30] audit: type=1400 audit(1759273477.321:3697): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.420921][ T30] audit: type=1400 audit(1759273477.341:3699): avc: denied { mounton } for pid=13853 comm="syz.1.2004" path="/417/file0" dev="tmpfs" ino=2209 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 718.515426][ T30] audit: type=1400 audit(1759273477.321:3698): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 718.861811][T13874] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 718.893466][T13874] syzkaller1: linktype set to 776 [ 719.334440][T13884] tipc: Enabling of bearer rejected, already enabled [ 719.533014][T13889] sctp: [Deprecated]: syz.6.2011 (pid 13889) Use of int in maxseg socket option. [ 719.533014][T13889] Use struct sctp_assoc_value instead [ 720.251559][T12451] usb 1-1: USB disconnect, device number 60 [ 720.305078][T13902] overlayfs: failed to clone lowerpath [ 720.786944][T13914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13914 comm=syz.4.2015 [ 721.690278][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'. [ 721.719156][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2022'. [ 721.757545][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2020'. [ 722.107971][T13931] netlink: 'syz.1.2022': attribute type 7 has an invalid length. [ 722.193019][ T30] kauditd_printk_skb: 403 callbacks suppressed [ 722.193036][ T30] audit: type=1326 audit(1759273482.171:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13926 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fa5185d67 code=0x7ffc0000 [ 722.303273][ T30] audit: type=1326 audit(1759273482.201:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13926 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fa512af79 code=0x7ffc0000 [ 722.310014][T13941] audit: audit_lost=83 audit_rate_limit=0 audit_backlog_limit=64 [ 722.361472][T13941] audit: out of memory in audit_log_start [ 722.434258][ T30] audit: type=1326 audit(1759273482.201:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13926 comm="syz.1.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fa5185d67 code=0x7ffc0000 [ 722.476171][ T8882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 722.492717][ T8882] audit: audit_lost=84 audit_rate_limit=0 audit_backlog_limit=64 [ 722.532834][ T8882] audit: backlog limit exceeded [ 722.552270][ T8882] audit: audit_backlog=65 > audit_backlog_limit=64 [ 722.581653][ T8882] audit: audit_lost=85 audit_rate_limit=0 audit_backlog_limit=64 [ 723.588824][T13957] sctp: [Deprecated]: syz.1.2029 (pid 13957) Use of int in maxseg socket option. [ 723.588824][T13957] Use struct sctp_assoc_value instead [ 724.009277][T13958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.657252][T13970] 9pnet_fd: Insufficient options for proto=fd [ 727.224289][ T30] kauditd_printk_skb: 710 callbacks suppressed [ 727.224305][ T30] audit: type=1400 audit(1759273487.201:4815): avc: denied { write } for pid=13976 comm="syz.1.2034" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 727.308361][ T30] audit: type=1400 audit(1759273487.231:4816): avc: denied { override_creds } for pid=13943 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 727.350444][T13953] audit: audit_backlog=65 > audit_backlog_limit=64 [ 727.359231][T13985] audit: audit_backlog=65 > audit_backlog_limit=64 [ 727.399861][T13953] audit: audit_lost=86 audit_rate_limit=0 audit_backlog_limit=64 [ 727.413341][T13985] audit: audit_lost=87 audit_rate_limit=0 audit_backlog_limit=64 [ 727.430023][T13987] audit: audit_backlog=65 > audit_backlog_limit=64 [ 727.433005][ T30] audit: type=1400 audit(1759273487.241:4817): avc: denied { override_creds } for pid=13943 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 727.439310][T13985] audit: backlog limit exceeded [ 727.462957][T13953] audit: backlog limit exceeded [ 727.548392][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2036'. [ 727.593373][T13987] tipc: Enabling of bearer rejected, already enabled [ 729.074031][T14002] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 730.442030][T14005] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2035'. [ 732.290972][ T30] kauditd_printk_skb: 996 callbacks suppressed [ 732.290988][ T30] audit: type=1400 audit(1759273492.261:5734): avc: denied { override_creds } for pid=13943 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 732.553371][ T30] audit: type=1400 audit(1759273492.271:5735): avc: denied { override_creds } for pid=13943 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 732.577299][T13953] audit: audit_backlog=65 > audit_backlog_limit=64 [ 732.600693][T14040] audit: audit_backlog=65 > audit_backlog_limit=64 [ 732.613820][T13953] audit: audit_lost=115 audit_rate_limit=0 audit_backlog_limit=64 [ 732.636215][T14040] audit: audit_lost=116 audit_rate_limit=0 audit_backlog_limit=64 [ 732.652095][T13953] audit: backlog limit exceeded [ 732.666898][T14040] audit: backlog limit exceeded [ 732.672823][ T30] audit: type=1400 audit(1759273492.271:5736): avc: denied { override_creds } for pid=13943 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 732.707549][T13953] audit: audit_backlog=65 > audit_backlog_limit=64 [ 732.721482][T14044] fuse: Bad value for 'fd' [ 733.159161][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 733.236853][T14050] syz.4.2050: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 733.251784][T14050] CPU: 0 UID: 0 PID: 14050 Comm: syz.4.2050 Not tainted syzkaller #0 PREEMPT(full) [ 733.251818][T14050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 733.251831][T14050] Call Trace: [ 733.251841][T14050] [ 733.251850][T14050] dump_stack_lvl+0x16c/0x1f0 [ 733.251886][T14050] warn_alloc+0x248/0x3a0 [ 733.251910][T14050] ? __pfx_warn_alloc+0x10/0x10 [ 733.251930][T14050] ? rcu_is_watching+0x12/0xc0 [ 733.251960][T14050] ? __schedule+0x11a3/0x5de0 [ 733.251989][T14050] ? kasan_save_stack+0x42/0x60 [ 733.252008][T14050] ? kasan_save_stack+0x31/0x60 [ 733.252032][T14050] ? xskq_create+0xfb/0x1d0 [ 733.252061][T14050] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 733.252091][T14050] ? __pfx___schedule+0x10/0x10 [ 733.252128][T14050] ? xskq_create+0xfb/0x1d0 [ 733.252159][T14050] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 733.252186][T14050] ? lockdep_hardirqs_on+0x7c/0x110 [ 733.252221][T14050] ? xskq_create+0xfb/0x1d0 [ 733.252246][T14050] vmalloc_user_noprof+0x9e/0xe0 [ 733.252273][T14050] ? xskq_create+0xfb/0x1d0 [ 733.252298][T14050] xskq_create+0xfb/0x1d0 [ 733.252328][T14050] xsk_setsockopt+0x74e/0x9a0 [ 733.252352][T14050] ? __pfx_xsk_setsockopt+0x10/0x10 [ 733.252382][T14050] ? bpf_lsm_socket_setsockopt+0x4/0x10 [ 733.252408][T14050] ? __pfx_xsk_setsockopt+0x10/0x10 [ 733.252432][T14050] do_sock_setsockopt+0xf0/0x1d0 [ 733.252457][T14050] __sys_setsockopt+0x1a0/0x230 [ 733.252489][T14050] __x64_sys_setsockopt+0xbd/0x160 [ 733.252514][T14050] ? do_syscall_64+0x91/0x4e0 [ 733.252541][T14050] ? lockdep_hardirqs_on+0x7c/0x110 [ 733.252567][T14050] do_syscall_64+0xcd/0x4e0 [ 733.252597][T14050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.252614][T14050] RIP: 0033:0x7fba73f8eec9 [ 733.252629][T14050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.252646][T14050] RSP: 002b:00007fba71d00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 733.252665][T14050] RAX: ffffffffffffffda RBX: 00007fba741e6270 RCX: 00007fba73f8eec9 [ 733.252678][T14050] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 733.252689][T14050] RBP: 00007fba74011f91 R08: 0000000000000004 R09: 0000000000000000 [ 733.252700][T14050] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 733.252712][T14050] R13: 00007fba741e6308 R14: 00007fba741e6270 R15: 00007ffd9b37a078 [ 733.252738][T14050] [ 733.491213][T14050] Mem-Info: [ 733.495457][T14050] active_anon:36936 inactive_anon:1 isolated_anon:0 [ 733.495457][T14050] active_file:2269 inactive_file:4458 isolated_file:0 [ 733.495457][T14050] unevictable:768 dirty:247 writeback:0 [ 733.495457][T14050] slab_reclaimable:12408 slab_unreclaimable:110237 [ 733.495457][T14050] mapped:35791 shmem:24127 pagetables:1643 [ 733.495457][T14050] sec_pagetables:0 bounce:0 [ 733.495457][T14050] kernel_misc_reclaimable:0 [ 733.495457][T14050] free:1309167 free_pcp:16399 free_cma:0 [ 733.540874][T14050] Node 0 active_anon:147744kB inactive_anon:4kB active_file:8980kB inactive_file:17616kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143028kB dirty:988kB writeback:0kB shmem:94972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13392kB pagetables:6404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 733.572694][T14050] Node 1 active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 733.602917][T14050] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 733.631819][T14050] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 733.637702][T14050] Node 0 DMA32 free:1305376kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:147744kB inactive_anon:4kB active_file:8980kB inactive_file:17528kB unevictable:1536kB writepending:988kB present:3129332kB managed:2547948kB mlocked:0kB bounce:0kB free_pcp:65576kB local_pcp:18944kB free_cma:0kB [ 733.670138][T14050] lowmem_reserve[]: 0 0 0 0 0 [ 733.674984][T14050] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 733.704383][T14050] lowmem_reserve[]: 0 0 0 0 0 [ 733.709076][T14050] Node 1 Normal free:3915932kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:96kB inactive_file:216kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 733.739922][T14050] lowmem_reserve[]: 0 0 0 0 0 [ 733.744628][T14050] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 733.757200][T14050] Node 0 DMA32: 495*4kB (UM) 667*8kB (UME) 169*16kB (UME) 24*32kB (UME) 78*64kB (UME) 161*128kB (ME) 127*256kB (UME) 41*512kB (M) 25*1024kB (UME) 19*2048kB (M) 281*4096kB (UM) = 1305380kB [ 733.775912][T14050] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 733.787395][T14050] Node 1 Normal: 175*4kB (UME) 58*8kB (UME) 39*16kB (UME) 211*32kB (UME) 95*64kB (UME) 31*128kB (UME) 20*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 4*2048kB (UME) 947*4096kB (M) = 3915932kB [ 733.806245][T14050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 733.815945][T14050] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 733.825309][T14050] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 733.835070][T14050] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 733.844350][T14050] 30851 total pagecache pages [ 733.848996][T14050] 1 pages in swap cache [ 733.853152][T14050] Free swap = 124992kB [ 733.857290][T14050] Total swap = 124996kB [ 733.861416][T14050] 2097051 pages RAM [ 733.865485][T14050] 0 pages HighMem/MovableOnly [ 733.870146][T14050] 428422 pages reserved [ 733.874307][T14050] 0 pages cma reserved [ 734.718575][T14056] netlink: 'syz.1.2054': attribute type 29 has an invalid length. [ 734.878054][T14060] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0 [ 735.111787][ T7777] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 735.152490][T14056] netlink: 'syz.1.2054': attribute type 29 has an invalid length. [ 735.217696][ T7777] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 735.239350][T14056] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2054'. [ 735.281967][ T7777] Bluetooth: hci5: Frame reassembly failed (-84) [ 735.452912][T12451] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 735.622987][T12451] usb 6-1: Using ep0 maxpacket: 32 [ 735.662280][T12451] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 735.697143][T12451] usb 6-1: config 0 has no interface number 0 [ 735.727253][T12451] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 735.759931][T12451] usb 6-1: config 0 interface 85 has no altsetting 0 [ 735.791481][T12451] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 735.818867][T12451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.839387][T12451] usb 6-1: Product: syz [ 735.854677][T12451] usb 6-1: Manufacturer: syz [ 735.866904][T12451] usb 6-1: SerialNumber: syz [ 735.897000][T12451] usb 6-1: config 0 descriptor?? [ 736.773816][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.803401][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.861698][T12451] appletouch 6-1:0.85: Geyser mode initialized. [ 736.887107][T12451] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input24 [ 737.052715][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 737.122701][T12451] usb 6-1: USB disconnect, device number 42 [ 737.292800][ T30] kauditd_printk_skb: 1131 callbacks suppressed [ 737.292813][ T30] audit: type=1400 audit(1759273497.261:6761): avc: denied { override_creds } for pid=13943 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 737.757490][ T30] audit: type=1400 audit(1759273497.291:6762): avc: denied { override_creds } for pid=13943 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 737.856242][T12451] appletouch 6-1:0.85: input: appletouch disconnected [ 737.889833][ T30] audit: type=1400 audit(1759273497.291:6763): avc: denied { override_creds } for pid=13943 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 738.543069][ T30] audit: type=1400 audit(1759273497.291:6764): avc: denied { override_creds } for pid=13943 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 738.593864][ T30] audit: type=1400 audit(1759273497.291:6765): avc: denied { override_creds } for pid=13943 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 738.817032][T13953] audit: audit_backlog=65 > audit_backlog_limit=64 [ 738.823839][T14091] audit: audit_backlog=65 > audit_backlog_limit=64 [ 738.830357][T14091] audit: audit_lost=153 audit_rate_limit=0 audit_backlog_limit=64 [ 738.845886][ T30] audit: type=1400 audit(1759273497.291:6766): avc: denied { override_creds } for pid=13943 comm="syz.0.2026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 738.881916][T14091] audit: backlog limit exceeded [ 739.196043][T14102] sctp: [Deprecated]: syz.4.2066 (pid 14102) Use of int in maxseg socket option. [ 739.196043][T14102] Use struct sctp_assoc_value instead [ 740.678477][T11927] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 740.690128][T11927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 740.703630][T11927] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 740.783083][T11927] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 740.803916][T11927] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 740.882378][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 740.906462][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 740.914027][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 740.921815][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 740.929381][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 741.492195][T14121] lo speed is unknown, defaulting to 1000 [ 742.309492][ T30] kauditd_printk_skb: 506 callbacks suppressed [ 742.309538][ T30] audit: type=1400 audit(1759273502.281:7208): avc: denied { create } for pid=14137 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 743.038325][ T5832] Bluetooth: hci5: command tx timeout [ 743.623950][ T30] audit: type=1400 audit(1759273502.321:7209): avc: denied { ioctl } for pid=14137 comm="syz.4.2074" path="socket:[48874]" dev="sockfs" ino=48874 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 743.650010][ T30] audit: type=1400 audit(1759273502.331:7210): avc: denied { write } for pid=14137 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 743.670643][ T30] audit: type=1400 audit(1759273502.331:7211): avc: denied { create } for pid=14137 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 743.692132][ T30] audit: type=1400 audit(1759273502.331:7212): avc: denied { write } for pid=14137 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 743.743160][ T30] audit: type=1400 audit(1759273502.331:7213): avc: denied { read } for pid=14137 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 743.908609][ T30] audit: type=1400 audit(1759273502.331:7214): avc: denied { read } for pid=14137 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 744.091354][ T30] audit: type=1400 audit(1759273502.331:7215): avc: denied { write } for pid=14137 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 744.215922][ T30] audit: type=1400 audit(1759273502.331:7216): avc: denied { read } for pid=14137 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 744.327015][ T30] audit: type=1400 audit(1759273502.381:7217): avc: denied { create } for pid=14137 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 744.701884][T14121] chnl_net:caif_netlink_parms(): no params data found [ 744.941588][T14121] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.950427][T14121] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.958210][T14121] bridge_slave_0: entered allmulticast mode [ 744.967877][T14121] bridge_slave_0: entered promiscuous mode [ 744.981900][T14121] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.989739][T14121] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.997271][T14121] bridge_slave_1: entered allmulticast mode [ 745.004881][T14121] bridge_slave_1: entered promiscuous mode [ 745.092993][ T5832] Bluetooth: hci5: command tx timeout [ 745.135335][T14121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.177550][T14121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.539530][T14121] team0: Port device team_slave_0 added [ 745.586108][T14174] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 745.590987][T14121] team0: Port device team_slave_1 added [ 745.592655][T14174] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 745.692771][T14174] vhci_hcd vhci_hcd.0: Device attached [ 745.815345][T14121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.822428][T14121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.913449][T14121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.943211][T14121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.952791][T12451] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 745.970675][T14121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.001551][T14121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.142767][T14175] vhci_hcd: connection reset by peer [ 746.160122][T14121] hsr_slave_0: entered promiscuous mode [ 746.166344][T14121] hsr_slave_1: entered promiscuous mode [ 746.174890][ T54] vhci_hcd: stop threads [ 746.179139][ T54] vhci_hcd: release socket [ 746.194514][T14121] debugfs: 'hsr0' already exists in 'hsr' [ 746.208017][ T54] vhci_hcd: disconnect device [ 746.213023][T14121] Cannot create hsr debugfs directory [ 747.107759][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.123863][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.183156][ T5832] Bluetooth: hci5: command tx timeout [ 747.348446][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 747.348460][ T30] audit: type=1400 audit(1759273507.221:7360): avc: denied { execmem } for pid=14182 comm="syz.5.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 747.833117][ T30] audit: type=1400 audit(1759273507.441:7361): avc: denied { create } for pid=14182 comm="syz.5.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 747.907816][ T30] audit: type=1400 audit(1759273507.451:7362): avc: denied { setopt } for pid=14182 comm="syz.5.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 747.928305][ T30] audit: type=1400 audit(1759273507.891:7363): avc: denied { create } for pid=14121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.949912][ T30] audit: type=1400 audit(1759273507.911:7364): avc: denied { write } for pid=14121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.970951][ T30] audit: type=1400 audit(1759273507.911:7365): avc: denied { read } for pid=14121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.991685][ T30] audit: type=1400 audit(1759273507.911:7366): avc: denied { read } for pid=14121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 747.994576][T14121] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 748.014648][ T30] audit: type=1400 audit(1759273507.911:7367): avc: denied { write } for pid=14121 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 748.040707][ T30] audit: type=1400 audit(1759273507.931:7368): avc: denied { read write } for pid=8882 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 748.065875][ T30] audit: type=1400 audit(1759273507.931:7369): avc: denied { read write open } for pid=8882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 748.128769][T14189] sctp: [Deprecated]: syz.4.2083 (pid 14189) Use of int in maxseg socket option. [ 748.128769][T14189] Use struct sctp_assoc_value instead [ 748.161184][T14121] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 748.339734][T14121] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 748.360501][T14121] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 749.235535][T14121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.253146][ T5832] Bluetooth: hci5: command tx timeout [ 749.283282][T14121] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.369617][ T1075] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.376940][ T1075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.400034][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.407210][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.600340][T14121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.082872][T12451] vhci_hcd: vhci_device speed not set [ 752.575629][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 752.575675][ T30] audit: type=1400 audit(1759273512.511:7484): avc: denied { prog_load } for pid=14230 comm="syz.5.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 752.786064][ T30] audit: type=1400 audit(1759273512.751:7485): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 752.912367][ T30] audit: type=1400 audit(1759273512.791:7486): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.112755][ T30] audit: type=1400 audit(1759273512.801:7487): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.266776][ T30] audit: type=1400 audit(1759273513.021:7488): avc: denied { read write } for pid=8882 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.496465][ T30] audit: type=1400 audit(1759273513.021:7489): avc: denied { read write open } for pid=8882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 753.745759][T14252] sctp: [Deprecated]: syz.6.2095 (pid 14252) Use of int in maxseg socket option. [ 753.745759][T14252] Use struct sctp_assoc_value instead [ 754.276172][ T30] audit: type=1400 audit(1759273513.021:7490): avc: denied { ioctl } for pid=8882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 754.302647][ T30] audit: type=1400 audit(1759273513.051:7491): avc: denied { read write } for pid=9120 comm="syz-executor" name="loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 754.691618][ T30] audit: type=1400 audit(1759273513.051:7492): avc: denied { read write open } for pid=9120 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 755.217783][ T30] audit: type=1400 audit(1759273513.051:7493): avc: denied { ioctl } for pid=9120 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 755.243399][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.558660][T14121] veth0_vlan: entered promiscuous mode [ 755.599295][T14121] veth1_vlan: entered promiscuous mode [ 755.883590][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2098'. [ 755.928363][T14121] veth0_macvtap: entered promiscuous mode [ 755.945396][T14121] veth1_macvtap: entered promiscuous mode [ 756.406855][T14264] tipc: Enabling of bearer rejected, already enabled [ 756.422398][T14121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.486253][T14121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.601365][ T54] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.648055][ T54] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.678770][ T54] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.726888][ T54] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.172198][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.207450][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.249193][T14269] nvme_fabrics: missing parameter 'transport=%s' [ 757.257789][T14269] nvme_fabrics: missing parameter 'nqn=%s' [ 757.445588][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.630711][ T30] kauditd_printk_skb: 150 callbacks suppressed [ 757.630745][ T30] audit: type=1400 audit(1759273517.431:7644): avc: denied { create } for pid=14281 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 757.951187][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.575615][ T30] audit: type=1400 audit(1759273517.431:7645): avc: denied { create } for pid=14281 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 759.011348][ T30] audit: type=1400 audit(1759273517.431:7646): avc: denied { write } for pid=14281 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 759.167641][ T30] audit: type=1400 audit(1759273517.431:7647): avc: denied { read } for pid=14281 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 759.241063][ T30] audit: type=1400 audit(1759273517.441:7648): avc: denied { read } for pid=14281 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 759.480749][ T30] audit: type=1400 audit(1759273518.011:7649): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 760.131258][ T30] audit: type=1400 audit(1759273518.061:7650): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 760.305517][ T30] audit: type=1400 audit(1759273518.091:7651): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 760.334456][ T30] audit: type=1400 audit(1759273518.551:7652): avc: denied { create } for pid=14281 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 760.357819][ T30] audit: type=1400 audit(1759273518.551:7653): avc: denied { read } for pid=14281 comm="syz.1.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 762.647316][ T30] kauditd_printk_skb: 162 callbacks suppressed [ 762.647334][ T30] audit: type=1400 audit(1759273522.621:7816): avc: denied { ioctl } for pid=14319 comm="syz.7.2110" path="/dev/video7" dev="devtmpfs" ino=948 ioctlcmd=0x5611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 762.750388][ T30] audit: type=1400 audit(1759273522.681:7817): avc: denied { read write } for pid=14319 comm="syz.7.2110" name="video8" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 762.882777][ T30] audit: type=1400 audit(1759273522.681:7818): avc: denied { read write open } for pid=14319 comm="syz.7.2110" path="/dev/video8" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 762.959698][ T30] audit: type=1400 audit(1759273522.681:7819): avc: denied { read write } for pid=8882 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 762.987654][ T30] audit: type=1400 audit(1759273522.691:7820): avc: denied { ioctl } for pid=14319 comm="syz.7.2110" path="/dev/video8" dev="devtmpfs" ino=950 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 763.049034][ T30] audit: type=1400 audit(1759273522.701:7821): avc: denied { read write open } for pid=8882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.183091][ T5885] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 763.348255][ T30] audit: type=1400 audit(1759273522.701:7822): avc: denied { ioctl } for pid=8882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 763.483019][T14338] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2113'. [ 763.532008][ T30] audit: type=1400 audit(1759273522.751:7823): avc: denied { create } for pid=14319 comm="syz.7.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 763.683895][ T30] audit: type=1400 audit(1759273522.751:7824): avc: denied { create } for pid=14328 comm="syz.5.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 763.844083][ T5885] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 763.852216][ T5885] usb 5-1: config 0 has an invalid descriptor of length 30, skipping remainder of the config [ 763.866882][ T30] audit: type=1400 audit(1759273522.751:7825): avc: denied { write } for pid=14319 comm="syz.7.2110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 763.935827][ T5885] usb 5-1: config 0 has no interface number 0 [ 763.941968][ T5885] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 56584, setting to 64 [ 764.034330][ T5885] usb 5-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 764.222523][ T5885] usb 5-1: config 0 interface 11 has no altsetting 0 [ 764.237048][ T5885] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 764.259263][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.799938][ T5885] usb 5-1: config 0 descriptor?? [ 765.096332][ T5885] usb 5-1: can't set config #0, error -71 [ 765.178122][ T5885] usb 5-1: USB disconnect, device number 57 [ 767.723080][ T30] kauditd_printk_skb: 195 callbacks suppressed [ 767.723115][ T30] audit: type=1400 audit(1759273527.581:8018): avc: denied { prog_load } for pid=14395 comm="syz.4.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 768.089868][ T30] audit: type=1400 audit(1759273527.591:8019): avc: denied { bpf } for pid=14395 comm="syz.4.2132" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 768.111155][ T30] audit: type=1400 audit(1759273527.621:8020): avc: denied { create } for pid=14395 comm="syz.4.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 768.131846][ T30] audit: type=1400 audit(1759273527.651:8021): avc: denied { write } for pid=14395 comm="syz.4.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 768.673715][ T30] audit: type=1400 audit(1759273527.781:8022): avc: denied { module_request } for pid=14395 comm="syz.4.2132" kmod=7463705FFFFFFFFF scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 768.778736][ T30] audit: type=1400 audit(1759273527.961:8023): avc: denied { execmem } for pid=14399 comm="syz.5.2130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 768.982706][ T30] audit: type=1400 audit(1759273527.971:8024): avc: denied { create } for pid=14395 comm="syz.4.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 769.042833][ T30] audit: type=1400 audit(1759273527.971:8025): avc: denied { create } for pid=14395 comm="syz.4.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 769.166331][ T30] audit: type=1400 audit(1759273528.131:8026): avc: denied { read write } for pid=14121 comm="syz-executor" name="loop7" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 769.202287][ T30] audit: type=1400 audit(1759273528.131:8027): avc: denied { read write open } for pid=14121 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 769.944209][T14433] Bluetooth: MGMT ver 1.23 [ 770.611636][T14437] Can't find a SQUASHFS superblock on nullb0 [ 771.396599][T14428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2135'. [ 771.417567][T14428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2135'. [ 772.257492][T14443] lo speed is unknown, defaulting to 1000 [ 772.692849][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 772.772014][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 772.772061][ T30] audit: type=1400 audit(1759273532.541:8208): avc: denied { ioctl } for pid=14418 comm="syz.4.2135" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 773.383241][ T30] audit: type=1400 audit(1759273532.811:8209): avc: denied { prog_load } for pid=14444 comm="syz.5.2139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 773.402852][ T30] audit: type=1400 audit(1759273532.841:8210): avc: denied { read write } for pid=14121 comm="syz-executor" name="loop7" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 773.431690][ T30] audit: type=1400 audit(1759273532.891:8211): avc: denied { read write open } for pid=14121 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 773.458728][ T30] audit: type=1400 audit(1759273532.921:8213): avc: denied { ioctl } for pid=14121 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 773.484776][ T30] audit: type=1400 audit(1759273532.901:8212): avc: denied { bpf } for pid=14444 comm="syz.5.2139" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 773.843479][ T30] audit: type=1400 audit(1759273533.081:8214): avc: denied { create } for pid=14418 comm="syz.4.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.910569][ T30] audit: type=1400 audit(1759273533.081:8215): avc: denied { write } for pid=14418 comm="syz.4.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.931370][ T30] audit: type=1400 audit(1759273533.081:8216): avc: denied { read } for pid=14418 comm="syz.4.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 773.964499][ T30] audit: type=1400 audit(1759273533.081:8217): avc: denied { read } for pid=14418 comm="syz.4.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 775.139295][T14464] pim6reg: entered allmulticast mode [ 776.943072][T14484] sctp: [Deprecated]: syz.7.2148 (pid 14484) Use of int in maxseg socket option. [ 776.943072][T14484] Use struct sctp_assoc_value instead [ 777.794582][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 777.794604][ T30] audit: type=1400 audit(1759273537.761:8412): avc: denied { read } for pid=14479 comm="syz.7.2148" name="renderD128" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 778.189608][ T30] audit: type=1400 audit(1759273537.771:8413): avc: denied { read open } for pid=14479 comm="syz.7.2148" path="/dev/dri/renderD128" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 778.218790][ T30] audit: type=1400 audit(1759273537.801:8414): avc: denied { read write open } for pid=8882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 778.247900][ T30] audit: type=1400 audit(1759273537.801:8415): avc: denied { ioctl } for pid=8882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 779.049092][ T30] audit: type=1400 audit(1759273538.001:8416): avc: denied { ioctl } for pid=14479 comm="syz.7.2148" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 779.177011][ T30] audit: type=1400 audit(1759273538.021:8417): avc: denied { execmem } for pid=14491 comm="syz.4.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 779.225910][ T30] audit: type=1400 audit(1759273538.091:8418): avc: denied { read write } for pid=9120 comm="syz-executor" name="loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 779.308805][ T30] audit: type=1400 audit(1759273538.091:8419): avc: denied { read write open } for pid=9120 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 779.403242][ T30] audit: type=1400 audit(1759273538.091:8420): avc: denied { ioctl } for pid=9120 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 779.856489][T14514] audit: audit_backlog=65 > audit_backlog_limit=64 [ 782.016875][T14534] SELinux: policydb magic number 0x68706563 does not match expected magic number 0xf97cff8c [ 782.144047][T14534] SELinux: failed to load policy [ 782.394168][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2161'. [ 782.860678][ T30] kauditd_printk_skb: 230 callbacks suppressed [ 782.860697][ T30] audit: type=1400 audit(1759273542.831:8595): avc: denied { mounton } for pid=14542 comm="syz.7.2163" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 783.010053][ T30] audit: type=1400 audit(1759273542.831:8596): avc: denied { mount } for pid=14542 comm="syz.7.2163" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 783.070556][T14549] lo speed is unknown, defaulting to 1000 [ 783.102382][ T30] audit: type=1400 audit(1759273542.851:8597): avc: denied { read write } for pid=14542 comm="syz.7.2163" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.243591][ T5885] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 783.284351][ T30] audit: type=1400 audit(1759273542.851:8598): avc: denied { read write open } for pid=14542 comm="syz.7.2163" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.372863][ T30] audit: type=1400 audit(1759273542.851:8599): avc: denied { ioctl } for pid=14542 comm="syz.7.2163" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.422963][ T5885] usb 8-1: device descriptor read/64, error -71 [ 783.485945][T14557] fuse: Bad value for 'fd' [ 783.509317][ T30] audit: type=1400 audit(1759273542.881:8600): avc: denied { ioctl } for pid=14542 comm="syz.7.2163" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.679109][ T30] audit: type=1400 audit(1759273542.881:8601): avc: denied { ioctl } for pid=14542 comm="syz.7.2163" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.733125][ T5885] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 783.775626][ T30] audit: type=1400 audit(1759273542.881:8602): avc: denied { ioctl } for pid=14542 comm="syz.7.2163" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 783.833827][ T30] audit: type=1400 audit(1759273542.931:8603): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 783.873548][ T5885] usb 8-1: device descriptor read/64, error -71 [ 784.034471][ T30] audit: type=1400 audit(1759273542.931:8604): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 784.039860][ T5885] usb usb8-port1: attempt power cycle [ 785.042771][ T5885] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 785.116135][ T5885] usb 8-1: device descriptor read/8, error -71 [ 785.353125][ T5885] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 785.430139][ T5885] usb 8-1: device descriptor read/8, error -71 [ 785.564460][ T5885] usb usb8-port1: unable to enumerate USB device [ 785.968034][T14574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=14574 comm=syz.7.2170 [ 787.878492][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 787.878508][ T30] audit: type=1400 audit(1759273547.851:8759): avc: denied { setopt } for pid=14573 comm="syz.7.2170" laddr=::ffff:172.20.20.32 lport=20000 faddr=::ffff:172.20.20.32 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 787.953116][T14578] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 788.080781][ T30] audit: type=1400 audit(1759273547.891:8760): avc: denied { setopt } for pid=14573 comm="syz.7.2170" laddr=::ffff:172.20.20.32 lport=20000 faddr=::ffff:172.20.20.32 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 788.126266][T14578] team0: Port device batadv1 added [ 788.191438][ T30] audit: type=1400 audit(1759273548.121:8761): avc: denied { read write } for pid=8882 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.312145][ T30] audit: type=1400 audit(1759273548.121:8762): avc: denied { read write open } for pid=8882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.510758][ T30] audit: type=1400 audit(1759273548.121:8763): avc: denied { ioctl } for pid=8882 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 788.722824][ T30] audit: type=1400 audit(1759273548.141:8764): avc: denied { create } for pid=14587 comm="syz.1.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 788.807799][ T30] audit: type=1400 audit(1759273548.151:8765): avc: denied { prog_load } for pid=14587 comm="syz.1.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 788.843377][ T30] audit: type=1400 audit(1759273548.161:8766): avc: denied { bpf } for pid=14587 comm="syz.1.2173" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 789.001263][ T30] audit: type=1400 audit(1759273548.161:8767): avc: denied { perfmon } for pid=14587 comm="syz.1.2173" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 789.176905][ T30] audit: type=1400 audit(1759273548.161:8768): avc: denied { perfmon } for pid=14587 comm="syz.1.2173" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 790.272714][ T5885] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 790.449581][T14611] FAULT_INJECTION: forcing a failure. [ 790.449581][T14611] name failslab, interval 1, probability 0, space 0, times 0 [ 790.462293][T14611] CPU: 0 UID: 0 PID: 14611 Comm: syz.6.2179 Not tainted syzkaller #0 PREEMPT(full) [ 790.462319][T14611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 790.462329][T14611] Call Trace: [ 790.462335][T14611] [ 790.462342][T14611] dump_stack_lvl+0x16c/0x1f0 [ 790.462375][T14611] should_fail_ex+0x512/0x640 [ 790.462412][T14611] should_failslab+0xc2/0x120 [ 790.462432][T14611] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 790.462452][T14611] ? dst_alloc+0x99/0x1a0 [ 790.462480][T14611] dst_alloc+0x99/0x1a0 [ 790.462501][T14611] ? fib_validate_source+0x13b/0x730 [ 790.462524][T14611] rt_dst_alloc+0x35/0x3a0 [ 790.462547][T14611] ip_route_input_slow+0x1671/0x3df0 [ 790.462572][T14611] ? __pfx_ip_route_input_slow+0x10/0x10 [ 790.462594][T14611] ? __lock_acquire+0x62e/0x1ce0 [ 790.462625][T14611] ? __lock_acquire+0x62e/0x1ce0 [ 790.462667][T14611] ip_route_input_noref+0x120/0x2e0 [ 790.462689][T14611] ? __pfx_ip_route_input_noref+0x10/0x10 [ 790.462716][T14611] ? tcp_v4_early_demux+0x484/0xbf0 [ 790.462737][T14611] ? tcp_v4_early_demux+0xc6/0xbf0 [ 790.462763][T14611] ip_rcv_finish_core+0x46f/0x22a0 [ 790.462793][T14611] ip_rcv+0x1c0/0x600 [ 790.462817][T14611] ? __pfx_ip_rcv+0x10/0x10 [ 790.462838][T14611] __netif_receive_skb_one_core+0x197/0x1e0 [ 790.462863][T14611] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 790.462887][T14611] ? lock_acquire+0x179/0x350 [ 790.462904][T14611] ? __phys_addr+0xe8/0x180 [ 790.462929][T14611] __netif_receive_skb+0x1d/0x160 [ 790.462950][T14611] netif_receive_skb+0x137/0x7b0 [ 790.462968][T14611] ? __pfx_netif_receive_skb+0x10/0x10 [ 790.462996][T14611] tun_rx_batched.isra.0+0x3ee/0x740 [ 790.463016][T14611] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 790.463039][T14611] ? tun_get_user+0x1df6/0x3cd0 [ 790.463055][T14611] ? rcu_is_watching+0x12/0xc0 [ 790.463079][T14611] tun_get_user+0x28bb/0x3cd0 [ 790.463108][T14611] ? __pfx_tun_get_user+0x10/0x10 [ 790.463128][T14611] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 790.463153][T14611] ? find_held_lock+0x2b/0x80 [ 790.463174][T14611] ? tun_get+0x191/0x370 [ 790.463196][T14611] tun_chr_write_iter+0xdc/0x210 [ 790.463217][T14611] vfs_write+0x7d3/0x11d0 [ 790.463237][T14611] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 790.463259][T14611] ? __pfx_vfs_write+0x10/0x10 [ 790.463273][T14611] ? find_held_lock+0x2b/0x80 [ 790.463309][T14611] ksys_write+0x12a/0x250 [ 790.463326][T14611] ? __pfx_ksys_write+0x10/0x10 [ 790.463350][T14611] do_syscall_64+0xcd/0x4e0 [ 790.463377][T14611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.463402][T14611] RIP: 0033:0x7f99d8d8d97f [ 790.463417][T14611] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 790.463433][T14611] RSP: 002b:00007f99d9c89000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 790.463449][T14611] RAX: ffffffffffffffda RBX: 00007f99d8fe6090 RCX: 00007f99d8d8d97f [ 790.463459][T14611] RDX: 0000000000000036 RSI: 0000200000000180 RDI: 00000000000000c8 [ 790.463469][T14611] RBP: 00007f99d9c89090 R08: 0000000000000000 R09: 0000000000000000 [ 790.463479][T14611] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 790.463488][T14611] R13: 00007f99d8fe6128 R14: 00007f99d8fe6090 R15: 00007fffd17b7ff8 [ 790.463512][T14611] [ 790.801912][ T5885] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 790.829978][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.102020][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 791.300662][ T5885] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 791.382868][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.444322][ T5885] usb 6-1: config 0 descriptor?? [ 792.856759][ T5885] thrustmaster 0003:044F:B323.0018: hidraw0: USB HID v0.00 Device [HID 044f:b323] on usb-dummy_hcd.5-1/input0 [ 792.896989][ T5885] thrustmaster 0003:044F:B323.0018: no inputs found [ 792.915017][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 792.915035][ T30] audit: type=1400 audit(1759273552.891:8952): avc: denied { allowed } for pid=14630 comm="syz.7.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 793.451651][ T30] audit: type=1400 audit(1759273552.941:8953): avc: denied { create } for pid=14630 comm="syz.7.2184" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 793.552866][ T5885] usb 6-1: USB disconnect, device number 43 [ 793.617583][ T30] audit: type=1400 audit(1759273552.981:8954): avc: denied { map_create } for pid=14630 comm="syz.7.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 793.725552][ T30] audit: type=1400 audit(1759273553.011:8955): avc: denied { prog_load } for pid=14630 comm="syz.7.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 793.795600][ T30] audit: type=1400 audit(1759273553.021:8956): avc: denied { bpf } for pid=14630 comm="syz.7.2184" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 793.816565][ T30] audit: type=1400 audit(1759273553.021:8957): avc: denied { perfmon } for pid=14630 comm="syz.7.2184" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 793.838759][ T30] audit: type=1400 audit(1759273553.021:8958): avc: denied { perfmon } for pid=14630 comm="syz.7.2184" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 794.268365][ T30] audit: type=1400 audit(1759273553.021:8959): avc: denied { perfmon } for pid=14630 comm="syz.7.2184" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 794.292185][ T30] audit: type=1400 audit(1759273553.021:8960): avc: denied { perfmon } for pid=14630 comm="syz.7.2184" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 794.353773][ T30] audit: type=1400 audit(1759273553.021:8961): avc: denied { perfmon } for pid=14630 comm="syz.7.2184" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 794.655882][T14647] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2187'. [ 795.273438][T14651] IPVS: length: 108 != 24 [ 797.928364][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 797.928381][ T30] audit: type=1400 audit(1759273557.901:9079): avc: denied { read write } for pid=5825 comm="syz-executor" name="loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 798.513378][ T30] audit: type=1400 audit(1759273557.901:9080): avc: denied { create } for pid=14667 comm="syz.7.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 798.582681][ T30] audit: type=1400 audit(1759273557.911:9081): avc: denied { sys_module } for pid=14665 comm="syz.1.2193" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 798.623641][ T8493] Bluetooth: Error in BCSP hdr checksum [ 798.690603][ T30] audit: type=1400 audit(1759273557.911:9082): avc: denied { module_request } for pid=14665 comm="syz.1.2193" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 798.712388][ C0] vkms_vblank_simulate: vblank timer overrun [ 798.795798][ T30] audit: type=1400 audit(1759273557.941:9083): avc: denied { read write open } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 798.884407][ T3606] Bluetooth: Error in BCSP hdr checksum [ 798.911139][ T30] audit: type=1400 audit(1759273557.941:9084): avc: denied { ioctl } for pid=5825 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 799.003722][ T30] audit: type=1400 audit(1759273558.051:9085): avc: denied { create } for pid=14667 comm="syz.7.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 799.063169][ T30] audit: type=1400 audit(1759273558.071:9086): avc: denied { prog_load } for pid=14667 comm="syz.7.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 799.113028][ T30] audit: type=1400 audit(1759273558.071:9087): avc: denied { bpf } for pid=14667 comm="syz.7.2194" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 799.131266][ T43] libceph: connect (1)[c::]:6789 error -101 [ 799.158874][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 799.168280][ T30] audit: type=1400 audit(1759273558.081:9088): avc: denied { perfmon } for pid=14667 comm="syz.7.2194" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 799.169116][ T1075] Bluetooth: Error in BCSP hdr checksum [ 800.068846][ T1075] Bluetooth: Error in BCSP hdr checksum [ 800.373002][ T5832] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 800.809927][ T13] Bluetooth: Error in BCSP hdr checksum [ 800.929027][T14681] ceph: No mds server is up or the cluster is laggy [ 800.967012][ T3606] Bluetooth: Error in BCSP hdr checksum [ 801.179782][ T43] libceph: connect (1)[c::]:6789 error -101 [ 801.189574][T14693] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2197'. [ 801.242455][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 801.652502][T14700] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2202'. [ 802.656175][T14704] sctp: [Deprecated]: syz.7.2203 (pid 14704) Use of int in maxseg socket option. [ 802.656175][T14704] Use struct sctp_assoc_value instead [ 802.943110][ T30] kauditd_printk_skb: 190 callbacks suppressed [ 802.943129][ T30] audit: type=1400 audit(1759273562.901:9277): avc: denied { ioctl } for pid=9120 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 803.018282][ T30] audit: type=1400 audit(1759273562.981:9278): avc: denied { create } for pid=14706 comm="syz.4.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 803.046052][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2204'. [ 803.182118][ T30] audit: type=1400 audit(1759273563.111:9279): avc: denied { create } for pid=14707 comm="syz.1.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 803.247599][ T30] audit: type=1400 audit(1759273563.221:9280): avc: denied { read } for pid=14706 comm="syz.4.2204" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 803.678289][ T30] audit: type=1400 audit(1759273563.221:9281): avc: denied { read open } for pid=14706 comm="syz.4.2204" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 803.702866][ T30] audit: type=1400 audit(1759273563.311:9282): avc: denied { create } for pid=14708 comm="syz.6.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 803.722707][ T30] audit: type=1400 audit(1759273563.321:9283): avc: denied { setopt } for pid=14708 comm="syz.6.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 803.722922][ T30] audit: type=1400 audit(1759273563.331:9284): avc: denied { name_bind } for pid=14708 comm="syz.6.2205" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 803.723127][ T30] audit: type=1400 audit(1759273563.331:9285): avc: denied { node_bind } for pid=14708 comm="syz.6.2205" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 804.617483][ T30] audit: type=1400 audit(1759273563.661:9286): avc: denied { create } for pid=14707 comm="syz.1.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 806.790355][T14732] fido_id[14732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 806.840352][T14738] IPVS: length: 139 != 8 [ 806.892666][T12451] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 807.072749][T12451] usb 6-1: Using ep0 maxpacket: 8 [ 807.192480][T12451] usb 6-1: unable to get BOS descriptor or descriptor too short [ 807.253151][T12451] usb 6-1: config 4 has an invalid interface number: 30 but max is 0 [ 807.261304][T12451] usb 6-1: config 4 has no interface number 0 [ 807.308403][T12451] usb 6-1: config 4 interface 30 has no altsetting 0 [ 807.423443][T12451] usb 6-1: string descriptor 0 read error: -22 [ 807.429902][T12451] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 807.475742][T12451] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.590315][T12451] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 807.637908][T12451] dw2102: su3000_power_ctrl: 1, initialized 0 [ 807.682729][T12451] dvb-usb: bulk message failed: -22 (2/0) [ 807.719063][T12451] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 807.771432][T12451] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 807.815314][T12451] usb 6-1: media controller created [ 807.850080][T14740] dvb-usb: bulk message failed: -22 (1/0) [ 807.892471][T14740] dw2102: i2c transfer failed. [ 807.921709][T14740] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 807.933813][T14740] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 807.942220][T14740] CPU: 0 UID: 0 PID: 14740 Comm: syz.5.2211 Not tainted syzkaller #0 PREEMPT(full) [ 807.951575][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 807.961612][T14740] RIP: 0010:su3000_i2c_transfer+0x52a/0xf30 [ 807.967499][T14740] Code: 08 0f b6 00 83 e2 07 38 d0 7f 08 84 c0 0f 85 c9 08 00 00 48 8d 7d 01 45 0f b6 6c 24 02 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 38 38 d0 7f 08 84 c0 0f 85 f2 08 00 00 49 8d 7c 24 03 [ 807.987091][T14740] RSP: 0018:ffffc9000c027c40 EFLAGS: 00010202 [ 807.993144][T14740] RAX: 0000000000000002 RBX: ffff888070810860 RCX: ffffc9001d599000 [ 808.001097][T14740] RDX: 0000000000000001 RSI: ffffffff87b6209e RDI: 0000000000000011 [ 808.009066][T14740] RBP: 0000000000000010 R08: 0000000000000005 R09: 0000000000000000 [ 808.017034][T14740] R10: 0000000080000000 R11: fffffffffffee7f0 R12: ffff8880333a3400 [ 808.024986][T14740] R13: 0000000000000010 R14: 0000000000000001 R15: dffffc0000000000 [ 808.032937][T14740] FS: 00007fb8cf87c6c0(0000) GS:ffff888124e81000(0000) knlGS:0000000000000000 [ 808.041850][T14740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.048416][T14740] CR2: 00007f3d989b0df4 CR3: 0000000077b1e000 CR4: 00000000003526f0 [ 808.056372][T14740] Call Trace: [ 808.059635][T14740] [ 808.062556][T14740] __i2c_transfer+0x6b3/0x2190 [ 808.067314][T14740] ? lockdep_hardirqs_on+0x7c/0x110 [ 808.072501][T14740] ? __pfx___i2c_transfer+0x10/0x10 [ 808.077686][T14740] ? rt_mutex_slowtrylock+0xc9/0x100 [ 808.082959][T14740] i2c_transfer+0x1da/0x380 [ 808.087447][T14740] i2cdev_ioctl_rdwr+0x373/0x710 [ 808.092372][T14740] i2cdev_ioctl+0x5ff/0x820 [ 808.096863][T14740] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 808.101874][T14740] ? selinux_file_ioctl+0x180/0x270 [ 808.107067][T14740] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 808.112076][T14740] __x64_sys_ioctl+0x18e/0x210 [ 808.116836][T14740] do_syscall_64+0xcd/0x4e0 [ 808.121334][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.127226][T14740] RIP: 0033:0x7fb8ce98eec9 [ 808.131632][T14740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.151219][T14740] RSP: 002b:00007fb8cf87c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 808.159616][T14740] RAX: ffffffffffffffda RBX: 00007fb8cebe5fa0 RCX: 00007fb8ce98eec9 [ 808.167581][T14740] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 808.175531][T14740] RBP: 00007fb8cea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 808.183481][T14740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.191437][T14740] R13: 00007fb8cebe6038 R14: 00007fb8cebe5fa0 R15: 00007fffe2e6d368 [ 808.199395][T14740] [ 808.202392][T14740] Modules linked in: [ 808.207674][T14740] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 808.246634][T14740] RIP: 0010:su3000_i2c_transfer+0x52a/0xf30 [ 808.261465][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 808.261497][ T30] audit: type=1400 audit(1759273568.201:9392): avc: denied { write } for pid=5810 comm="syz-executor" path="pipe:[3997]" dev="pipefs" ino=3997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 808.261531][T14740] Code: 08 0f b6 00 83 e2 07 38 d0 7f 08 84 c0 0f 85 c9 08 00 00 48 8d 7d 01 45 0f b6 6c 24 02 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 38 38 d0 7f 08 84 c0 0f 85 f2 08 00 00 49 8d 7c 24 03 [ 808.279100][ T30] audit: type=1400 audit(1759273568.211:9393): avc: denied { write } for pid=5810 comm="syz-executor" path="pipe:[3997]" dev="pipefs" ino=3997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 808.358469][ T30] audit: type=1400 audit(1759273568.211:9394): avc: denied { write } for pid=5810 comm="syz-executor" path="pipe:[3997]" dev="pipefs" ino=3997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 808.388008][T14740] RSP: 0018:ffffc9000c027c40 EFLAGS: 00010202 [ 808.457268][ T30] audit: type=1400 audit(1759273568.291:9395): avc: denied { map_create } for pid=14748 comm="syz.1.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 808.522673][T14740] RAX: 0000000000000002 RBX: ffff888070810860 RCX: ffffc9001d599000 [ 808.530706][T14740] RDX: 0000000000000001 RSI: ffffffff87b6209e RDI: 0000000000000011 [ 808.555674][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.561976][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.562615][ T30] audit: type=1400 audit(1759273568.291:9396): avc: denied { map_read map_write } for pid=14748 comm="syz.1.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 808.588627][T14740] RBP: 0000000000000010 R08: 0000000000000005 R09: 0000000000000000 [ 808.604153][T14740] R10: 0000000080000000 R11: fffffffffffee7f0 R12: ffff8880333a3400 [ 808.612162][T14740] R13: 0000000000000010 R14: 0000000000000001 R15: dffffc0000000000 [ 808.682626][T14740] FS: 00007fb8cf87c6c0(0000) GS:ffff888124f81000(0000) knlGS:0000000000000000 [ 808.691613][T14740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.730929][ T30] audit: type=1400 audit(1759273568.381:9397): avc: denied { prog_load } for pid=14748 comm="syz.1.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 808.777450][T14740] CR2: 0000200000240030 CR3: 0000000077b1e000 CR4: 00000000003526f0 [ 808.804609][T14740] Kernel panic - not syncing: Fatal exception [ 808.810915][T14740] Kernel Offset: disabled [ 808.815242][T14740] Rebooting in 86400 seconds..