last executing test programs: 1m0.936565676s ago: executing program 4 (id=5): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x45e, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x3, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x7ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0xc0, 0xff, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0xe, 0x3, 0x1, {0x22, 0xd78}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x8, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x6, 0x3}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0xf, 0x9, 0x4, 0x8, 0x6}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7, 0xbd67}]}}) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0xfffffffffffffeb2, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "c90e"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000180)={0x40, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x40, 0x8, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000da7d0000000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0xb, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x810) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x81, 0x2, "9683"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001040)={0x84, &(0x7f0000000980)={0xca96e405654191cc, 0x30, 0x2, "73b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 57.398753626s ago: executing program 4 (id=17): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) recvfrom$l2tp(r0, &(0x7f0000000040)=""/145, 0x91, 0x2000, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x48}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000400)={{r0}, 0x0, 0xc, @inherit={0x90, &(0x7f0000000340)={0x0, 0x9, 0xce72, 0x8000, {0x2c, 0x3b47, 0x0, 0x400}, [0x73, 0x8, 0x9, 0x3, 0x6, 0x80000000, 0x9, 0x5, 0xf]}}, @name="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"}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000001440)=0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001480)={0x3, 0x6}, 0x4) fstatfs(r0, &(0x7f00000014c0)=""/244) write$dsp(r2, &(0x7f00000015c0)="dd8cc42c1a66921289eabda08b9fe97f9282614256b44b845113461147249e40c6e85c391e5652880f4b108953ab001c97519b55df00fe9eb0041da18cff2c071957b55af2cf550dd8ea39e7b12e9c4694a4204782a6a87678e8746fff498746bb82b8fa", 0x64) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001680), 0x10d401) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1b, 0x14, &(0x7f00000016c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1605}, @jmp={0x5, 0x1, 0x3, 0xf, 0x0, 0xc97a90f789ff4901, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000001780)='syzkaller\x00', 0x3a, 0x7d, &(0x7f00000017c0)=""/125, 0x41100, 0x40, '\x00', r1, @fallback=0x25, r2, 0x8, &(0x7f0000001840)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001880)={0x3, 0x2, 0xffffea1f, 0xa94}, 0x10, 0x0, r0, 0x3, &(0x7f00000018c0)=[r2, r0, r2, r2, r2, r2, r2], &(0x7f0000001900)=[{0x0, 0x2, 0xe}, {0x2, 0x5, 0x6, 0x4}, {0x3, 0x4, 0x3, 0x4}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000001ac0)={&(0x7f0000001640), 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=@getlink={0x5c, 0x12, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x4000, 0x800a}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}]}, @IFLA_GROUP={0x8, 0x1b, 0xf}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x24000004) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x34, 0x0, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000001c00)=0x0) quotactl_fd$Q_QUOTAOFF(r0, 0x0, r5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001d80)={&(0x7f0000001c40), 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x28, r6, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x772, 0x56}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x4008004) socketpair$unix(0x1, 0x842c68f3badaa985, 0x0, &(0x7f0000001dc0)={0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000001e00)={0x48, 0x7, r0, 0x0, 0x10000, 0x0, 0x0, 0x194c55, 0x319f9d}) getitimer(0x1, &(0x7f0000001e80)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r8, 0xc07b7000) clock_gettime(0x5, &(0x7f0000001ec0)) read$msr(r0, &(0x7f0000001f00)=""/77, 0x4d) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000001f80)={0x0, 0x10001, 0x3, 0x7fff, 0x6, 0x101, 0x7, 0x8, {0x0, @in6={{0xa, 0x4e21, 0x54, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}, 0x2, 0xffff, 0x8, 0xe81, 0x6}}, &(0x7f0000002040)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000002080)={r9, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, &(0x7f0000002140)=0x84) close_range(0xffffffffffffffff, r2, 0x0) 57.123756353s ago: executing program 4 (id=19): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 56.930563831s ago: executing program 4 (id=20): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000080)={{0x7, 0x6}, 0x100, './file0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000f77a5b030000000a20000000000a03000000000000000000010000000900010073797a300000000054000000030a01010000000000000000010000020900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a3000000000140000001000010000000000000000000000000a"], 0x9c}}, 0x0) 56.743182156s ago: executing program 4 (id=22): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)) (async) io_setup(0x3, &(0x7f0000000140)=0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @remote, 'pim6reg0\x00'}}) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$FIONCLEX(r2, 0x5450) (async) ioctl$FIONCLEX(r2, 0x5450) ioctl$UI_DEV_DESTROY(r2, 0x5502) (async) ioctl$UI_DEV_DESTROY(r2, 0x5502) 56.420977289s ago: executing program 4 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) (async) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 56.088347829s ago: executing program 32 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) (async) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 34.186182079s ago: executing program 1 (id=95): mkdir(0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000001c0), 0xc) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x77, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0x14bb, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1ff], 0x0, 0x10202}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) r3 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x48524742, 0x9, 0x0, [{}, {0x0, 0x2}], 0x0, 0x0, 0x16, 0x1}}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="070000000000dfffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, 0x0, 0x0}, 0x20) (async, rerun: 32) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) (rerun: 32) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) (async) write$P9_RSTATu(r8, &(0x7f0000000080)=ANY=[], 0xfd85) 32.378080404s ago: executing program 1 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./bus\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0xfffffffe, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x8, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x1, 0x0) setreuid(0x0, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) shutdown(0xffffffffffffffff, 0x1) fsmount(r1, 0x0, 0x0) 31.14675354s ago: executing program 1 (id=107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4, 0x10}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0x4, 0x1, 0x7, 0x2, 0x0, 0x40, 0x0, 0x0, 0x7, 0xfc}, {0x3000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0xc, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x10}, {0x1000}, {0x1000}, 0xddf8ffdb, 0x0, 0x80a0000, 0x0, 0x0, 0x7801, 0x0, [0x0, 0xfffffffffffffffc, 0x1]}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0200000002"], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r7, 0x2, 0x0, 0x600000, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000080)={0x10000}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc) 30.081945487s ago: executing program 1 (id=112): r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000480)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='*'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000026c0)={0x0, 0xfffffffffffffffe, 0xf2, 0x4, @scatter={0x8, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000200)=""/250, 0xfa}, {&(0x7f0000000180)}, {&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f00000003c0)=""/88, 0x58}, {&(0x7f0000000440)=""/48, 0x30}]}, &(0x7f0000001580)="c87962a0ffd939940f75fc3a015334279b7e0d11c5acb8f4ce4accddb3b6b935578a8d5bf340ba37045f13467a30cdfff187e771e1b25251034103319a94dec0725fbe2946326765bea195c1674c6a18274c3ff49e13cef1936b2f1877547d9bab63ca77746f1a0a045cb1d7d08be1fd3e9cbe2922d02b3c22390ed96288f1078476f5adabf18fb24599b9d44f27e8b13b4f4d52947340778d253814a4818a1d20b9c6b77d6b4dbbda115ccc015735d9a49dbdd685b98b32c91a913e1711d249904df66a5f5b653925aa0d668bf95a38bfc94d940b9f6b49de4845e4f3f7664f0f8b363eb843ba086b0291d86d09b4d4c017", &(0x7f0000001680)=""/4096, 0x1, 0x10, 0x3, &(0x7f0000002680)}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 29.73113227s ago: executing program 1 (id=114): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) socket(0x15, 0x5, 0x0) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0)={0x0, 0x4, 0x400, 0x0, 0x10004, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) 11.160939167s ago: executing program 1 (id=114): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x282a2, 0x0) socket(0x15, 0x5, 0x0) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0)={0x0, 0x4, 0x400, 0x0, 0x10004, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) 10.658071661s ago: executing program 3 (id=177): mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) setuid(r0) 10.490218102s ago: executing program 3 (id=178): syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000040)="07000000010001", 0x7) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x1000, 0x5, 0x5, 0x7]}, &(0x7f0000000040)=0xc) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 10.13622034s ago: executing program 3 (id=179): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r1) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) recvfrom$inet(r3, &(0x7f0000000040)=""/69, 0x45, 0x10022, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000001c0)) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x7) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000005c0)={{0x0, 0x9}, 'port1\x00', 0x0, 0x10016, 0xfffffffe, 0x40006, 0x3, 0x4, 0x5}) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000a80)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r8, 0x1, 0x70bd25, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}, 0x3c}}, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20, &(0x7f00000002c0)={[], [{@euid_eq={'euid', 0x3d, r6}}, {@obj_user={'obj_user', 0x3d, ')'}}, {@measure}]}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) ftruncate(r10, 0xc17a) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 7.522345851s ago: executing program 5 (id=188): openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x351000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x10000, 0x0) (async, rerun: 32) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x8a) (async, rerun: 32) stat(0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) poll(0x0, 0x0, 0xfefd) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/816]}, 0x3a8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="0000000b00000000000000611bf93c7b8c09af66e06e78123d66f6dab18156e727e71d5cef3d43762cf3cc72818c3b7f9214dd69f3a1f0dd9a889bc9707ac2be781697867f1fb32769660c0f13da2ce4628791636a56c8b6b150ba42b65e2f92670882b6393decccdc3957c0da2a5f9909f31f8217cdb5b63a5fd63e67d3c999855c0caaf6f11c68a82e55b3f485ea0140d98ce174ec6a545063fad93af1be6de7b74163030660a88f000c8daf1e0c179c41a44a36cff3479c94770e4d0bfd362b038d675360e1ec8545129e9890d5a94ffab62275d67c73fc2554", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r5, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) r8 = eventfd(0x1) r9 = eventfd(0x5) (async, rerun: 64) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000001f40)=0xffffffffffffffff) (async, rerun: 64) r11 = eventfd2(0x7ff, 0x80801) io_submit(0x0, 0xa, &(0x7f0000001fc0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x80, r7, &(0x7f00000003c0)="a7d02aca3ab75d93d4e42ef1796384d3c21132d85c45615b9dcf212d9e4cf1637770ad96919a39c98cc9c6a2b9e9504f48ac76a0f20e0e34e51f66481d9d5b5793c4dbefa77f6f29c22daa1c9cbca793b22c445e7bc029edeaefc652158c9508e21cabba2284bd894918f9934ebb0c4ff8d460cf80ba8d43c35e1bcce5cd43b3646056620f4019a175a5f87f8ec67c011947aee020b8fa1f30718f1e9af4ae5c5a6856e7de1a483e7a65b65c2996", 0xae, 0x8, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x800, r6, &(0x7f00000008c0)="369127eb93bc494acc743533da364cc5eefc2a11e90f56a3151d93ccc60285124c844c73409f335848f9d22b809a3403c40bfa71b3e1f37b398544cbd9f8e829bc8ad2d9e89f3c6dabf3fd2e8f70449d5c4bf03a6efac1252c04ca8d12d42e008499434bf57018cd0c35941c21eb72eee957288b847c555c87136d54e62ed5f3fb95c1d960d91244109f593288424c500bc30837073910b8d20b9a52aee04453b2eefecdfdb407e163e19a8babe1fd40e8e93d282ab0bffa36c435ed340b1715b7d5a9b0c88c524fbd0bc29f0e9e44a8aac59f6c05b7121220d77f7d828a36", 0xdf, 0x0, 0x0, 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x1c, r6, &(0x7f00000009c0)="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", 0xfc, 0x6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0xa, r4, &(0x7f0000000b80)="0de5e43e036986afa3cde8cee5e1db22de10931a407e7b9dbdd8ec0d322bae99553c3b8e0a9fa2f0ea11a1ef064e72aaff25fb54c1d699c0779fecf75ae00834f83d94eea80a889979d4ab463fce98886ad4a8f72ca66a1b40167e2fcc2709b0443a7dea7f0169c6dc3d34d75f457d42630a6681f86f130d46a0c9db2996063bc8db7a97f9d566cf89459be5309d84b97729f8e4412084443a775235db418d47cb0c", 0xa2, 0x0, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0xd, r5, &(0x7f0000000c40)="fe0b21faf60cef36a324b9b220621844167bfed299154075889667e406c5684fb08f1fa2554fd20b32f336a53a5ed3c4a83524ccc0270d91bb0e3a7ab3b5063adfc2c4d594a5d32b0dea13540b099da01a1900821f42aa6c43110a39d251e8146e31426c1e0070d0494a651aaeb432d15e55922ed09d0ef77dc56f3fdb578b5273f9b4b465da5c213d4a49f2db97a1f3b9bfce20f01fcef9661863dca74fe14d3d7e9e550b2337c0cd0fd931ce3f79568aebd82ee3", 0xb5, 0x2, 0x0, 0x2}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, &(0x7f0000000d00)="17b37f5825ecf8a16c0119632ce04a57d20bab71b0850f656a60c6b97bcabfa9a262c8212e2e6a4a7575c75e70567145033cbc4822381f7ce5e29de2dea34969b7ec33c6dd51c3a319ef22982f576dbbb8628d810a00a8096bfdf55e3b1c1505afcaa284f6a8db", 0x67, 0xd, 0x0, 0x2}, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x8, 0x3, r2, &(0x7f0000000dc0)="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", 0xf80, 0x5, 0x0, 0x3, r8}, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f0000001e00), 0x0, 0x1, 0x0, 0x2, r9}, 0x0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x5, 0x7, r10, &(0x7f0000002440)="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", 0x1000, 0x1, 0x0, 0x2, r11}]) (async) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) pwritev(r12, &(0x7f0000000240)=[{&(0x7f0000000140)="f9aced89f174d7ee8162d8af47da9b2d9f6d2121d4fa87d34ad531814294a95cf79eb84aba490a8d33b28d63bc13445abac137393b0052c52bd12806f9d1b423452648a99b456e37e1b5ed1edabafef4b5ad19179608dc711f4a5bdb452fdc342d051b4fbdaed8239a35ddcb8a18014e2cd41a780a7c", 0x76}], 0x1, 0x3, 0xd4bd) 7.197958013s ago: executing program 5 (id=189): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 6.801403975s ago: executing program 3 (id=191): r0 = syz_usb_connect(0x0, 0xffffffffffffffa3, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x13, 0x4, "f2c93366"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000700)={0x40, 0x7, 0x4, "39c07352"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.597469181s ago: executing program 2 (id=193): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000000)=""/2) shmat(r3, &(0x7f0000fa4000/0x4000)=nil, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = syz_io_uring_setup(0x16d2, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x10}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x1377, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='1-N,'], 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.331969666s ago: executing program 5 (id=194): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000080000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/243, 0xf3}], 0x1}, 0x2) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) 5.601269063s ago: executing program 2 (id=195): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x33e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x33e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xffff, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) get_mempolicy(0xfffffffffffffffc, 0x0, 0x6, &(0x7f0000ffa000/0x3000)=nil, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x7, [@datasec={0x5, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x4}, {0x5, 0x9, 0xfffffffc}], "b648"}, @enum64={0x4, 0x4, 0x0, 0x13, 0x0, 0x3, [{0x9, 0x2bbd8702, 0x8077}, {0xc, 0x612be9f0, 0x9}, {0x9, 0x5, 0x2}, {0xa, 0x5, 0x80000000}]}, @const={0x5, 0x0, 0x0, 0xa, 0x1}, @enum={0x9, 0x4, 0x0, 0x6, 0x4, [{0x1, 0xfffffff7}, {0xe, 0x73fd80}, {0x83, 0xfffffff9}, {0x9, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x4}}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x2}]}}, &(0x7f0000000600)=""/227, 0xfffffffffffffe73, 0xe3, 0x1, 0x100, 0x10000, @value}, 0x28) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x7, [@datasec={0x5, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x4}, {0x5, 0x9, 0xfffffffc}], "b648"}, @enum64={0x4, 0x4, 0x0, 0x13, 0x0, 0x3, [{0x9, 0x2bbd8702, 0x8077}, {0xc, 0x612be9f0, 0x9}, {0x9, 0x5, 0x2}, {0xa, 0x5, 0x80000000}]}, @const={0x5, 0x0, 0x0, 0xa, 0x1}, @enum={0x9, 0x4, 0x0, 0x6, 0x4, [{0x1, 0xfffffff7}, {0xe, 0x73fd80}, {0x83, 0xfffffff9}, {0x9, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x4}}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x2}]}}, &(0x7f0000000600)=""/227, 0xfffffffffffffe73, 0xe3, 0x1, 0x100, 0x10000, @value}, 0x28) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') read$FUSE(r6, &(0x7f0000000d80)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000980)={0x0, &(0x7f0000000700)}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800ffffffe60000000000000000000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@func={0xf, 0x0, 0x0, 0xc, 0x4}, @struct={0x6, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x9, 0x3, 0x401}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0x7}, @float={0x9, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x5f, 0x2e, 0x5f]}}, &(0x7f0000000880)=""/219, 0x5d, 0xdb, 0x0, 0x34e7f29b, 0x10000, @value=r9}, 0x28) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000008d80402c000000000000109022400010000000009040000020300000009210000000122070009058103"], 0x0) r11 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffe0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r12, {}, {0xffe0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x2c}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) (async) syz_usb_control_io$hid(r10, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) (async) r14 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 5.395675904s ago: executing program 2 (id=196): add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)=ANY=[@ANYBLOB="010000"], 0x29, 0xfffffffffffffffe) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) (rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x10) (async) r5 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x0, 0x0) (async, rerun: 32) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) acct(0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r9, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1000000000000392}, 0x80) (async) recvmsg$kcm(r4, 0x0, 0x40) socket$kcm(0x10, 0x3, 0x10) (async) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000000)={0xf0f05a, 0x0, @value}) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="38010000100013070000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033000000ac1414000000000000000000000000000000000000000000000000000000000004000000000000faffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002000000000000000000480001006469676573745f6e756c6c00"/240, @ANYRES32=r0, @ANYBLOB="12691dffba09ab52b5950bacd850c4e2def5491c5eb0ecdd0bab4801bd7a2eb103a762c5e1b15ad6e09fae73d1c534138ce0bf28f2a22202ec612d4285a0590fe019623c81e017a84fdfbc0e3ad5d6fb9401f376f29cda3e797c9a0e", @ANYRES8=r1, @ANYRESDEC=0x0], 0x138}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000014000180060001000a0000000800050000000000"], 0x28}}, 0x800) 4.882647899s ago: executing program 2 (id=197): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x45e, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x3, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x7ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0xc0, 0xff, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0xe, 0x3, 0x1, {0x22, 0xd78}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x8, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x6, 0x3}}]}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x10, 0xf, 0x9, 0x4, 0x8, 0x6}, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x7, 0xbd67}]}}) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0xfffffffffffffeb2, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000d00)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x82, 0x2, "c90e"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000000180)={0x40, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x40, 0x8, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000da7d0000000000000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0xb, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x810) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x81, 0x2, "9683"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001040)={0x84, &(0x7f0000000980)={0xca96e405654191cc, 0x30, 0x2, "73b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.312244758s ago: executing program 0 (id=199): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f0000000680), 0x4000000000000a9, 0x40010043, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r6, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x2fd}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000016c0)=""/77, 0x4d}, {&(0x7f0000001880)=""/178, 0xb2}, {&(0x7f0000001940)=""/4118, 0x1016}, {&(0x7f00000002c0)=""/228, 0xe4}, {&(0x7f0000001740)=""/180, 0xb4}, {&(0x7f0000002ac0)=""/214, 0xd6}, {&(0x7f0000000580)=""/179, 0xb3}], 0x7}, 0x1}], 0x3, 0x40000002, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r7, 0x80045104, &(0x7f0000000040)) recvmmsg(r6, &(0x7f0000001200)=[{{0x0, 0x75, 0x0, 0x0, 0x0, 0xfffffffffffffe94}, 0xffff}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6e5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffded}, 0x8001}, {{0x0, 0x0, 0x0}, 0x80000002}], 0x5db, 0x2000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="8fe848ee06380f01d10f21f83500000d000f23f8b8f83aa9970f23d80f21f835800000f00f23f80f01c866bad104b0d1eec4e3b96802ff0f97fe0f0010660f63c4360f78b9fc000000", 0x49}], 0x1, 0x52, 0x0, 0x0) 4.132554702s ago: executing program 5 (id=200): creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002240)=ANY=[@ANYBLOB="2400000018000100000000000100000002e40112a075140ea7c829d6ba1400000003fd050000000008001e00ff0f00009acbbd5adbd1fc054b3f1cf58c4f15e45cec5e991a9364b6e54ec2506f38cfe843f480362217157487982c3023b08fd80d59062bc1003796634673ac047c7d212cf26aa99d39806e9f1c4321126e15d649f23230e8feee8ef993a170f98b48fc02506136844254dcfd1c4f08cb08d70276d8ff364815904f6ac1443d2a1f69d5f9ad7254c19d26cd123cc30fc048d607aef72f76242a33d43e7453640e410ba68d7bd5cba9dda55f9278d47d37f4e10ea6df0c1540ea96121545eefb66e1a97c307d8a3c806eb2f0d01cf3efbbf526964a2dcd53181bb4f064f3cd12d95c5c2440a9ee6d51cf86b87427233cd28a9c08742d774e62f1903ac01a27c216c196406ed84ba9d25778868a32aae21f5e482318647f9594155a9668d577d7f499f6d97ad47ce4e4374e6b65d413cf63fa604f65ce684a5dcad97f274889084013cea09b679031492aa993725363f7505a68355a0e8860d8af7784efd03547f6f9412eebb0acd6b173863f577349e8bc873f2b97a11f492223ef27428e55ee219cd8e9954cda01304bf4ffa6c65b2b36b5358cbe340d4cd6994e7e66cb018711dd7a7086180cf89b5f8aea7bd5d390a697057f3938ecf907c8b1aba3d087b7e7d194a31a867f274da3c7eb511fe20975bc83d46712dc15a0a1abe3f84d57f35d241fc688ac1dce88aed716c131ca487c953d8dd7668330b9eedbefa7cf67b2b2e42d49f9ecf5023b68a89f2a8ee291997f696096a658e077b1452f00"/599], 0x24}, 0x1, 0x0, 0x0, 0x4d4}, 0x4000050) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000a242be9ab0dd3136f72c6138c3b2888c4d42c5bf6b4f8d91899c9032451169f70e3adea1c5e465832621ef91f72c1e79155243b2a63d49f4cf54c4b165658d2daf46f606", @ANYRES8=r1, @ANYRES16, @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x2000050}, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x48ed0000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r7, 0x89e6, &(0x7f0000000040)) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) (async) syz_open_procfs(0x0, 0x0) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) (async) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) 2.070133044s ago: executing program 3 (id=201): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r2, 0x1, 0x50, &(0x7f0000000040)=0x6, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000000)="03020000008002ff", 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xffffffe0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, 0x8) sendmmsg$inet6(r0, &(0x7f00000035c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000001002abd7000ffdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0200890608000100e0000001"], 0x24}}, 0x0) fstat(r4, 0x0) write$binfmt_script(r4, &(0x7f0000000140)={'#! ', './file0', [{0x20, '{^\xb6\x93&:):'}, {0x20, '$%:7\']/.%/^\\^'}, {}, {0x20, '\'}!+()+--'}, {0x20, '\x8d]) }(:'}, {0x20, '#&$\xe0^!/'}, {0x20, '&-)'}, {0x20, '*!,-(*:!.'}], 0xa, "55bd6d7f5d6d74efbca682cbeaab0041765b4024384386a1d5982b3989d33b634f779dcf7655260bc01256e4b5de724f768a998aa09661124a7b54d77125092331bea1072ec6653e776a2caed0dd3b685987bd5e72654e0d636b654e332ba4f89bc8ee5da3d0e8c8315ea5b779ea0d9f46f9a030df7ee0521022be65fb23855ef2428199d3366128711d5c664db4e866f9c4d45c151106e62a6cf1d9bf5a39bc66dbd80ea15b1a03f96a9f41dbe73e2a8a2ba0f8c72a47cb1bfaf76af0617481b5bbe4ea"}, 0x10f) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) setsockopt$sock_int(r2, 0x1, 0x50, &(0x7f0000000040)=0x6, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000000)="03020000008002ff", 0x8) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xffffffe0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, 0x8) (async) sendmmsg$inet6(r0, &(0x7f00000035c0), 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000001002abd7000ffdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0200890608000100e0000001"], 0x24}}, 0x0) (async) fstat(r4, 0x0) (async) write$binfmt_script(r4, &(0x7f0000000140)={'#! ', './file0', [{0x20, '{^\xb6\x93&:):'}, {0x20, '$%:7\']/.%/^\\^'}, {}, {0x20, '\'}!+()+--'}, {0x20, '\x8d]) }(:'}, {0x20, '#&$\xe0^!/'}, {0x20, '&-)'}, {0x20, '*!,-(*:!.'}], 0xa, "55bd6d7f5d6d74efbca682cbeaab0041765b4024384386a1d5982b3989d33b634f779dcf7655260bc01256e4b5de724f768a998aa09661124a7b54d77125092331bea1072ec6653e776a2caed0dd3b685987bd5e72654e0d636b654e332ba4f89bc8ee5da3d0e8c8315ea5b779ea0d9f46f9a030df7ee0521022be65fb23855ef2428199d3366128711d5c664db4e866f9c4d45c151106e62a6cf1d9bf5a39bc66dbd80ea15b1a03f96a9f41dbe73e2a8a2ba0f8c72a47cb1bfaf76af0617481b5bbe4ea"}, 0x10f) (async) 2.025529846s ago: executing program 5 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) 1.950395466s ago: executing program 0 (id=203): r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) iopl(0x3) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file2\x00', 0x80101, 0x125) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r3, 0x40046103, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8516030ab960985586c94e47ec8f59992e62c7d75d7074bd99bedf2d2ec2e9f3"}) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) lseek(r1, 0x1000, 0x3) 1.670311032s ago: executing program 3 (id=204): mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r0 = syz_io_uring_setup(0x4166, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x2, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 1.652153368s ago: executing program 0 (id=205): sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x454}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1180fc0b2f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0xa}, 0x0) 1.369897161s ago: executing program 0 (id=206): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet(0x2, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0xfe000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}, 0x0, 0x0, 0xd, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xb2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4c}]}, 0x54}}, 0x490) listen(r5, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r7, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 954.76034ms ago: executing program 2 (id=207): socket$inet6(0xa, 0x4, 0x8b) (async) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYBLOB="80471e8b674a66befacc6cc0141afce2f45e7e153a03a0f1722d01f2b622dcf1fc2731102bf04b071fc865aca9562ab11d71115638441e74693bdf51c990ca5f4ff773dab47720ea81495184727242f91674cae63c0f6453b8f020792a67e5919e037c29a7f31f29cc526879c4f0c7bc3e82dc32237bdb69e4593f2303efbb687df600749f365dc7fc96135dab7832ffe30a578794f13048ee91141f2591e24e0b82dede22081d790f402f7c5e022dd2ae", @ANYRES64=0x0], 0x20}, 0x1, 0x0, 0x0, 0x400a080}, 0xde8554f12feb401e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000900)="240000001e005f3814fffffffffffff80700000000000900000000000600000d101000b6", 0x24) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(r2, &(0x7f0000000280)='net/psched\x00') (async) ioctl$TIOCL_BLANKSCREEN(r7, 0x5609, &(0x7f0000000000)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r8 = socket$inet6(0xa, 0x80001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) (async) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x108) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r9, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="a65b000010000000a7a0000000000000010400002c83"]) 810.093207ms ago: executing program 5 (id=208): syz_usb_connect(0x0, 0x38, &(0x7f0000000040)=ANY=[@ANYBLOB="120110038121e940"], 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x3f, 0x172f, 0x38, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x80, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0xf2f}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc, 0xa, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x6, 0x3}}]}}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0}) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000007f000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 395.021036ms ago: executing program 0 (id=209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000001c0)=0x6000) 101.624225ms ago: executing program 2 (id=210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x8010aebc, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x4000}, {}, {0x0, 0xd000, 0x0, 0x0, 0x0, 0x2, 0xfe}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0xb000}, 0xddf8ffdb}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x100000000) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004020000fc0f00000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="40795d00000000000000000000000000000000000000000000000000dfea10"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x2, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) accept4(r10, 0x0, 0x0, 0x80800) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r12, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x7}) sendmsg$rds(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x4014}, 0x20000001) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 0s ago: executing program 0 (id=211): r0 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x2, 0x3, 0x9) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004780)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x370, r4, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x354, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xe8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1d2, 0x0, 0x8001, 0x100, 0x4, 0xfffb, 0x6b, 0xff]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x2}, {0x2, 0x7}, {0x6, 0x13}, {0x2, 0x1}, {0x3, 0xa}, {0x5, 0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x2}, {0x3, 0x4}, {0x5, 0x5}, {0x7, 0x6}, {0x7, 0x4}, {0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x5}, {0x1, 0x6}, {0x4, 0x1}, {0x2, 0x8}, {0x7, 0x8}, {0x0, 0x9}, {0x2, 0x6}, {0x0, 0x2}, {0x6, 0x3}, {0x4, 0xa}, {0x6, 0x7}, {0x7, 0x7}, {0x2, 0x2}, {0x3, 0x4}, {0x3, 0x1}, {0x5}, {0x7, 0x8}, {0x7, 0x5}, {0x7, 0x4}, {0x2, 0x6}, {0x2, 0x4}, {0x2, 0x6}, {0x0, 0x6}, {0x4, 0x5}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x2}, {0x3, 0x4}, {0x1, 0x5}, {0x6, 0x8}, {0x7, 0xa}, {0x0, 0x8}, {0x6, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x9}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x1}, {0x2, 0x6}, {0x5}, {0x2}, {0x0, 0x1}, {0x0, 0x7}, {0x7, 0x3}, {0x4, 0x3}, {0x4, 0x6}, {0x3, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x5, 0x9}, {0x1}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x6}, {0x2, 0x1}, {0x4, 0x8}, {0x7, 0x4}, {0x2, 0x5}, {0x6, 0x6}, {0x0, 0xa}, {0x7, 0x5}, {0x3, 0xa}, {0x2, 0x8}, {0x2, 0x6}, {0x2, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x9}, {0x3, 0x2}, {0x7, 0x7}, {0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x1, 0x3}, {0x1, 0x1}, {0x7, 0x4}, {0x5, 0x2}, {0x0, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x6}, {0x0, 0x9}, {0x4, 0x9}, {0x2, 0x5}, {0x0, 0x6}, {0x6, 0x2}, {0x3, 0x9}, {0x0, 0x1}, {0x5, 0x3}, {0x5, 0x2}, {0x3}, {0x3, 0x7}, {0x6, 0x9}, {0x5, 0x8}, {0x4, 0x4}, {0x3, 0x4}, {0x2, 0x3}, {0x0, 0x6}, {0x5, 0x8}, {0x5, 0x1}, {0x4, 0x3}, {0x1, 0xa}, {}, {0x6, 0x6}, {0x7, 0x4}, {}, {0x1, 0x5}, {0x7, 0xa}, {0x4, 0x6}, {}, {0x3, 0x5}, {0x2, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x4, 0x3}, {0x5, 0x8}, {0x2, 0x2}, {0x7, 0x9}, {0x1}, {0x1, 0x8}, {0x6, 0x9}, {0x2, 0x9}, {0x5, 0x5}, {0x3, 0x3}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x7}]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x3, 0x7}, {0x1, 0x5}, {0x3, 0x9}, {0x0, 0x6}, {0x1}, {0x6, 0x3}, {0x5, 0x5}, {0x3, 0x6}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x4, 0x9}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x6, 0x8, 0x4, 0x3, 0x2d95, 0x3, 0x4]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x2}, {0x4, 0x3}, {0x3, 0x9}, {0x1, 0xa}, {0x3, 0x4}, {0x5, 0x4}, {0x0, 0x5}, {0x6, 0x8}, {0x1, 0x7}, {0x4, 0xa}, {0x4, 0x8}, {0x3, 0x4}, {0x3, 0x5}, {0x6, 0xa}, {0x0, 0x7}, {0x5, 0x8}, {0x6, 0xa}, {0x7}, {0x1, 0x2}, {0x3, 0xa}]}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x3, 0xe3, 0x40, 0x3, 0x2, 0x5af]}}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x7, 0x1}, {0x6, 0x3}, {0x4, 0x7}, {0x7, 0x9}, {0x5, 0x9}, {0x4, 0xa}, {0x4, 0x8}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x1}, {}, {0x5, 0x7}, {0x1, 0x2}, {0x7, 0x4}, {0x2, 0x1}, {0x7, 0x2}, {0x4, 0x6}, {0x2, 0x7}, {0x0, 0x4}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0x2}, {0x1, 0xa}, {0x7, 0xa}, {0x3, 0x1}, {0x7, 0xa}, {0x5, 0x4}, {0x4, 0x9}, {0x5, 0x5}, {0x1, 0x9}, {0x4, 0x5}, {0x5, 0x8}, {0x7, 0x9}, {0x2}, {0x5, 0x2}, {0x0, 0x6}, {0x5, 0x6}, {0x1}, {0x1, 0x2}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0x8}, {0x4, 0x3}, {0x5, 0x9}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0xa}, {0x6, 0x8}, {0x2, 0xa}, {0x3, 0x6}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0xb, 0x60, 0x60, 0x5, 0x6c, 0x6, 0x5, 0x48, 0x4, 0x12, 0x1b, 0x1]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x3}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x6, 0x8}, {0x2}, {0x1, 0x5}, {0x3, 0x5}, {0x2, 0x5}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x2}, {0x4}, {0x6, 0x1}, {}, {0x4, 0x4}, {0x7, 0x1}, {0x6}, {0x1, 0x1}, {0x3, 0x9}, {0x2, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x6, 0x4}, {0x4}, {0x1, 0x5}, {0x1, 0x4}, {0x2, 0x8}, {0x4}, {0x2}, {0x7, 0x5}, {0x2, 0x5}, {0x7, 0x4}, {0x5, 0x6}, {0x4}, {0x7, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0x8}, {0x6, 0x9}, {0x7, 0x9}, {0x5, 0x3}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x2, 0x5a9c, 0x7ff, 0xa, 0xff69, 0x1, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x101, 0x0, 0x8, 0x7, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x6, 0x30, 0x6, 0xc, 0x1, 0x12, 0x6c, 0xfc4e6a666c17e468, 0x16, 0xc, 0x24, 0x9, 0x12, 0x30, 0x30, 0x1, 0xc, 0x1b, 0x5, 0x3, 0x6, 0xb, 0x2, 0x12, 0x3, 0x3, 0x3, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x5b20, 0x8, 0x2, 0x3e, 0x8001, 0x8, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x596e, 0x8, 0xd6, 0xcef, 0xb5, 0x8, 0x3355, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x59, 0xa, 0x0, 0x669c, 0x969, 0x100, 0x3, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0xfff7, 0x7f, 0x7, 0x9, 0x0, 0x7, 0x6000]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x7}, {0x7, 0x8}, {0x5, 0x8}, {0x3, 0x9}, {0x6, 0x1}, {0x3, 0xa}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x4}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x7}, {0x7, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0x9}, {0x3, 0x7}, {0x3, 0x9}, {0x3, 0x9}, {0x2, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x5, 0xcd5, 0x9, 0x0, 0x0, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xf05f, 0x1000, 0x5, 0x5b5, 0x3, 0x5, 0x5]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x5, 0x4, 0x24, 0x18, 0x9, 0x36, 0x4, 0x24, 0x60, 0x24, 0x3, 0x1b, 0x30, 0x48, 0x24, 0x4, 0x1, 0x62, 0x6, 0x76]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x8}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0x5}, {0x1, 0x4}, {}, {0x5, 0x9}, {0x6, 0x5}, {0x3, 0x2}, {0x5}, {0x2, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x370}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) socket$kcm(0x29, 0x5, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f00000001c0)=0x6000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. [ 50.896553][ T29] audit: type=1400 audit(1730260221.728:88): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.899875][ T5814] cgroup: Unknown subsys name 'net' [ 50.924536][ T29] audit: type=1400 audit(1730260221.728:89): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.946935][ T29] audit: type=1400 audit(1730260221.758:90): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 51.131601][ T5814] cgroup: Unknown subsys name 'cpuset' [ 51.138535][ T5814] cgroup: Unknown subsys name 'rlimit' [ 51.282634][ T29] audit: type=1400 audit(1730260222.118:91): avc: denied { setattr } for pid=5814 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 51.313062][ T29] audit: type=1400 audit(1730260222.118:92): avc: denied { create } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.333958][ T29] audit: type=1400 audit(1730260222.118:93): avc: denied { write } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.353058][ T5817] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 51.354324][ T29] audit: type=1400 audit(1730260222.118:94): avc: denied { read } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.383181][ T29] audit: type=1400 audit(1730260222.138:95): avc: denied { mounton } for pid=5814 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.408082][ T29] audit: type=1400 audit(1730260222.138:96): avc: denied { mount } for pid=5814 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.431393][ T29] audit: type=1400 audit(1730260222.138:97): avc: denied { read } for pid=5496 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 52.197845][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.835729][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.843274][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.851489][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.859861][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.867060][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.875136][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.883461][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.886886][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.891279][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.904816][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.904942][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.911999][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.919749][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.925662][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.934070][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.946603][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.947096][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.959858][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.961443][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.974638][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.975158][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.981676][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.988873][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.999771][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.009852][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.009927][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.017696][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.024204][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.031353][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.038235][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.047651][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 56.047661][ T29] audit: type=1400 audit(1730260226.878:107): avc: denied { read } for pid=5825 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.117509][ T29] audit: type=1400 audit(1730260226.888:108): avc: denied { open } for pid=5827 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.142131][ T29] audit: type=1400 audit(1730260226.898:109): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.282552][ T29] audit: type=1400 audit(1730260227.118:110): avc: denied { module_request } for pid=5825 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 56.344890][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 56.360321][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 56.427822][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 56.452566][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.459993][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.467162][ T5824] bridge_slave_0: entered allmulticast mode [ 56.473698][ T5824] bridge_slave_0: entered promiscuous mode [ 56.493674][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 56.502964][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.510288][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.517394][ T5824] bridge_slave_1: entered allmulticast mode [ 56.524379][ T5824] bridge_slave_1: entered promiscuous mode [ 56.582631][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.595597][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 56.612499][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.626784][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.633931][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.641099][ T5825] bridge_slave_0: entered allmulticast mode [ 56.647373][ T5825] bridge_slave_0: entered promiscuous mode [ 56.668048][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.675163][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.682765][ T5825] bridge_slave_1: entered allmulticast mode [ 56.689057][ T5825] bridge_slave_1: entered promiscuous mode [ 56.714517][ T5824] team0: Port device team_slave_0 added [ 56.721892][ T5824] team0: Port device team_slave_1 added [ 56.754465][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.762054][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.769170][ T5826] bridge_slave_0: entered allmulticast mode [ 56.775780][ T5826] bridge_slave_0: entered promiscuous mode [ 56.783054][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.790115][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.797178][ T5826] bridge_slave_1: entered allmulticast mode [ 56.804138][ T5826] bridge_slave_1: entered promiscuous mode [ 56.821842][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.832610][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.855479][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.863098][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.870252][ T5827] bridge_slave_0: entered allmulticast mode [ 56.876918][ T5827] bridge_slave_0: entered promiscuous mode [ 56.883682][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.890778][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.916834][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.938832][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.945933][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.953330][ T5836] bridge_slave_0: entered allmulticast mode [ 56.959921][ T5836] bridge_slave_0: entered promiscuous mode [ 56.970475][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.977522][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.984962][ T5827] bridge_slave_1: entered allmulticast mode [ 56.991776][ T5827] bridge_slave_1: entered promiscuous mode [ 56.998198][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.005414][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.031401][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.044597][ T5825] team0: Port device team_slave_0 added [ 57.050784][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.058200][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.065441][ T5836] bridge_slave_1: entered allmulticast mode [ 57.071810][ T5836] bridge_slave_1: entered promiscuous mode [ 57.078971][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.089978][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.112141][ T5825] team0: Port device team_slave_1 added [ 57.139496][ T5824] hsr_slave_0: entered promiscuous mode [ 57.145546][ T5824] hsr_slave_1: entered promiscuous mode [ 57.163477][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.177433][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.187850][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.203232][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.210392][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.236443][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.248922][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.264205][ T5826] team0: Port device team_slave_0 added [ 57.281720][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.288652][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.314613][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.331620][ T5826] team0: Port device team_slave_1 added [ 57.338680][ T5836] team0: Port device team_slave_0 added [ 57.365417][ T5836] team0: Port device team_slave_1 added [ 57.377690][ T5827] team0: Port device team_slave_0 added [ 57.387036][ T5827] team0: Port device team_slave_1 added [ 57.397363][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.406536][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.433170][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.456687][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.463797][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.492162][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.524747][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.531750][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.557944][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.572557][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.579528][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.605669][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.617093][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.624124][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.650138][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.662141][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.669076][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.694988][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.713318][ T5825] hsr_slave_0: entered promiscuous mode [ 57.719172][ T5825] hsr_slave_1: entered promiscuous mode [ 57.725222][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.733111][ T5825] Cannot create hsr debugfs directory [ 57.768533][ T5826] hsr_slave_0: entered promiscuous mode [ 57.776408][ T5826] hsr_slave_1: entered promiscuous mode [ 57.782391][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.790282][ T5826] Cannot create hsr debugfs directory [ 57.833615][ T5827] hsr_slave_0: entered promiscuous mode [ 57.839651][ T5827] hsr_slave_1: entered promiscuous mode [ 57.845455][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.853232][ T5827] Cannot create hsr debugfs directory [ 57.868200][ T5836] hsr_slave_0: entered promiscuous mode [ 57.876135][ T5836] hsr_slave_1: entered promiscuous mode [ 57.882159][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.889912][ T5836] Cannot create hsr debugfs directory [ 58.053681][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.063180][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.075091][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.085021][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.118973][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.125950][ T54] Bluetooth: hci4: command tx timeout [ 58.126077][ T54] Bluetooth: hci1: command tx timeout [ 58.131540][ T5145] Bluetooth: hci3: command tx timeout [ 58.137070][ T54] Bluetooth: hci0: command tx timeout [ 58.142435][ T5145] Bluetooth: hci2: command tx timeout [ 58.155533][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.164567][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.179442][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.211826][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.230583][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.247515][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.255952][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.299037][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.307710][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.340924][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.349157][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.394929][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.415201][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.424608][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.444673][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.455895][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.466212][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.476423][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.496401][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.507164][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.515140][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.522235][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.547683][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.554744][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.563902][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.570958][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.593654][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.602309][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.609399][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.629974][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.637031][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.656408][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.663481][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.677058][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.699245][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.711309][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.728610][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.793925][ T5836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.805439][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.816899][ T29] audit: type=1400 audit(1730260229.648:111): avc: denied { sys_module } for pid=5824 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.820624][ T3721] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.845103][ T3721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.860603][ T3721] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.867667][ T3721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.929043][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.981598][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.014114][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.036516][ T978] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.043578][ T978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.057458][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.077829][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.084901][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.185785][ T5826] veth0_vlan: entered promiscuous mode [ 59.208398][ T5826] veth1_vlan: entered promiscuous mode [ 59.215846][ T5824] veth0_vlan: entered promiscuous mode [ 59.232798][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.249077][ T5824] veth1_vlan: entered promiscuous mode [ 59.260458][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.293982][ T5826] veth0_macvtap: entered promiscuous mode [ 59.326422][ T5836] veth0_vlan: entered promiscuous mode [ 59.341302][ T5826] veth1_macvtap: entered promiscuous mode [ 59.354580][ T5836] veth1_vlan: entered promiscuous mode [ 59.376824][ T5824] veth0_macvtap: entered promiscuous mode [ 59.394672][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.404554][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.415425][ T5824] veth1_macvtap: entered promiscuous mode [ 59.435054][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.446667][ T5825] veth0_vlan: entered promiscuous mode [ 59.454851][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.464228][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.473144][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.482194][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.507954][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.525025][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.535832][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.547932][ T5825] veth1_vlan: entered promiscuous mode [ 59.568359][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.579698][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.590669][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.600445][ T5836] veth0_macvtap: entered promiscuous mode [ 59.608391][ T5836] veth1_macvtap: entered promiscuous mode [ 59.633028][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.644894][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.654774][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.663597][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.682883][ T5825] veth0_macvtap: entered promiscuous mode [ 59.716603][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.728476][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.738447][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.748898][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.760482][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.768043][ T5825] veth1_macvtap: entered promiscuous mode [ 59.796066][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.810472][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.820368][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.830983][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.841859][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.865915][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.868294][ T5827] veth0_vlan: entered promiscuous mode [ 59.881428][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.896120][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.907898][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.917771][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.928264][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.938470][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.949023][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.959674][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.977557][ T3721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.980302][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.997019][ T3721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.005746][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.015744][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.027015][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.037090][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.048243][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.058941][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.072262][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.081794][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.092088][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.100950][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.116252][ T5827] veth1_vlan: entered promiscuous mode [ 60.135065][ T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.148200][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.157260][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.159662][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.166310][ T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.174516][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.189261][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.198408][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.207357][ T5145] Bluetooth: hci2: command tx timeout [ 60.209773][ T5145] Bluetooth: hci0: command tx timeout [ 60.213136][ T5841] Bluetooth: hci3: command tx timeout [ 60.218361][ T5834] Bluetooth: hci4: command tx timeout [ 60.231401][ T54] Bluetooth: hci1: command tx timeout [ 60.253228][ T29] audit: type=1400 audit(1730260231.088:112): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.lekCGs/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 60.255522][ T5827] veth0_macvtap: entered promiscuous mode [ 60.290273][ T29] audit: type=1400 audit(1730260231.108:113): avc: denied { mount } for pid=5824 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.312407][ T29] audit: type=1400 audit(1730260231.108:114): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.lekCGs/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.339123][ T29] audit: type=1400 audit(1730260231.108:115): avc: denied { mount } for pid=5826 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 60.362860][ T29] audit: type=1400 audit(1730260231.118:116): avc: denied { mounton } for pid=5826 comm="syz-executor" path="/root/syzkaller.lekCGs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.412494][ T5827] veth1_macvtap: entered promiscuous mode [ 60.428769][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.434580][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.439662][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.465302][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.475786][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.485715][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.496158][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.506166][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.516781][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.528168][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.543104][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.553827][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.566913][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.577686][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.589236][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.600628][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.610669][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.623919][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.636909][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.653134][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.665224][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.674881][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.688364][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.795193][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.803454][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.970904][ T5913] loop2: detected capacity change from 0 to 7 [ 61.538196][ T5913] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 61.543603][ T5913] loop2: partition table partially beyond EOD, truncated [ 61.551238][ T5913] loop2: p1 size 6333 extends beyond EOD, truncated [ 61.582255][ T5915] loop2: detected capacity change from 0 to 7 [ 61.589246][ T5915] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 61.594658][ T5915] loop2: partition table partially beyond EOD, truncated [ 61.601810][ T5915] loop2: p1 size 6333 extends beyond EOD, truncated [ 61.718927][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.726861][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.730926][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.742513][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.750702][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.758574][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.855027][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.866213][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.908531][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 61.908542][ T29] audit: type=1400 audit(1730260232.738:128): avc: denied { create } for pid=5923 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.935713][ T5924] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.970986][ T29] audit: type=1400 audit(1730260232.768:129): avc: denied { create } for pid=5923 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.984221][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 62.030305][ T29] audit: type=1400 audit(1730260232.798:130): avc: denied { mounton } for pid=5827 comm="syz-executor" path="/root/syzkaller.fTmadg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.036367][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.102207][ T5931] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 62.105491][ T29] audit: type=1400 audit(1730260232.848:131): avc: denied { create } for pid=5923 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.131151][ T5931] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 62.142091][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.197081][ T5938] overlayfs: failed to resolve './file1': -2 [ 62.210319][ T29] audit: type=1400 audit(1730260232.848:132): avc: denied { ioctl } for pid=5923 comm="syz.0.8" path="socket:[8333]" dev="sockfs" ino=8333 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.237434][ T29] audit: type=1400 audit(1730260232.918:133): avc: denied { prog_load } for pid=5920 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.257402][ T29] audit: type=1400 audit(1730260232.918:134): avc: denied { bpf } for pid=5920 comm="syz.2.7" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.284386][ T29] audit: type=1400 audit(1730260232.918:135): avc: denied { perfmon } for pid=5920 comm="syz.2.7" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.300001][ T5145] Bluetooth: hci3: command tx timeout [ 62.312154][ T5145] Bluetooth: hci0: command tx timeout [ 62.316504][ T5834] Bluetooth: hci4: command tx timeout [ 62.317984][ T5145] Bluetooth: hci1: command tx timeout [ 62.324672][ T5834] Bluetooth: hci2: command tx timeout [ 62.332655][ T29] audit: type=1400 audit(1730260232.918:136): avc: denied { prog_run } for pid=5920 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 62.360034][ T5878] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.376383][ T29] audit: type=1400 audit(1730260232.918:137): avc: denied { read } for pid=5920 comm="syz.2.7" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 62.409556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.418352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.426741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.478116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 62.519627][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 62.533106][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.569438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.569524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.578580][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 62.606122][ T5878] usb 5-1: New USB device found, idVendor=045e, idProduct=00b4, bcdDevice= 0.00 [ 62.622070][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.682941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 62.759485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 62.785346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 62.892524][ T5878] usb 5-1: config 0 descriptor?? [ 62.911639][ T5933] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 62.920098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.080260][ T1221] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.190844][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.205788][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.230129][ T5933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.254598][ T5933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.891629][ T1221] usb 2-1: Using ep0 maxpacket: 16 [ 63.904227][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.353901][ T1221] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.364248][ T54] Bluetooth: hci1: command tx timeout [ 64.364281][ T54] Bluetooth: hci4: command tx timeout [ 64.369908][ T1221] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.378663][ T1221] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.394327][ T5834] Bluetooth: hci0: command tx timeout [ 64.397142][ T54] Bluetooth: hci3: command tx timeout [ 64.399739][ T5834] Bluetooth: hci2: command tx timeout [ 64.399785][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.408461][ T5955] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.410500][ T1221] usb 2-1: Product: syz [ 64.428990][ T1221] usb 2-1: Manufacturer: syz [ 64.434036][ T1221] usb 2-1: SerialNumber: syz [ 64.443870][ T5955] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 64.523578][ T5955] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.543024][ T5955] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 64.557600][ T5955] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.563764][ T5955] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 64.571924][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.582776][ T8] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 64.592140][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.602682][ T5955] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.603001][ T8] usb 1-1: config 0 descriptor?? [ 64.622808][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 64.625394][ T5955] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 64.661633][ T5955] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 64.667585][ T5955] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 64.691296][ T5940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.712167][ T5940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.728717][ T1221] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 64.826801][ T1221] usb 2-1: USB disconnect, device number 2 [ 64.839613][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.900774][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 65.024045][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.038415][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 65.046974][ T25] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 65.065660][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 65.066620][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.079122][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 65.115467][ T25] usb 3-1: config 0 descriptor?? [ 65.131671][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 65.155232][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 65.155703][ T5949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.177333][ T5949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.195493][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 65.204949][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 65.417170][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 65.426383][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 65.442113][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 65.452621][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 65.459406][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 65.466257][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 65.496788][ T5878] usb 5-1: string descriptor 0 read error: -71 [ 65.527962][ T5878] usbhid 5-1:0.0: can't add hid device: -71 [ 65.546976][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.556896][ T5878] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 65.559484][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 65.596350][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.604957][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 65.621812][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 65.644196][ T8] pwc: Registered as video103. [ 65.651651][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 65.669430][ T5878] usb 5-1: USB disconnect, device number 2 [ 65.704397][ T8] usb 1-1: USB disconnect, device number 2 [ 65.812485][ T25] pwc: recv_control_msg error -71 req 02 val 2700 [ 65.822135][ T25] pwc: recv_control_msg error -71 req 02 val 2c00 [ 65.839347][ T25] pwc: recv_control_msg error -71 req 04 val 1000 [ 65.864222][ T25] pwc: recv_control_msg error -71 req 04 val 1300 [ 65.883130][ T25] pwc: recv_control_msg error -71 req 04 val 1400 [ 65.901667][ T25] pwc: recv_control_msg error -71 req 02 val 2000 [ 65.902473][ T6021] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 65.910535][ T25] pwc: recv_control_msg error -71 req 02 val 2100 [ 65.938454][ T6021] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 65.945111][ T25] pwc: recv_control_msg error -71 req 04 val 1500 [ 65.965485][ T25] pwc: recv_control_msg error -71 req 02 val 2500 [ 65.979863][ T25] pwc: recv_control_msg error -71 req 02 val 2400 [ 66.018208][ T25] pwc: recv_control_msg error -71 req 02 val 2600 [ 66.056537][ T25] pwc: recv_control_msg error -71 req 02 val 2900 [ 66.073128][ T25] pwc: recv_control_msg error -71 req 02 val 2800 [ 66.106436][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 66.109386][ T1221] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 66.121595][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 66.139113][ T25] pwc: Registered as video103. [ 66.151746][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 66.221233][ T25] usb 3-1: USB disconnect, device number 2 [ 66.284286][ T1221] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 66.299787][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.323834][ T1221] usb 4-1: Product: syz [ 66.335120][ T1221] usb 4-1: Manufacturer: syz [ 66.344886][ T1221] usb 4-1: SerialNumber: syz [ 66.380535][ T1221] usb 4-1: config 0 descriptor?? [ 66.397098][ T1221] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 002 [ 66.409423][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.574344][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 66.584229][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.610984][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 66.622610][ T3721] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.653035][ T8] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 66.662468][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.678088][ T8] usb 1-1: Product: syz [ 66.687980][ T8] usb 1-1: Manufacturer: syz [ 66.698092][ T8] usb 1-1: SerialNumber: syz [ 66.740271][ T8] usb 1-1: config 0 descriptor?? [ 67.050804][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 67.050836][ T29] audit: type=1400 audit(1730260237.738:201): avc: denied { create } for pid=6043 comm="syz.2.24" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.199620][ T3721] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.244324][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.372641][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.431235][ T29] audit: type=1400 audit(1730260237.738:202): avc: denied { map } for pid=6043 comm="syz.2.24" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.457563][ T29] audit: type=1400 audit(1730260237.738:203): avc: denied { read write } for pid=6043 comm="syz.2.24" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.512128][ T8] usb 1-1: USB disconnect, device number 3 [ 67.615013][ T6060] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET) [ 67.629158][ T29] audit: type=1400 audit(1730260238.458:204): avc: denied { setopt } for pid=6059 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.662335][ T6060] block nbd2: Unsupported socket: shutdown callout must be supported. [ 67.691122][ T3721] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.710660][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.743220][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.752259][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.766798][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.768897][ T6067] netlink: 'syz.1.27': attribute type 11 has an invalid length. [ 67.774556][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.781831][ T6067] netlink: 203156 bytes leftover after parsing attributes in process `syz.1.27'. [ 67.789685][ T6068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6068 comm=syz.2.26 [ 67.811321][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26'. [ 67.820606][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.835307][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.850637][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.861891][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.863988][ T29] audit: type=1400 audit(1730260238.688:205): avc: denied { read } for pid=6070 comm="syz.1.28" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 67.895139][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.897754][ T29] audit: type=1400 audit(1730260238.688:206): avc: denied { open } for pid=6070 comm="syz.1.28" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 67.917942][ T5145] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.925633][ T29] audit: type=1400 audit(1730260238.688:207): avc: denied { ioctl } for pid=6070 comm="syz.1.28" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 67.942246][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.966413][ T29] audit: type=1400 audit(1730260238.798:208): avc: denied { ioctl } for pid=6070 comm="syz.1.28" path="socket:[8683]" dev="sockfs" ino=8683 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.993152][ T29] audit: type=1400 audit(1730260238.818:209): avc: denied { mounton } for pid=6061 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 68.021813][ T3721] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.190456][ T29] audit: type=1400 audit(1730260239.028:210): avc: denied { read append } for pid=6086 comm="syz.1.30" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 68.221160][ T6088] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 68.286807][ T6083] /dev/sg0: Can't lookup blockdev [ 68.412766][ T6061] chnl_net:caif_netlink_parms(): no params data found [ 68.447350][ T1221] (null): failure setting delay to 10us [ 68.462305][ T1221] i2c-tiny-usb 4-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 68.484073][ T6103] overlayfs: missing 'lowerdir' [ 68.577558][ T3721] bridge_slave_1: left allmulticast mode [ 68.584801][ T3721] bridge_slave_1: left promiscuous mode [ 68.596070][ T3721] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.599370][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 68.623394][ T3721] bridge_slave_0: left allmulticast mode [ 68.629159][ T3721] bridge_slave_0: left promiscuous mode [ 68.635201][ T3721] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.790766][ T1221] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.799415][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 68.806316][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.816409][ T6112] usb 4-1: USB disconnect, device number 2 [ 68.822877][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.849505][ T5879] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 68.863519][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.876634][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.900857][ T3721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.923702][ T25] usb 1-1: config 0 descriptor?? [ 68.946121][ T3721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.952067][ T25] hub 1-1:0.0: USB hub found [ 68.963427][ T3721] bond0 (unregistering): Released all slaves [ 68.974189][ T1221] usb 3-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82 [ 68.984458][ T6120] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 68.991476][ T6120] PKCS7: Only support pkcs7_signedData type [ 68.998255][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.009365][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 69.030903][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.049429][ T1221] usb 3-1: Product: syz [ 69.051319][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.059556][ T1221] usb 3-1: Manufacturer: syz [ 69.065190][ T1221] usb 3-1: SerialNumber: syz [ 69.069916][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.077863][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.092234][ T6061] bridge_slave_0: entered allmulticast mode [ 69.102504][ T6061] bridge_slave_0: entered promiscuous mode [ 69.110176][ T1221] usb 3-1: config 0 descriptor?? [ 69.115235][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 69.131454][ T1221] smsc75xx v1.0.0 [ 69.135103][ T1221] smsc75xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 69.142596][ T25] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 69.150433][ T5879] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 69.180686][ T1221] smsc75xx 3-1:0.0: probe with driver smsc75xx failed with error -22 [ 69.188868][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.220716][ T5879] usb 2-1: config 0 descriptor?? [ 69.229764][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.247160][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.264368][ T6061] bridge_slave_1: entered allmulticast mode [ 69.273827][ T6061] bridge_slave_1: entered promiscuous mode [ 69.311045][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 69.317424][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 69.341475][ T8] usb 3-1: USB disconnect, device number 3 [ 69.343304][ T25] usb 1-1: USB disconnect, device number 4 [ 70.040652][ T5145] Bluetooth: hci2: command tx timeout [ 70.053594][ T6128] netlink: 'syz.0.37': attribute type 11 has an invalid length. [ 70.076925][ T6061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.103475][ T5879] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input7 [ 70.116667][ T6128] netlink: 203156 bytes leftover after parsing attributes in process `syz.0.37'. [ 70.132861][ T6061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.169237][ T3721] hsr_slave_0: left promiscuous mode [ 70.229529][ T3721] hsr_slave_1: left promiscuous mode [ 70.237510][ T5879] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 70.282353][ T3721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.327021][ T3721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.499073][ T6111] process 'syz.1.33' launched './file0' with NULL argv: empty string added [ 70.505970][ T3721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.516740][ T3721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.577811][ T3721] veth1_macvtap: left promiscuous mode [ 70.604643][ T3721] veth0_macvtap: left promiscuous mode [ 70.636181][ T3721] veth1_vlan: left promiscuous mode [ 70.636389][ T3721] veth0_vlan: left promiscuous mode [ 70.960005][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.966648][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.409592][ T5879] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 71.738286][ T6150] overlayfs: missing 'lowerdir' [ 72.153771][ T6154] loop2: detected capacity change from 0 to 7 [ 72.190706][ T6154] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 72.196035][ T6154] loop2: partition table partially beyond EOD, truncated [ 72.205111][ T6154] loop2: p1 size 6333 extends beyond EOD, truncated [ 72.212818][ T5145] Bluetooth: hci2: command tx timeout [ 72.520396][ T3721] team0 (unregistering): Port device team_slave_1 removed [ 72.541020][ T3721] team0 (unregistering): Port device team_slave_0 removed [ 72.980403][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 72.980417][ T29] audit: type=1400 audit(1730260243.818:232): avc: denied { ioctl } for pid=6155 comm="syz.3.44" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.013814][ T29] audit: type=1400 audit(1730260243.848:233): avc: denied { create } for pid=6159 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 73.032908][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.887651][ T29] audit: type=1400 audit(1730260244.148:234): avc: denied { write } for pid=6159 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.187147][ T6061] team0: Port device team_slave_0 added [ 74.700330][ T54] Bluetooth: hci2: command tx timeout [ 74.720132][ T6061] team0: Port device team_slave_1 added [ 74.785099][ T29] audit: type=1400 audit(1730260245.618:235): avc: denied { bind } for pid=6178 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.814370][ T29] audit: type=1400 audit(1730260245.638:236): avc: denied { listen } for pid=6178 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.834119][ T29] audit: type=1400 audit(1730260245.638:237): avc: denied { watch } for pid=6178 comm="syz.2.48" path="/10/blkio.bfq.time_recursive" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.871626][ T29] audit: type=1400 audit(1730260245.638:238): avc: denied { watch_sb } for pid=6178 comm="syz.2.48" path="/10/blkio.bfq.time_recursive" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.895860][ T29] audit: type=1400 audit(1730260245.648:239): avc: denied { accept } for pid=6178 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.915545][ T29] audit: type=1400 audit(1730260245.688:240): avc: denied { read } for pid=6175 comm="syz.0.47" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 74.939008][ T29] audit: type=1400 audit(1730260245.688:241): avc: denied { open } for pid=6175 comm="syz.0.47" path="/dev/usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.030469][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.047570][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.097476][ T6061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.116333][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.125437][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.151335][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.159969][ T6061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.209562][ T5880] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 75.237322][ T6061] hsr_slave_0: entered promiscuous mode [ 75.333942][ T6061] hsr_slave_1: entered promiscuous mode [ 75.344415][ T6061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.356820][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.365060][ T6061] Cannot create hsr debugfs directory [ 75.664849][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 75.680543][ T1221] usb 2-1: USB disconnect, device number 3 [ 75.750099][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.929335][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 75.935925][ T25] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 75.936935][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.943260][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 75.943288][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 75.953359][ T5880] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 75.984196][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.984517][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.017566][ T5880] usb 1-1: config 0 descriptor?? [ 76.025784][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 76.047211][ T9] cfg80211: failed to load regulatory.db [ 76.090643][ T25] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 76.100503][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.108497][ T25] usb 4-1: Product: syz [ 76.153793][ T6215] IPv6: Can't replace route, no match found [ 76.163805][ T25] usb 4-1: Manufacturer: syz [ 76.168411][ T25] usb 4-1: SerialNumber: syz [ 76.237023][ T25] usb 4-1: config 0 descriptor?? [ 76.246171][ T6061] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.262398][ T6192] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 76.367955][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 76.475843][ T25] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 76.481856][ T6061] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 76.494474][ T6061] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 76.499968][ T6192] Zero length message leads to an empty skb [ 76.507123][ T25] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 76.508908][ T6061] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 76.573233][ T6233] loop2: detected capacity change from 0 to 7 [ 76.583673][ T6233] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 76.588972][ T6233] loop2: partition table partially beyond EOD, truncated [ 76.597928][ T6233] loop2: p1 size 6333 extends beyond EOD, truncated [ 76.761839][ T54] Bluetooth: hci2: command 0x0419 tx timeout [ 76.769115][ T25] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90 [ 76.792688][ T5880] usb 1-1: string descriptor 0 read error: -71 [ 76.799554][ T5880] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 76.801464][ T5202] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 76.808326][ T5880] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 76.822630][ T5880] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 76.841505][ T25] usb 4-1: USB disconnect, device number 3 [ 76.852544][ T5880] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 76.853819][ T5202] loop2: partition table partially beyond EOD, truncated [ 76.872387][ T6061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.886006][ T5202] loop2: p1 size 6333 extends beyond EOD, truncated [ 76.888738][ T5880] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 76.913926][ T5880] usb 1-1: USB disconnect, device number 5 [ 76.944352][ T6061] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.968772][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.975902][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.036553][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.043675][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.069782][ T6061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.818456][ T6061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.084364][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 78.084381][ T29] audit: type=1400 audit(1730260248.918:245): avc: denied { read } for pid=6278 comm="syz.1.61" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.146852][ T6282] binder: BINDER_SET_CONTEXT_MGR already set [ 78.156873][ T6282] binder: 6278:6282 ioctl 4018620d 200001c0 returned -16 [ 78.245157][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 78.560378][ T29] audit: type=1400 audit(1730260248.918:246): avc: denied { open } for pid=6278 comm="syz.1.61" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.629447][ T29] audit: type=1400 audit(1730260248.958:247): avc: denied { ioctl } for pid=6278 comm="syz.1.61" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.654627][ T29] audit: type=1400 audit(1730260248.958:248): avc: denied { set_context_mgr } for pid=6278 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 78.674271][ T29] audit: type=1400 audit(1730260248.978:249): avc: denied { map } for pid=6278 comm="syz.1.61" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.708864][ T29] audit: type=1400 audit(1730260249.058:250): avc: denied { write } for pid=6272 comm="syz.0.60" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 78.791895][ T6061] veth0_vlan: entered promiscuous mode [ 78.829709][ T29] audit: type=1400 audit(1730260249.228:251): avc: denied { write } for pid=6278 comm="syz.1.61" path="socket:[10323]" dev="sockfs" ino=10323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 78.831792][ T6061] veth1_vlan: entered promiscuous mode [ 78.853826][ T29] audit: type=1400 audit(1730260249.228:252): avc: denied { nlmsg_read } for pid=6278 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 78.879917][ T29] audit: type=1400 audit(1730260249.488:253): avc: denied { mount } for pid=6278 comm="syz.1.61" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.926155][ T54] Bluetooth: hci2: command 0x0419 tx timeout [ 78.948158][ T6061] veth0_macvtap: entered promiscuous mode [ 79.089653][ T6061] veth1_macvtap: entered promiscuous mode [ 79.102198][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.112670][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.122527][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.133780][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.143658][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.154119][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.164381][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.174810][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.185648][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.194831][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.205278][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.215565][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.226226][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.236074][ T29] audit: type=1400 audit(1730260249.858:254): avc: denied { read } for pid=6293 comm="syz.3.62" name="ppp" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 79.264250][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.279565][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.289467][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.299899][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.310736][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.327884][ T6061] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.339674][ T6061] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.348489][ T6061] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.358059][ T6061] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.528724][ T6305] No control pipe specified [ 79.773209][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.844637][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.989367][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 80.018200][ T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.045789][ T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.295683][ T6319] loop2: detected capacity change from 0 to 7 [ 80.503106][ T6319] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 80.508453][ T6319] loop2: partition table partially beyond EOD, truncated [ 80.515874][ T6319] loop2: p1 size 6333 extends beyond EOD, truncated [ 80.530845][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.562626][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 80.581137][ T5202] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 80.586515][ T5202] loop2: partition table partially beyond EOD, truncated [ 80.598123][ T5202] loop2: p1 size 6333 extends beyond EOD, truncated [ 80.620061][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.629770][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.663913][ T6297] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.686635][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.925526][ T6341] overlay: ./file0 is not a directory [ 82.860051][ T5946] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 83.070927][ T5946] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 83.085348][ T5946] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.223465][ T5946] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.332027][ T5946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 83.369908][ T5878] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 83.387368][ T5946] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.446261][ T5925] usb 1-1: USB disconnect, device number 6 [ 83.524990][ T5946] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.638843][ T5878] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 83.652460][ T5878] usb 2-1: config 8 has no interface number 0 [ 83.658591][ T5878] usb 2-1: config 8 interface 177 has no altsetting 0 [ 83.665595][ T5946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 83.670925][ T6380] netlink: 'syz.0.75': attribute type 5 has an invalid length. [ 83.672533][ T5878] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 83.689154][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.718209][ T5946] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.730551][ T6382] 9pnet_fd: Insufficient options for proto=fd [ 83.750831][ T5946] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 83.777463][ T5946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 83.832284][ T5946] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 83.842109][ T5946] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 84.410599][ T5878] usb 2-1: string descriptor 0 read error: -71 [ 84.417937][ T5878] ir_toy 2-1:8.177: required endpoints not found [ 84.442713][ T5946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 84.461825][ T5878] usb 2-1: USB disconnect, device number 4 [ 84.489136][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 84.497584][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 84.505030][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 84.512485][ T5946] usb 4-1: unable to read config index 4 descriptor/start: -32 [ 84.520178][ T5946] usb 4-1: chopping to 4 config(s) [ 84.525486][ T5946] usb 4-1: can't read configurations, error -32 [ 84.547823][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 84.547838][ T29] audit: type=1400 audit(1730260255.378:268): avc: denied { getopt } for pid=6388 comm="syz.2.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.633854][ T29] audit: type=1400 audit(1730260255.438:269): avc: denied { create } for pid=6398 comm="syz.5.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.671796][ T29] audit: type=1400 audit(1730260255.438:270): avc: denied { write } for pid=6398 comm="syz.5.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 84.726198][ T6411] overlayfs: failed to resolve './file0': -2 [ 84.757521][ T29] audit: type=1400 audit(1730260255.488:271): avc: denied { create } for pid=6401 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.761468][ T5878] hid-generic 0000:FFFFFFFE:0000.0003: unknown main item tag 0x0 [ 84.800413][ T5878] hid-generic 0000:FFFFFFFE:0000.0003: unknown main item tag 0x0 [ 84.816108][ T5878] hid-generic 0000:FFFFFFFE:0000.0003: unknown main item tag 0x0 [ 84.836782][ T6417] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.82'. [ 84.853982][ T29] audit: type=1400 audit(1730260255.498:272): avc: denied { bind } for pid=6401 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.969528][ T5878] hid-generic 0000:FFFFFFFE:0000.0003: unknown main item tag 0x0 [ 84.973600][ T29] audit: type=1400 audit(1730260255.498:273): avc: denied { name_bind } for pid=6401 comm="syz.3.81" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 84.978052][ T5878] hid-generic 0000:FFFFFFFE:0000.0003: unknown main item tag 0x0 [ 85.006143][ T5878] hid-generic 0000:FFFFFFFE:0000.0003: unknown main item tag 0x0 [ 85.014619][ T5878] hid-generic 0000:FFFFFFFE:0000.0003: unknown main item tag 0x0 [ 85.022600][ T5878] hid-generic 0000:FFFFFFFE:0000.0003: unknown main item tag 0x0 [ 85.030738][ T5878] hid-generic 0000:FFFFFFFE:0000.0003: unknown main item tag 0x0 [ 85.039616][ T5878] hid-generic 0000:FFFFFFFE:0000.0003: unknown main item tag 0x0 [ 85.051942][ T6411] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 85.065496][ T5878] hid-generic 0000:FFFFFFFE:0000.0003: hidraw0: HID v0.08 Device [syz0] on syz0 [ 85.432488][ T29] audit: type=1400 audit(1730260255.498:274): avc: denied { node_bind } for pid=6401 comm="syz.3.81" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 85.480211][ T29] audit: type=1400 audit(1730260255.578:275): avc: denied { read write } for pid=6402 comm="syz.0.79" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 85.503776][ T29] audit: type=1400 audit(1730260255.578:276): avc: denied { open } for pid=6402 comm="syz.0.79" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 85.527072][ T29] audit: type=1400 audit(1730260255.588:277): avc: denied { create } for pid=6402 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.681036][ T6442] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.708044][ T6442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.88'. [ 85.786283][ T6443] overlayfs: missing 'workdir' [ 87.562432][ T6469] ALSA: mixer_oss: invalid OSS volume 'E' [ 88.956260][ T6488] kvm: pic: non byte read [ 88.960964][ T6488] kvm: pic: non byte read [ 88.965439][ T6488] kvm: pic: non byte read [ 88.970040][ T6488] kvm: pic: non byte read [ 88.974539][ T6488] kvm: pic: non byte read [ 88.979070][ T6488] kvm: pic: single mode not supported [ 88.979138][ T6488] kvm: pic: level sensitive irq not supported [ 88.984709][ T6488] kvm: pic: non byte read [ 88.995880][ T6488] kvm: pic: non byte read [ 89.000429][ T6488] kvm: pic: non byte read [ 89.004901][ T6488] kvm: pic: non byte read [ 89.009528][ T6488] kvm: pic: level sensitive irq not supported [ 89.009565][ T6488] kvm: pic: non byte read [ 89.151225][ T6497] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.98'. [ 89.170153][ T6498] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.98'. [ 89.189522][ T6497] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 89.197884][ T6498] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 89.971231][ T6491] bond0: entered promiscuous mode [ 89.976289][ T6491] bond_slave_0: entered promiscuous mode [ 90.029501][ T6491] bond_slave_1: entered promiscuous mode [ 90.455981][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 90.455998][ T29] audit: type=1326 audit(1730260261.288:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6467 comm="syz.3.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517c57e719 code=0x7fc00000 [ 90.520008][ T29] audit: type=1400 audit(1730260261.328:305): avc: denied { read } for pid=6506 comm="syz.2.99" name="sg0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.543311][ T29] audit: type=1400 audit(1730260261.338:306): avc: denied { read write } for pid=6506 comm="syz.2.99" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 90.597647][ T29] audit: type=1400 audit(1730260261.338:307): avc: denied { open } for pid=6506 comm="syz.2.99" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 90.713359][ T29] audit: type=1400 audit(1730260261.378:308): avc: denied { getopt } for pid=6505 comm="syz.5.101" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.734490][ T5946] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 90.822395][ T29] audit: type=1400 audit(1730260261.378:309): avc: denied { ioctl } for pid=6505 comm="syz.5.101" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10839 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 90.879384][ T29] audit: type=1400 audit(1730260261.548:310): avc: denied { ioctl } for pid=6506 comm="syz.2.99" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 91.147461][ T6530] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.102'. [ 91.565041][ T29] audit: type=1400 audit(1730260262.398:311): avc: denied { create } for pid=6531 comm="syz.5.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 91.640368][ T5946] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.650823][ T5946] usb 1-1: not running at top speed; connect to a high speed hub [ 91.709681][ T29] audit: type=1400 audit(1730260262.438:312): avc: denied { getopt } for pid=6531 comm="syz.5.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 91.739702][ T5946] usb 1-1: config 3 interface 1 has no altsetting 0 [ 91.775256][ T5946] usb 1-1: config 3 interface 0 has no altsetting 0 [ 91.789956][ T6514] program syz.2.99 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.884767][ T29] audit: type=1400 audit(1730260262.708:313): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 91.971289][ T6543] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.000065][ T5946] usb 1-1: string descriptor 0 read error: -22 [ 92.008471][ T5946] usb 1-1: New USB device found, idVendor=0421, idProduct=000e, bcdDevice=d4.89 [ 92.039778][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.104172][ T5946] usb 1-1: bad CDC descriptors [ 92.126070][ T5946] cdc_acm 1-1:3.1: Zero length descriptor references [ 92.150500][ T5946] cdc_acm 1-1:3.1: probe with driver cdc_acm failed with error -22 [ 92.319007][ T5946] usb 1-1: USB disconnect, device number 7 [ 93.345587][ T5946] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.549651][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 93.563326][ T5946] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 93.610751][ T5946] usb 4-1: config 0 has no interface number 0 [ 93.688449][ T5946] usb 4-1: config 0 interface 46 altsetting 4 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 93.863502][ T5946] usb 4-1: config 0 interface 46 has no altsetting 0 [ 93.902283][ T978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.955165][ T5946] usb 4-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=b8.19 [ 93.985827][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.032504][ T5946] usb 4-1: Product: syz [ 94.036686][ T5946] usb 4-1: Manufacturer: syz [ 94.060995][ T978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.080226][ T5946] usb 4-1: SerialNumber: syz [ 94.103129][ T5946] usb 4-1: config 0 descriptor?? [ 94.242293][ T978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.695845][ T978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.732749][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.089802][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.138848][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.144213][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.230884][ T5946] HFC-S_USB 4-1:0.46: probe with driver HFC-S_USB failed with error -5 [ 95.312539][ T5946] usb 4-1: USB disconnect, device number 6 [ 95.389561][ T978] bridge_slave_1: left allmulticast mode [ 95.400600][ T978] bridge_slave_1: left promiscuous mode [ 95.408337][ T6595] loop2: detected capacity change from 0 to 7 [ 95.411434][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.427952][ T6595] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 95.433351][ T6595] loop2: partition table partially beyond EOD, truncated [ 95.440533][ T6595] loop2: p1 size 6333 extends beyond EOD, truncated [ 95.448356][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.460901][ T978] bridge_slave_0: left allmulticast mode [ 95.466580][ T978] bridge_slave_0: left promiscuous mode [ 95.472295][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.521432][ T6410] udevd[6410]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 95.535564][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.582443][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.594894][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.615675][ T5145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.623205][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.879485][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 95.879501][ T29] audit: type=1400 audit(1730264361.689:325): avc: denied { read } for pid=6603 comm="syz.0.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.939553][ T6606] netlink: 64 bytes leftover after parsing attributes in process `syz.3.121'. [ 96.302590][ T978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.348168][ T978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.410729][ T978] bond0 (unregistering): Released all slaves [ 96.679378][ T5946] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.956603][ T6621] IPVS: wrr: FWM 4 0x00000004 - no destination available [ 96.969479][ T29] audit: type=1400 audit(1730264362.769:326): avc: denied { mount } for pid=6612 comm="syz.5.123" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.054036][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 97.329873][ T9] IPVS: starting estimator thread 0... [ 97.342039][ T29] audit: type=1400 audit(1730264362.769:327): avc: denied { mounton } for pid=6612 comm="syz.5.123" path="/11/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 97.398265][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 97.440792][ T6624] IPVS: using max 22 ests per chain, 52800 per kthread [ 97.538390][ T29] audit: type=1400 audit(1730264363.369:328): avc: denied { unmount } for pid=6061 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 97.592419][ T5946] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 97.602062][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.610156][ T5946] usb 3-1: Product: syz [ 97.614415][ T5946] usb 3-1: Manufacturer: syz [ 97.619839][ T5946] usb 3-1: SerialNumber: syz [ 97.645381][ T54] Bluetooth: hci4: command tx timeout [ 97.646347][ T5946] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 97.956912][ T6596] chnl_net:caif_netlink_parms(): no params data found [ 98.089692][ T5878] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 98.537535][ T29] audit: type=1400 audit(1730264363.989:329): avc: denied { call } for pid=6629 comm="syz.5.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 98.617773][ T29] audit: type=1400 audit(1730264363.989:330): avc: denied { transfer } for pid=6629 comm="syz.5.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 98.842154][ T29] audit: type=1400 audit(1730264364.669:331): avc: denied { create } for pid=6646 comm="syz.5.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.877981][ T29] audit: type=1400 audit(1730264364.679:332): avc: denied { bind } for pid=6646 comm="syz.5.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.897010][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.903897][ T29] audit: type=1400 audit(1730264364.679:333): avc: denied { write } for pid=6646 comm="syz.5.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.923320][ T29] audit: type=1400 audit(1730264364.729:334): avc: denied { write } for pid=6646 comm="syz.5.129" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 98.945787][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.956687][ T6651] fuse: Bad value for 'fd' [ 98.997683][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.017126][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.030439][ T6596] bridge_slave_0: entered allmulticast mode [ 99.038543][ T6596] bridge_slave_0: entered promiscuous mode [ 99.067176][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.086046][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.108201][ T6596] bridge_slave_1: entered allmulticast mode [ 99.116580][ T6596] bridge_slave_1: entered promiscuous mode [ 99.122507][ T5946] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 99.133714][ T5880] usb 3-1: USB disconnect, device number 4 [ 99.207136][ T6596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.282375][ T978] hsr_slave_0: left promiscuous mode [ 99.298812][ T5946] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 99.308033][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.322269][ T5946] usb 4-1: Product: syz [ 99.326441][ T5946] usb 4-1: Manufacturer: syz [ 99.331415][ T5946] usb 4-1: SerialNumber: syz [ 99.337585][ T5946] usb 4-1: config 0 descriptor?? [ 99.346078][ T978] hsr_slave_1: left promiscuous mode [ 99.354374][ T5946] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 007 [ 99.399509][ T978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.408222][ T978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.423110][ T978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.431300][ T978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.446561][ T978] veth1_macvtap: left promiscuous mode [ 99.452294][ T978] veth0_macvtap: left promiscuous mode [ 99.457873][ T978] veth1_vlan: left promiscuous mode [ 99.463333][ T978] veth0_vlan: left promiscuous mode [ 99.479660][ T5878] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 99.486876][ T5878] ath9k_htc: Failed to initialize the device [ 99.498212][ T5880] usb 3-1: ath9k_htc: USB layer deinitialized [ 99.574229][ T6684] sctp: [Deprecated]: syz.0.132 (pid 6684) Use of int in max_burst socket option. [ 99.574229][ T6684] Use struct sctp_assoc_value instead [ 99.719487][ T54] Bluetooth: hci4: command tx timeout [ 99.816441][ T5946] (null): failure reading functionality [ 99.888911][ T978] team0 (unregistering): Port device team_slave_1 removed [ 99.927510][ T978] team0 (unregistering): Port device team_slave_0 removed [ 100.050230][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.134'. [ 100.301193][ T6596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.394243][ T6596] team0: Port device team_slave_0 added [ 100.453439][ T6596] team0: Port device team_slave_1 added [ 100.492840][ T5946] i2c i2c-1: failure reading functionality [ 100.519059][ T5946] i2c i2c-1: connected i2c-tiny-usb device [ 100.526185][ T5946] usb 4-1: USB disconnect, device number 7 [ 100.797602][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.921129][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.947020][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.419347][ T6596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.462786][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.480566][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 101.480578][ T29] audit: type=1400 audit(1730264367.319:338): avc: denied { accept } for pid=6709 comm="syz.5.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.639426][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.665308][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.708248][ T6596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.799381][ T54] Bluetooth: hci4: command tx timeout [ 101.877573][ T29] audit: type=1400 audit(1730264367.559:339): avc: denied { create } for pid=6707 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.901338][ T29] audit: type=1400 audit(1730264367.559:340): avc: denied { write } for pid=6707 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 101.979561][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 101.991505][ T6596] hsr_slave_0: entered promiscuous mode [ 102.010166][ T6596] hsr_slave_1: entered promiscuous mode [ 102.016253][ T6596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.053578][ T29] audit: type=1400 audit(1730264367.889:341): avc: denied { create } for pid=6723 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.080199][ T6596] Cannot create hsr debugfs directory [ 102.101010][ T29] audit: type=1400 audit(1730264367.889:342): avc: denied { bind } for pid=6723 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.144749][ T29] audit: type=1400 audit(1730264367.889:343): avc: denied { name_bind } for pid=6723 comm="syz.0.139" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 102.172392][ T29] audit: type=1400 audit(1730264367.889:344): avc: denied { node_bind } for pid=6723 comm="syz.0.139" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 102.210793][ T29] audit: type=1400 audit(1730264367.889:345): avc: denied { listen } for pid=6723 comm="syz.0.139" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.268171][ T29] audit: type=1400 audit(1730264367.889:346): avc: denied { setopt } for pid=6723 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.290109][ T29] audit: type=1400 audit(1730264367.889:347): avc: denied { connect } for pid=6723 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 102.562092][ T6746] bond1: entered promiscuous mode [ 102.579323][ T6746] bond1: entered allmulticast mode [ 102.593358][ T6746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.042453][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'. [ 103.449793][ T5925] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 103.594729][ T6596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.610341][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.634793][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.651039][ T6596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.667412][ T5925] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 103.693225][ T6596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.707536][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.726744][ T6596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.748915][ T5925] usb 6-1: config 0 descriptor?? [ 103.810071][ T5946] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.884322][ T54] Bluetooth: hci4: command tx timeout [ 103.941819][ T6596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.962094][ T6596] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.971547][ T5946] usb 3-1: config 0 has an invalid interface number: 220 but max is 0 [ 103.976743][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.987489][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.989235][ T5946] usb 3-1: config 0 has no interface number 0 [ 104.008403][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.016087][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.033445][ T5946] usb 3-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=95.56 [ 104.067461][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.096820][ T5946] usb 3-1: config 0 descriptor?? [ 104.126572][ T5946] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 104.149732][ T5878] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.185079][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.198643][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.203003][ T6596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.223815][ T5925] uclogic 0003:5543:0005.0004: unknown main item tag 0x0 [ 104.237018][ T5925] uclogic 0003:5543:0005.0004: unknown main item tag 0x0 [ 104.247246][ T5925] uclogic 0003:5543:0005.0004: No inputs registered, leaving [ 104.265549][ T5925] uclogic 0003:5543:0005.0004: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.5-1/input0 [ 104.277283][ T6596] veth0_vlan: entered promiscuous mode [ 104.309575][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 104.316439][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.333557][ T5946] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 104.344946][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.356282][ T5946] pac7311 3-1:0.220: probe with driver pac7311 failed with error -71 [ 104.362244][ T6596] veth1_vlan: entered promiscuous mode [ 104.377060][ T5878] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 104.388032][ T5946] usb 3-1: USB disconnect, device number 5 [ 104.406431][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.414232][ T6596] veth0_macvtap: entered promiscuous mode [ 104.443038][ T5877] usb 6-1: USB disconnect, device number 2 [ 104.456618][ T6596] veth1_macvtap: entered promiscuous mode [ 104.483029][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.522495][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.523603][ T5878] usb 1-1: config 0 descriptor?? [ 104.546001][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.557986][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.568668][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.585028][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.595018][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.611257][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.635849][ T6596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.685817][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.723535][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.733677][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.748620][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.759068][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.770660][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.771186][ T6804] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.150'. [ 104.784253][ T6596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.801262][ T6596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.818214][ T6596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.832026][ T6804] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 104.845841][ T6596] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.855375][ T6596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.865377][ T6596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.875605][ T6596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.978933][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.986905][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.994449][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.002531][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.118584][ T5878] glorious 0003:22D4:1503.0005: item fetching failed at offset 3/5 [ 105.127105][ T5878] glorious 0003:22D4:1503.0005: probe with driver glorious failed with error -22 [ 106.631301][ T5878] usb 1-1: USB disconnect, device number 8 [ 107.091580][ T6842] x_tables: duplicate underflow at hook 2 [ 107.112262][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 107.112274][ T29] audit: type=1400 audit(1730264372.949:355): avc: denied { ioctl } for pid=6840 comm="syz.5.156" path="socket:[12874]" dev="sockfs" ino=12874 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 108.306208][ T29] audit: type=1326 audit(1730264373.379:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6849 comm="syz.0.158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4cf97e719 code=0x0 [ 108.330543][ T29] audit: type=1400 audit(1730264374.129:357): avc: denied { setopt } for pid=6848 comm="syz.5.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.350157][ T29] audit: type=1400 audit(1730264374.129:358): avc: denied { read } for pid=6848 comm="syz.5.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.735922][ T6866] geneve0: entered promiscuous mode [ 109.118004][ T29] audit: type=1400 audit(1730264374.729:359): avc: denied { bind } for pid=6864 comm="syz.2.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.157004][ T29] audit: type=1400 audit(1730264374.809:360): avc: denied { mount } for pid=6853 comm="syz.3.159" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 109.737505][ T6895] FAULT_INJECTION: forcing a failure. [ 109.737505][ T6895] name failslab, interval 1, probability 0, space 0, times 1 [ 109.765022][ T6895] CPU: 0 UID: 0 PID: 6895 Comm: syz.0.165 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 109.775621][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.785667][ T6895] Call Trace: [ 109.788923][ T6895] [ 109.791829][ T6895] dump_stack_lvl+0x16c/0x1f0 [ 109.796488][ T6895] should_fail_ex+0x497/0x5b0 [ 109.801136][ T6895] ? fs_reclaim_acquire+0xae/0x150 [ 109.806221][ T6895] should_failslab+0xc2/0x120 [ 109.810873][ T6895] kmem_cache_alloc_lru_noprof+0x72/0x2f0 [ 109.816565][ T6895] ? __d_alloc+0x31/0xaa0 [ 109.820878][ T6895] ? hlock_class+0x4e/0x130 [ 109.825378][ T6895] __d_alloc+0x31/0xaa0 [ 109.829530][ T6895] d_alloc+0x4a/0x1e0 [ 109.833501][ T6895] d_alloc_parallel+0xe9/0x12b0 [ 109.838346][ T6895] ? __pfx_d_alloc_parallel+0x10/0x10 [ 109.843711][ T6895] ? lockdep_init_map_type+0x16d/0x7d0 [ 109.849152][ T6895] ? lock_acquire.part.0+0x11b/0x380 [ 109.854419][ T6895] ? lockdep_init_map_type+0x16d/0x7d0 [ 109.859868][ T6895] __lookup_slow+0x194/0x460 [ 109.864445][ T6895] ? __pfx___lookup_slow+0x10/0x10 [ 109.869559][ T6895] ? walk_component+0x342/0x5b0 [ 109.874415][ T6895] ? lookup_fast+0x155/0x540 [ 109.878995][ T6895] walk_component+0x350/0x5b0 [ 109.883662][ T6895] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 109.889987][ T6895] path_parentat+0xaa/0x1b0 [ 109.894478][ T6895] __filename_parentat+0x1f0/0x630 [ 109.899580][ T6895] ? __pfx___filename_parentat+0x10/0x10 [ 109.905218][ T6895] ? __might_fault+0x13b/0x190 [ 109.909969][ T6895] ? __pfx_lock_release+0x10/0x10 [ 109.914975][ T6895] ? trace_lock_acquire+0x14a/0x1d0 [ 109.920166][ T6895] do_rmdir+0xd8/0x410 [ 109.924220][ T6895] ? __might_fault+0xe3/0x190 [ 109.928883][ T6895] ? __pfx_do_rmdir+0x10/0x10 [ 109.933550][ T6895] ? getname_flags.part.0+0x1c5/0x550 [ 109.938912][ T6895] __x64_sys_rmdir+0xc5/0x110 [ 109.943572][ T6895] do_syscall_64+0xcd/0x250 [ 109.948086][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.953997][ T6895] RIP: 0033:0x7fe4cf97e719 [ 109.958402][ T6895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.978003][ T6895] RSP: 002b:00007fe4d06e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 109.986403][ T6895] RAX: ffffffffffffffda RBX: 00007fe4cfb35f80 RCX: 00007fe4cf97e719 [ 109.994359][ T6895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000380 [ 110.002311][ T6895] RBP: 00007fe4d06e0090 R08: 0000000000000000 R09: 0000000000000000 [ 110.010274][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.018231][ T6895] R13: 0000000000000000 R14: 00007fe4cfb35f80 R15: 00007ffdbad1ff28 [ 110.026204][ T6895] [ 110.069530][ T29] audit: type=1400 audit(1730264375.899:361): avc: denied { create } for pid=6896 comm="syz.2.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 110.113437][ T29] audit: type=1400 audit(1730264375.939:362): avc: denied { ioctl } for pid=6896 comm="syz.2.166" path="socket:[13794]" dev="sockfs" ino=13794 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 110.199795][ T5877] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 110.329701][ T5877] usb 6-1: device descriptor read/64, error -71 [ 110.579628][ T5877] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 110.591748][ T29] audit: type=1400 audit(1730264376.429:363): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 110.760600][ T5877] usb 6-1: device descriptor read/64, error -71 [ 110.979929][ T5877] usb usb6-port1: attempt power cycle [ 110.989608][ T5880] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.159009][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.208850][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.285341][ T29] audit: type=1400 audit(1730264377.109:364): avc: denied { link } for pid=6903 comm="syz.2.168" name="file1" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 111.342081][ T5877] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 111.372805][ T5877] usb 6-1: device descriptor read/8, error -71 [ 111.532253][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.559434][ T5880] usb 3-1: no configurations [ 111.569354][ T5880] usb 3-1: can't read configurations, error -22 [ 111.620602][ T5877] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 111.650356][ T5877] usb 6-1: device descriptor read/8, error -71 [ 111.762693][ T5877] usb usb6-port1: unable to enumerate USB device [ 112.168168][ T978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.276300][ T978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.353368][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 112.353382][ T29] audit: type=1400 audit(1730264378.189:366): avc: denied { setopt } for pid=6982 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.542802][ T29] audit: type=1400 audit(1730264378.379:367): avc: denied { write } for pid=6987 comm="syz.3.178" path="socket:[14000]" dev="sockfs" ino=14000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.586994][ T6993] Bluetooth: MGMT ver 1.23 [ 112.772011][ T978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.101641][ T29] audit: type=1400 audit(1730264378.939:368): avc: denied { read } for pid=7001 comm="syz.3.179" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.127509][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.141174][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.202522][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.233181][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.234572][ T29] audit: type=1400 audit(1730264379.069:369): avc: denied { read } for pid=6978 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.264846][ T978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.276862][ T5145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 113.283483][ T7015] FAULT_INJECTION: forcing a failure. [ 113.283483][ T7015] name failslab, interval 1, probability 0, space 0, times 0 [ 113.314697][ T7007] sp0: Synchronizing with TNC [ 113.335200][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.342531][ T7015] CPU: 1 UID: 0 PID: 7015 Comm: syz.5.181 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 113.353109][ T7015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 113.353123][ T7015] Call Trace: [ 113.353130][ T7015] [ 113.353138][ T7015] dump_stack_lvl+0x16c/0x1f0 [ 113.353169][ T7015] should_fail_ex+0x497/0x5b0 [ 113.378780][ T7015] ? fs_reclaim_acquire+0xae/0x150 [ 113.383901][ T7015] should_failslab+0xc2/0x120 [ 113.388584][ T7015] __kmalloc_noprof+0xcb/0x400 [ 113.393352][ T7015] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 113.398995][ T7015] tomoyo_realpath_from_path+0xb9/0x720 [ 113.404550][ T7015] ? tomoyo_path_number_perm+0x232/0x590 [ 113.410200][ T7015] tomoyo_path_number_perm+0x245/0x590 [ 113.415669][ T7015] ? tomoyo_path_number_perm+0x232/0x590 [ 113.421315][ T7015] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 113.427325][ T7015] ? trace_lock_acquire+0x14a/0x1d0 [ 113.432536][ T7015] ? lock_acquire+0x2f/0xb0 [ 113.437043][ T7015] ? __fget_files+0x40/0x3f0 [ 113.441649][ T7015] ? __fget_files+0x244/0x3f0 [ 113.446338][ T7015] security_file_ioctl+0x9b/0x240 [ 113.451366][ T7015] __x64_sys_ioctl+0xbb/0x220 [ 113.456053][ T7015] do_syscall_64+0xcd/0x250 [ 113.460554][ T7015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.466439][ T7015] RIP: 0033:0x7efcfdf7e719 [ 113.470838][ T7015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.490430][ T7015] RSP: 002b:00007efcfed87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.498823][ T7015] RAX: ffffffffffffffda RBX: 00007efcfe135f80 RCX: 00007efcfdf7e719 [ 113.506775][ T7015] RDX: 00000000200001c0 RSI: 000000004008ae48 RDI: 0000000000000004 [ 113.514728][ T7015] RBP: 00007efcfed87090 R08: 0000000000000000 R09: 0000000000000000 [ 113.522682][ T7015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.530644][ T7015] R13: 0000000000000000 R14: 00007efcfe135f80 R15: 00007ffcac4d9df8 [ 113.538614][ T7015] [ 113.564225][ T7015] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.875763][ T978] bridge_slave_1: left allmulticast mode [ 113.888857][ T978] bridge_slave_1: left promiscuous mode [ 113.906531][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.504052][ T978] bridge_slave_0: left allmulticast mode [ 114.542412][ T978] bridge_slave_0: left promiscuous mode [ 114.554471][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.640104][ T5145] Bluetooth: hci4: command tx timeout [ 115.731526][ T5877] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 115.849687][ T29] audit: type=1400 audit(1730264381.679:370): avc: denied { rename } for pid=7068 comm="syz.5.189" name="#a" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 115.887590][ T5877] usb 1-1: device descriptor read/64, error -71 [ 116.003528][ T978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.016187][ T978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.025876][ T978] bond0 (unregistering): Released all slaves [ 116.146270][ T5877] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 116.282513][ T5876] IPVS: starting estimator thread 0... [ 116.314043][ T5877] usb 1-1: device descriptor read/64, error -71 [ 116.321604][ T7009] chnl_net:caif_netlink_parms(): no params data found [ 116.489458][ T7086] IPVS: using max 26 ests per chain, 62400 per kthread [ 116.562446][ T5878] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 116.588067][ T5877] usb usb1-port1: attempt power cycle [ 116.594582][ T978] hsr_slave_0: left promiscuous mode [ 116.618908][ T978] hsr_slave_1: left promiscuous mode [ 117.011940][ T978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.117508][ T978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.180231][ T978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.187796][ T978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.214649][ T978] veth1_macvtap: left promiscuous mode [ 117.249360][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 117.261094][ T5878] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 117.277406][ T5878] usb 4-1: can't read configurations, error -22 [ 117.284030][ T978] veth0_macvtap: left promiscuous mode [ 117.290648][ T978] veth1_vlan: left promiscuous mode [ 117.296929][ T978] veth0_vlan: left promiscuous mode [ 117.343903][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.375178][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.424231][ T5878] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 117.449739][ T5877] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 117.450102][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.467807][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.498341][ T5877] usb 1-1: device descriptor read/8, error -71 [ 117.724826][ T5145] Bluetooth: hci4: command tx timeout [ 117.735326][ T29] audit: type=1400 audit(1730264383.539:371): avc: denied { write } for pid=7102 comm="syz.5.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.112093][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 118.121307][ T5878] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 118.129413][ T5878] usb 4-1: can't read configurations, error -22 [ 118.137177][ T5878] usb usb4-port1: attempt power cycle [ 118.248557][ T978] team0 (unregistering): Port device team_slave_1 removed [ 118.276719][ T978] team0 (unregistering): Port device team_slave_0 removed [ 118.290180][ T5877] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 118.332038][ T5877] usb 1-1: device descriptor read/8, error -71 [ 118.389821][ T5876] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 118.450551][ T5877] usb usb1-port1: unable to enumerate USB device [ 118.489717][ T5878] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 118.514729][ T29] audit: type=1400 audit(1730264384.339:372): avc: denied { mount } for pid=7124 comm="syz.0.198" name="/" dev="ramfs" ino=14429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 118.543425][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 118.553174][ T5878] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 118.561391][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 118.566443][ T5878] usb 4-1: can't read configurations, error -22 [ 118.574080][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.584967][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 118.596515][ T5876] usb 3-1: New USB device found, idVendor=045e, idProduct=00b4, bcdDevice= 0.00 [ 118.605886][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.615563][ T5876] usb 3-1: config 0 descriptor?? [ 118.626305][ T7123] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 118.634984][ T29] audit: type=1400 audit(1730264384.469:373): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 118.720531][ T5878] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 118.866339][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.908249][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 118.915352][ T5878] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 118.925479][ T5878] usb 4-1: can't read configurations, error -22 [ 118.932917][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.937822][ T5878] usb usb4-port1: unable to enumerate USB device [ 118.949817][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.962743][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.974000][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.974062][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.950177][ T5145] Bluetooth: hci4: command tx timeout [ 119.955773][ T7009] bridge_slave_0: entered allmulticast mode [ 119.962578][ T7009] bridge_slave_0: entered promiscuous mode [ 119.969913][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.976972][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.984172][ T7009] bridge_slave_1: entered allmulticast mode [ 119.990847][ T7009] bridge_slave_1: entered promiscuous mode [ 120.789468][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.5.200'. [ 120.806511][ T7009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.862354][ T7009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.091642][ T7152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7152 comm=syz.3.201 [ 121.125612][ T7167] QAT: failed to copy from user. [ 121.132297][ T29] audit: type=1400 audit(1730264386.959:374): avc: denied { map } for pid=7162 comm="syz.0.203" path="socket:[14517]" dev="sockfs" ino=14517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.201252][ T7009] team0: Port device team_slave_0 added [ 121.222133][ T7009] team0: Port device team_slave_1 added [ 121.340623][ T7009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.357092][ T7009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.385438][ T7175] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.205'. [ 121.395434][ T7009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.414940][ T7009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.422526][ T7009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.448870][ T7009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.461795][ T7175] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 121.533895][ T7009] hsr_slave_0: entered promiscuous mode [ 121.544264][ T7009] hsr_slave_1: entered promiscuous mode [ 121.559872][ T7009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.579440][ T5879] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 121.586930][ T7009] Cannot create hsr debugfs directory [ 121.740884][ T5879] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.752196][ T5879] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.786494][ T5879] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.882075][ T5876] usb 3-1: string descriptor 0 read error: -71 [ 121.999689][ T5145] Bluetooth: hci4: command tx timeout [ 122.016779][ T5876] usbhid 3-1:0.0: can't add hid device: -71 [ 122.431911][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.442214][ T7173] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 122.590456][ T5876] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 122.597329][ T5879] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.676182][ T5876] usb 3-1: USB disconnect, device number 8 [ 122.680143][ T29] audit: type=1400 audit(1730264388.509:375): avc: denied { append } for pid=7171 comm="syz.3.204" name="midi3" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 122.778919][ T5880] usb 4-1: USB disconnect, device number 14 [ 122.851211][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 123.059783][ T7210] mmap: syz.2.210 (7210) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.071736][ T7210] [ 123.074058][ T7210] ====================================================== [ 123.081067][ T7210] WARNING: possible circular locking dependency detected [ 123.088081][ T7210] 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 Not tainted [ 123.095184][ T7210] ------------------------------------------------------ [ 123.102193][ T7210] syz.2.210/7210 is trying to acquire lock: [ 123.108079][ T7210] ffff88807919a370 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x39c/0x2370 [ 123.118818][ T7210] [ 123.118818][ T7210] but task is already holding lock: [ 123.126176][ T7210] ffff8880795a9e18 (&mm->mmap_lock){++++}-{3:3}, at: __do_sys_remap_file_pages+0x184/0x900 [ 123.136192][ T7210] [ 123.136192][ T7210] which lock already depends on the new lock. [ 123.136192][ T7210] [ 123.146570][ T7210] [ 123.146570][ T7210] the existing dependency chain (in reverse order) is: [ 123.155559][ T7210] [ 123.155559][ T7210] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 123.163097][ T7210] down_read_killable+0x9d/0x380 [ 123.168545][ T7210] lock_mm_and_find_vma+0x3a9/0x6a0 [ 123.174248][ T7210] do_user_addr_fault+0x2b5/0x13f0 [ 123.179869][ T7210] exc_page_fault+0x5c/0xc0 [ 123.184877][ T7210] asm_exc_page_fault+0x26/0x30 [ 123.190233][ T7210] fault_in_readable+0x160/0x200 [ 123.195672][ T7210] fault_in_iov_iter_readable+0x101/0x2c0 [ 123.201891][ T7210] generic_perform_write+0x21b/0x920 [ 123.207675][ T7210] shmem_file_write_iter+0x10e/0x140 [ 123.213462][ T7210] vfs_write+0x5ae/0x1150 [ 123.218296][ T7210] ksys_write+0x12f/0x260 [ 123.223134][ T7210] do_syscall_64+0xcd/0x250 [ 123.228148][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.234545][ T7210] [ 123.234545][ T7210] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 123.243215][ T7210] __lock_acquire+0x250b/0x3ce0 [ 123.248563][ T7210] lock_acquire.part.0+0x11b/0x380 [ 123.254172][ T7210] down_write+0x93/0x200 [ 123.258912][ T7210] process_measurement+0x39c/0x2370 [ 123.264610][ T7210] ima_file_mmap+0x146/0x1d0 [ 123.269698][ T7210] security_mmap_file+0x8bd/0x990 [ 123.275222][ T7210] __do_sys_remap_file_pages+0x526/0x900 [ 123.281355][ T7210] do_syscall_64+0xcd/0x250 [ 123.286364][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.292761][ T7210] [ 123.292761][ T7210] other info that might help us debug this: [ 123.292761][ T7210] [ 123.302961][ T7210] Possible unsafe locking scenario: [ 123.302961][ T7210] [ 123.310384][ T7210] CPU0 CPU1 [ 123.315722][ T7210] ---- ---- [ 123.321061][ T7210] lock(&mm->mmap_lock); [ 123.325370][ T7210] lock(&sb->s_type->i_mutex_key#12); [ 123.333332][ T7210] lock(&mm->mmap_lock); [ 123.340161][ T7210] lock(&sb->s_type->i_mutex_key#12); [ 123.345602][ T7210] [ 123.345602][ T7210] *** DEADLOCK *** [ 123.345602][ T7210] [ 123.353718][ T7210] 1 lock held by syz.2.210/7210: [ 123.358631][ T7210] #0: ffff8880795a9e18 (&mm->mmap_lock){++++}-{3:3}, at: __do_sys_remap_file_pages+0x184/0x900 [ 123.369050][ T7210] [ 123.369050][ T7210] stack backtrace: [ 123.374912][ T7210] CPU: 0 UID: 0 PID: 7210 Comm: syz.2.210 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 123.385486][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.395517][ T7210] Call Trace: [ 123.398776][ T7210] [ 123.401689][ T7210] dump_stack_lvl+0x116/0x1f0 [ 123.406355][ T7210] print_circular_bug+0x41c/0x610 [ 123.411368][ T7210] check_noncircular+0x31a/0x400 [ 123.416293][ T7210] ? __pfx_check_noncircular+0x10/0x10 [ 123.421738][ T7210] ? __power_supply_register.part.0+0x1ce/0x1180 [ 123.428047][ T7210] ? lockdep_lock+0xc6/0x200 [ 123.432621][ T7210] ? __pfx_lockdep_lock+0x10/0x10 [ 123.437627][ T7210] __lock_acquire+0x250b/0x3ce0 [ 123.442459][ T7210] ? __pfx___lock_acquire+0x10/0x10 [ 123.447637][ T7210] lock_acquire.part.0+0x11b/0x380 [ 123.452726][ T7210] ? process_measurement+0x39c/0x2370 [ 123.458075][ T7210] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 123.463687][ T7210] ? rcu_is_watching+0x12/0xc0 [ 123.468432][ T7210] ? trace_lock_acquire+0x14a/0x1d0 [ 123.473612][ T7210] ? process_measurement+0x39c/0x2370 [ 123.478960][ T7210] ? lock_acquire+0x2f/0xb0 [ 123.483440][ T7210] ? process_measurement+0x39c/0x2370 [ 123.488790][ T7210] down_write+0x93/0x200 [ 123.493014][ T7210] ? process_measurement+0x39c/0x2370 [ 123.498363][ T7210] ? __pfx_down_write+0x10/0x10 [ 123.503194][ T7210] process_measurement+0x39c/0x2370 [ 123.508372][ T7210] ? __pfx_process_measurement+0x10/0x10 [ 123.513988][ T7210] ? avc_has_perm_noaudit+0x119/0x3a0 [ 123.519342][ T7210] ? __pfx_lock_release+0x10/0x10 [ 123.524341][ T7210] ? trace_lock_acquire+0x14a/0x1d0 [ 123.529523][ T7210] ? lock_acquire+0x2f/0xb0 [ 123.534012][ T7210] ? file_map_prot_check+0x1eb/0x360 [ 123.539281][ T7210] ima_file_mmap+0x146/0x1d0 [ 123.543851][ T7210] ? __pfx_ima_file_mmap+0x10/0x10 [ 123.548940][ T7210] ? __pfx_down_write_killable+0x10/0x10 [ 123.554552][ T7210] security_mmap_file+0x8bd/0x990 [ 123.559557][ T7210] __do_sys_remap_file_pages+0x526/0x900 [ 123.565172][ T7210] ? __pfx_do_futex+0x10/0x10 [ 123.569834][ T7210] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 123.575967][ T7210] ? __x64_sys_futex+0x1e1/0x4c0 [ 123.580887][ T7210] ? __pfx___x64_sys_futex+0x10/0x10 [ 123.586155][ T7210] ? rcu_is_watching+0x12/0xc0 [ 123.590904][ T7210] do_syscall_64+0xcd/0x250 [ 123.595391][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.601269][ T7210] RIP: 0033:0x7f582f97e719 [ 123.605660][ T7210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.625247][ T7210] RSP: 002b:00007f58307ad038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 123.633640][ T7210] RAX: ffffffffffffffda RBX: 00007f582fb35f80 RCX: 00007f582f97e719 [ 123.641589][ T7210] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00000000202ec000 [ 123.649538][ T7210] RBP: 00007f582f9f132e R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 123.657486][ T7210] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 123.665436][ T7210] R13: 0000000000000000 R14: 00007f582fb35f80 R15: 00007ffd9d38f5d8 [ 123.673389][ T7210] [ 123.695352][ T29] audit: type=1400 audit(1730264389.519:376): avc: denied { create } for pid=7209 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.702051][ T7201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.769700][ T7201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.945610][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 123.954110][ T9] usb 6-1: no configurations [ 123.958853][ T9] usb 6-1: can't read configurations, error -22 [ 124.125693][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.248506][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.421707][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.482818][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.541170][ T52] bridge_slave_1: left allmulticast mode [ 124.546815][ T52] bridge_slave_1: left promiscuous mode [ 124.552676][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.560660][ T52] bridge_slave_0: left allmulticast mode [ 124.566267][ T52] bridge_slave_0: left promiscuous mode [ 124.572965][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.653339][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.662798][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.672891][ T52] bond0 (unregistering): Released all slaves [ 124.827957][ T52] hsr_slave_0: left promiscuous mode [ 124.834049][ T52] hsr_slave_1: left promiscuous mode [ 124.841378][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.848727][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.856521][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.864178][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.872306][ T52] veth1_macvtap: left promiscuous mode [ 124.877751][ T52] veth0_macvtap: left promiscuous mode [ 124.883571][ T52] veth1_vlan: left promiscuous mode [ 124.888783][ T52] veth0_vlan: left promiscuous mode [ 124.963059][ T52] team0 (unregistering): Port device team_slave_1 removed [ 124.977667][ T52] team0 (unregistering): Port device team_slave_0 removed [ 125.242677][ T52] IPVS: stop unused estimator thread 0... [ 125.306923][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.373265][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.433963][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.474073][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.553017][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.596020][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.632744][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.673773][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.736529][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.782937][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.812488][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.853207][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.921010][ T52] bridge_slave_1: left allmulticast mode [ 125.926659][ T52] bridge_slave_1: left promiscuous mode [ 125.932900][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.941035][ T52] bridge_slave_0: left allmulticast mode [ 125.946675][ T52] bridge_slave_0: left promiscuous mode [ 125.952624][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.961239][ T52] bridge_slave_1: left allmulticast mode [ 125.967198][ T52] bridge_slave_1: left promiscuous mode [ 125.974216][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.982225][ T52] bridge_slave_0: left allmulticast mode [ 125.987874][ T52] bridge_slave_0: left promiscuous mode [ 125.994381][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.003666][ T52] bridge_slave_1: left allmulticast mode [ 126.010205][ T52] bridge_slave_1: left promiscuous mode [ 126.015812][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.024193][ T52] bridge_slave_0: left allmulticast mode [ 126.031432][ T52] bridge_slave_0: left promiscuous mode [ 126.037039][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.045521][ T52] bridge_slave_1: left allmulticast mode [ 126.052101][ T52] bridge_slave_1: left promiscuous mode [ 126.057723][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.066067][ T52] bridge_slave_0: left allmulticast mode [ 126.071821][ T52] bridge_slave_0: left promiscuous mode [ 126.077389][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.352134][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.361978][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.371264][ T52] bond0 (unregistering): Released all slaves [ 126.427766][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.436399][ T52] bond_slave_0: left promiscuous mode [ 126.442908][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.452202][ T52] bond_slave_1: left promiscuous mode [ 126.458011][ T52] bond0 (unregistering): Released all slaves [ 126.512227][ T52] bond1 (unregistering): Released all slaves [ 126.521602][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.531157][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.540318][ T52] bond0 (unregistering): Released all slaves [ 126.547870][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.557185][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.566340][ T52] bond0 (unregistering): Released all slaves [ 127.103336][ T52] hsr_slave_0: left promiscuous mode [ 127.108937][ T52] hsr_slave_1: left promiscuous mode [ 127.114916][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.123113][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.130743][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.138100][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.147302][ T52] hsr_slave_0: left promiscuous mode [ 127.152834][ T52] hsr_slave_1: left promiscuous mode [ 127.158348][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.165940][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.173276][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.180882][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.189912][ T52] hsr_slave_0: left promiscuous mode [ 127.195464][ T52] hsr_slave_1: left promiscuous mode [ 127.201218][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.208577][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.216209][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.223675][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.232413][ T52] hsr_slave_0: left promiscuous mode [ 127.237971][ T52] hsr_slave_1: left promiscuous mode [ 127.243665][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.251416][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.261124][ T52] veth1_macvtap: left promiscuous mode [ 127.266570][ T52] veth0_macvtap: left promiscuous mode [ 127.272407][ T52] veth1_vlan: left promiscuous mode [ 127.277614][ T52] veth0_vlan: left promiscuous mode [ 127.283283][ T52] veth1_macvtap: left promiscuous mode [ 127.288739][ T52] veth0_macvtap: left promiscuous mode [ 127.294284][ T52] veth1_vlan: left promiscuous mode [ 127.299511][ T52] veth0_vlan: left promiscuous mode [ 127.305047][ T52] veth1_macvtap: left promiscuous mode [ 127.310621][ T52] veth0_macvtap: left promiscuous mode [ 127.316090][ T52] veth1_vlan: left promiscuous mode [ 127.321361][ T52] veth0_vlan: left promiscuous mode [ 127.435804][ T52] team0 (unregistering): Port device team_slave_1 removed [ 127.454463][ T52] team0 (unregistering): Port device team_slave_0 removed [ 127.554627][ T52] team0 (unregistering): Port device team_slave_1 removed [ 127.566634][ T52] team0 (unregistering): Port device team_slave_0 removed [ 127.662525][ T52] team0 (unregistering): Port device team_slave_1 removed [ 127.678860][ T52] team0 (unregistering): Port device team_slave_0 removed [ 127.761009][ T52] team0 (unregistering): Port device team_slave_1 removed [ 127.778236][ T52] team0 (unregistering): Port device team_slave_0 removed [ 128.554227][ T52] IPVS: stop unused estimator thread 0... [ 132.360405][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.366683][ T1297] ieee802154 phy1 wpan1: encryption failed: -22