last executing test programs: 27.274253784s ago: executing program 3 (id=95): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) fcntl$setownex(r2, 0xf, &(0x7f0000000040)={0x1, r3}) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r4, 0x400000000000003a, 0x1, 0x0, 0x0) 26.704398039s ago: executing program 3 (id=98): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) r5 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x521c, 0x1, 0x61, 0x0, 0x18) 25.856007359s ago: executing program 3 (id=100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4e}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a"], 0x7c}}, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000ac0)=""/102392, 0x18ff8) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x10001011, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000091000800000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x54c, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x7c) mknodat(r1, &(0x7f0000000100)='./file1/file4/file5\x00', 0x10, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffd, 0x822b01) 23.301308173s ago: executing program 3 (id=106): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, 0x1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x1, 0x8, 0xffff}) close_range(r1, r4, 0x0) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @mcast1, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) 22.896790316s ago: executing program 3 (id=108): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) splice(r2, &(0x7f0000000080)=0x8, r3, &(0x7f00000000c0)=0x5, 0x3, 0xc) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x100, 0x0) ioperm(0x1, 0x9, 0x4) io_pgetevents(0x0, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) getdents(r6, 0x0, 0x1800) 21.466848561s ago: executing program 3 (id=111): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 16.025723013s ago: executing program 2 (id=119): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x11, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9462, 0x0, 0x0, 0x0, 0x58b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x7, 0xa, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffff4, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xaf}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x22}, 0x94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000006740)=[{{&(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c7f6", 0x2}], 0x1}}, {{&(0x7f00000016c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800}, 0x80, 0x0}}], 0x2, 0x4000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0xffff, 0xfffffffffffffffe, 0x2e, 0xa50, 0xffff, 0xffff, 0x5, 0x7, 0x6, 0x100, 0x6, 0x5, 0x100, 0x40000000001, 0x0, 0x9], 0x1, 0x360200}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf2, 0x5, 0x0, '\x00', 0x8001}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) socket$packet(0x11, 0x3, 0x300) r8 = socket$kcm(0x2, 0xa, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x67, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r9, &(0x7f0000000440), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, 0x1402, 0x1, 0x70fd29, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x4800) r10 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r2, &(0x7f00000004c0)={@void, @val={0x2, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x25, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x11, 0x0, @gue={{0x2, 0x1, 0x1, 0x81, 0x0, @val=0x80}, '='}}}}, 0x2f) 13.826216028s ago: executing program 4 (id=125): r0 = socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) socket(0x9, 0xa, 0x8000dc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000340)={0x0, 0x2153, 0x80, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0xa9) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000240)={'ipvlan1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x80004, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xc}, {0x3, 0x4}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000000102010400000000000000000a800600074000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000425bd7000fedbdf25820000000c009900c300000080000000"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20048005) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000202500190326bd70000080000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000000001c, 0x40040001, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_pidfd_open(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) 13.617069995s ago: executing program 2 (id=126): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) read(r0, &(0x7f0000000380)=""/144, 0x90) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x40, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) 12.676601771s ago: executing program 4 (id=128): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip6_tables_targets\x00') close(r4) 11.957462267s ago: executing program 0 (id=129): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) 11.163944854s ago: executing program 4 (id=130): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x40, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x40}, 0x4, 0x700000002000000}, 0x0) 11.021311763s ago: executing program 4 (id=132): socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000180), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x444) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="01350104ff00"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, 0x0, 0x850) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r4, r2, 0x0, 0x201f00) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x17) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x80041) 10.31129135s ago: executing program 0 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.22094294s ago: executing program 2 (id=134): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x851, 0x0) r3 = eventfd(0x0) io_setup(0x25dc, 0x0) io_submit(0x0, 0x2, &(0x7f0000000280)=[0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x1000d, 0x0, 0x3, r3}]) sendto$packet(r0, &(0x7f00000002c0)="05033900d3fcbabe0000478886dd", 0x50, 0x4, &(0x7f0000000000)={0x11, 0x86dd, r1, 0x1, 0x10, 0x6, @multicast}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x3, 0xed, 0x7fff0001}]}) ustat(0x5, &(0x7f0000000000)) mremap(&(0x7f0000fc4000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000fc5000/0x1000)=nil) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) 8.83303816s ago: executing program 0 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = fanotify_init(0x10, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x84) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) unlink(0x0) socket(0x11, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)}], 0x1, 0x0, 0x0, 0x40880}], 0x1, 0x4814) r4 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x1010, r6, 0x0) write(r6, &(0x7f0000000380)='f', 0x1) vmsplice(r5, &(0x7f0000001500)=[{&(0x7f0000000080)="fd", 0x1}], 0x1, 0xb) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x1000000, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x4000c, 0x2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x400007}, @IFLA_BR_STP_STATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c041}, 0x4000804) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) fanotify_mark(r0, 0x1, 0x8001033, r1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.248982997s ago: executing program 32 (id=111): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0xef) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 5.882450463s ago: executing program 4 (id=141): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000088d0495060000000000000087506a09056ae46c2466ff2d570c4856cf7d87353cc602ad07000000f148ee51000000"], &(0x7f0000001c00)={0x0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="000f"]}) fsopen(0x0, 0x0) mmap(&(0x7f0000a16000/0x2000)=nil, 0x2000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x2, 0x48, 0x1, 0x3ff, 0xfffffffffffffffb, 0x2, 0xffffffffffffff35, 0x6, 0x0, 0xa, 0x8767, 0x1, 0x8, 0x1, 0x4, 0x5], 0xeeee8000, 0x140000}) open$dir(&(0x7f0000000140)='./file0\x00', 0x26001, 0x80) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20000801}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/mdstat\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x8d35) r3 = syz_open_dev$cec(&(0x7f0000000440), 0x0, 0x100) ioctl$CEC_ADAP_G_CAPS(r3, 0xc04c6100, &(0x7f0000000480)) setuid(0xee00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xf, 0x7ffffffe}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000240)=0x101, 0x6, 0x1) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, &(0x7f0000000200)={&(0x7f0000000100)=[{0x60ff, 0x0, 0x0, {0x80000000, 0xffff, 0x1}}, {0x0, 0x1, 0x0, {0x80000000, 0x80}}, {0xffff, 0x2, 0x0, {0x7, 0x8, 0x2}}, {0x6e, 0x1, 0x0, {0x7, 0x0, 0x1}}, {0x6, 0x0, 0x0, {0x9, 0x7, 0x2}}, {0x1, 0x2, 0x0, {0xecad, 0x8, 0x2}}], 0x6, 0x20, 0x3, 0x4}) keyctl$get_persistent(0x16, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r4) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) keyctl$setperm(0x5, r5, 0x30925) keyctl$get_keyring_id(0x0, r5, 0x3) keyctl$reject(0x13, r5, 0xc800000000, 0xf6c3, r4) 5.385679655s ago: executing program 2 (id=142): socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsa(0x0, 0x4, 0xd49100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000040900020073797a31000000000c00078008001240000800050500050002000000050004000100000011000300686177683a6970c892ec9caab1b9e53014f510fa6f1654617f0875ca141106aef59862491d3fd92bf4806c90a03b0da78c65999db5804368649cfdb10e03ca45b6255fdb9051d7c23e94aed88fe34c33dbeec9cfff27b40e93011828011f31d296c4a254153ebd03ff6121d98a45035af9fe6c3af89f578b05e82b97df064f75af944cb5aeb4cf1e98885dcddafba63ec9fde450bbf6db47ec19326b487c"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x90) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000001c0)={'nr0\x00', {0x2, 0x4e24, @multicast2}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.757738352s ago: executing program 1 (id=143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000310000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 4.504603662s ago: executing program 1 (id=144): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3, 0x0, 0xfeb2}], 0x1, 0x0) 4.486099156s ago: executing program 1 (id=145): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x6d, 0x2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.pending_reads\x00', 0x2000, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0xfffffffe, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x16d00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) 3.809774123s ago: executing program 1 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000193000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x796378c48efb5449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.67667985s ago: executing program 0 (id=147): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) openat$full(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) r5 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x521c, 0x1, 0x61, 0x0, 0x18) 2.679698262s ago: executing program 4 (id=148): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x6d, 0x2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000200)='.pending_reads\x00', 0x2000, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xfffffffffffffffd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xfffffffe, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x16d00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff0000, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) 2.519196026s ago: executing program 0 (id=149): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x0, &(0x7f0000000140)) syz_open_dev$usbfs(0x0, 0x204, 0x82) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, 0x0) r4 = syz_open_dev$ublk_bdev(&(0x7f0000000000), 0x0, 0x80) pwrite64$ublk_bdev(r4, &(0x7f00000000c0), 0x0, 0x39) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800"], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 2.446957972s ago: executing program 1 (id=150): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000040)={0x356, 0xa0, 0x780, 0x670, 0x3, 0x2, 0x0, 0xfffffffe, {0x8, 0x7, 0xffffffff}, {0x27, 0x0, 0x1}, {0x401, 0x7}, {0xffffffff, 0x4, 0x1}, 0x3, 0x0, 0xe512, 0x7fff, 0x1, 0x6e, 0x10, 0x2, 0x3, 0x80, 0x8fac, 0x5, 0x8, 0x100, 0x0, 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chroot(&(0x7f0000000040)='./file0\x00') r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$igmp(0x2, 0x3, 0x2) mount$9p_virtio(0x0, &(0x7f00000193c0)='./file0\x00', &(0x7f0000019400), 0x10, &(0x7f0000019540)=ANY=[@ANYBLOB]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1, 0x0, 0xb8, 0x40800}], 0x1, 0x48040) socket$alg(0x26, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) 1.484631062s ago: executing program 0 (id=151): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004800)=[{{&(0x7f0000000140)=@l2, 0x80, &(0x7f0000002200)=[{&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f00000003c0)=""/13, 0xd}, {&(0x7f0000000400)=""/129, 0x81}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/112, 0x70}], 0x8, &(0x7f0000002280)=""/232, 0xe8}}, {{&(0x7f0000002380)=@tipc, 0x80, &(0x7f0000004780)=[{&(0x7f0000002400)=""/188, 0xbc}, {&(0x7f00000024c0)=""/173, 0xad}, {&(0x7f0000002580)=""/126, 0x7e}, {&(0x7f0000002600)=""/4096, 0x1000}, {0x0}, {&(0x7f00000036c0)=""/184, 0xb8}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x7}, 0x83}], 0x2, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffdee}, 0xb}], 0x1, 0x40000021, 0x0) 1.028992195s ago: executing program 2 (id=152): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xd, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) splice(r2, &(0x7f0000000080)=0x8, r3, &(0x7f00000000c0)=0x5, 0x3, 0xc) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r6, 0x100, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) gettid() io_setup(0x401, &(0x7f00000001c0)=0x0) io_pgetevents(r7, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) 849.335454ms ago: executing program 1 (id=153): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) (async, rerun: 32) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x800, 0x1, 0x51}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) (rerun: 32) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) (async) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) (async) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r5 = fsmount(r4, 0x0, 0x6) (rerun: 32) fchdir(r5) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async, rerun: 64) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) (async) read$FUSE(r8, &(0x7f0000003ec0)={0x2020}, 0x2020) (async) sendfile(r8, r8, &(0x7f00000000c0)=0x7, 0x6fecb1) (async, rerun: 64) getrlimit(0xc, &(0x7f0000000240)) (rerun: 64) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r8, 0x5100) 0s ago: executing program 2 (id=154): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c2"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x72, 0x2}, 0x20) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x3, &(0x7f0000000000), &(0x7f0000000240)=0x4) syz_emit_ethernet(0x2db, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd64777c5a02a506fffe8000000000000000000000000000aafe88"], 0x0) kernel console output (not intermixed with test programs): [ 54.902876][ T30] audit: type=1400 audit(1783888307.103:111): avc: denied { write } for pid=5459 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.956692][ T30] audit: type=1400 audit(1783888307.153:112): avc: denied { write } for pid=5470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.295952][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 56.295973][ T30] audit: type=1400 audit(1783888308.493:121): avc: denied { write } for pid=5529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.353971][ T30] audit: type=1400 audit(1783888308.553:122): avc: denied { write } for pid=5540 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.522848][ T30] audit: type=1400 audit(1783888308.723:123): avc: denied { write } for pid=5543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.577773][ T30] audit: type=1400 audit(1783888308.773:124): avc: denied { write } for pid=5554 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.740483][ T30] audit: type=1400 audit(1783888308.943:125): avc: denied { write } for pid=5557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.796041][ T30] audit: type=1400 audit(1783888308.993:126): avc: denied { write } for pid=5568 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.974778][ T30] audit: type=1400 audit(1783888309.173:127): avc: denied { write } for pid=5571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.025463][ T30] audit: type=1400 audit(1783888309.223:128): avc: denied { write } for pid=5582 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. [ 61.926641][ T30] audit: type=1400 audit(1783888314.123:129): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.950373][ T30] audit: type=1400 audit(1783888314.153:130): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.975403][ T5593] cgroup: Unknown subsys name 'net' [ 61.983735][ T30] audit: type=1400 audit(1783888314.183:131): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 62.131750][ T5593] cgroup: Unknown subsys name 'cpuset' [ 62.139770][ T5593] cgroup: Unknown subsys name 'rlimit' [ 62.252853][ T30] audit: type=1400 audit(1783888314.453:132): avc: denied { setattr } for pid=5593 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.287428][ T30] audit: type=1400 audit(1783888314.453:133): avc: denied { create } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.333715][ T30] audit: type=1400 audit(1783888314.453:134): avc: denied { write } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.354896][ T30] audit: type=1400 audit(1783888314.453:135): avc: denied { read } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.355149][ T5596] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 62.375495][ T30] audit: type=1400 audit(1783888314.453:136): avc: denied { mounton } for pid=5593 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 62.409571][ T30] audit: type=1400 audit(1783888314.453:137): avc: denied { mount } for pid=5593 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 62.434101][ T30] audit: type=1400 audit(1783888314.583:138): avc: denied { relabelto } for pid=5596 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 63.366747][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.507827][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.517421][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.525365][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.527232][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.535002][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.549154][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.556896][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.557197][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.565146][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.572616][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.580174][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.587331][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.593496][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.608559][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.609270][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.616559][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.628824][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.632439][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.646934][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.648495][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.661265][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.663702][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.676278][ T4926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.690546][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.701322][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.008654][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.016417][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.023719][ T5606] bridge_slave_0: entered allmulticast mode [ 67.030806][ T5606] bridge_slave_0: entered promiscuous mode [ 67.068220][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.075324][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.082591][ T5606] bridge_slave_1: entered allmulticast mode [ 67.089369][ T5606] bridge_slave_1: entered promiscuous mode [ 67.104519][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.111655][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.118993][ T5611] bridge_slave_0: entered allmulticast mode [ 67.125675][ T5611] bridge_slave_0: entered promiscuous mode [ 67.133315][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.140565][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.147701][ T5611] bridge_slave_1: entered allmulticast mode [ 67.154831][ T5611] bridge_slave_1: entered promiscuous mode [ 67.215738][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.222942][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.230138][ T5610] bridge_slave_0: entered allmulticast mode [ 67.236827][ T5610] bridge_slave_0: entered promiscuous mode [ 67.246456][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.271571][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.282876][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.292403][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.299531][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.306718][ T5610] bridge_slave_1: entered allmulticast mode [ 67.313633][ T5610] bridge_slave_1: entered promiscuous mode [ 67.321794][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.365129][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.372358][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.380379][ T5609] bridge_slave_0: entered allmulticast mode [ 67.387218][ T5609] bridge_slave_0: entered promiscuous mode [ 67.394737][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.402341][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.409563][ T5607] bridge_slave_0: entered allmulticast mode [ 67.416266][ T5607] bridge_slave_0: entered promiscuous mode [ 67.442765][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.450010][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.457137][ T5609] bridge_slave_1: entered allmulticast mode [ 67.464698][ T5609] bridge_slave_1: entered promiscuous mode [ 67.471628][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.478704][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.486109][ T5607] bridge_slave_1: entered allmulticast mode [ 67.492915][ T5607] bridge_slave_1: entered promiscuous mode [ 67.501846][ T5611] team0: Port device team_slave_0 added [ 67.509961][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.520549][ T5606] team0: Port device team_slave_0 added [ 67.540554][ T5611] team0: Port device team_slave_1 added [ 67.548613][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.559327][ T5606] team0: Port device team_slave_1 added [ 67.607660][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.618695][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.629925][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.653585][ T5610] team0: Port device team_slave_0 added [ 67.664644][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.687159][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.694476][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.720572][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.732659][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.740566][ T5620] Bluetooth: hci4: command tx timeout [ 67.740568][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.745970][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.751185][ T5610] team0: Port device team_slave_1 added [ 67.773330][ T5621] Bluetooth: hci3: command tx timeout [ 67.783196][ T5612] Bluetooth: hci1: command tx timeout [ 67.789301][ T4926] Bluetooth: hci2: command tx timeout [ 67.794786][ T5612] Bluetooth: hci0: command tx timeout [ 67.824841][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.832009][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.857963][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.874257][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.881297][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.910768][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.931079][ T5609] team0: Port device team_slave_0 added [ 67.938256][ T5607] team0: Port device team_slave_0 added [ 67.946146][ T5607] team0: Port device team_slave_1 added [ 67.964655][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.971715][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.997753][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.010492][ T5609] team0: Port device team_slave_1 added [ 68.031408][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.038434][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.064740][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.090454][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.097443][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.123425][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.134734][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.141717][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.168046][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.180731][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.187717][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.213820][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.237240][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.244310][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.270354][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.298319][ T5606] hsr_slave_0: entered promiscuous mode [ 68.304698][ T5606] hsr_slave_1: entered promiscuous mode [ 68.339525][ T5610] hsr_slave_0: entered promiscuous mode [ 68.345562][ T5610] hsr_slave_1: entered promiscuous mode [ 68.351612][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 68.357384][ T5610] Cannot create hsr debugfs directory [ 68.369620][ T5611] hsr_slave_0: entered promiscuous mode [ 68.375731][ T5611] hsr_slave_1: entered promiscuous mode [ 68.382002][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 68.387737][ T5611] Cannot create hsr debugfs directory [ 68.430582][ T5607] hsr_slave_0: entered promiscuous mode [ 68.436683][ T5607] hsr_slave_1: entered promiscuous mode [ 68.442802][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 68.448635][ T5607] Cannot create hsr debugfs directory [ 68.481077][ T5609] hsr_slave_0: entered promiscuous mode [ 68.487266][ T5609] hsr_slave_1: entered promiscuous mode [ 68.493480][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 68.499271][ T5609] Cannot create hsr debugfs directory [ 68.844146][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.862751][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.871556][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.881192][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.889236][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.900744][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.908556][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.918236][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.981789][ T5606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.991517][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.999918][ T5606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.008326][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.016253][ T5606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.026052][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.033927][ T5606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.042240][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.138703][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.150383][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.158069][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.167816][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.177867][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.188326][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.196118][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.206028][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.246211][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.307803][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.317079][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.326828][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.335169][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.345714][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.353498][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.362476][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.370316][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.378730][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.390485][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.412952][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.420705][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.452910][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.460061][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.490318][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.527912][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.535025][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.564878][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.571999][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.587354][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.597362][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.605678][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.614638][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.622869][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.632277][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.640136][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.648462][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.752388][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.820551][ T5615] Bluetooth: hci4: command tx timeout [ 69.820576][ T4926] Bluetooth: hci3: command tx timeout [ 69.825975][ T5615] Bluetooth: hci1: command tx timeout [ 69.831496][ T5620] Bluetooth: hci2: command tx timeout [ 69.837299][ T5612] Bluetooth: hci0: command tx timeout [ 69.849779][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.881640][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.902577][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.909740][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.930157][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.937314][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.986821][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.021657][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.028847][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.052096][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.059240][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.079388][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.132237][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.167398][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.174564][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.207124][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.214287][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.575976][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.623609][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.752683][ T5610] veth0_vlan: entered promiscuous mode [ 70.805329][ T5610] veth1_vlan: entered promiscuous mode [ 70.915979][ T5610] veth0_macvtap: entered promiscuous mode [ 70.950945][ T5610] veth1_macvtap: entered promiscuous mode [ 71.005989][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.047718][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.088299][ T1172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.129028][ T1172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.152887][ T1172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.182602][ T1172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.215816][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.224934][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.253060][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.261787][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.276195][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.301227][ T5606] veth0_vlan: entered promiscuous mode [ 71.338518][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.351693][ T5606] veth1_vlan: entered promiscuous mode [ 71.364240][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.424084][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.432946][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.446777][ T5609] veth0_vlan: entered promiscuous mode [ 71.458838][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 71.478140][ T5606] veth0_macvtap: entered promiscuous mode [ 71.481133][ T30] audit: type=1400 audit(1783888323.653:152): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.gIZK2q/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.493973][ T5607] veth0_vlan: entered promiscuous mode [ 71.534917][ T5611] veth0_vlan: entered promiscuous mode [ 71.540338][ T30] audit: type=1400 audit(1783888323.663:153): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.546234][ T5611] veth1_vlan: entered promiscuous mode [ 71.566842][ T30] audit: type=1400 audit(1783888323.663:154): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.gIZK2q/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.597686][ T5609] veth1_vlan: entered promiscuous mode [ 71.600504][ T30] audit: type=1400 audit(1783888323.663:155): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.626391][ T30] audit: type=1400 audit(1783888323.663:156): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.gIZK2q/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.654005][ T30] audit: type=1400 audit(1783888323.673:157): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/root/syzkaller.gIZK2q/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.684241][ T5606] veth1_macvtap: entered promiscuous mode [ 71.697999][ T5607] veth1_vlan: entered promiscuous mode [ 71.701966][ T30] audit: type=1400 audit(1783888323.683:158): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.730452][ T30] audit: type=1400 audit(1783888323.723:159): avc: denied { mounton } for pid=5610 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.734549][ T5610] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.754988][ T30] audit: type=1400 audit(1783888323.723:160): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="gadgetfs" ino=7100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.797323][ T30] audit: type=1400 audit(1783888323.723:161): avc: denied { mount } for pid=5610 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.813001][ T5607] veth0_macvtap: entered promiscuous mode [ 71.840137][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.857664][ T5607] veth1_macvtap: entered promiscuous mode [ 71.874551][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.900914][ T5615] Bluetooth: hci1: command tx timeout [ 71.900951][ T5621] Bluetooth: hci4: command tx timeout [ 71.906339][ T5612] Bluetooth: hci0: command tx timeout [ 71.912210][ T4926] Bluetooth: hci3: command tx timeout [ 71.924665][ T5620] Bluetooth: hci2: command tx timeout [ 71.933750][ T5611] veth0_macvtap: entered promiscuous mode [ 71.953810][ T5609] veth0_macvtap: entered promiscuous mode [ 71.963253][ T5757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.972698][ T5757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.983392][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.999440][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.010969][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.137519][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.168186][ T5611] veth1_macvtap: entered promiscuous mode [ 72.180019][ T5609] veth1_macvtap: entered promiscuous mode [ 72.187025][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.214288][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.235140][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.254674][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.267468][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.278390][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.337485][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.360707][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.392624][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.404760][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.414998][ T5757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.429705][ T5757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.469502][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.483288][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.495333][ T1172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.535977][ T1172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.547729][ T1172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.571557][ T5804] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 72.611404][ T1172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.624720][ T1172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.661136][ T5757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.676375][ T1172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.677648][ T5757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.747372][ T1172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.816138][ T1172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.547328][ T5824] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 73.566226][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.585186][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.648455][ T5824] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.694708][ T5824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.718444][ T5827] FAULT_INJECTION: forcing a failure. [ 73.718444][ T5827] name failslab, interval 1, probability 0, space 0, times 1 [ 73.734898][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz.3.10 Not tainted syzkaller #0 PREEMPT(full) [ 73.734924][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 73.734935][ T5827] Call Trace: [ 73.734941][ T5827] [ 73.734952][ T5827] dump_stack_lvl+0x100/0x190 [ 73.734979][ T5827] should_fail_ex.cold+0x5/0xa [ 73.735003][ T5827] should_failslab+0xc2/0x120 [ 73.735068][ T5827] __kmalloc_cache_noprof+0x91/0x6c0 [ 73.735095][ T5827] ? copy_mount_options+0x55/0x190 [ 73.735122][ T5827] copy_mount_options+0x55/0x190 [ 73.735146][ T5827] __x64_sys_mount+0x1ab/0x310 [ 73.735166][ T5827] ? __pfx___x64_sys_mount+0x10/0x10 [ 73.735212][ T5827] do_syscall_64+0x115/0x870 [ 73.735237][ T5827] ? clear_bhb_loop+0x40/0x90 [ 73.735259][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.735278][ T5827] RIP: 0033:0x7fafbd59de59 [ 73.735293][ T5827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.735309][ T5827] RSP: 002b:00007fafbe468028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.735327][ T5827] RAX: ffffffffffffffda RBX: 00007fafbd825fa0 RCX: 00007fafbd59de59 [ 73.735338][ T5827] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 73.735348][ T5827] RBP: 00007fafbe468090 R08: 00002000000001c0 R09: 0000000000000000 [ 73.735359][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.735369][ T5827] R13: 00007fafbd826038 R14: 00007fafbd825fa0 R15: 00007ffc33891178 [ 73.735392][ T5827] [ 73.951130][ T5824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.974486][ T5824] bond0 (unregistering): Released all slaves [ 73.982195][ T4926] Bluetooth: hci3: command tx timeout [ 73.987954][ T4926] Bluetooth: hci2: command tx timeout [ 73.993683][ T5620] Bluetooth: hci4: command tx timeout [ 74.001094][ T5621] Bluetooth: hci0: command tx timeout [ 74.001130][ T5612] Bluetooth: hci1: command tx timeout [ 74.113141][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.132315][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.254377][ T5828] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 74.335194][ T5830] netlink: 'syz.1.2': attribute type 12 has an invalid length. [ 74.385257][ T5830] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 74.432951][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.442453][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.609750][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.620057][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.876923][ T5851] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14'. [ 76.125089][ T5851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.265243][ T5858] Bluetooth: MGMT ver 1.23 [ 76.349560][ T5851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.461792][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 76.461807][ T30] audit: type=1400 audit(1783888328.663:212): avc: denied { bind } for pid=5860 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 76.463134][ T5851] bond0 (unregistering): Released all slaves [ 76.977658][ T5865] xt_policy: output policy not valid in PREROUTING and INPUT [ 77.005608][ T30] audit: type=1400 audit(1783888328.743:213): avc: denied { read write } for pid=5860 comm="syz.0.16" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.084191][ T5856] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14'. [ 77.093438][ T5857] netlink: 'syz.3.14': attribute type 12 has an invalid length. [ 77.101910][ T5857] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14'. [ 77.111689][ T30] audit: type=1400 audit(1783888328.743:214): avc: denied { open } for pid=5860 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.245535][ T30] audit: type=1400 audit(1783888328.743:215): avc: denied { read } for pid=5859 comm="syz.4.15" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.315128][ T5738] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.354918][ T30] audit: type=1400 audit(1783888328.753:216): avc: denied { open } for pid=5859 comm="syz.4.15" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.449601][ T30] audit: type=1400 audit(1783888328.753:217): avc: denied { ioctl } for pid=5859 comm="syz.4.15" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.611353][ T30] audit: type=1400 audit(1783888328.773:218): avc: denied { create } for pid=5859 comm="syz.4.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.633714][ T30] audit: type=1400 audit(1783888328.783:219): avc: denied { ioctl } for pid=5860 comm="syz.0.16" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.664851][ T30] audit: type=1400 audit(1783888329.253:220): avc: denied { prog_run } for pid=5854 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 77.684986][ T5738] usb 1-1: device descriptor read/64, error -71 [ 77.693175][ T30] audit: type=1400 audit(1783888329.553:221): avc: denied { create } for pid=5866 comm="syz.4.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.960358][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.971073][ T5738] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 78.151352][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 78.233082][ T5738] usb 1-1: device descriptor read/64, error -71 [ 78.304837][ T5885] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 78.322112][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 78.351717][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.439575][ T10] usb 5-1: Product: syz [ 78.446687][ T5738] usb usb1-port1: attempt power cycle [ 78.459176][ T10] usb 5-1: Manufacturer: syz [ 78.478979][ T10] usb 5-1: SerialNumber: syz [ 78.488574][ T10] usb 5-1: config 0 descriptor?? [ 78.541053][ T10] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 78.799062][ T5738] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.851324][ T5738] usb 1-1: device descriptor read/8, error -71 [ 78.947077][ T5893] Zero length message leads to an empty skb [ 79.806223][ T5738] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 80.137404][ T5738] usb 1-1: device descriptor read/8, error -71 [ 80.168210][ T10] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 80.210458][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 80.377012][ T5738] usb usb1-port1: unable to enumerate USB device [ 80.656574][ T5908] capability: warning: `syz.2.28' uses 32-bit capabilities (legacy support in use) [ 80.943603][ T5893] affs: No valid root block on device loop3 [ 80.994722][ T1228] usb 5-1: USB disconnect, device number 2 [ 81.212306][ T5913] netlink: 14 bytes leftover after parsing attributes in process `syz.4.30'. [ 81.267522][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.333609][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.472833][ T5913] bond0 (unregistering): Released all slaves [ 81.563054][ T5917] netlink: 132 bytes leftover after parsing attributes in process `syz.4.30'. [ 81.649433][ T5922] netlink: 'syz.4.30': attribute type 12 has an invalid length. [ 81.679068][ T5922] netlink: 132 bytes leftover after parsing attributes in process `syz.4.30'. [ 82.061143][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 82.061159][ T30] audit: type=1400 audit(1783888334.263:240): avc: denied { ioctl } for pid=5925 comm="syz.4.33" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 82.218101][ T30] audit: type=1400 audit(1783888334.323:241): avc: denied { ioctl } for pid=5927 comm="syz.1.34" path="socket:[9440]" dev="sockfs" ino=9440 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 82.306560][ T30] audit: type=1400 audit(1783888334.483:242): avc: denied { name_bind } for pid=5916 comm="syz.2.31" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 82.384086][ T30] audit: type=1400 audit(1783888334.543:243): avc: denied { write } for pid=5916 comm="syz.2.31" name="protocols" dev="proc" ino=4026533348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 83.305723][ T30] audit: type=1400 audit(1783888335.503:244): avc: denied { setopt } for pid=5940 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.381147][ T30] audit: type=1400 audit(1783888335.563:245): avc: denied { create } for pid=5940 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 83.886090][ T30] audit: type=1400 audit(1783888336.083:246): avc: denied { append } for pid=5950 comm="syz.3.40" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.989077][ T30] audit: type=1400 audit(1783888336.173:247): avc: denied { create } for pid=5950 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.660547][ T30] audit: type=1400 audit(1783888336.863:248): avc: denied { write } for pid=5958 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.911488][ T30] audit: type=1400 audit(1783888337.043:249): avc: denied { watch watch_reads } for pid=5950 comm="syz.3.40" path="/10" dev="tmpfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 87.757604][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 87.757627][ T30] audit: type=1400 audit(1783888339.833:254): avc: denied { write } for pid=5985 comm="syz.0.50" name="001" dev="devtmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.857668][ T24] cfg80211: failed to load regulatory.db [ 89.118924][ T30] audit: type=1400 audit(1783888341.123:255): avc: denied { bind } for pid=5988 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.362961][ T5991] netlink: 48 bytes leftover after parsing attributes in process `syz.0.52'. [ 89.599728][ T30] audit: type=1400 audit(1783888341.793:256): avc: denied { write } for pid=5988 comm="syz.4.51" path="socket:[8940]" dev="sockfs" ino=8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.009305][ T30] audit: type=1400 audit(1783888342.213:257): avc: denied { read append } for pid=5998 comm="syz.1.56" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 90.143936][ T30] audit: type=1400 audit(1783888342.213:258): avc: denied { ioctl open } for pid=5998 comm="syz.1.56" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 92.224451][ T30] audit: type=1400 audit(1783888343.753:259): avc: denied { bind } for pid=6009 comm="syz.4.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.333483][ T30] audit: type=1400 audit(1783888343.753:260): avc: denied { name_bind } for pid=6009 comm="syz.4.58" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.421244][ T30] audit: type=1400 audit(1783888343.753:261): avc: denied { node_bind } for pid=6009 comm="syz.4.58" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 92.578467][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 92.587656][ T30] audit: type=1400 audit(1783888343.763:262): avc: denied { name_connect } for pid=6009 comm="syz.4.58" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 92.694674][ T30] audit: type=1400 audit(1783888344.613:263): avc: denied { append } for pid=6016 comm="syz.3.54" name="comedi4" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.899124][ T5720] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.712319][ T5720] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 93.738446][ T5720] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 93.768403][ T5720] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.861230][ T5720] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 93.879693][ T6021] netdevsim netdevsim0: Direct firmware load for . [ 93.879693][ T6021] failed with error -2 [ 93.891863][ T6021] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 93.891863][ T6021] [ 93.907565][ T30] audit: type=1400 audit(1783888346.093:264): avc: denied { firmware_load } for pid=6020 comm="syz.0.59" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 93.929002][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 93.938027][ T5720] usb 4-1: Product: syz [ 93.958484][ T5720] usb 4-1: Manufacturer: syz [ 93.978745][ T5720] usb 4-1: SerialNumber: syz [ 94.705175][ T24] IPVS: starting estimator thread 0... [ 95.145736][ T6036] IPVS: using max 78 ests per chain, 187200 per kthread [ 95.187872][ T30] audit: type=1400 audit(1783888347.313:265): avc: denied { mount } for pid=6037 comm="syz.4.61" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 95.359479][ T5720] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 95.550433][ T30] audit: type=1400 audit(1783888347.743:266): avc: denied { load_policy } for pid=6040 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 95.556554][ T5720] usb 4-1: USB disconnect, device number 2 [ 95.749803][ T5716] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 95.790387][ T6046] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 95.801953][ T6046] SELinux: failed to load policy [ 95.947440][ T5716] usb 2-1: device descriptor read/64, error -71 [ 95.974862][ T5720] usblp0: removed [ 96.269070][ T5716] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 96.459843][ T5716] usb 2-1: device descriptor read/64, error -71 [ 96.590682][ T5716] usb usb2-port1: attempt power cycle [ 96.981441][ T30] audit: type=1400 audit(1783888348.063:267): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 97.069585][ T30] audit: type=1400 audit(1783888348.993:268): avc: denied { create } for pid=6048 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.187689][ T5716] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 97.284354][ T5716] usb 2-1: device descriptor read/8, error -71 [ 97.339181][ T29] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 97.402415][ T6062] xt_policy: output policy not valid in PREROUTING and INPUT [ 97.567649][ T30] audit: type=1400 audit(1783888349.603:269): avc: denied { create } for pid=6057 comm="syz.3.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 97.662439][ T5716] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 97.792791][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 97.820747][ T5716] usb 2-1: device descriptor read/8, error -71 [ 97.835652][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 97.869427][ T29] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.959458][ T5716] usb usb2-port1: unable to enumerate USB device [ 98.035860][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 98.043951][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 98.081431][ T29] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.107435][ T29] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 98.122859][ T29] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 98.699708][ T29] usb 5-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 99.611854][ T29] usb 5-1: string descriptor 0 read error: -22 [ 99.640603][ T29] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.740291][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.770150][ T29] adutux 5-1:168.0: interrupt endpoints not found [ 100.349526][ T29] usb 5-1: USB disconnect, device number 3 [ 100.493479][ T30] audit: type=1400 audit(1783888352.693:270): avc: denied { write } for pid=6081 comm="syz.4.77" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 101.143503][ T6088] netdevsim netdevsim3: Direct firmware load for . [ 101.143503][ T6088] failed with error -2 [ 101.154671][ T6088] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 101.154671][ T6088] [ 101.799465][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.960165][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 101.983588][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.014313][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.229526][ T30] audit: type=1400 audit(1783888354.343:271): avc: denied { setopt } for pid=6095 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.260099][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 102.358542][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 102.394333][ T10] usb 1-1: Product: syz [ 102.403074][ T10] usb 1-1: Manufacturer: syz [ 102.422445][ T10] usb 1-1: SerialNumber: syz [ 102.671842][ T5619] IPVS: starting estimator thread 0... [ 102.683735][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 102.733745][ T10] usb 1-1: USB disconnect, device number 6 [ 102.779960][ T6103] IPVS: using max 40 ests per chain, 96000 per kthread [ 102.781452][ T10] usblp0: removed [ 103.781660][ T30] audit: type=1400 audit(1783888355.983:272): avc: denied { create } for pid=6112 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 104.486804][ T5716] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 104.955632][ T5716] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 104.985635][ T5716] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.020546][ T5716] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.061325][ T5716] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 105.072421][ T5716] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.086907][ T5716] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.202001][ T5716] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 105.252517][ T6126] netdevsim netdevsim4: Direct firmware load for . [ 105.252517][ T6126] failed with error -2 [ 105.263839][ T6126] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 105.263839][ T6126] [ 105.461635][ T5716] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 105.500234][ T5716] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.535124][ T5716] usb 4-1: string descriptor 0 read error: -22 [ 105.566706][ T5716] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.596028][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.390679][ T6140] affs: No valid root block on device loop0 [ 106.673340][ T30] audit: type=1400 audit(1783888358.583:273): avc: denied { mounton } for pid=6134 comm="syz.0.93" path="/15/bus" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.728168][ T5716] usb 4-1: can't set config #168, error -71 [ 106.800632][ T5716] usb 4-1: USB disconnect, device number 3 [ 107.184698][ T30] audit: type=1400 audit(1783888359.383:274): avc: denied { getopt } for pid=6144 comm="syz.3.95" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.126276][ T30] audit: type=1400 audit(1783888360.313:275): avc: denied { block_suspend } for pid=6154 comm="syz.1.97" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 108.258725][ T30] audit: type=1400 audit(1783888360.453:276): avc: denied { set_context_mgr } for pid=6161 comm="syz.4.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 108.820569][ T30] audit: type=1400 audit(1783888361.023:277): avc: denied { lock } for pid=6154 comm="syz.1.97" path="socket:[10258]" dev="sockfs" ino=10258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.057088][ T30] audit: type=1400 audit(1783888361.243:278): avc: denied { name_bind } for pid=6169 comm="syz.2.101" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 109.116309][ T30] audit: type=1400 audit(1783888361.253:279): avc: denied { create } for pid=6171 comm="syz.4.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.518976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.669151][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.859212][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 110.873643][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.894840][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.910947][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.938361][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 110.949286][ T5716] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 110.966905][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.984063][ T10] usb 5-1: Product: syz [ 110.992671][ T10] usb 5-1: Manufacturer: syz [ 111.001720][ T10] usb 5-1: SerialNumber: syz [ 111.110180][ T5716] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 111.143368][ T5716] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 111.177600][ T5716] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.209797][ T5716] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 111.228401][ T5716] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 111.256298][ T5716] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.284497][ T5716] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 111.295493][ T6180] netlink: 196 bytes leftover after parsing attributes in process `syz.4.104'. [ 111.300748][ T5716] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 111.429417][ T5716] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.358889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.508898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 112.568903][ T5716] usb 3-1: string descriptor 0 read error: -22 [ 112.575409][ T5716] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 112.584824][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.599708][ T5716] adutux 3-1:168.0: interrupt endpoints not found [ 112.626319][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 113.305578][ T6200] netlink: 48 bytes leftover after parsing attributes in process `syz.2.105'. [ 113.371619][ T10] usb 5-1: 0:1 : does not exist [ 113.377929][ T10] usb 5-1: unit 5 not found! [ 113.387678][ T10] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 113.395419][ T10] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 113.404989][ T10] usb 5-1: [2] FU [Headset Playback Volume] ch = 1, val = 0/1/1 [ 113.417044][ T10] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 113.433570][ T30] audit: type=1400 audit(1783888365.633:280): avc: denied { name_bind } for pid=6202 comm="syz.4.112" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 113.503847][ T10] usb 5-1: USB disconnect, device number 4 [ 113.619793][ T30] audit: type=1400 audit(1783888365.653:281): avc: denied { node_bind } for pid=6202 comm="syz.4.112" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 114.095870][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.141628][ T1228] usb 3-1: USB disconnect, device number 2 [ 114.799970][ T29] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.951665][ T30] audit: type=1400 audit(1783888367.113:282): avc: denied { create } for pid=6223 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.979325][ T30] audit: type=1400 audit(1783888367.173:283): avc: denied { read } for pid=6223 comm="syz.2.116" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.690720][ T30] audit: type=1400 audit(1783888367.183:284): avc: denied { open } for pid=6223 comm="syz.2.116" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.715610][ T30] audit: type=1400 audit(1783888367.743:285): avc: denied { ioctl } for pid=6223 comm="syz.2.116" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 115.743947][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 116.702548][ T30] audit: type=1400 audit(1783888368.393:286): avc: denied { write } for pid=6223 comm="syz.2.116" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 116.726491][ T30] audit: type=1400 audit(1783888368.793:287): avc: denied { bind } for pid=6223 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.760017][ T6230] syz.2.116 (6230): drop_caches: 2 [ 116.771986][ T29] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 116.782852][ T29] usb 2-1: can't read configurations, error -71 [ 116.810734][ T30] audit: type=1400 audit(1783888368.793:288): avc: denied { node_bind } for pid=6223 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 117.720363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.278681][ T30] audit: type=1400 audit(1783888370.473:289): avc: denied { getattr } for pid=6243 comm="syz.0.121" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 118.661647][ T30] audit: type=1400 audit(1783888370.843:290): avc: denied { write } for pid=6243 comm="syz.0.121" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.108497][ T6244] netlink: 32 bytes leftover after parsing attributes in process `syz.2.119'. [ 119.137487][ T30] audit: type=1400 audit(1783888371.303:291): avc: denied { write } for pid=6241 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 119.171141][ T30] audit: type=1400 audit(1783888371.363:292): avc: denied { lock } for pid=6247 comm="syz.1.122" path="socket:[9948]" dev="sockfs" ino=9948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.287094][ T30] audit: type=1400 audit(1783888372.483:293): avc: denied { ioctl } for pid=6260 comm="syz.4.125" path="socket:[10034]" dev="sockfs" ino=10034 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.338513][ T6262] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=513 sclass=netlink_tcpdiag_socket pid=6262 comm=syz.4.125 [ 120.789402][ T5342] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 121.264914][ T5342] usb 3-1: device descriptor read/64, error -71 [ 122.129361][ T5342] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 122.299242][ T5342] usb 3-1: device descriptor read/64, error -71 [ 122.969241][ T5342] usb usb3-port1: attempt power cycle [ 123.077777][ T30] audit: type=1400 audit(1783888375.273:294): avc: denied { execute } for pid=6282 comm="syz.4.132" name="file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.078053][ T6283] process 'syz.4.132' launched './file0' with NULL argv: empty string added [ 123.240645][ T30] audit: type=1400 audit(1783888375.443:295): avc: denied { execute_no_trans } for pid=6282 comm="syz.4.132" path="/34/file0" dev="tmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 123.242689][ T6287] ÿ: renamed from dummy0 (while UP) [ 123.276644][ T30] audit: type=1400 audit(1783888375.443:296): avc: denied { setopt } for pid=6282 comm="syz.4.132" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.778998][ T5342] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 123.942093][ T30] audit: type=1400 audit(1783888376.143:297): avc: denied { write } for pid=6292 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.053875][ T30] audit: type=1400 audit(1783888376.243:298): avc: denied { ioctl } for pid=6282 comm="syz.4.132" path="socket:[10661]" dev="sockfs" ino=10661 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.091639][ T5342] usb 3-1: device not accepting address 5, error -71 [ 124.201375][ T30] audit: type=1400 audit(1783888376.383:299): avc: denied { read write } for pid=6282 comm="syz.4.132" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.187744][ T30] audit: type=1400 audit(1783888376.383:300): avc: denied { open } for pid=6282 comm="syz.4.132" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.305133][ T30] audit: type=1400 audit(1783888377.353:301): avc: denied { ioctl } for pid=6282 comm="syz.4.132" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.570901][ T6307] syz.1.137 (6307): drop_caches: 2 [ 126.069124][ T30] audit: type=1400 audit(1783888378.263:302): avc: denied { create } for pid=6302 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.616240][ T30] audit: type=1400 audit(1783888378.423:303): avc: denied { watch watch_reads } for pid=6302 comm="syz.0.136" path="pipe:[10170]" dev="pipefs" ino=10170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 126.826397][ T30] audit: type=1400 audit(1783888378.803:304): avc: denied { setopt } for pid=6302 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 127.286140][ T30] audit: type=1400 audit(1783888379.353:305): avc: denied { watch watch_reads } for pid=6302 comm="syz.0.136" path="/23/file1" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.412204][ T30] audit: type=1400 audit(1783888379.453:306): avc: denied { create } for pid=6311 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.217781][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.245392][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.261685][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.272566][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.280087][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.576533][ T5737] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.855658][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 128.987205][ T5737] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.008313][ T5737] usb 5-1: no configurations [ 129.019286][ T5737] usb 5-1: can't read configurations, error -22 [ 129.109071][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.168944][ T5737] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 129.239391][ T10] usb 3-1: device descriptor read/64, error -71 [ 129.370112][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 129.387479][ T5737] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.399156][ T5737] usb 5-1: no configurations [ 129.405618][ T5737] usb 5-1: can't read configurations, error -22 [ 129.433444][ T5737] usb usb5-port1: attempt power cycle [ 129.501385][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.640273][ T10] usb 3-1: device descriptor read/64, error -71 [ 129.969722][ T5737] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.010181][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 130.019483][ T10] usb usb3-port1: attempt power cycle [ 130.025847][ T5737] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.036713][ T5737] usb 5-1: no configurations [ 130.053491][ T5737] usb 5-1: can't read configurations, error -22 [ 130.138466][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 130.183342][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.219079][ T5737] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 130.242261][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 130.242277][ T30] audit: type=1400 audit(1783888382.443:313): avc: denied { read write } for pid=5607 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.288493][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 130.303646][ T5737] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.311571][ T5621] Bluetooth: hci5: command tx timeout [ 130.322978][ T30] audit: type=1400 audit(1783888382.443:314): avc: denied { open } for pid=5607 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.343033][ T5737] usb 5-1: no configurations [ 130.354344][ T30] audit: type=1400 audit(1783888382.443:315): avc: denied { ioctl } for pid=5607 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.375491][ T5737] usb 5-1: can't read configurations, error -22 [ 130.387108][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 130.527710][ T10] usb 3-1: device descriptor read/8, error -71 [ 130.562701][ T5737] usb usb5-port1: unable to enumerate USB device [ 131.390158][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.429852][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 131.468722][ T10] usb 3-1: device descriptor read/8, error -71 [ 131.585560][ T10] usb usb3-port1: unable to enumerate USB device [ 131.826087][ T6359] netlink: 256 bytes leftover after parsing attributes in process `syz.0.149'. [ 131.835200][ T6359] netlink: 72 bytes leftover after parsing attributes in process `syz.0.149'. [ 132.486726][ T5621] Bluetooth: hci5: command tx timeout [ 132.522628][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.690043][ T6363] syz.1.150 (6363): drop_caches: 2 [ 132.900646][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.907363][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.085216][ T30] audit: type=1400 audit(1783888386.283:316): avc: denied { mount } for pid=6369 comm="syz.1.153" name="/" dev="ramfs" ino=10761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 134.169386][ C1] ------------[ cut here ]------------ [ 134.175821][ C1] sk->sk_forward_alloc [ 134.175832][ C1] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x653/0x800, CPU#1: syz.4.148/6350 [ 134.189929][ C1] Modules linked in: [ 134.193899][ C1] CPU: 1 UID: 0 PID: 6350 Comm: syz.4.148 Not tainted syzkaller #0 PREEMPT(full) [ 134.203118][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 134.213192][ C1] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 134.219046][ C1] Code: d3 4b ff e9 06 fd ff ff e8 ca 0f d3 f7 90 0f 0b 90 e9 35 fe ff ff e8 bc 0f d3 f7 90 0f 0b 90 e9 c5 fe ff ff e8 ae 0f d3 f7 90 <0f> 0b 90 e9 04 ff ff ff e8 a0 0f d3 f7 90 0f 0b 90 e9 65 fe ff ff [ 134.238719][ C1] RSP: 0018:ffffc90000a08d90 EFLAGS: 00010246 [ 134.244858][ C1] RAX: 0000000000000000 RBX: ffff88807df49980 RCX: ffffffff8a36cab7 [ 134.252904][ C1] RDX: ffff88803189a540 RSI: ffffffff8a36cbb2 RDI: ffff88803189a540 [ 134.260932][ C1] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 [ 134.268965][ C1] R10: 0000000000000f70 R11: ffffffff8bb923b3 R12: ffff88807df49980 [ 134.276948][ C1] R13: ffff88807df49a10 R14: ffffffff81ef202d R15: 0000000000000007 [ 134.285005][ C1] FS: 0000555557f59500(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 134.293998][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.300656][ C1] CR2: 0000000000000000 CR3: 0000000073b98000 CR4: 00000000003526f0 [ 134.308651][ C1] Call Trace: [ 134.312003][ C1] [ 134.314859][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 134.320432][ C1] ? rcu_core+0x59d/0x10d0 [ 134.324856][ C1] __sk_destruct+0x85/0xab0 [ 134.329440][ C1] ? rcu_core+0x59d/0x10d0 [ 134.333892][ C1] rcu_core+0x5a2/0x10d0 [ 134.338153][ C1] ? __pfx_rcu_core+0x10/0x10 [ 134.342931][ C1] ? run_timer_base+0x121/0x190 [ 134.347815][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 134.353099][ C1] handle_softirqs+0x1ea/0x9b0 [ 134.357912][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 134.363286][ C1] ? _raw_spin_unlock+0x28/0x50 [ 134.368190][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 134.373900][ C1] __irq_exit_rcu+0x162/0x210 [ 134.378622][ C1] irq_exit_rcu+0x9/0x30 [ 134.382946][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 134.388605][ C1] [ 134.391590][ C1] [ 134.394540][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 134.400588][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 134.405799][ C1] Code: 05 3b df 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 c3 3c 0f 0f 82 ac 02 00 00 8b 35 4e f7 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd de 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 134.425438][ C1] RSP: 0018:ffffc90003417660 EFLAGS: 00000206 [ 134.431515][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 134.439486][ C1] RDX: 0000000000000000 RSI: ffffffff8e17d521 RDI: ffffffff8c400f80 [ 134.447432][ C1] RBP: ffffffff8ebe6100 R08: 000000007c93035a R09: 0000000000000007 [ 134.455406][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 134.463370][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.471351][ C1] unwind_next_frame+0xd1/0x2090 [ 134.476273][ C1] ? unwind_next_frame+0xbd/0x2090 [ 134.481389][ C1] ? __unwind_start+0x2f7/0x7e0 [ 134.486238][ C1] ? get_stack_info_noinstr+0x18/0x130 [ 134.491709][ C1] __unwind_start+0x3cd/0x7e0 [ 134.496378][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.502555][ C1] arch_stack_walk+0x73/0xf0 [ 134.507128][ C1] ? __unwind_start+0x2f7/0x7e0 [ 134.511982][ C1] stack_trace_save+0x8e/0xc0 [ 134.516660][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 134.522034][ C1] ? __lock_acquire+0x49f/0x1a40 [ 134.526953][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 134.532766][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 134.537950][ C1] save_stack+0x162/0x1e0 [ 134.542294][ C1] ? __pfx_save_stack+0x10/0x10 [ 134.547139][ C1] ? page_ext_put+0x3e/0xd0 [ 134.551650][ C1] __reset_page_owner+0x84/0x190 [ 134.556579][ C1] free_pages_prepare+0x586/0xd80 [ 134.561610][ C1] __free_contig_range_common+0x14f/0x250 [ 134.567329][ C1] free_pages_bulk+0xbd/0x200 [ 134.572004][ C1] vm_area_free_pages+0xad/0x2b0 [ 134.576931][ C1] ? __pfx_vb2_vmalloc_put+0x10/0x10 [ 134.582231][ C1] vfree+0x107/0x750 [ 134.586105][ C1] ? vb2_vmalloc_put+0x88/0xc0 [ 134.590876][ C1] ? kfree+0x22b/0x6c0 [ 134.594933][ C1] ? __pfx_vb2_vmalloc_put+0x10/0x10 [ 134.600225][ C1] vb2_vmalloc_put+0x80/0xc0 [ 134.604793][ C1] __vb2_buf_mem_free+0x121/0x240 [ 134.609814][ C1] __vb2_queue_free+0x7ec/0xa30 [ 134.614654][ C1] ? v4l2_ctrl_handler_free+0x67e/0x970 [ 134.620213][ C1] vb2_core_queue_release+0x70/0x190 [ 134.625486][ C1] v4l2_m2m_ctx_release+0x2a/0x40 [ 134.630521][ C1] vim2m_release+0xe4/0x150 [ 134.635037][ C1] v4l2_release+0x1cf/0x390 [ 134.639545][ C1] ? __pfx_v4l2_release+0x10/0x10 [ 134.644565][ C1] __fput+0x3ff/0xb50 [ 134.648545][ C1] task_work_run+0x150/0x240 [ 134.653140][ C1] ? __pfx_task_work_run+0x10/0x10 [ 134.658234][ C1] exit_to_user_mode_loop+0x1d8/0x6f0 [ 134.663614][ C1] ? rcu_is_watching+0x12/0xc0 [ 134.668372][ C1] do_syscall_64+0x666/0x870 [ 134.672962][ C1] ? clear_bhb_loop+0x40/0x90 [ 134.677622][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.683530][ C1] RIP: 0033:0x7f5c0179de59 [ 134.687928][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.707540][ C1] RSP: 002b:00007ffc0e395b38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 134.716061][ C1] RAX: 0000000000000000 RBX: 00007f5c01a27da0 RCX: 00007f5c0179de59 [ 134.724029][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 134.731999][ C1] RBP: 00007f5c01a27da0 R08: 0000000000000006 R09: 0000000000000000 [ 134.739974][ C1] R10: 00007f5c01a27cb0 R11: 0000000000000246 R12: 0000000000020471 [ 134.747925][ C1] R13: 00007f5c01a2609c R14: 00000000000201d5 R15: 00007f5c01a26090 [ 134.755911][ C1] [ 134.758922][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.766179][ C1] CPU: 1 UID: 0 PID: 6350 Comm: syz.4.148 Not tainted syzkaller #0 PREEMPT(full) [ 134.775349][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 134.785379][ C1] Call Trace: [ 134.788634][ C1] [ 134.791455][ C1] dump_stack_lvl+0x100/0x190 [ 134.796112][ C1] vpanic+0x552/0x970 [ 134.800068][ C1] ? __pfx_vpanic+0x10/0x10 [ 134.804548][ C1] panic+0xd1/0xe0 [ 134.808241][ C1] ? __pfx_panic+0x10/0x10 [ 134.812637][ C1] ? check_panic_on_warn+0x1f/0x90 [ 134.817728][ C1] check_panic_on_warn.cold+0x19/0x34 [ 134.823080][ C1] ? inet_sock_destruct+0x653/0x800 [ 134.828255][ C1] __warn.cold+0x191/0x318 [ 134.832662][ C1] __report_bug+0x30f/0x440 [ 134.837148][ C1] ? inet_sock_destruct+0x653/0x800 [ 134.842319][ C1] ? __pfx___report_bug+0x10/0x10 [ 134.847320][ C1] ? save_stack+0x162/0x1e0 [ 134.851799][ C1] ? __reset_page_owner+0x84/0x190 [ 134.856900][ C1] ? free_pages_prepare+0x586/0xd80 [ 134.862109][ C1] ? __free_contig_range_common+0x14f/0x250 [ 134.868000][ C1] ? free_pages_bulk+0xbd/0x200 [ 134.872856][ C1] ? vm_area_free_pages+0xad/0x2b0 [ 134.877945][ C1] ? vfree+0x107/0x750 [ 134.881990][ C1] ? vb2_vmalloc_put+0x80/0xc0 [ 134.886732][ C1] ? __vb2_buf_mem_free+0x121/0x240 [ 134.891906][ C1] ? __vb2_queue_free+0x7ec/0xa30 [ 134.896915][ C1] ? vb2_core_queue_release+0x70/0x190 [ 134.902359][ C1] ? v4l2_m2m_ctx_release+0x2a/0x40 [ 134.907537][ C1] ? vim2m_release+0xe4/0x150 [ 134.912197][ C1] ? v4l2_release+0x1cf/0x390 [ 134.916846][ C1] ? __fput+0x3ff/0xb50 [ 134.920977][ C1] ? task_work_run+0x150/0x240 [ 134.925715][ C1] ? exit_to_user_mode_loop+0x1d8/0x6f0 [ 134.931234][ C1] ? do_syscall_64+0x666/0x870 [ 134.935985][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.942047][ C1] ? inet_sock_destruct+0x653/0x800 [ 134.947271][ C1] report_bug+0xb2/0x220 [ 134.951513][ C1] ? inet_sock_destruct+0x653/0x800 [ 134.956686][ C1] handle_bug+0x16a/0x2a0 [ 134.960991][ C1] exc_invalid_op+0x17/0x50 [ 134.965480][ C1] asm_exc_invalid_op+0x1a/0x20 [ 134.970305][ C1] RIP: 0010:inet_sock_destruct+0x653/0x800 [ 134.976084][ C1] Code: d3 4b ff e9 06 fd ff ff e8 ca 0f d3 f7 90 0f 0b 90 e9 35 fe ff ff e8 bc 0f d3 f7 90 0f 0b 90 e9 c5 fe ff ff e8 ae 0f d3 f7 90 <0f> 0b 90 e9 04 ff ff ff e8 a0 0f d3 f7 90 0f 0b 90 e9 65 fe ff ff [ 134.995686][ C1] RSP: 0018:ffffc90000a08d90 EFLAGS: 00010246 [ 135.001734][ C1] RAX: 0000000000000000 RBX: ffff88807df49980 RCX: ffffffff8a36cab7 [ 135.009681][ C1] RDX: ffff88803189a540 RSI: ffffffff8a36cbb2 RDI: ffff88803189a540 [ 135.017635][ C1] RBP: 0000000000000f70 R08: 0000000000000005 R09: 0000000000000000 [ 135.025586][ C1] R10: 0000000000000f70 R11: ffffffff8bb923b3 R12: ffff88807df49980 [ 135.033539][ C1] R13: ffff88807df49a10 R14: ffffffff81ef202d R15: 0000000000000007 [ 135.041504][ C1] ? rcu_core+0x59d/0x10d0 [ 135.045906][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 135.051693][ C1] ? inet_sock_destruct+0x557/0x800 [ 135.056878][ C1] ? inet_sock_destruct+0x652/0x800 [ 135.062076][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 135.067547][ C1] ? rcu_core+0x59d/0x10d0 [ 135.071944][ C1] __sk_destruct+0x85/0xab0 [ 135.076437][ C1] ? rcu_core+0x59d/0x10d0 [ 135.080829][ C1] rcu_core+0x5a2/0x10d0 [ 135.085062][ C1] ? __pfx_rcu_core+0x10/0x10 [ 135.089728][ C1] ? run_timer_base+0x121/0x190 [ 135.094575][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 135.099772][ C1] handle_softirqs+0x1ea/0x9b0 [ 135.104527][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 135.109791][ C1] ? _raw_spin_unlock+0x28/0x50 [ 135.114622][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 135.120252][ C1] __irq_exit_rcu+0x162/0x210 [ 135.124924][ C1] irq_exit_rcu+0x9/0x30 [ 135.129147][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 135.134761][ C1] [ 135.137667][ C1] [ 135.140590][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 135.146558][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 135.151745][ C1] Code: 05 3b df 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 c3 3c 0f 0f 82 ac 02 00 00 8b 35 4e f7 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd de 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 135.171349][ C1] RSP: 0018:ffffc90003417660 EFLAGS: 00000206 [ 135.177408][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 135.185365][ C1] RDX: 0000000000000000 RSI: ffffffff8e17d521 RDI: ffffffff8c400f80 [ 135.193320][ C1] RBP: ffffffff8ebe6100 R08: 000000007c93035a R09: 0000000000000007 [ 135.201279][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 135.209241][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.217213][ C1] unwind_next_frame+0xd1/0x2090 [ 135.222140][ C1] ? unwind_next_frame+0xbd/0x2090 [ 135.227235][ C1] ? __unwind_start+0x2f7/0x7e0 [ 135.232071][ C1] ? get_stack_info_noinstr+0x18/0x130 [ 135.237517][ C1] __unwind_start+0x3cd/0x7e0 [ 135.242301][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 135.248481][ C1] arch_stack_walk+0x73/0xf0 [ 135.253070][ C1] ? __unwind_start+0x2f7/0x7e0 [ 135.257931][ C1] stack_trace_save+0x8e/0xc0 [ 135.262624][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 135.268005][ C1] ? __lock_acquire+0x49f/0x1a40 [ 135.272933][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 135.278731][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 135.283921][ C1] save_stack+0x162/0x1e0 [ 135.288240][ C1] ? __pfx_save_stack+0x10/0x10 [ 135.293070][ C1] ? page_ext_put+0x3e/0xd0 [ 135.297551][ C1] __reset_page_owner+0x84/0x190 [ 135.302556][ C1] free_pages_prepare+0x586/0xd80 [ 135.307571][ C1] __free_contig_range_common+0x14f/0x250 [ 135.313284][ C1] free_pages_bulk+0xbd/0x200 [ 135.317956][ C1] vm_area_free_pages+0xad/0x2b0 [ 135.322911][ C1] ? __pfx_vb2_vmalloc_put+0x10/0x10 [ 135.328210][ C1] vfree+0x107/0x750 [ 135.332119][ C1] ? vb2_vmalloc_put+0x88/0xc0 [ 135.336882][ C1] ? kfree+0x22b/0x6c0 [ 135.340939][ C1] ? __pfx_vb2_vmalloc_put+0x10/0x10 [ 135.346206][ C1] vb2_vmalloc_put+0x80/0xc0 [ 135.350775][ C1] __vb2_buf_mem_free+0x121/0x240 [ 135.355788][ C1] __vb2_queue_free+0x7ec/0xa30 [ 135.360655][ C1] ? v4l2_ctrl_handler_free+0x67e/0x970 [ 135.366205][ C1] vb2_core_queue_release+0x70/0x190 [ 135.371490][ C1] v4l2_m2m_ctx_release+0x2a/0x40 [ 135.376495][ C1] vim2m_release+0xe4/0x150 [ 135.380976][ C1] v4l2_release+0x1cf/0x390 [ 135.385461][ C1] ? __pfx_v4l2_release+0x10/0x10 [ 135.390468][ C1] __fput+0x3ff/0xb50 [ 135.394425][ C1] task_work_run+0x150/0x240 [ 135.398990][ C1] ? __pfx_task_work_run+0x10/0x10 [ 135.404079][ C1] exit_to_user_mode_loop+0x1d8/0x6f0 [ 135.409441][ C1] ? rcu_is_watching+0x12/0xc0 [ 135.414200][ C1] do_syscall_64+0x666/0x870 [ 135.418775][ C1] ? clear_bhb_loop+0x40/0x90 [ 135.423437][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.429318][ C1] RIP: 0033:0x7f5c0179de59 [ 135.433708][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.453288][ C1] RSP: 002b:00007ffc0e395b38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 135.461684][ C1] RAX: 0000000000000000 RBX: 00007f5c01a27da0 RCX: 00007f5c0179de59 [ 135.469628][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 135.477573][ C1] RBP: 00007f5c01a27da0 R08: 0000000000000006 R09: 0000000000000000 [ 135.485523][ C1] R10: 00007f5c01a27cb0 R11: 0000000000000246 R12: 0000000000020471 [ 135.493476][ C1] R13: 00007f5c01a2609c R14: 00000000000201d5 R15: 00007f5c01a26090 [ 135.501435][ C1] [ 135.504641][ C1] Kernel Offset: disabled [ 135.508941][ C1] Rebooting in 86400 seconds..