last executing test programs: 35m53.068411022s ago: executing program 32 (id=1058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0xff, 0x81, 0x0, 0x6080, 0xef3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@my=0x1}) 17m59.821929678s ago: executing program 33 (id=4018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x141341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000300)="2f7dbe4a3b85b4f72d96bb4cf24ced4e779f6bd720845bf9547c2e170d7acfa21241ef17fa7a02109ec2dd289b", 0x2d}], 0x2) 12m16.018916382s ago: executing program 0 (id=4814): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) ioctl$TIOCL_SETSEL(r0, 0x4b2f, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x11, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 12m14.783377141s ago: executing program 0 (id=4817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) socket$inet6(0xa, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffff3d, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x10, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x7, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) ftruncate(r7, 0x200) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x5, 0x0}, 0xfffffffffffffc20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map, r0, 0x37, 0x202c, 0x0, @void, @void, @value=r10}, 0x20) 12m13.515437162s ago: executing program 0 (id=4818): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x13f, 0x8}}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xa}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x22) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="03"], 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 12m13.403189474s ago: executing program 0 (id=4821): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x80) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x20000004) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000100, 0x20000000, 0x80000000000004, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x2, 0x2, 0x10000, 0x2, 0x0, 0xa000, 0xfffffffc, r3, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, r2, {0x7, 0x2b, 0x401, 0xffffffff90000084, 0x4, 0xd, 0x7, 0xf, 0x0, 0x0, 0x10, 0xb31}}, 0x50) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0xa0, 0x0, 0x8, {{0x3, 0x0, 0x800, 0xbafa, 0x2, 0x8, {0x0, 0x5, 0x800000000005, 0xfffffffffffffff5, 0x9, 0x4, 0x2, 0x6, 0xfffffbff, 0x8000, 0xfff, r3, 0x0, 0x0, 0x2}}, {0x0, 0x1}}}, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x4, "00629a7d82090100000000000000f7fffffb00"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) getpid() 12m12.387622782s ago: executing program 0 (id=4825): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x8081, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x348, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x328, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x314, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x3c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x100}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x10000}]}}}, {0xa0, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x90, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x7c, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFTA_BITWISE_OP={0x8}]}}}, {0x58, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xc}]}}}, {0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xf3, 0x6, 0x1, 0x0, "3c04fca5399c5fd637df6c49c16614d51c79ca126159fbe117fd8ee2f40467e55c4e6aaf280b180a83c6097ce274ad512fc932f981def5d1df358d25ac0e23f49dce04df0f24494cb267a39a5ee9839656765bed1e9d2d697a4b5cf57ec0afb58de36738f4f9778340bb792157b308fbf293c841be77d623bc6884106fa923397995f3b7aabd1d4ca81d21cfa2fbd6d0aabf98e5eba4a024c1ccb64067ca33d50eb48932e106f1b5e90f92df15a35fde07ca0575bf4c2b74198bf7f518a0ea9f091b3683a7cd592fcbe28c6a2c929209a1aaeb9f0a82717c28076efe77abe40250d43ff8885375c363153b2cecaf71"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x3a8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x5, 0x0, 0x2, 0xfff}, 0x101, 0x0, 0x40, 0x7, 0xd0a6, 0xf, 0x11, 0x9, 0x1, 0xfffffffc, {0x5, 0x6, 0x3, 0x4, 0x913, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 12m11.015105485s ago: executing program 0 (id=4828): ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, 0x0, 0x0) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000024c1320a6d5d995fb8adee934f5d99c6103bc5cff4aa606eaa73882ce0006934bb01942b7f76a52666b3f67ace1cac122693f54646110fa28dad1a31955e38c8da20e409b925be9536fde9ea307e9695809e672b053c998288e706d660090e9ee8fc41338942abd120110e28dcddb1e5d4407b7e5165e437f7f8667898415e75c941b9a5fbdeb3334b91b58b8bc176461d66f9a39a1b943d825cdce85c4ca3e471bb9a89d1f587205cfd76de578ab003fcd233fd3f5fc707bebb23", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b000000000014001a80100002800c0001800c001a000400000046e0e0aa8e8c2de1d05fc9c048c221b9a2961aa62fd33d49b4eb"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000280), &(0x7f0000000480)=0x4) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000400000904000000cafb1a00"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="2011010200efeafa0306994b30e5ce00001253845dfcd0df18fb3248395fe4cb8187be98e99bd6326c2df7537a1805b4d8e84fca0a238d5ba88b0149b41a8d4e53f0b11d160371918ff052491907e7ae00f34e2495857e8261a0cafbfb5719dc41fe86"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m10.426499414s ago: executing program 34 (id=4828): ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, 0x0, 0x0) connect$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000024c1320a6d5d995fb8adee934f5d99c6103bc5cff4aa606eaa73882ce0006934bb01942b7f76a52666b3f67ace1cac122693f54646110fa28dad1a31955e38c8da20e409b925be9536fde9ea307e9695809e672b053c998288e706d660090e9ee8fc41338942abd120110e28dcddb1e5d4407b7e5165e437f7f8667898415e75c941b9a5fbdeb3334b91b58b8bc176461d66f9a39a1b943d825cdce85c4ca3e471bb9a89d1f587205cfd76de578ab003fcd233fd3f5fc707bebb23", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b000000000014001a80100002800c0001800c001a000400000046e0e0aa8e8c2de1d05fc9c048c221b9a2961aa62fd33d49b4eb"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000280), &(0x7f0000000480)=0x4) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000400000904000000cafb1a00"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="2011010200efeafa0306994b30e5ce00001253845dfcd0df18fb3248395fe4cb8187be98e99bd6326c2df7537a1805b4d8e84fca0a238d5ba88b0149b41a8d4e53f0b11d160371918ff052491907e7ae00f34e2495857e8261a0cafbfb5719dc41fe86"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m11.731508048s ago: executing program 6 (id=5086): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getpeername(r0, 0x0, &(0x7f0000000040)) 10m11.306570463s ago: executing program 6 (id=5089): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x180, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000084) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000080)=0x1) r4 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2b, 'cpuset'}]}, 0x8) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20) 10m6.743075487s ago: executing program 6 (id=5100): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010002, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (fail_nth: 5) 10m6.211452002s ago: executing program 6 (id=5101): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x4) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r2 = inotify_init1(0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') inotify_add_watch(r2, &(0x7f00000004c0)='./file0\x00', 0x80000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001000128008000100687372000400028008003a00f8ff07"], 0x38}}, 0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x20000004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) 10m5.099928857s ago: executing program 6 (id=5105): socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r4, 0xc018aec0, &(0x7f00000000c0)={0x1}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x4000000) sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r5, &(0x7f0000000780)=""/185, 0xb9, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xb}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc}, @TCA_RED_MAX_P={0x8, 0x3, 0x9}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x9}]}}]}, 0x150}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 10m4.889977307s ago: executing program 6 (id=5108): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x8081, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x348, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x328, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x314, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x3c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x100}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x10000}]}}}, {0xa0, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x90, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x7c, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFTA_BITWISE_OP={0x8}]}}}, {0x58, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x13}]}}}, {0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xf3, 0x6, 0x1, 0x0, "3c04fca5399c5fd637df6c49c16614d51c79ca126159fbe117fd8ee2f40467e55c4e6aaf280b180a83c6097ce274ad512fc932f981def5d1df358d25ac0e23f49dce04df0f24494cb267a39a5ee9839656765bed1e9d2d697a4b5cf57ec0afb58de36738f4f9778340bb792157b308fbf293c841be77d623bc6884106fa923397995f3b7aabd1d4ca81d21cfa2fbd6d0aabf98e5eba4a024c1ccb64067ca33d50eb48932e106f1b5e90f92df15a35fde07ca0575bf4c2b74198bf7f518a0ea9f091b3683a7cd592fcbe28c6a2c929209a1aaeb9f0a82717c28076efe77abe40250d43ff8885375c363153b2cecaf71"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x3a8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x5, 0x0, 0x2, 0xfff}, 0x101, 0x0, 0x40, 0x7, 0xd0a6, 0xf, 0x11, 0x9, 0x1, 0xfffffffc, {0x5, 0x6, 0x3, 0x4, 0x913, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 10m4.542251113s ago: executing program 35 (id=5108): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x8081, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x348, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x328, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}]}, {0x314, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x20c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x3c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x100}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x10000}]}}}, {0xa0, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x90, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x7c, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFTA_BITWISE_OP={0x8}]}}}, {0x58, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x13}]}}}, {0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0xf3, 0x6, 0x1, 0x0, "3c04fca5399c5fd637df6c49c16614d51c79ca126159fbe117fd8ee2f40467e55c4e6aaf280b180a83c6097ce274ad512fc932f981def5d1df358d25ac0e23f49dce04df0f24494cb267a39a5ee9839656765bed1e9d2d697a4b5cf57ec0afb58de36738f4f9778340bb792157b308fbf293c841be77d623bc6884106fa923397995f3b7aabd1d4ca81d21cfa2fbd6d0aabf98e5eba4a024c1ccb64067ca33d50eb48932e106f1b5e90f92df15a35fde07ca0575bf4c2b74198bf7f518a0ea9f091b3683a7cd592fcbe28c6a2c929209a1aaeb9f0a82717c28076efe77abe40250d43ff8885375c363153b2cecaf71"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x3a8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x5, 0x0, 0x2, 0xfff}, 0x101, 0x0, 0x40, 0x7, 0xd0a6, 0xf, 0x11, 0x9, 0x1, 0xfffffffc, {0x5, 0x6, 0x3, 0x4, 0x913, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 5m1.072392376s ago: executing program 5 (id=5806): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r6, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r5, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r5, r3, 0x80000) 4m58.221281271s ago: executing program 5 (id=5813): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x286}, "67718d0c27ca9a19", "bd6cc27971f4e670e79766bc116ffd5e", "3eb7a34d", "823d0c4607feb306"}, 0x28) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000005c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0), 0x8041) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x8004, @none, 0x2002, 0x1}, 0xe) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = socket$inet6(0xa, 0xa, 0x3) sendto$inet6(r6, &(0x7f0000000280)='2', 0x1, 0x24041045, &(0x7f00000001c0)={0xa, 0x2, 0x5, @loopback, 0x6c086dc6}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1001000040154220a905527df399bd52eb1f8dfd000000004000000000006b633aebea3c515592dd7b4c8d"], 0x0) 4m55.063049007s ago: executing program 5 (id=5818): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000000)={'dt2814\x00', [0x260, 0xfffffff9, 0xf, 0x8, 0x9, 0x3, 0x6623, 0x6, 0x8b, 0xc, 0x7, 0x6, 0x2, 0x4, 0x4, 0x0, 0x1, 0x7, 0x10004, 0x7, 0x10, 0x5, 0x10000, 0x6, 0xfffffffd, 0x6, 0xffffffff, 0x3, 0x54, 0x8, 0x4]}) 4m53.778187079s ago: executing program 5 (id=5822): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40894) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x33, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYRES64, @ANYRES64], 0xffffffa5) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0xd, 0x6, '9P2000'}, 0x13) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) 4m52.48969929s ago: executing program 5 (id=5824): r0 = socket(0x23, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f00000000c0)={0x800, 0x4, 0x7, 0x6, 0xf97}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default'], 0x2a, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0xffffffff, 0x4, 0x1, 0xc, 0x12, 0x4, 0xd, 0xfffffffc, 0x2, 0x1, 0xfffffffe, 0x1, 0x2, 0x101, 0x4, 0x9, 0x3, 0x352f, 0x99, 0xcaa7, 0x80, 0x20001e58, 0x7, 0x2000e67, 0x3c, 0x8, 0xfffffffe, 0x4, 0xfffffff8]}) getsockopt(r0, 0x200000000114, 0x271a, 0xffffffffffffffff, 0x0) 4m51.18614232s ago: executing program 5 (id=5827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x5d}], 0x1, 0x10022, 0x0) 4m36.778272655s ago: executing program 36 (id=5827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x5d}], 0x1, 0x10022, 0x0) 2m33.107815121s ago: executing program 7 (id=6135): r0 = syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe4000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r3, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000062c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) r5 = epoll_create1(0x0) epoll_wait(r4, 0x0, 0x0, 0x7ffe) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20000007}) read$usbfs(r4, &(0x7f00000001c0)=""/185, 0xb9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x7, 0x1]}}, 0x5c) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r7, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000000)=0x1f, 0x4) 2m30.979076682s ago: executing program 7 (id=6138): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000000780000061", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x19c, 0x0, 0xa10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48040) r3 = socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="6d61783d30303030573e2b67ee3030303030"]) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x3, 0x8) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, 0x0) timer_gettime(0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioprio_set$pid(0x1, r4, 0x2004) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2m29.896102025s ago: executing program 9 (id=6143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x20}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0xff2, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x3841b273) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040004) 2m29.331472254s ago: executing program 7 (id=6145): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000200)={0x10, 0x3f8, 0x10, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x2, 0x101, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) bind$netlink(r2, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) fanotify_init(0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000140)=0x2000) 2m27.983152944s ago: executing program 9 (id=6150): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) get_robust_list(0x0, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x1e) sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x89f2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019380)=""/102400, 0x19000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000ac0)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000200)=""/104, 0x68}], 0x1}, 0x80}], 0x1, 0x92, 0x0) 2m27.076167793s ago: executing program 9 (id=6153): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40894) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xffffffa5) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0xd, 0x6, '9P2000'}, 0x13) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 2m26.027888634s ago: executing program 9 (id=6157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) socket$inet6(0xa, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffff3d, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x7}]}}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x10, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0x7, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) ftruncate(r6, 0x200) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m25.973931192s ago: executing program 7 (id=6158): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r1, 0x1000000, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) init_module(&(0x7f0000000440)=ANY=[@ANYBLOB="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"/358], 0x78, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x48}}, 0x48000) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=@base={0x7, 0x9, 0x1, 0x0, 0x40, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0xc14f, 0x1}, 0x50) r3 = fsopen(&(0x7f0000000180)='binder\x00', 0x1) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000240)={0xb8b, 0x89, 0xa57, 0x9, 0x2, 0x4}) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m24.164265158s ago: executing program 7 (id=6165): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r3, 0x0, 0x500) (fail_nth: 1) 2m24.075373994s ago: executing program 9 (id=6166): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) write$FUSE_CREATE_OPEN(r2, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x101, 0x2000, 0x8e5, 0x0, 0x0, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00') read$FUSE(r3, &(0x7f0000000800)={0x2020}, 0x2020) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r4, 0x0, 0x500) 2m23.899634027s ago: executing program 9 (id=6167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) 2m23.888968871s ago: executing program 7 (id=6169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x45}, 0x94) syz_pidfd_open(0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f00000001a000100fef7ffff0001000000000000000000000000ffffd7000002fc0100000000000000000d00000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x1004001, 0x0) 2m9.357439285s ago: executing program 37 (id=6169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x45}, 0x94) syz_pidfd_open(0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f00000001a000100fef7ffff0001000000000000000000000000ffffd7000002fc0100000000000000000d00000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x1004001, 0x0) 2m8.791447856s ago: executing program 38 (id=6167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) 19.01926123s ago: executing program 4 (id=6484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40000008, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x80000001) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100080000000000ba2286000000000000008500006d00"], &(0x7f0000000100)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f2, &(0x7f0000000000)) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x6) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1f, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe4, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a"], 0xd) 16.207941015s ago: executing program 4 (id=6491): r0 = syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe4000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r3, 0x0, 0x0, 0xfffffe04, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f00000062c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) r6 = epoll_create1(0x0) epoll_wait(r5, 0x0, 0x0, 0x7ffe) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x20000007}) read$usbfs(r5, &(0x7f00000001c0)=""/185, 0xb9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x7, 0x1]}}, 0x5c) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r8, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000000)=0x1f, 0x4) 15.330641667s ago: executing program 1 (id=6494): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) socket$inet6(0xa, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x10, {0x60, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}, {0x7, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) ftruncate(r7, 0x200) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x5, 0x0}, 0xfffffffffffffc20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map, r0, 0x37, 0x202c, 0x0, @void, @void, @value=r12}, 0x20) 14.185015004s ago: executing program 1 (id=6496): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x59}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f00000024c0)="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", 0x1001}], 0x3) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000900)=0x19) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="da", 0x1}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r4 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="ab", 0x1}], 0x1}}], 0x1, 0x1) 13.40506629s ago: executing program 4 (id=6501): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3, 0x9}, &(0x7f0000000080)='\x00\x00', 0x2, r4) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r7, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000400028616573290000000000000000000000000600000000000000000000001400f2d5e3de3d7b4cd07ec3ee777de774fc7987cca4198902025af938cc6aedb8ede70ca5eb45d55c127640b17d7bdbb3b0ec89520927711e98fa432a14fde9f1c554a2bb4a737407eac813c9240b37732c29d539"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ptrace(0x10, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 12.503261218s ago: executing program 2 (id=6503): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000240)={0x4c000000, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_CANCEL(r0, 0x6407) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r1}, 0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x2c000) 11.852852088s ago: executing program 1 (id=6504): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r1, &(0x7f00000000c0)='./cgroup\x00', 0x2000, 0x8, &(0x7f0000000100)) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x21, 0xbe, {0xbe, 0x21, "121c27b6fb9ab91743ea147006de5fcaa6bd5de7756609e1c96689bb74221664133b0b75441e9dc7850b51e78a04150ec296eb2ce27b486a484e2eaf2e99184f1e855387bc2808dee320c35e2574337d4ffbdef3b49b655f644350c3d4d23367d0e4720aab6e1107e1c814516de5e5d60bfcdcac54af5db89e01ee67632bade8917c325b461d99f82af0b1405c629596dec41bf8fdc6515c9b25109188f00929a323226d55e3c43ebf66ac9520dd6f3d30f6f5636c133517f94ead6d"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x0, 0x30, 0xb5, "06237bfcaa3accacbec31018f39c62a2099f06c9815e21d2c78093bd7a20f77ac3334c92b28344cfbe7c2c0075fda6ce5f3cf9af7ce0957fb133ed1c2b3cb75714a2565d4a9e3471f678fddcb5f9dda28b01bc0fcc652b579f1e263c78d0a19cd65cd9020fcead2d08af9427b50990a4322874934dba592e39c5e65bf6d6a092710cb662021138c762f9f18016ffcfcf668f669adfd4b71e0fa9a71f74abddfb6dac31a40c608ab957d3c36caed4b4eb22e8466401"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0), &(0x7f00000005c0)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) 8.747483061s ago: executing program 2 (id=6506): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0xb, 0xcc, 0xe8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000880), 0x300, r4}, 0x38) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r6 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0) recvfrom$unix(r6, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0xffff0001, 0x4, 0x3, 0x1}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) 8.619736039s ago: executing program 8 (id=6508): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'s526\x00', [0x9e0, 0x2566, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x7, 0x1, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x7, 0x8000a, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000380)={0xc000003, 0xf, &(0x7f0000000080)=[0x3e9, 0xffffffff, 0x4, 0x204, 0x660, 0xfffbfff9, 0x7, 0xfffffff7, 0x8, 0x9, 0xffffffff, 0x42, 0x9, 0x4, 0x6], 0x0, 0x1}) 7.954954918s ago: executing program 3 (id=6509): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x3c1802, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x76, 0xabe, 0x9, 0x9, 0xffffff80, 0x142}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7ff}}, './file0\x00'}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0xdddd0000, 0x102000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x8000, 0x1}) 7.907908539s ago: executing program 1 (id=6510): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x2441, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000400)=0xb8e7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) init_module(&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x78, 0x0) 7.500161095s ago: executing program 4 (id=6511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000018c0)=""/102400, 0x19000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) unshare(0x20000400) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r2, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) shutdown(r3, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000000c0)={0x8, 0x3, 0x0, 0x9, 'syz0\x00', 0x91}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) write$RDMA_USER_CM_CMD_BIND(r5, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) 7.084331105s ago: executing program 8 (id=6512): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000000c0)={0x60, 0x1, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9, 0x0, 0x0, 0x6, 0x8, 0x48, 0x6d, 0x7e}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r3, @ANYBLOB="40002f800c00020000000000000000000800010000000000281b04282b0003800600010000000000080002000200000006000300a3aa00000820010000000000"], 0x5c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000280)=[{0x0, 0x2, 0x6, 0x6}, {0x0, 0xfffffffe, 0x9, 0xc}, {0x4, 0x1, 0x0, 0xc}, {0x5, 0x4, 0x5, 0xc}, {0x0, 0x2, 0x5, 0x8}, {0x1, 0x5, 0xc, 0x7}, {0x1, 0x3, 0x1, 0x2}, {0x1, 0x1, 0x8, 0xa}], 0x10, 0x2009}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600080600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket$inet6_sctp(0xa, 0x1, 0x84) eventfd2(0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x10af39, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r7, 0x0, 0x10000}, 0x18) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x102, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r8, 0x28, 0x2, 0xfffffffffffffffc, &(0x7f0000000040)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0100, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x16) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000080)='pipefs\x00', 0x2, &(0x7f00000000c0)='${^!%!^-\x06(\xdb&\x94}\\\x00') msgget$private(0x0, 0x181) syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 6.614629773s ago: executing program 3 (id=6513): syz_usb_connect(0x3, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x3f, 0x7c, 0x94, 0x20, 0xdb0, 0x3871, 0x875f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0xc, 0x5, 0x40, 0x4e}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 6.157486701s ago: executing program 1 (id=6514): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x21, 0xbe, {0xbe, 0x21, "121c27b6fb9ab91743ea147006de5fcaa6bd5de7756609e1c96689bb74221664133b0b75441e9dc7850b51e78a04150ec296eb2ce27b486a484e2eaf2e99184f1e855387bc2808dee320c35e2574337d4ffbdef3b49b655f644350c3d4d23367d0e4720aab6e1107e1c814516de5e5d60bfcdcac54af5db89e01ee67632bade8917c325b461d99f82af0b1405c629596dec41bf8fdc6515c9b25109188f00929a323226d55e3c43ebf66ac9520dd6f3d30f6f5636c133517f94ead6d"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x0, 0x30, 0xb5, "06237bfcaa3accacbec31018f39c62a2099f06c9815e21d2c78093bd7a20f77ac3334c92b28344cfbe7c2c0075fda6ce5f3cf9af7ce0957fb133ed1c2b3cb75714a2565d4a9e3471f678fddcb5f9dda28b01bc0fcc652b579f1e263c78d0a19cd65cd9020fcead2d08af9427b50990a4322874934dba592e39c5e65bf6d6a092710cb662021138c762f9f18016ffcfcf668f669adfd4b71e0fa9a71f74abddfb6dac31a40c608ab957d3c36caed4b4eb22e8466401"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0), &(0x7f00000005c0)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) 5.92299814s ago: executing program 8 (id=6515): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 5.920797554s ago: executing program 4 (id=6516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, 0x0, 0x5, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @local, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040), 0x2200000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x10000}}], [], 0x6b}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x26100, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0xfffc, r6, 0x0, 0x0, 0x0, 0x0, 0x4}]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fb, 0x0, 0x3d, 0x3}, 0x9c) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, 0x0, 0xffffff4d) creat(0x0, 0x13) io_submit(0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.723420361s ago: executing program 8 (id=6517): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000200)={0x10, 0x3f8, 0x10, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x2, 0x101, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) bind$netlink(r2, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) fanotify_init(0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) 5.389262249s ago: executing program 8 (id=6518): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x81, 0x0, 0xb49, 0x9, 0x2, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000af120000fffe07001100020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r4, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x4000042) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0xc3dc) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000340), &(0x7f0000000140)=0x80) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000400)=ANY=[@ANYBLOB="a0808e0008e1debb2cd4867b4fac7d502d9e02110000eb0702110000006f12dbf22fb2950002000ac122008c18de0edee62e0c79cd2b897b"], 0x38) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x7fff, 0x8, {{0x9, 0x4, 0x0, 0x3e, 0x24, 0x64, 0x0, 0x8, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4, 0x57}, @generic={0x94, 0xb, "03a2955e075a60ec07"}]}}}}}) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffc}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) 5.342916595s ago: executing program 2 (id=6519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000018c0)=""/102400, 0x19000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) unshare(0x20000400) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r2, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) shutdown(r3, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000000c0)={0x8, 0x3, 0x0, 0x9, 'syz0\x00', 0x91}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000080)=0xffffffffffffffff, 0x4) write$RDMA_USER_CM_CMD_BIND(r5, 0x0, 0x0) 4.86722031s ago: executing program 2 (id=6520): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r1, &(0x7f00000000c0)='./cgroup\x00', 0x2000, 0x8, &(0x7f0000000100)) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x21, 0xbe, {0xbe, 0x21, "121c27b6fb9ab91743ea147006de5fcaa6bd5de7756609e1c96689bb74221664133b0b75441e9dc7850b51e78a04150ec296eb2ce27b486a484e2eaf2e99184f1e855387bc2808dee320c35e2574337d4ffbdef3b49b655f644350c3d4d23367d0e4720aab6e1107e1c814516de5e5d60bfcdcac54af5db89e01ee67632bade8917c325b461d99f82af0b1405c629596dec41bf8fdc6515c9b25109188f00929a323226d55e3c43ebf66ac9520dd6f3d30f6f5636c133517f94ead6d"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x0, 0x30, 0xb5, "06237bfcaa3accacbec31018f39c62a2099f06c9815e21d2c78093bd7a20f77ac3334c92b28344cfbe7c2c0075fda6ce5f3cf9af7ce0957fb133ed1c2b3cb75714a2565d4a9e3471f678fddcb5f9dda28b01bc0fcc652b579f1e263c78d0a19cd65cd9020fcead2d08af9427b50990a4322874934dba592e39c5e65bf6d6a092710cb662021138c762f9f18016ffcfcf668f669adfd4b71e0fa9a71f74abddfb6dac31a40c608ab957d3c36caed4b4eb22e8466401"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0), &(0x7f00000005c0)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) 4.632391061s ago: executing program 4 (id=6521): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3, 0x9}, &(0x7f0000000080)='\x00\x00', 0x2, r4) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r7, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000400028616573290000000000000000000000000600000000000000000000001400f2d5e3de3d7b4cd07ec3ee777de774fc7987cca4198902025af938cc6aedb8ede70ca5eb45d55c127640b17d7bdbb3b0ec89520927711e98fa432a14fde9f1c554a2bb4a737407eac813c9240b37732c29d539"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ptrace(0x10, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 4.411325807s ago: executing program 3 (id=6522): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40894) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x33, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES64, @ANYRES64, @ANYRESHEX=r2, @ANYRES64], 0xffffffa5) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 3.596638307s ago: executing program 3 (id=6523): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000400)=0xb8e7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x1000000, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) init_module(&(0x7f0000000440)=ANY=[@ANYBLOB="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"/358], 0x78, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x48}}, 0x48000) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=@base={0x7, 0x9, 0x1, 0x0, 0x40, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0xc14f, 0x1}, 0x50) r4 = fsopen(&(0x7f0000000180)='binder\x00', 0x1) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000240)={0xb8b, 0x89, 0xa57, 0x9, 0x2, 0x4}) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0], 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.085943673s ago: executing program 1 (id=6524): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x81, 0x0, 0xb49, 0x9, 0x2, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000af120000fffe07001100020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r4, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x4000042) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0xc3dc) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000340), &(0x7f0000000140)=0x80) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(&(0x7f00000003c0)=@broadcast, &(0x7f0000000400)=ANY=[@ANYBLOB="a0808e0008e1debb2cd4867b4fac7d502d9e02110000eb0702110000006f12dbf22fb2950002000ac122008c18de0edee62e0c79cd2b897b"], 0x38) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x7fff, 0x8, {{0x9, 0x4, 0x0, 0x3e, 0x24, 0x64, 0x0, 0x8, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4, 0x57}, @generic={0x94, 0xb, "03a2955e075a60ec07"}]}}}}}) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40084149, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffc}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) 3.04590173s ago: executing program 3 (id=6525): unshare(0x28040680) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x264000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x40, r2, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xf7}]}, 0x40}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_io_uring_setup(0xd77, &(0x7f0000000100)={0x0, 0x17733, 0x80, 0x3, 0x350, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r10, 0xc4c85513, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.223765095s ago: executing program 2 (id=6526): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40894) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x33, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES64, @ANYRES64, @ANYRESHEX=r2, @ANYRES64], 0xffffffa5) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 1.112246111s ago: executing program 3 (id=6527): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0xb, 0xcc, 0xe8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x300, r4}, 0x38) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xfffffffe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r6 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0) recvfrom$unix(r6, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0xffff0001, 0x4, 0x3, 0x1}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) 273.225405ms ago: executing program 8 (id=6528): ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000000c0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000380)=[{&(0x7f00000006c0)="d6b5", 0x2}, {&(0x7f0000000280)="d51f75267bbfca63471230134926041e819fbcbe0974c2084ed67aa2e8b39cd6c9f050c178f8dffd8a16d6a2357aaf72912636b2b7", 0x35}], 0x2}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f6", 0x40}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'batadv_slave_0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c044}, 0x0) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000000140)=0x1, 0x4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r8) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r9, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044061}, 0x44814) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) mount(0x0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000340)='nfsd\x00', 0x1a0c099, 0x0) 0s ago: executing program 2 (id=6529): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000003200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000000200)={0x10, 0x3f8, 0x10, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x1}, 0x2000000}], 0x2, 0x101, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) bind$netlink(r2, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000140)=0x2000) kernel console output (not intermixed with test programs): with an inconsistent configuration, please check. [ 2466.175552][T29977] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6118'. [ 2466.593338][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 2466.593356][ T30] audit: type=1400 audit(1758095209.323:3471): avc: denied { create } for pid=29973 comm="syz.7.6118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2466.809433][T29605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2467.001608][ T30] audit: type=1400 audit(1758095210.216:3472): avc: denied { read write } for pid=29979 comm="syz.8.6120" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2467.145840][ T30] audit: type=1400 audit(1758095210.216:3473): avc: denied { open } for pid=29979 comm="syz.8.6120" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2467.201755][ T30] audit: type=1400 audit(1758095210.216:3474): avc: denied { mounton } for pid=29979 comm="syz.8.6120" path="/199/file0" dev="tmpfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2467.224527][ C0] vkms_vblank_simulate: vblank timer overrun [ 2467.231796][T29989] Invalid ELF header magic: != ELF [ 2467.276669][ T30] audit: type=1400 audit(1758095210.216:3475): avc: denied { mount } for pid=29979 comm="syz.8.6120" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2467.456916][ T30] audit: type=1400 audit(1758095210.321:3476): avc: denied { read write } for pid=29979 comm="syz.8.6120" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2467.481022][ C0] vkms_vblank_simulate: vblank timer overrun [ 2467.626187][ T30] audit: type=1400 audit(1758095210.321:3477): avc: denied { open } for pid=29979 comm="syz.8.6120" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2468.168315][ T30] audit: type=1400 audit(1758095210.468:3478): avc: denied { create } for pid=29975 comm="syz.9.6119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2468.315643][T29605] veth0_vlan: entered promiscuous mode [ 2468.335591][ T30] audit: type=1400 audit(1758095210.730:3479): avc: denied { unmount } for pid=25764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2468.838915][T29605] veth1_vlan: entered promiscuous mode [ 2468.926783][ T30] audit: type=1400 audit(1758095210.793:3480): avc: denied { bind } for pid=29975 comm="syz.9.6119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2469.015514][T29605] veth0_macvtap: entered promiscuous mode [ 2469.145614][T29605] veth1_macvtap: entered promiscuous mode [ 2469.300758][T29605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2469.323667][T29605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2469.426868][T30011] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2469.731989][T20998] Bluetooth: hci5: command 0x0406 tx timeout [ 2469.858614][T29002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.869611][T29002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.894440][T29002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2469.905819][T29002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2470.190328][T18495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2470.220143][T18495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2470.843097][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2470.865105][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2471.104310][T30028] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6130'. [ 2471.477018][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2471.477029][ T30] audit: type=1400 audit(1758095214.908:3506): avc: denied { write } for pid=30022 comm="syz.8.6129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2471.536139][ T30] audit: type=1400 audit(1758095214.950:3507): avc: denied { connect } for pid=30022 comm="syz.8.6129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2471.560031][ T30] audit: type=1400 audit(1758095214.950:3508): avc: denied { name_connect } for pid=30022 comm="syz.8.6129" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2471.869231][ T30] audit: type=1400 audit(1758095215.328:3509): avc: denied { write } for pid=30033 comm="syz.9.6132" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2471.898513][T30034] 9pnet_fd: Insufficient options for proto=fd [ 2471.929159][ T30] audit: type=1400 audit(1758095215.360:3510): avc: denied { open } for pid=30033 comm="syz.9.6132" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2472.075785][ T30] audit: type=1400 audit(1758095215.360:3511): avc: denied { read } for pid=30033 comm="syz.9.6132" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2472.099282][T25031] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 2472.714085][T25031] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 64 [ 2472.757947][T25031] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2472.798293][T25031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2472.938955][ T30] audit: type=1400 audit(1758095216.357:3512): avc: denied { read write } for pid=30038 comm="syz.9.6133" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2473.153570][T30032] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2473.226701][ T30] audit: type=1400 audit(1758095216.357:3513): avc: denied { open } for pid=30038 comm="syz.9.6133" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2473.794141][ T30] audit: type=1400 audit(1758095216.462:3514): avc: denied { ioctl } for pid=30038 comm="syz.9.6133" path="/dev/video7" dev="devtmpfs" ino=951 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2473.839160][ T30] audit: type=1400 audit(1758095217.207:3515): avc: denied { ioctl } for pid=30029 comm="syz.4.6034" path="socket:[111279]" dev="sockfs" ino=111279 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2474.002838][T25031] usb 5-1: string descriptor 0 read error: -71 [ 2474.089855][T25031] usb 5-1: USB disconnect, device number 99 [ 2475.377944][T30063] binder: Bad value for 'max' [ 2475.822973][T30072] Invalid ELF header magic: != ELF [ 2476.341510][T30075] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6142'. [ 2476.770582][T30077] 9pnet_fd: Insufficient options for proto=fd [ 2477.289737][T30090] lo: entered promiscuous mode [ 2477.294578][T30090] lo: entered allmulticast mode [ 2477.304257][T30090] tunl0: entered promiscuous mode [ 2477.309420][T30090] tunl0: entered allmulticast mode [ 2477.318107][T30090] gre0: entered promiscuous mode [ 2477.323114][T30090] gre0: entered allmulticast mode [ 2477.332259][T30090] gretap0: entered promiscuous mode [ 2477.338072][T30090] gretap0: entered allmulticast mode [ 2477.346986][T30090] erspan0: entered promiscuous mode [ 2477.352289][T30090] erspan0: entered allmulticast mode [ 2477.362483][T30090] ip_vti0: entered promiscuous mode [ 2477.367809][T30090] ip_vti0: entered allmulticast mode [ 2477.376705][T30090] ip6_vti0: entered promiscuous mode [ 2477.382044][T30090] ip6_vti0: entered allmulticast mode [ 2477.390986][T30090] sit0: entered promiscuous mode [ 2477.428064][T30090] sit0: entered allmulticast mode [ 2477.436658][T30090] ip6tnl0: entered promiscuous mode [ 2477.441975][T30090] ip6tnl0: entered allmulticast mode [ 2477.450895][T30090] ip6gre0: entered promiscuous mode [ 2477.456145][T30090] ip6gre0: entered allmulticast mode [ 2477.464735][T30090] syz_tun: entered promiscuous mode [ 2477.470012][T30090] syz_tun: entered allmulticast mode [ 2477.478493][T30090] ip6gretap0: entered promiscuous mode [ 2477.484077][T30090] ip6gretap0: entered allmulticast mode [ 2477.492612][T30090] bridge0: entered promiscuous mode [ 2477.498973][T30090] bridge0: entered allmulticast mode [ 2477.505069][T30090] vcan0: entered promiscuous mode [ 2477.510190][T30090] vcan0: entered allmulticast mode [ 2477.515577][T30090] bond0: entered promiscuous mode [ 2477.520665][T30090] bond_slave_0: entered promiscuous mode [ 2477.526455][T30090] bond_slave_1: entered promiscuous mode [ 2477.532169][T30090] bond0: entered allmulticast mode [ 2477.537303][T30090] bond_slave_0: entered allmulticast mode [ 2477.542999][T30090] bond_slave_1: entered allmulticast mode [ 2477.549365][T30090] team0: entered promiscuous mode [ 2477.554378][T30090] team_slave_0: entered promiscuous mode [ 2477.560161][T30090] team_slave_1: entered promiscuous mode [ 2477.566190][T30090] team0: entered allmulticast mode [ 2477.571302][T30090] team_slave_0: entered allmulticast mode [ 2477.577067][T30090] team_slave_1: entered allmulticast mode [ 2477.583509][T30090] dummy0: entered promiscuous mode [ 2477.588613][T30090] dummy0: entered allmulticast mode [ 2477.594450][T30090] nlmon0: entered promiscuous mode [ 2477.600174][T30090] nlmon0: entered allmulticast mode [ 2477.763005][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2477.763023][ T30] audit: type=1400 audit(1758095220.724:3525): avc: denied { bind } for pid=30083 comm="syz.7.6145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2478.080197][T30090] caif0: entered promiscuous mode [ 2478.085558][T30090] caif0: entered allmulticast mode [ 2478.090717][T30090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2478.184505][ T30] audit: type=1400 audit(1758095220.724:3526): avc: denied { accept } for pid=30083 comm="syz.7.6145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2478.248226][ T30] audit: type=1400 audit(1758095220.724:3527): avc: denied { write } for pid=30083 comm="syz.7.6145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2478.450185][ T30] audit: type=1400 audit(1758095220.724:3528): avc: denied { read } for pid=30083 comm="syz.7.6145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2478.822843][ T30] audit: type=1400 audit(1758095220.735:3529): avc: denied { create } for pid=30085 comm="syz.8.6146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2478.856861][ T30] audit: type=1400 audit(1758095220.735:3530): avc: denied { connect } for pid=30085 comm="syz.8.6146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2478.925574][ T30] audit: type=1400 audit(1758095222.015:3531): avc: denied { ioctl } for pid=30097 comm="syz.9.6150" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2479.183001][ T30] audit: type=1400 audit(1758095222.015:3532): avc: denied { create } for pid=30097 comm="syz.9.6150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2479.280867][ T30] audit: type=1400 audit(1758095222.582:3533): avc: denied { read } for pid=30097 comm="syz.9.6150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2479.405631][ T30] audit: type=1400 audit(1758095223.002:3534): avc: denied { create } for pid=30110 comm="syz.8.6152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2479.526791][T30117] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2480.471673][T30129] Invalid ELF header magic: != ELF [ 2481.675270][T30144] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6157'. [ 2482.137517][T30148] netfs: Couldn't get user pages (rc=-14) [ 2482.165378][T30152] netfs: Couldn't get user pages (rc=-14) [ 2482.171270][T30152] netfs: Zero-sized read [R=9] [ 2482.176445][T30148] netfs: Zero-sized read [R=8] [ 2482.265520][T30157] validate_nla: 44 callbacks suppressed [ 2482.265533][T30157] netlink: 'syz.1.6164': attribute type 2 has an invalid length. [ 2482.282101][T30157] netlink: 'syz.1.6164': attribute type 2 has an invalid length. [ 2482.299250][T30157] netlink: 'syz.1.6164': attribute type 2 has an invalid length. [ 2482.321807][T30157] netlink: 'syz.1.6164': attribute type 2 has an invalid length. [ 2482.351558][T30157] netlink: 'syz.1.6164': attribute type 2 has an invalid length. [ 2482.359775][T30157] netlink: 'syz.1.6164': attribute type 2 has an invalid length. [ 2482.368732][T30157] netlink: 'syz.1.6164': attribute type 2 has an invalid length. [ 2482.377866][T30157] netlink: 'syz.1.6164': attribute type 2 has an invalid length. [ 2482.389248][T30157] netlink: 'syz.1.6164': attribute type 2 has an invalid length. [ 2482.397625][T30157] netlink: 'syz.1.6164': attribute type 2 has an invalid length. [ 2482.628956][T30162] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2483.717912][T30169] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2483.717912][T30169] program syz.4.6171 not setting count and/or reply_len properly [ 2484.131813][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 2484.131830][ T30] audit: type=1400 audit(1758095227.758:3553): avc: denied { ioctl } for pid=30166 comm="syz.4.6171" path="/dev/sg0" dev="devtmpfs" ino=773 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2484.166498][ T30] audit: type=1400 audit(1758095227.842:3554): avc: denied { bind } for pid=30166 comm="syz.4.6171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2484.186042][ T30] audit: type=1400 audit(1758095227.842:3555): avc: denied { write } for pid=30166 comm="syz.4.6171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2484.514422][T30174] syzkaller0: entered promiscuous mode [ 2484.531615][T30174] syzkaller0: entered allmulticast mode [ 2487.244912][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2487.251272][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2488.408892][T30178] tipc: Enabling of bearer rejected, already enabled [ 2488.576783][T30183] tipc: Enabling of bearer rejected, already enabled [ 2489.619217][T30185] binder: Bad value for 'max' [ 2489.625557][T30185] bridge0: port 2(bridge_slave_1) entered disabled state [ 2489.632728][T30185] bridge0: port 1(bridge_slave_0) entered disabled state [ 2489.640151][T30185] bridge0: left promiscuous mode [ 2489.727201][T30192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6177'. [ 2490.124876][ T30] audit: type=1400 audit(1758095234.487:3556): avc: denied { create } for pid=30195 comm="syz.8.6179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2490.145068][ T30] audit: type=1400 audit(1758095234.487:3557): avc: denied { setopt } for pid=30195 comm="syz.8.6179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2490.475811][ T30] audit: type=1400 audit(1758095234.833:3558): avc: denied { mount } for pid=30197 comm="syz.4.6180" name="/" dev="ramfs" ino=111563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2491.338256][ T30] audit: type=1400 audit(1758095235.757:3559): avc: denied { execute } for pid=30204 comm="syz.1.6182" name="file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2491.400944][ T30] audit: type=1400 audit(1758095235.757:3560): avc: denied { execute_no_trans } for pid=30204 comm="syz.1.6182" path="/165/file0" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2491.912131][ T30] audit: type=1400 audit(1758095236.366:3561): avc: denied { bind } for pid=30212 comm="syz.4.6184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2492.034505][ T30] audit: type=1400 audit(1758095236.366:3562): avc: denied { listen } for pid=30212 comm="syz.4.6184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2492.088803][ T30] audit: type=1400 audit(1758095236.377:3563): avc: denied { accept } for pid=30212 comm="syz.4.6184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2492.109032][ T30] audit: type=1400 audit(1758095236.377:3564): avc: denied { read } for pid=30212 comm="syz.4.6184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2492.499828][ T30] audit: type=1400 audit(1758095236.986:3565): avc: denied { read } for pid=30218 comm="syz.1.6185" name="usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2492.604593][T30222] tipc: Enabling of bearer rejected, already enabled [ 2493.989257][T30238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2494.644241][T29920] Bluetooth: hci1: connection err: -111 [ 2495.039516][T30253] Invalid ELF header magic: != ELF [ 2495.598666][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2495.598682][ T30] audit: type=1400 audit(1758095240.240:3573): avc: denied { create } for pid=30257 comm="syz.4.6195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2495.627973][T30258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=30258 comm=syz.4.6195 [ 2495.777113][ T30] audit: type=1400 audit(1758095240.418:3574): avc: denied { ioctl } for pid=30257 comm="syz.4.6195" path="socket:[112673]" dev="sockfs" ino=112673 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2495.783346][T30260] overlayfs: upper fs does not support file handles, falling back to index=off. [ 2496.867987][T30271] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2497.654439][T30277] 9pnet_fd: Insufficient options for proto=fd [ 2497.977886][ T5909] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2498.286898][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2498.328127][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2498.362203][ T5909] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2498.372896][T20998] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2498.399951][T20998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2498.410267][T20998] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2498.412158][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.446766][T20998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2498.577060][T20998] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2498.608743][ T5909] usb 5-1: config 0 descriptor?? [ 2498.615855][ T30] audit: type=1400 audit(1758095243.389:3575): avc: denied { mounton } for pid=30285 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2498.644172][T13736] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2498.941269][T29920] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2498.955656][T29920] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2498.965004][T29920] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2498.975027][T29920] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2498.983779][T29920] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2499.037516][T13736] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2499.052434][T13736] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2499.075717][T13736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2499.093607][T13736] usb 2-1: config 0 descriptor?? [ 2499.113742][T13736] pwc: Askey VC010 type 2 USB webcam detected. [ 2499.120012][ T30] audit: type=1400 audit(1758095243.935:3576): avc: denied { ioctl } for pid=30291 comm="syz.8.6204" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64a2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2499.406022][ T30] audit: type=1400 audit(1758095244.219:3577): avc: denied { getattr } for pid=30282 comm="syz.1.6203" path="cgroup:[4026532855]" dev="nsfs" ino=4026532855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2499.663038][T13736] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2499.702255][T30285] chnl_net:caif_netlink_parms(): no params data found [ 2499.861564][T13736] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2499.871136][T30285] bridge0: port 1(bridge_slave_0) entered blocking state [ 2499.879163][T13736] pwc: recv_control_msg error -32 req 04 val 1000 [ 2499.879648][T30285] bridge0: port 1(bridge_slave_0) entered disabled state [ 2499.898895][T13736] pwc: recv_control_msg error -32 req 04 val 1300 [ 2499.899094][T30285] bridge_slave_0: entered allmulticast mode [ 2499.906025][T13736] pwc: recv_control_msg error -32 req 04 val 1400 [ 2499.922174][T13736] pwc: recv_control_msg error -32 req 02 val 2000 [ 2499.929279][T13736] pwc: recv_control_msg error -32 req 02 val 2100 [ 2499.945430][T30285] bridge_slave_0: entered promiscuous mode [ 2499.995085][T30285] bridge0: port 2(bridge_slave_1) entered blocking state [ 2500.009021][T30285] bridge0: port 2(bridge_slave_1) entered disabled state [ 2500.018909][T30285] bridge_slave_1: entered allmulticast mode [ 2500.034502][T30285] bridge_slave_1: entered promiscuous mode [ 2500.133841][T13736] pwc: recv_control_msg error -71 req 02 val 2500 [ 2500.163265][T13736] pwc: recv_control_msg error -71 req 02 val 2400 [ 2500.181039][T30285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2500.184128][T13736] pwc: recv_control_msg error -71 req 02 val 2600 [ 2500.195381][T30285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2500.637053][T29920] Bluetooth: hci4: command tx timeout [ 2500.652838][ T5909] usbhid 5-1:0.0: can't add hid device: -71 [ 2500.663047][ T5909] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2500.685363][ T5909] usb 5-1: USB disconnect, device number 100 [ 2500.711972][T30288] chnl_net:caif_netlink_parms(): no params data found [ 2500.737159][T13736] pwc: recv_control_msg error -71 req 02 val 2900 [ 2500.750188][T30285] team0: Port device team_slave_0 added [ 2500.757590][T13736] pwc: recv_control_msg error -71 req 02 val 2800 [ 2500.770439][T30285] team0: Port device team_slave_1 added [ 2500.781030][T13736] pwc: recv_control_msg error -71 req 04 val 1100 [ 2500.797743][T13736] pwc: recv_control_msg error -71 req 04 val 1200 [ 2500.807207][T13736] pwc: Registered as video103. [ 2500.832031][T13736] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input86 [ 2500.848738][T13736] usb 2-1: USB disconnect, device number 65 [ 2500.959949][T29920] Bluetooth: hci6: command tx timeout [ 2501.641067][T30285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2501.641080][T30285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2501.641096][T30285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2501.642247][T30285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2501.642257][T30285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2501.642272][T30285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2501.668065][ T30] audit: type=1400 audit(1758095246.602:3578): avc: denied { view } for pid=30319 comm="syz.8.6209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2501.704138][ C0] vkms_vblank_simulate: vblank timer overrun [ 2501.787301][T30288] bridge0: port 1(bridge_slave_0) entered blocking state [ 2501.787353][T30288] bridge0: port 1(bridge_slave_0) entered disabled state [ 2501.787551][T30288] bridge_slave_0: entered allmulticast mode [ 2501.788417][T30288] bridge_slave_0: entered promiscuous mode [ 2501.789628][T30288] bridge0: port 2(bridge_slave_1) entered blocking state [ 2501.789675][T30288] bridge0: port 2(bridge_slave_1) entered disabled state [ 2501.789760][T30288] bridge_slave_1: entered allmulticast mode [ 2501.790560][T30288] bridge_slave_1: entered promiscuous mode [ 2501.831246][T30288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2501.833420][T30288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2501.901228][T30285] hsr_slave_0: entered promiscuous mode [ 2501.902734][T30285] hsr_slave_1: entered promiscuous mode [ 2501.903121][T30285] debugfs: 'hsr0' already exists in 'hsr' [ 2501.903135][T30285] Cannot create hsr debugfs directory [ 2502.122205][T30324] tty tty36: ldisc open failed (-12), clearing slot 35 [ 2502.433437][T30288] team0: Port device team_slave_0 added [ 2502.536570][T30288] team0: Port device team_slave_1 added [ 2502.563907][T29920] Bluetooth: hci4: command tx timeout [ 2502.689030][ T30] audit: type=1400 audit(1758095247.683:3579): avc: denied { read } for pid=30335 comm="syz.4.6211" dev="nsfs" ino=4026533089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2502.725420][T30288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2502.749602][T30288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2502.758088][ T30] audit: type=1400 audit(1758095247.683:3580): avc: denied { open } for pid=30335 comm="syz.4.6211" path="net:[4026533089]" dev="nsfs" ino=4026533089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2502.855109][ T30] audit: type=1400 audit(1758095247.683:3581): avc: denied { create } for pid=30335 comm="syz.4.6211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2502.884137][ T30] audit: type=1400 audit(1758095247.756:3582): avc: denied { map_create } for pid=30335 comm="syz.4.6211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2502.921602][T30288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2502.940388][T29920] Bluetooth: hci6: command tx timeout [ 2503.028109][T30288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2503.035092][T30288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2503.081305][ T30] audit: type=1400 audit(1758095247.756:3583): avc: denied { create } for pid=30335 comm="syz.4.6211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2503.162371][ T30] audit: type=1400 audit(1758095247.987:3584): avc: denied { read write } for pid=25764 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2503.167796][T30288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2503.200314][ T30] audit: type=1400 audit(1758095247.987:3585): avc: denied { open } for pid=25764 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2503.224618][ C0] vkms_vblank_simulate: vblank timer overrun [ 2503.241568][ T30] audit: type=1400 audit(1758095247.998:3586): avc: denied { ioctl } for pid=25764 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2503.274021][ T30] audit: type=1400 audit(1758095248.145:3587): avc: denied { create } for pid=30339 comm="syz.8.6212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2503.887336][T30288] hsr_slave_0: entered promiscuous mode [ 2503.930824][T30288] hsr_slave_1: entered promiscuous mode [ 2503.951022][T30288] debugfs: 'hsr0' already exists in 'hsr' [ 2503.956809][T30288] Cannot create hsr debugfs directory [ 2504.557719][T30358] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2504.731062][T29920] Bluetooth: hci4: command tx timeout [ 2504.931879][T29920] Bluetooth: hci6: command tx timeout [ 2505.045324][T30357] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6217'. [ 2505.102888][T30357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6217'. [ 2505.387058][T30363] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2505.387058][T30363] program syz.4.6218 not setting count and/or reply_len properly [ 2506.324801][T30366] validate_nla: 44 callbacks suppressed [ 2506.324885][T30366] netlink: 'syz.4.6219': attribute type 2 has an invalid length. [ 2506.341156][T30366] netlink: 'syz.4.6219': attribute type 2 has an invalid length. [ 2506.349385][T30366] netlink: 'syz.4.6219': attribute type 2 has an invalid length. [ 2506.393449][T30368] 9pnet_fd: Insufficient options for proto=fd [ 2506.417526][T30366] netlink: 'syz.4.6219': attribute type 2 has an invalid length. [ 2506.426699][T30366] netlink: 'syz.4.6219': attribute type 2 has an invalid length. [ 2506.440985][T30366] netlink: 'syz.4.6219': attribute type 2 has an invalid length. [ 2506.450937][T30366] netlink: 'syz.4.6219': attribute type 2 has an invalid length. [ 2506.464462][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 2506.472777][T30366] netlink: 'syz.4.6219': attribute type 2 has an invalid length. [ 2506.481620][ T30] audit: type=1400 audit(1758095251.651:3634): avc: denied { create } for pid=30371 comm="syz.8.6222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2506.507327][ T30] audit: type=1400 audit(1758095251.693:3635): avc: denied { write } for pid=30371 comm="syz.8.6222" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2506.530498][ C0] vkms_vblank_simulate: vblank timer overrun [ 2506.537331][T30366] netlink: 'syz.4.6219': attribute type 2 has an invalid length. [ 2506.548321][T30366] netlink: 'syz.4.6219': attribute type 2 has an invalid length. [ 2506.558790][ T30] audit: type=1400 audit(1758095251.735:3636): avc: denied { read } for pid=30373 comm="syz.1.6223" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2506.598042][ T30] audit: type=1400 audit(1758095251.735:3637): avc: denied { open } for pid=30373 comm="syz.1.6223" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2506.621830][ C0] vkms_vblank_simulate: vblank timer overrun [ 2506.684830][T29920] Bluetooth: hci4: command tx timeout [ 2506.701917][ T30] audit: type=1400 audit(1758095251.893:3638): avc: denied { read } for pid=30373 comm="syz.1.6223" dev="nsfs" ino=4026532857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2506.825771][ T30] audit: type=1400 audit(1758095251.893:3639): avc: denied { open } for pid=30373 comm="syz.1.6223" path="net:[4026532857]" dev="nsfs" ino=4026532857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2506.849151][ C0] vkms_vblank_simulate: vblank timer overrun [ 2506.859789][ T30] audit: type=1400 audit(1758095251.893:3640): avc: denied { create } for pid=30373 comm="syz.1.6223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2506.903612][T29920] Bluetooth: hci6: command tx timeout [ 2506.915460][ T30] audit: type=1400 audit(1758095251.924:3641): avc: denied { map_create } for pid=30373 comm="syz.1.6223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2507.015183][T30285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2507.026624][ T30] audit: type=1400 audit(1758095251.935:3642): avc: denied { create } for pid=30373 comm="syz.1.6223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2507.058620][T30285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2507.083980][ T30] audit: type=1400 audit(1758095252.218:3643): avc: denied { write } for pid=30285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2507.117851][T30285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2507.176852][T30285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2507.854189][T30288] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2507.865083][T21916] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 2507.871705][T30288] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2507.886639][T30288] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2507.898070][T30288] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2507.931342][T30285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2507.966796][T30285] 8021q: adding VLAN 0 to HW filter on device team0 [ 2507.984851][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 2507.991959][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2508.012397][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.019600][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2508.052052][T21916] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 2508.060474][T21916] usb 5-1: config 1 has no interface number 0 [ 2508.065292][T10874] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2508.070785][T21916] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 80, setting to 64 [ 2508.085299][T21916] usb 5-1: config 1 interface 105 has no altsetting 0 [ 2508.103405][T21916] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2508.112487][T21916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2508.123331][T21916] usb 5-1: Product: syz [ 2508.128457][T21916] usb 5-1: Manufacturer: syz [ 2508.155058][T30288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2508.161808][T21916] usb 5-1: SerialNumber: syz [ 2508.170473][T30384] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2508.201661][T30288] 8021q: adding VLAN 0 to HW filter on device team0 [ 2508.205200][T10874] usb 2-1: device descriptor read/64, error -71 [ 2508.229228][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2508.236400][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2508.264012][T18495] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.271191][T18495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2508.353439][T30285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2508.434511][T30285] veth0_vlan: entered promiscuous mode [ 2508.447782][T10874] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2508.464321][T30285] veth1_vlan: entered promiscuous mode [ 2508.520125][T30285] veth0_macvtap: entered promiscuous mode [ 2508.531393][T30285] veth1_macvtap: entered promiscuous mode [ 2508.555037][T30285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2508.569222][T30285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2508.589896][T10874] usb 2-1: device descriptor read/64, error -71 [ 2508.600485][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2508.611837][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2508.624548][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2508.635225][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2508.648707][T30384] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2508.707341][T30288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2508.723056][T10874] usb usb2-port1: attempt power cycle [ 2508.751462][T24826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2508.759288][T24826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2508.795380][T24826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2508.805379][T24826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2508.842158][T30288] veth0_vlan: entered promiscuous mode [ 2508.857937][T21916] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 2508.873670][T21916] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 2508.886851][T21916] usb 5-1: USB disconnect, device number 101 [ 2508.891578][T30288] veth1_vlan: entered promiscuous mode [ 2508.955321][T30288] veth0_macvtap: entered promiscuous mode [ 2508.985444][T30288] veth1_macvtap: entered promiscuous mode [ 2509.289542][T30288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2509.382261][T10874] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2509.583578][T30288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2509.966809][T29002] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2510.042796][T24826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2510.106521][T24826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2511.100146][T24826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2511.146420][T10874] usb 2-1: device descriptor read/8, error -71 [ 2511.279467][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 2511.279484][ T30] audit: type=1400 audit(1758095256.690:3688): avc: denied { write } for pid=30408 comm="syz.4.6227" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2511.465972][ T30] audit: type=1400 audit(1758095256.690:3689): avc: denied { open } for pid=30408 comm="syz.4.6227" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2511.611897][ T30] audit: type=1400 audit(1758095256.774:3690): avc: denied { append } for pid=30410 comm="syz.1.6229" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2511.644749][T30415] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2511.644749][T30415] program syz.4.6227 not setting count and/or reply_len properly [ 2511.710008][T30416] comedi: No check for data length of config insn id 1001 is implemented [ 2511.718621][T30416] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 2511.727906][T30416] comedi: Assuming n=15 is correct [ 2512.342448][ T30] audit: type=1400 audit(1758095257.079:3691): avc: denied { ioctl } for pid=30408 comm="syz.4.6227" path="/dev/sg0" dev="devtmpfs" ino=773 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2512.368123][ T30] audit: type=1400 audit(1758095257.121:3692): avc: denied { create } for pid=30408 comm="syz.4.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2512.388361][ T30] audit: type=1400 audit(1758095257.121:3693): avc: denied { ioctl } for pid=30408 comm="syz.4.6227" path="socket:[113673]" dev="sockfs" ino=113673 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2512.415722][ T30] audit: type=1400 audit(1758095257.131:3694): avc: denied { create } for pid=30408 comm="syz.4.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2512.436125][ T30] audit: type=1400 audit(1758095257.131:3695): avc: denied { bind } for pid=30408 comm="syz.4.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2512.483592][ T30] audit: type=1400 audit(1758095257.131:3696): avc: denied { write } for pid=30408 comm="syz.4.6227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2512.638499][ T30] audit: type=1400 audit(1758095257.940:3697): avc: denied { write } for pid=30413 comm="syz.2.6228" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2513.723721][ T5958] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 2513.742735][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2513.751591][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2513.870713][T24826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2513.879442][T24826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2513.933539][ T5958] usb 5-1: Using ep0 maxpacket: 8 [ 2513.940202][ T5958] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 2513.956337][ T5958] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 2513.988676][ T5958] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 2514.009961][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2515.555299][ T5958] usb 5-1: Product: syz [ 2515.559485][ T5958] usb 5-1: Manufacturer: syz [ 2515.564340][ T5958] usb 5-1: SerialNumber: syz [ 2516.083236][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 2516.083254][ T30] audit: type=1400 audit(1758095261.740:3713): avc: denied { bind } for pid=30442 comm="syz.1.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2516.200048][ T30] audit: type=1400 audit(1758095261.803:3714): avc: denied { listen } for pid=30442 comm="syz.1.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2516.331807][ T30] audit: type=1400 audit(1758095261.803:3715): avc: denied { connect } for pid=30442 comm="syz.1.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2516.386425][ T30] audit: type=1400 audit(1758095261.845:3716): avc: denied { write } for pid=30442 comm="syz.1.6234" path="socket:[113607]" dev="sockfs" ino=113607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2516.531884][ T30] audit: type=1400 audit(1758095261.866:3717): avc: denied { accept } for pid=30442 comm="syz.1.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2516.620425][ T5958] usb 5-1: can't set config #127, error -71 [ 2516.696885][ T30] audit: type=1400 audit(1758095261.876:3718): avc: denied { read } for pid=30442 comm="syz.1.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2516.720368][ T30] audit: type=1400 audit(1758095261.876:3719): avc: denied { write } for pid=30442 comm="syz.1.6234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2516.726937][ T5958] usb 5-1: USB disconnect, device number 102 [ 2517.010344][T30454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6235'. [ 2517.161197][T30455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6235'. [ 2517.429745][ T30] audit: type=1400 audit(1758095263.157:3720): avc: denied { create } for pid=30452 comm="syz.4.6236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2517.649798][ T30] audit: type=1400 audit(1758095263.168:3721): avc: denied { bind } for pid=30452 comm="syz.4.6236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2517.669782][ T30] audit: type=1400 audit(1758095263.168:3722): avc: denied { setopt } for pid=30452 comm="syz.4.6236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2517.914012][T30463] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2519.202581][T30477] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2519.202581][T30477] program syz.3.6241 not setting count and/or reply_len properly [ 2520.234153][T30476] block device autoloading is deprecated and will be removed. [ 2520.243562][T30476] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2521.462087][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2521.462103][ T30] audit: type=1400 audit(1758095267.388:3742): avc: denied { read } for pid=30487 comm="syz.8.6244" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2521.534195][T30495] validate_nla: 43 callbacks suppressed [ 2521.534214][T30495] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 2521.550014][ T30] audit: type=1400 audit(1758095267.430:3743): avc: denied { open } for pid=30487 comm="syz.8.6244" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2521.588834][ T30] audit: type=1400 audit(1758095267.524:3744): avc: denied { create } for pid=30487 comm="syz.8.6244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2521.613574][T30496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2521.655169][T30495] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 2521.677005][T30495] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 2521.693067][T30495] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 2521.705459][T30495] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 2521.720466][T30495] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 2521.730821][T30495] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 2521.746110][T30495] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 2521.755540][ T30] audit: type=1400 audit(1758095267.640:3745): avc: denied { ioctl } for pid=30487 comm="syz.8.6244" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2521.787417][T30495] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 2521.798172][T30495] netlink: 'syz.4.6245': attribute type 2 has an invalid length. [ 2521.865665][ T30] audit: type=1400 audit(1758095267.808:3746): avc: denied { read } for pid=30497 comm="syz.1.6246" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2522.120557][ T30] audit: type=1400 audit(1758095267.808:3747): avc: denied { open } for pid=30497 comm="syz.1.6246" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2522.473822][T30508] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2522.887786][ T30] audit: type=1400 audit(1758095267.808:3748): avc: denied { ioctl } for pid=30497 comm="syz.1.6246" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2523.347679][ T30] audit: type=1400 audit(1758095269.361:3749): avc: denied { write } for pid=30511 comm="syz.2.6249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2523.582560][ T30] audit: type=1400 audit(1758095269.361:3750): avc: denied { connect } for pid=30511 comm="syz.2.6249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2523.634115][ T30] audit: type=1400 audit(1758095269.361:3751): avc: denied { name_connect } for pid=30511 comm="syz.2.6249" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2523.656294][ C1] vkms_vblank_simulate: vblank timer overrun [ 2524.131220][T25004] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 2524.322371][T30525] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6252'. [ 2524.397331][T25004] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 2524.654258][T25004] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 2524.686141][T25004] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2524.728594][T25004] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2524.759133][T25004] usb 4-1: string descriptor 0 read error: -22 [ 2524.771218][T25004] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2524.780533][T25004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2524.900027][T25004] usb 4-1: config 0 descriptor?? [ 2525.161213][T25004] hub 4-1:0.0: bad descriptor, ignoring hub [ 2525.177498][T25004] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2526.041322][T21916] usb 4-1: USB disconnect, device number 121 [ 2526.363895][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2526.363914][ T30] audit: type=1400 audit(1758095272.353:3755): avc: denied { read } for pid=30541 comm="syz.1.6257" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2526.412782][ T30] audit: type=1400 audit(1758095272.353:3756): avc: denied { open } for pid=30541 comm="syz.1.6257" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2526.446934][T30543] binder: 30541:30543 ioctl c0306201 0 returned -14 [ 2526.525487][ T30] audit: type=1400 audit(1758095272.626:3757): avc: denied { ioctl } for pid=30541 comm="syz.1.6257" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2526.577582][ T30] audit: type=1400 audit(1758095272.637:3758): avc: denied { map } for pid=30541 comm="syz.1.6257" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2526.619991][ T30] audit: type=1400 audit(1758095272.679:3759): avc: denied { create } for pid=30532 comm="syz.4.6255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2526.768719][ T30] audit: type=1400 audit(1758095272.952:3760): avc: denied { create } for pid=30547 comm="syz.2.6259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2526.984948][ T30] audit: type=1400 audit(1758095273.183:3761): avc: denied { unmount } for pid=30288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 2527.037394][ T30] audit: type=1400 audit(1758095273.246:3762): avc: denied { getopt } for pid=30546 comm="syz.4.6258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2527.565033][T30559] Invalid ELF header magic: != ELF [ 2527.632977][ T30] audit: type=1400 audit(1758095273.771:3763): avc: denied { create } for pid=30555 comm="syz.2.6262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2527.807722][ T30] audit: type=1400 audit(1758095273.792:3764): avc: denied { module_load } for pid=30555 comm="syz.2.6262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2530.647062][T30588] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2530.647062][T30588] program syz.1.6268 not setting count and/or reply_len properly [ 2531.016171][T30593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6269'. [ 2532.321386][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2532.321397][ T30] audit: type=1400 audit(1758095278.789:3775): avc: denied { read } for pid=30597 comm="syz.3.6272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2532.346833][ C1] vkms_vblank_simulate: vblank timer overrun [ 2532.418284][T30607] Invalid ELF header magic: != ELF [ 2532.555743][T30610] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6276'. [ 2532.619675][ T30] audit: type=1400 audit(1758095279.104:3776): avc: denied { connect } for pid=30611 comm="syz.4.6275" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2532.959112][ T30] audit: type=1400 audit(1758095279.429:3777): avc: denied { setopt } for pid=30611 comm="syz.4.6275" lport=60 faddr=fc02:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2532.982240][ T30] audit: type=1400 audit(1758095279.429:3778): avc: denied { write } for pid=30611 comm="syz.4.6275" path="socket:[114342]" dev="sockfs" ino=114342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2533.006749][T21916] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2533.174607][T21916] usb 2-1: Using ep0 maxpacket: 16 [ 2533.183355][T21916] usb 2-1: config 0 has no interfaces? [ 2533.193588][T21916] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 2533.203484][T21916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2533.212591][T21916] usb 2-1: Product: syz [ 2533.216913][T21916] usb 2-1: Manufacturer: syz [ 2533.235407][T21916] usb 2-1: SerialNumber: syz [ 2533.245896][T21916] usb 2-1: config 0 descriptor?? [ 2533.522311][T30603] tipc: New replicast peer: 0.0.0.0 [ 2533.530527][T30603] tipc: Enabled bearer , priority 10 [ 2533.764172][T30631] Invalid ELF header magic: != ELF [ 2533.942267][ T30] audit: type=1400 audit(1758095280.479:3779): avc: denied { create } for pid=30636 comm="syz.3.6281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2534.706793][T30647] validate_nla: 43 callbacks suppressed [ 2534.706807][T30647] netlink: 'syz.4.6284': attribute type 2 has an invalid length. [ 2534.731252][T30647] netlink: 'syz.4.6284': attribute type 2 has an invalid length. [ 2534.740098][T30647] netlink: 'syz.4.6284': attribute type 2 has an invalid length. [ 2534.764684][T30647] netlink: 'syz.4.6284': attribute type 2 has an invalid length. [ 2534.788360][T30647] netlink: 'syz.4.6284': attribute type 2 has an invalid length. [ 2534.799372][T30647] netlink: 'syz.4.6284': attribute type 2 has an invalid length. [ 2534.807913][T30647] netlink: 'syz.4.6284': attribute type 2 has an invalid length. [ 2534.816336][T30647] netlink: 'syz.4.6284': attribute type 2 has an invalid length. [ 2534.824624][T30647] netlink: 'syz.4.6284': attribute type 2 has an invalid length. [ 2534.832988][T30647] netlink: 'syz.4.6284': attribute type 2 has an invalid length. [ 2535.949371][T25004] usb 2-1: USB disconnect, device number 70 [ 2536.133618][ T30] audit: type=1400 audit(1758095282.767:3780): avc: denied { create } for pid=30652 comm="syz.2.6286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2537.342221][T30667] Invalid ELF header magic: != ELF [ 2537.607694][T30670] tipc: Started in network mode [ 2537.612681][T30670] tipc: Node identity ac1414aa, cluster identity 4711 [ 2537.621577][T30670] tipc: Enabled bearer , priority 10 [ 2538.745202][ T5965] tipc: Node number set to 2886997162 [ 2539.170718][T30680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2539.363897][ T30] audit: type=1400 audit(1758095286.137:3781): avc: denied { map_create } for pid=30675 comm="syz.1.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2539.423607][ T30] audit: type=1400 audit(1758095286.137:3782): avc: denied { map_read map_write } for pid=30675 comm="syz.1.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2539.477485][ T30] audit: type=1400 audit(1758095286.158:3783): avc: denied { bind } for pid=30675 comm="syz.1.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2539.497442][ T30] audit: type=1400 audit(1758095286.158:3784): avc: denied { listen } for pid=30675 comm="syz.1.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2539.518250][ T30] audit: type=1400 audit(1758095286.169:3785): avc: denied { create } for pid=30675 comm="syz.1.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2539.537919][ C0] vkms_vblank_simulate: vblank timer overrun [ 2539.728198][ T30] audit: type=1400 audit(1758095286.169:3786): avc: denied { connect } for pid=30675 comm="syz.1.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2539.769448][ T30] audit: type=1400 audit(1758095286.169:3787): avc: denied { write } for pid=30675 comm="syz.1.6292" path="socket:[115138]" dev="sockfs" ino=115138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2539.793157][ C0] vkms_vblank_simulate: vblank timer overrun [ 2539.799579][ T30] audit: type=1400 audit(1758095286.179:3788): avc: denied { accept } for pid=30675 comm="syz.1.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2539.894362][ T30] audit: type=1400 audit(1758095286.179:3789): avc: denied { read } for pid=30675 comm="syz.1.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2540.751666][ T30] audit: type=1400 audit(1758095286.295:3790): avc: denied { read } for pid=30682 comm="syz.8.6294" dev="nsfs" ino=4026532805 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2540.772901][ C0] vkms_vblank_simulate: vblank timer overrun [ 2541.843372][ T5965] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2542.805044][ T5965] usb 2-1: Using ep0 maxpacket: 16 [ 2542.811992][ T5965] usb 2-1: config 0 has no interfaces? [ 2542.863200][ T5965] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 2542.895873][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2542.909718][ T5965] usb 2-1: Product: syz [ 2543.386626][ T5965] usb 2-1: Manufacturer: syz [ 2543.524613][ T5965] usb 2-1: SerialNumber: syz [ 2543.891522][T27196] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2544.107790][ T5965] usb 2-1: config 0 descriptor?? [ 2544.280542][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 2544.280553][ T30] audit: type=1400 audit(1758095291.344:3837): avc: denied { create } for pid=30727 comm="syz.3.6306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2544.309861][T27196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2544.364182][T27196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2544.380527][ T30] audit: type=1400 audit(1758095291.449:3838): avc: denied { write } for pid=30729 comm="syz.8.6305" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2544.414725][T27196] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2544.424506][T27196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.453711][ T30] audit: type=1400 audit(1758095291.449:3839): avc: denied { open } for pid=30729 comm="syz.8.6305" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2544.502906][T27196] usb 5-1: config 0 descriptor?? [ 2544.543914][ T30] audit: type=1400 audit(1758095291.502:3840): avc: denied { create } for pid=30727 comm="syz.3.6306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2544.605375][ T30] audit: type=1400 audit(1758095291.502:3841): avc: denied { setopt } for pid=30727 comm="syz.3.6306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2544.638589][ T30] audit: type=1400 audit(1758095291.502:3842): avc: denied { read } for pid=30727 comm="syz.3.6306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2544.707534][ T30] audit: type=1400 audit(1758095291.586:3843): avc: denied { read } for pid=30729 comm="syz.8.6305" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2544.813288][ T30] audit: type=1400 audit(1758095291.586:3844): avc: denied { mounton } for pid=30729 comm="syz.8.6305" path="/244" dev="tmpfs" ino=1383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2545.787203][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2545.805496][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2545.957921][ T30] audit: type=1400 audit(1758095293.087:3845): avc: denied { read write } for pid=30743 comm="syz.8.6309" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2546.147382][ T5965] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2546.269058][T27196] usbhid 5-1:0.0: can't add hid device: -71 [ 2546.275217][T27196] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2546.360363][ T30] audit: type=1400 audit(1758095293.087:3846): avc: denied { open } for pid=30743 comm="syz.8.6309" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2546.387413][ T5965] usb 3-1: Using ep0 maxpacket: 16 [ 2546.464203][ T5965] usb 3-1: config 0 has no interfaces? [ 2546.473397][T27196] usb 5-1: USB disconnect, device number 103 [ 2546.906088][ T5965] usb 3-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 2546.915241][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2546.938419][ T5965] usb 3-1: Product: syz [ 2546.956700][ T5965] usb 3-1: Manufacturer: syz [ 2546.985761][ T5965] usb 3-1: SerialNumber: syz [ 2547.007628][ T5965] usb 3-1: config 0 descriptor?? [ 2547.129324][T21916] usb 2-1: USB disconnect, device number 71 [ 2547.783041][T30740] tipc: Started in network mode [ 2547.788064][T30740] tipc: Node identity 7f000001, cluster identity 4711 [ 2548.207234][T30740] tipc: New replicast peer: 0.0.0.0 [ 2548.212969][T30740] tipc: Enabled bearer , priority 10 [ 2548.492286][T30766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6313'. [ 2548.949584][T30740] ptrace attach of "./syz-executor exec"[30285] was attempted by "./syz-executor exec"[30740] [ 2549.064293][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 2549.064309][ T30] audit: type=1400 audit(1758095296.373:3851): avc: denied { create } for pid=30762 comm="syz.8.6314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2549.177199][T30772] tipc: Enabling of bearer rejected, already enabled [ 2549.282694][T27196] tipc: Node number set to 2130706433 [ 2549.958441][ T30] audit: type=1400 audit(1758095296.404:3852): avc: denied { setopt } for pid=30762 comm="syz.8.6314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2550.016572][ T30] audit: type=1400 audit(1758095297.370:3853): avc: denied { bind } for pid=30763 comm="syz.1.6316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2550.054243][ T30] audit: type=1400 audit(1758095297.370:3854): avc: denied { name_bind } for pid=30763 comm="syz.1.6316" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2550.077281][ T30] audit: type=1400 audit(1758095297.370:3855): avc: denied { node_bind } for pid=30763 comm="syz.1.6316" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 2550.233119][T21916] usb 3-1: USB disconnect, device number 27 [ 2551.023031][ T30] audit: type=1400 audit(1758095297.979:3856): avc: denied { mount } for pid=30786 comm="syz.2.6320" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2551.221269][ T30] audit: type=1400 audit(1758095298.630:3857): avc: denied { unmount } for pid=30285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2551.444740][ T5965] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 2551.669888][ T30] audit: type=1400 audit(1758095298.766:3858): avc: denied { create } for pid=30797 comm="syz.1.6322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2551.779169][ T30] audit: type=1400 audit(1758095298.808:3859): avc: denied { sys_module } for pid=30797 comm="syz.1.6322" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2551.806612][ T30] audit: type=1400 audit(1758095298.808:3860): avc: denied { module_load } for pid=30797 comm="syz.1.6322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 2551.874821][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 2551.882817][ T5965] usb 5-1: config 0 has no interfaces? [ 2551.891399][ T5965] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 2551.900881][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2551.920413][ T5965] usb 5-1: Product: syz [ 2551.926896][ T5965] usb 5-1: Manufacturer: syz [ 2551.940687][ T5965] usb 5-1: SerialNumber: syz [ 2552.332269][ T5965] usb 5-1: config 0 descriptor?? [ 2552.632752][T30788] tipc: New replicast peer: 0.0.0.0 [ 2552.639470][T30788] tipc: Enabled bearer , priority 10 [ 2553.273686][T21916] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2553.429391][T21916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2553.445001][T21916] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2553.455102][T21916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2553.474931][T21916] usb 4-1: config 0 descriptor?? [ 2553.618451][T21916] pwc: Askey VC010 type 2 USB webcam detected. [ 2553.935434][T13736] usb 5-1: USB disconnect, device number 104 [ 2554.004132][T21916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2554.239181][T21916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2554.265635][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 2554.265819][ T30] audit: type=1400 audit(1758095301.821:3867): avc: denied { create } for pid=30828 comm="syz.8.6332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2554.554876][T21916] pwc: recv_control_msg error -32 req 04 val 1000 [ 2554.564179][T21916] pwc: recv_control_msg error -32 req 04 val 1300 [ 2554.571795][T21916] pwc: recv_control_msg error -32 req 04 val 1400 [ 2554.602621][T21916] pwc: recv_control_msg error -32 req 02 val 2000 [ 2554.623939][T21916] pwc: recv_control_msg error -32 req 02 val 2100 [ 2554.828553][T21916] pwc: recv_control_msg error -71 req 02 val 2500 [ 2554.835473][T21916] pwc: recv_control_msg error -71 req 02 val 2400 [ 2554.922648][T21916] pwc: recv_control_msg error -71 req 02 val 2600 [ 2554.930600][T21916] pwc: recv_control_msg error -71 req 02 val 2900 [ 2554.948909][T21916] pwc: recv_control_msg error -71 req 02 val 2800 [ 2554.961147][T21916] pwc: recv_control_msg error -71 req 04 val 1100 [ 2554.974526][T21916] pwc: recv_control_msg error -71 req 04 val 1200 [ 2554.992694][T21916] pwc: Registered as video103. [ 2555.003816][ T30] audit: type=1400 audit(1758095302.598:3868): avc: denied { write } for pid=30833 comm="syz.2.6334" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2555.037082][T21916] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input87 [ 2555.058365][T21916] usb 4-1: USB disconnect, device number 122 [ 2555.082803][ T30] audit: type=1400 audit(1758095302.598:3869): avc: denied { open } for pid=30833 comm="syz.2.6334" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2555.111949][ T30] audit: type=1400 audit(1758095302.661:3870): avc: denied { read } for pid=5204 comm="acpid" name="event4" dev="devtmpfs" ino=4124 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2555.173401][ T30] audit: type=1400 audit(1758095302.661:3871): avc: denied { open } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4124 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2555.207773][T25004] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 2555.240748][ T30] audit: type=1400 audit(1758095302.661:3872): avc: denied { ioctl } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4124 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2555.329074][T30836] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2555.329074][T30836] program syz.2.6334 not setting count and/or reply_len properly [ 2555.741607][ T30] audit: type=1400 audit(1758095302.944:3873): avc: denied { ioctl } for pid=30833 comm="syz.2.6334" path="/dev/sg0" dev="devtmpfs" ino=773 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2555.792863][T25004] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 2555.802483][T25004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2555.902997][T25004] usb 5-1: Product: syz [ 2555.907188][T25004] usb 5-1: Manufacturer: syz [ 2555.911770][T25004] usb 5-1: SerialNumber: syz [ 2555.916440][ T30] audit: type=1400 audit(1758095302.997:3874): avc: denied { create } for pid=30833 comm="syz.2.6334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2555.997753][ T30] audit: type=1400 audit(1758095303.007:3875): avc: denied { ioctl } for pid=30833 comm="syz.2.6334" path="socket:[114618]" dev="sockfs" ino=114618 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2556.037259][ T30] audit: type=1400 audit(1758095303.007:3876): avc: denied { bind } for pid=30833 comm="syz.2.6334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2556.057572][T25004] usb 5-1: config 0 descriptor?? [ 2556.155790][T30842] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2556.781071][T30832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2556.825146][T30832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2556.887220][T30832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2556.912974][T30832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2557.036722][T30850] Invalid ELF header magic: != ELF [ 2557.365957][T30832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6333'. [ 2557.392627][T25004] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2557.403551][T25004] asix 5-1:0.0: probe with driver asix failed with error -71 [ 2557.432495][T25004] usb 5-1: USB disconnect, device number 105 [ 2558.347262][T30866] Invalid ELF header magic: != ELF [ 2559.371001][T30882] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6348'. [ 2559.401595][T30882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6348'. [ 2559.813508][T30881] validate_nla: 43 callbacks suppressed [ 2559.813549][T30881] netlink: 'syz.4.6346': attribute type 2 has an invalid length. [ 2559.828168][T30881] netlink: 'syz.4.6346': attribute type 2 has an invalid length. [ 2559.836621][T30881] netlink: 'syz.4.6346': attribute type 2 has an invalid length. [ 2559.845838][T30881] netlink: 'syz.4.6346': attribute type 2 has an invalid length. [ 2560.094431][T30881] netlink: 'syz.4.6346': attribute type 2 has an invalid length. [ 2560.102263][T30881] netlink: 'syz.4.6346': attribute type 2 has an invalid length. [ 2560.198262][T30881] netlink: 'syz.4.6346': attribute type 2 has an invalid length. [ 2560.206367][T30881] netlink: 'syz.4.6346': attribute type 2 has an invalid length. [ 2560.219095][T30881] netlink: 'syz.4.6346': attribute type 2 has an invalid length. [ 2560.237483][T30881] netlink: 'syz.4.6346': attribute type 2 has an invalid length. [ 2560.295415][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2560.295428][ T30] audit: type=1400 audit(1758095308.162:3888): avc: denied { module_request } for pid=30890 comm="syz.3.6352" kmod="9p-fd0x0000000000000004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2560.832864][ T30] audit: type=1400 audit(1758095308.718:3889): avc: denied { execute } for pid=30897 comm="syz.2.6354" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=115749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 2560.866630][T30891] 9pnet: Could not find request transport: fd0x0000000000000004 [ 2561.012614][ T30] audit: type=1400 audit(1758095308.718:3890): avc: denied { ioctl } for pid=30897 comm="syz.2.6354" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=115748 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2561.212760][ T30] audit: type=1400 audit(1758095308.718:3891): avc: denied { create } for pid=30897 comm="syz.2.6354" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2561.236264][ T30] audit: type=1400 audit(1758095308.718:3892): avc: denied { link } for pid=30897 comm="syz.2.6354" name="file1" dev="tmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2561.237380][ T5965] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 2561.283874][ T30] audit: type=1400 audit(1758095308.771:3893): avc: denied { setattr } for pid=30897 comm="syz.2.6354" name="#19f" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2561.436262][T30909] overlay: Bad value for 'redirect_dir' [ 2561.496320][ T30] audit: type=1400 audit(1758095308.781:3894): avc: denied { rename } for pid=30897 comm="syz.2.6354" name="#19f" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2561.635319][ T30] audit: type=1400 audit(1758095309.338:3895): avc: denied { mounton } for pid=30902 comm="syz.3.6356" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2561.702786][ T30] audit: type=1400 audit(1758095309.348:3896): avc: denied { mount } for pid=30902 comm="syz.3.6356" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 2561.779989][ T5965] usb 3-1: device descriptor read/64, error -71 [ 2561.815353][ T30] audit: type=1400 audit(1758095309.348:3897): avc: denied { create } for pid=30902 comm="syz.3.6356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2562.085164][ T5965] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 2562.218370][ T5965] usb 3-1: device descriptor read/64, error -71 [ 2562.246631][T30918] Invalid ELF header magic: != ELF [ 2562.327440][ T5965] usb usb3-port1: attempt power cycle [ 2563.028305][ T5965] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 2563.057479][ T5965] usb 3-1: device descriptor read/8, error -71 [ 2563.315081][T30929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6363'. [ 2563.345805][T30929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6363'. [ 2563.662934][ T5965] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 2563.756146][ T5965] usb 3-1: device descriptor read/8, error -71 [ 2563.924239][ T5965] usb usb3-port1: unable to enumerate USB device [ 2563.926946][T30937] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6364'. [ 2565.181929][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2565.181944][ T30] audit: type=1400 audit(1758095313.296:3908): avc: denied { unmount } for pid=30288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2565.209902][T30938] validate_nla: 97 callbacks suppressed [ 2565.209919][T30938] netlink: 'syz.2.6366': attribute type 2 has an invalid length. [ 2565.228438][T30938] netlink: 'syz.2.6366': attribute type 2 has an invalid length. [ 2565.243116][T30938] netlink: 'syz.2.6366': attribute type 2 has an invalid length. [ 2565.254270][T30938] netlink: 'syz.2.6366': attribute type 2 has an invalid length. [ 2565.266877][T28866] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2565.275711][T30938] netlink: 'syz.2.6366': attribute type 2 has an invalid length. [ 2565.284971][T30938] netlink: 'syz.2.6366': attribute type 2 has an invalid length. [ 2565.294525][T30938] netlink: 'syz.2.6366': attribute type 2 has an invalid length. [ 2565.319697][T30938] netlink: 'syz.2.6366': attribute type 2 has an invalid length. [ 2565.340435][T30938] netlink: 'syz.2.6366': attribute type 2 has an invalid length. [ 2565.461373][T30938] netlink: 'syz.2.6366': attribute type 2 has an invalid length. [ 2565.553249][T28866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2565.571085][T28866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2565.582482][T28866] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2565.596142][T28866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.716446][T28866] usb 2-1: config 0 descriptor?? [ 2565.762129][T30961] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6371'. [ 2565.777344][T30961] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6371'. [ 2567.238389][T28866] usbhid 2-1:0.0: can't add hid device: -71 [ 2567.244391][T28866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2567.307556][T28866] usb 2-1: USB disconnect, device number 72 [ 2567.342070][ T30] audit: type=1400 audit(1758095315.553:3909): avc: denied { read } for pid=30973 comm="syz.1.6375" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2567.462454][ T30] audit: type=1400 audit(1758095315.595:3910): avc: denied { open } for pid=30973 comm="syz.1.6375" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2567.915318][ T30] audit: type=1400 audit(1758095316.161:3911): avc: denied { read write } for pid=30288 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2568.047954][ T30] audit: type=1400 audit(1758095316.182:3912): avc: denied { open } for pid=30288 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2568.108153][ T30] audit: type=1400 audit(1758095316.182:3913): avc: denied { ioctl } for pid=30288 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2568.162131][ T30] audit: type=1400 audit(1758095316.203:3914): avc: denied { read } for pid=30977 comm="syz.2.6376" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2568.217345][ T30] audit: type=1400 audit(1758095316.203:3915): avc: denied { open } for pid=30977 comm="syz.2.6376" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2568.248705][ T30] audit: type=1400 audit(1758095316.224:3916): avc: denied { create } for pid=30977 comm="syz.2.6376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2568.248714][ T5965] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2568.321645][ T30] audit: type=1400 audit(1758095316.235:3917): avc: denied { write } for pid=30977 comm="syz.2.6376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2568.392149][ T5965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2568.404058][ T5965] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2568.418847][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2568.463265][ T5965] usb 4-1: config 0 descriptor?? [ 2568.483358][ T5965] pwc: Askey VC010 type 2 USB webcam detected. [ 2568.536538][T30990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2568.886846][ T5965] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2568.893966][ T5965] pwc: recv_control_msg error -32 req 02 val 2700 [ 2569.092747][ T5965] pwc: recv_control_msg error -32 req 04 val 1000 [ 2569.099889][ T5965] pwc: recv_control_msg error -32 req 04 val 1300 [ 2569.106972][ T5965] pwc: recv_control_msg error -32 req 04 val 1400 [ 2569.114063][ T5965] pwc: recv_control_msg error -32 req 02 val 2000 [ 2569.134250][ T5965] pwc: recv_control_msg error -32 req 02 val 2100 [ 2569.144283][ T5965] pwc: recv_control_msg error -32 req 04 val 1500 [ 2569.342674][ T5965] pwc: recv_control_msg error -71 req 02 val 2400 [ 2569.349774][ T5965] pwc: recv_control_msg error -71 req 02 val 2600 [ 2569.376533][ T5965] pwc: recv_control_msg error -71 req 02 val 2900 [ 2569.396937][ T5965] pwc: recv_control_msg error -71 req 02 val 2800 [ 2569.413595][T20998] Bluetooth: hci1: connection err: -111 [ 2569.417333][ T5965] pwc: recv_control_msg error -71 req 04 val 1100 [ 2569.442399][ T5965] pwc: recv_control_msg error -71 req 04 val 1200 [ 2569.653828][ T5965] pwc: Registered as video103. [ 2569.659876][ T5965] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input88 [ 2569.691569][ T5965] usb 4-1: USB disconnect, device number 123 [ 2570.209936][T31007] overlayfs: missing 'lowerdir' [ 2570.215017][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 2570.215048][ T30] audit: type=1400 audit(1758095318.555:3960): avc: denied { mounton } for pid=31002 comm="syz.2.6383" path="/33/file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2570.243628][ C1] vkms_vblank_simulate: vblank timer overrun [ 2570.308054][ T30] audit: type=1400 audit(1758095318.555:3961): avc: denied { mount } for pid=31002 comm="syz.2.6383" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2570.654600][ T30] audit: type=1400 audit(1758095319.027:3962): avc: denied { create } for pid=31009 comm="syz.1.6385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2570.721460][ T30] audit: type=1400 audit(1758095319.027:3963): avc: denied { write } for pid=31009 comm="syz.1.6385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2570.757857][ T30] audit: type=1400 audit(1758095319.101:3964): avc: denied { read } for pid=31009 comm="syz.1.6385" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2570.789031][ T30] audit: type=1400 audit(1758095319.101:3965): avc: denied { open } for pid=31009 comm="syz.1.6385" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2570.820615][ T30] audit: type=1400 audit(1758095319.143:3966): avc: denied { ioctl } for pid=31009 comm="syz.1.6385" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2571.057240][ T30] audit: type=1400 audit(1758095319.447:3967): avc: denied { create } for pid=31011 comm="syz.4.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2571.476209][ T30] audit: type=1400 audit(1758095319.458:3968): avc: denied { getopt } for pid=31011 comm="syz.4.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2571.568372][ T30] audit: type=1400 audit(1758095319.836:3969): avc: denied { create } for pid=31009 comm="syz.1.6385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2572.210544][T29920] Bluetooth: hci1: command 0x0405 tx timeout [ 2574.797892][T31045] Invalid ELF header magic: != ELF [ 2575.043139][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 2575.043156][ T30] audit: type=1400 audit(1758095323.647:4015): avc: denied { shutdown } for pid=31048 comm="syz.3.6395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2575.258666][ T30] audit: type=1400 audit(1758095323.647:4016): avc: denied { getopt } for pid=31048 comm="syz.3.6395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2575.371920][ T30] audit: type=1400 audit(1758095323.657:4017): avc: denied { map_create } for pid=31038 comm="syz.1.6392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2575.401713][ T30] audit: type=1400 audit(1758095323.657:4018): avc: denied { bind } for pid=31038 comm="syz.1.6392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2575.443248][T31052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2575.457175][ T30] audit: type=1400 audit(1758095323.857:4019): avc: denied { read } for pid=31046 comm="syz.8.6394" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2575.535498][ T30] audit: type=1400 audit(1758095323.857:4020): avc: denied { open } for pid=31046 comm="syz.8.6394" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2575.567564][ C1] vkms_vblank_simulate: vblank timer overrun [ 2575.591681][ T30] audit: type=1400 audit(1758095324.056:4021): avc: denied { create } for pid=31046 comm="syz.8.6394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2575.690128][ T30] audit: type=1400 audit(1758095324.056:4022): avc: denied { write } for pid=31046 comm="syz.8.6394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2575.736739][ T30] audit: type=1400 audit(1758095324.056:4023): avc: denied { create } for pid=31046 comm="syz.8.6394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2576.000464][T31060] overlayfs: missing 'lowerdir' [ 2576.360705][ T30] audit: type=1400 audit(1758095324.108:4024): avc: denied { create } for pid=31053 comm="syz.3.6396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2576.657722][T31055] SELinux: failed to load policy [ 2577.202409][T21916] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2577.488137][T21916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2578.088822][T21916] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2578.109510][T21916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.349607][T21916] usb 4-1: config 0 descriptor?? [ 2578.360565][T21916] pwc: Askey VC010 type 2 USB webcam detected. [ 2578.516874][T31077] validate_nla: 44 callbacks suppressed [ 2578.516894][T31077] netlink: 'syz.2.6402': attribute type 2 has an invalid length. [ 2578.530982][T31077] netlink: 'syz.2.6402': attribute type 2 has an invalid length. [ 2578.539296][T31077] netlink: 'syz.2.6402': attribute type 2 has an invalid length. [ 2578.557304][T31077] netlink: 'syz.2.6402': attribute type 2 has an invalid length. [ 2578.608469][T31077] netlink: 'syz.2.6402': attribute type 2 has an invalid length. [ 2578.634981][T31077] netlink: 'syz.2.6402': attribute type 2 has an invalid length. [ 2578.792720][T21916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2578.827280][T31077] netlink: 'syz.2.6402': attribute type 2 has an invalid length. [ 2579.375045][T21916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2579.491471][T21916] pwc: recv_control_msg error -32 req 04 val 1000 [ 2579.545764][T31077] netlink: 'syz.2.6402': attribute type 2 has an invalid length. [ 2579.554233][T31077] netlink: 'syz.2.6402': attribute type 2 has an invalid length. [ 2579.568283][T21916] pwc: recv_control_msg error -32 req 04 val 1300 [ 2579.590028][T21916] pwc: recv_control_msg error -32 req 04 val 1400 [ 2579.641802][T21916] pwc: recv_control_msg error -32 req 02 val 2000 [ 2579.649026][T31077] netlink: 'syz.2.6402': attribute type 2 has an invalid length. [ 2579.884248][T21916] pwc: recv_control_msg error -71 req 04 val 1500 [ 2579.893057][T21916] pwc: recv_control_msg error -71 req 02 val 2500 [ 2579.929056][T21916] pwc: recv_control_msg error -71 req 02 val 2400 [ 2579.937870][T21916] pwc: recv_control_msg error -71 req 02 val 2600 [ 2579.945186][T21916] pwc: recv_control_msg error -71 req 02 val 2900 [ 2579.971537][T21916] pwc: recv_control_msg error -71 req 02 val 2800 [ 2579.993164][T21916] pwc: recv_control_msg error -71 req 04 val 1100 [ 2580.013625][T21916] pwc: recv_control_msg error -71 req 04 val 1200 [ 2580.039083][T21916] pwc: Registered as video103. [ 2580.047116][T21916] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input89 [ 2580.061531][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 2580.061548][ T30] audit: type=1400 audit(1758095328.917:4059): avc: denied { read } for pid=5204 comm="acpid" name="event4" dev="devtmpfs" ino=4132 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2580.099717][T21916] usb 4-1: USB disconnect, device number 124 [ 2580.119320][T31089] NILFS (loop1): device size too small [ 2580.150089][ T30] audit: type=1400 audit(1758095328.917:4060): avc: denied { open } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4132 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2580.238792][ T30] audit: type=1400 audit(1758095328.917:4061): avc: denied { ioctl } for pid=5204 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4132 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2580.336260][ T30] audit: type=1400 audit(1758095328.969:4062): avc: denied { mounton } for pid=31088 comm="syz.1.6405" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2580.728459][ T30] audit: type=1400 audit(1758095329.599:4063): avc: denied { create } for pid=31095 comm="syz.1.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2580.917047][ T30] audit: type=1400 audit(1758095329.798:4064): avc: denied { create } for pid=31098 comm="syz.3.6408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2580.946445][ T30] audit: type=1400 audit(1758095329.798:4065): avc: denied { ioctl } for pid=31098 comm="syz.3.6408" path="socket:[117257]" dev="sockfs" ino=117257 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2580.972643][T31101] bond0: (slave ip6gretap0): Error: Device can not be enslaved while up [ 2581.338533][T31109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6409'. [ 2581.713815][T31106] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2581.751563][ T30] audit: type=1400 audit(1758095330.680:4066): avc: denied { append } for pid=31112 comm="syz.1.6410" name="comedi2" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2582.251547][T31117] comedi: No check for data length of config insn id 1001 is implemented [ 2582.260847][T31117] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 2582.270828][T31117] comedi: Assuming n=15 is correct [ 2582.615625][T31119] overlayfs: missing 'lowerdir' [ 2582.769785][ T5965] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2583.235587][ T5965] usb 4-1: Using ep0 maxpacket: 16 [ 2583.249068][ T5965] usb 4-1: config 0 has an invalid interface number: 169 but max is 0 [ 2583.261326][ T5965] usb 4-1: config 0 has no interface number 0 [ 2583.267476][ T5965] usb 4-1: config 0 interface 169 altsetting 125 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 2583.286610][ T5965] usb 4-1: config 0 interface 169 has no altsetting 0 [ 2583.299814][ T5965] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2583.328358][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2583.339945][ T5965] usb 4-1: Product: syz [ 2583.344236][ T5965] usb 4-1: Manufacturer: syz [ 2583.355561][ T5965] usb 4-1: SerialNumber: syz [ 2583.463068][ T5965] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2583.497338][ T5965] r8152-cfgselector 4-1: config 0 descriptor?? [ 2583.790428][ T30] audit: type=1400 audit(1758095332.801:4067): avc: denied { read write } for pid=31123 comm="syz.2.6413" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2583.908988][ T30] audit: type=1400 audit(1758095332.811:4068): avc: denied { open } for pid=31123 comm="syz.2.6413" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2583.932999][ C1] vkms_vblank_simulate: vblank timer overrun [ 2584.025581][ T5965] hub 4-1:0.169: bad descriptor, ignoring hub [ 2584.059170][ T5965] hub 4-1:0.169: probe with driver hub failed with error -5 [ 2584.110594][ T5965] r8152-cfgselector 4-1: USB disconnect, device number 125 [ 2585.065795][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2585.065811][ T30] audit: type=1400 audit(1758095334.166:4071): avc: denied { read } for pid=31123 comm="syz.2.6413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2585.302118][T31145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6418'. [ 2585.316139][T31145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6418'. [ 2586.250540][T31150] bridge0: port 2(bridge_slave_1) entered disabled state [ 2586.258110][T31150] bridge0: port 1(bridge_slave_0) entered disabled state [ 2586.309183][T31150] bridge0: left promiscuous mode [ 2586.760594][ T30] audit: type=1400 audit(1758095335.940:4072): avc: denied { create } for pid=31156 comm="syz.4.6422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2586.804143][ T30] audit: type=1400 audit(1758095335.940:4073): avc: denied { bind } for pid=31156 comm="syz.4.6422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2586.844402][ T30] audit: type=1400 audit(1758095335.940:4074): avc: denied { setopt } for pid=31156 comm="syz.4.6422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2586.849167][T31162] 9pnet_fd: Insufficient options for proto=fd [ 2586.889994][ T30] audit: type=1400 audit(1758095335.940:4075): avc: denied { accept } for pid=31156 comm="syz.4.6422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2586.934018][ T30] audit: type=1400 audit(1758095335.971:4076): avc: denied { write } for pid=31156 comm="syz.4.6422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2587.142595][ T30] audit: type=1400 audit(1758095335.971:4077): avc: denied { read } for pid=31156 comm="syz.4.6422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2587.185615][T31166] overlayfs: missing 'lowerdir' [ 2587.581485][ T30] audit: type=1400 audit(1758095336.024:4078): avc: denied { write } for pid=31159 comm="syz.1.6423" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2587.611387][ T30] audit: type=1400 audit(1758095336.024:4079): avc: denied { open } for pid=31159 comm="syz.1.6423" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2587.689832][ T30] audit: type=1400 audit(1758095336.034:4080): avc: denied { read } for pid=31159 comm="syz.1.6423" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2588.732382][T31201] mkiss: ax0: crc mode is auto. [ 2589.467067][T31212] validate_nla: 45 callbacks suppressed [ 2589.467107][T31212] netlink: 'syz.2.6435': attribute type 2 has an invalid length. [ 2589.505052][T31212] netlink: 'syz.2.6435': attribute type 2 has an invalid length. [ 2589.569871][T31212] netlink: 'syz.2.6435': attribute type 2 has an invalid length. [ 2589.619382][T31212] netlink: 'syz.2.6435': attribute type 2 has an invalid length. [ 2589.627721][T31212] netlink: 'syz.2.6435': attribute type 2 has an invalid length. [ 2589.636194][T31212] netlink: 'syz.2.6435': attribute type 2 has an invalid length. [ 2589.644668][T31212] netlink: 'syz.2.6435': attribute type 2 has an invalid length. [ 2589.653225][T31212] netlink: 'syz.2.6435': attribute type 2 has an invalid length. [ 2589.661414][T31212] netlink: 'syz.2.6435': attribute type 2 has an invalid length. [ 2589.672173][T31212] netlink: 'syz.2.6435': attribute type 2 has an invalid length. [ 2590.144946][T31222] overlayfs: missing 'lowerdir' [ 2591.572130][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2591.572151][ T30] audit: type=1400 audit(1758095340.958:4094): avc: denied { write } for pid=31227 comm="syz.8.6439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2595.100941][T30431] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2595.238457][T31264] overlayfs: missing 'lowerdir' [ 2595.856475][T30431] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2595.899312][T30431] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2595.916045][T30431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2596.038778][T30431] usb 5-1: config 0 descriptor?? [ 2596.058354][T30431] pwc: Askey VC010 type 2 USB webcam detected. [ 2596.077052][ T30] audit: type=1400 audit(1758095345.724:4095): avc: denied { mount } for pid=31265 comm="syz.3.6450" name="/" dev="ramfs" ino=116404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 2596.114998][ T30] audit: type=1400 audit(1758095345.755:4096): avc: denied { create } for pid=31265 comm="syz.3.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2596.196066][ T30] audit: type=1400 audit(1758095345.755:4097): avc: denied { write } for pid=31265 comm="syz.3.6450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2596.424135][ T30] audit: type=1400 audit(1758095346.081:4098): avc: denied { write } for pid=31272 comm="syz.1.6453" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2596.450873][T30431] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2596.803770][T30431] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2596.819053][T30431] pwc: recv_control_msg error -32 req 04 val 1000 [ 2596.894365][T30431] pwc: recv_control_msg error -32 req 04 val 1300 [ 2596.902615][T30431] pwc: recv_control_msg error -32 req 04 val 1400 [ 2596.910173][T30431] pwc: recv_control_msg error -32 req 02 val 2000 [ 2596.930125][T25031] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2597.098837][T25031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2597.115072][T30431] pwc: recv_control_msg error -71 req 04 val 1500 [ 2597.118392][T31283] validate_nla: 44 callbacks suppressed [ 2597.118411][T31283] netlink: 'syz.3.6456': attribute type 2 has an invalid length. [ 2597.122758][T30431] pwc: recv_control_msg error -71 req 02 val 2500 [ 2597.127336][T25031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2597.155336][T31283] netlink: 'syz.3.6456': attribute type 2 has an invalid length. [ 2597.163542][T30431] pwc: recv_control_msg error -71 req 02 val 2400 [ 2597.167751][T25031] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2597.180909][T31283] netlink: 'syz.3.6456': attribute type 2 has an invalid length. [ 2597.190886][T30431] pwc: recv_control_msg error -71 req 02 val 2600 [ 2597.195723][T25031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2597.198001][T30431] pwc: recv_control_msg error -71 req 02 val 2900 [ 2597.216488][T31283] netlink: 'syz.3.6456': attribute type 2 has an invalid length. [ 2597.237783][T31283] netlink: 'syz.3.6456': attribute type 2 has an invalid length. [ 2597.239103][T30431] pwc: recv_control_msg error -71 req 02 val 2800 [ 2597.300193][T25031] usb 3-1: config 0 descriptor?? [ 2597.306003][T31283] netlink: 'syz.3.6456': attribute type 2 has an invalid length. [ 2597.318673][T30431] pwc: recv_control_msg error -71 req 04 val 1100 [ 2597.328669][T31283] netlink: 'syz.3.6456': attribute type 2 has an invalid length. [ 2597.339103][T31283] netlink: 'syz.3.6456': attribute type 2 has an invalid length. [ 2597.358811][T31283] netlink: 'syz.3.6456': attribute type 2 has an invalid length. [ 2597.370337][T31283] netlink: 'syz.3.6456': attribute type 2 has an invalid length. [ 2597.370448][T30431] pwc: recv_control_msg error -71 req 04 val 1200 [ 2597.401007][T30431] pwc: Registered as video103. [ 2597.407786][T30431] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input90 [ 2597.611332][ T30] audit: type=1400 audit(1758095347.278:4099): avc: denied { write } for pid=31284 comm="syz.1.6457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2597.675810][T30431] usb 5-1: USB disconnect, device number 106 [ 2597.811567][ T30] audit: type=1400 audit(1758095347.540:4100): avc: denied { create } for pid=31290 comm="syz.4.6458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2597.853554][T31291] cgroup: No subsys list or none specified [ 2597.909983][ T30] audit: type=1400 audit(1758095347.571:4101): avc: denied { remount } for pid=31290 comm="syz.4.6458" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2598.017884][ T30] audit: type=1400 audit(1758095347.571:4102): avc: denied { create } for pid=31290 comm="syz.4.6458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2598.077386][ T30] audit: type=1400 audit(1758095347.582:4103): avc: denied { setopt } for pid=31290 comm="syz.4.6458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2598.103668][ T30] audit: type=1400 audit(1758095347.582:4104): avc: denied { write } for pid=31290 comm="syz.4.6458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2598.127687][ T30] audit: type=1400 audit(1758095347.603:4105): avc: denied { setopt } for pid=31290 comm="syz.4.6458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2598.147532][ C0] vkms_vblank_simulate: vblank timer overrun [ 2598.175566][ T30] audit: type=1400 audit(1758095347.907:4106): avc: denied { create } for pid=31295 comm="syz.4.6460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2598.195349][ C0] vkms_vblank_simulate: vblank timer overrun [ 2598.275516][ T30] audit: type=1400 audit(1758095348.033:4107): avc: denied { connect } for pid=31295 comm="syz.4.6460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2599.155965][T25031] usbhid 3-1:0.0: can't add hid device: -71 [ 2599.161973][T25031] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2599.194843][T25031] usb 3-1: USB disconnect, device number 32 [ 2599.553121][T31307] comedi: No check for data length of config insn id 1001 is implemented [ 2599.561771][T31307] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 2599.571646][T31307] comedi: Assuming n=15 is correct [ 2599.953279][T31309] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2599.962127][T31309] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2600.740125][T27196] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 2600.747529][T31322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6469'. [ 2600.960483][T27196] usb 3-1: config 0 has no interfaces? [ 2600.966267][T27196] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2600.987061][T27196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2601.008697][T27196] usb 3-1: config 0 descriptor?? [ 2601.214927][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2601.214943][ T30] audit: type=1400 audit(1758095351.109:4115): avc: denied { create } for pid=31311 comm="syz.2.6465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2601.215931][T31312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6465'. [ 2601.221245][ T30] audit: type=1400 audit(1758095351.109:4116): avc: denied { write } for pid=31311 comm="syz.2.6465" path="socket:[116517]" dev="sockfs" ino=116517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2601.276010][ C0] vkms_vblank_simulate: vblank timer overrun [ 2601.308664][T27196] usb 3-1: USB disconnect, device number 33 [ 2601.491343][ T30] audit: type=1400 audit(1758095351.403:4117): avc: denied { unmount } for pid=29605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2602.288233][T31336] validate_nla: 44 callbacks suppressed [ 2602.288248][T31336] netlink: 'syz.3.6471': attribute type 2 has an invalid length. [ 2602.302471][T31336] netlink: 'syz.3.6471': attribute type 2 has an invalid length. [ 2602.331986][T31336] netlink: 'syz.3.6471': attribute type 2 has an invalid length. [ 2602.340028][T31336] netlink: 'syz.3.6471': attribute type 2 has an invalid length. [ 2602.363404][T31336] netlink: 'syz.3.6471': attribute type 2 has an invalid length. [ 2602.374239][T31336] netlink: 'syz.3.6471': attribute type 2 has an invalid length. [ 2602.387998][T31336] netlink: 'syz.3.6471': attribute type 2 has an invalid length. [ 2602.396903][T31336] netlink: 'syz.3.6471': attribute type 2 has an invalid length. [ 2602.406993][T31336] netlink: 'syz.3.6471': attribute type 2 has an invalid length. [ 2602.425692][T31336] netlink: 'syz.3.6471': attribute type 2 has an invalid length. [ 2602.513773][T27196] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2602.536109][ T30] audit: type=1400 audit(1758095352.506:4118): avc: denied { create } for pid=31340 comm="syz.2.6474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2602.710594][T31342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6474'. [ 2602.713614][T27196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2602.719795][T31342] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6474'. [ 2602.947976][T27196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2602.998489][T27196] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 2603.035235][T27196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.049940][T31341] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2603.112985][T27196] usb 5-1: config 0 descriptor?? [ 2603.214246][ T30] audit: type=1400 audit(1758095353.209:4119): avc: denied { block_suspend } for pid=31327 comm="syz.1.6470" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2603.293716][ T30] audit: type=1400 audit(1758095353.282:4120): avc: denied { setopt } for pid=31327 comm="syz.1.6470" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2603.352180][ T30] audit: type=1400 audit(1758095353.366:4121): avc: denied { setopt } for pid=31327 comm="syz.1.6470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2603.782882][T31347] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6475'. [ 2604.297066][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2604.304422][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2604.640732][T31353] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2604.649803][T31353] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2604.662564][T27196] usbhid 5-1:0.0: can't add hid device: -71 [ 2605.037694][T27196] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2605.183137][T27196] usb 5-1: USB disconnect, device number 107 [ 2605.208854][T31355] Invalid ELF header magic: != ELF [ 2606.342167][ T30] audit: type=1326 audit(1758095356.505:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31356 comm="syz.4.6478" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb21c98eba9 code=0x0 [ 2606.457853][ T30] audit: type=1400 audit(1758095356.610:4123): avc: denied { create } for pid=31356 comm="syz.4.6478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2606.586860][ T30] audit: type=1400 audit(1758095356.610:4124): avc: denied { read } for pid=31356 comm="syz.4.6478" path="socket:[116581]" dev="sockfs" ino=116581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2606.773458][T20998] Bluetooth: hci6: connection err: -111 [ 2607.535167][ T30] audit: type=1400 audit(1758095357.755:4125): avc: denied { write } for pid=31383 comm="syz.8.6485" name="sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2607.598441][ T30] audit: type=1400 audit(1758095357.755:4126): avc: denied { open } for pid=31383 comm="syz.8.6485" path="/dev/sg0" dev="devtmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2607.713586][T20998] Bluetooth: hci1: connection err: -111 [ 2607.856934][T31388] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2607.856934][T31388] program syz.8.6485 not setting count and/or reply_len properly [ 2607.995614][ T30] audit: type=1400 audit(1758095358.080:4127): avc: denied { ioctl } for pid=31383 comm="syz.8.6485" path="/dev/sg0" dev="devtmpfs" ino=773 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2608.242037][ T30] audit: type=1400 audit(1758095358.153:4128): avc: denied { ioctl } for pid=31383 comm="syz.8.6485" path="socket:[116628]" dev="sockfs" ino=116628 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2608.287490][ T30] audit: type=1400 audit(1758095358.153:4129): avc: denied { bind } for pid=31383 comm="syz.8.6485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2609.457218][ T30] audit: type=1400 audit(1758095359.770:4130): avc: denied { read write } for pid=31397 comm="syz.3.6489" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2609.539766][ T30] audit: type=1400 audit(1758095359.844:4131): avc: denied { open } for pid=31397 comm="syz.3.6489" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2611.275970][T31430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6494'. [ 2611.788349][T31433] Invalid ELF header magic: != ELF [ 2612.334334][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2612.334345][ T30] audit: type=1400 audit(1758095362.783:4137): avc: denied { create } for pid=31438 comm="syz.3.6497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2612.404053][ T30] audit: type=1400 audit(1758095362.825:4138): avc: denied { setopt } for pid=31438 comm="syz.3.6497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2613.041311][T31453] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2613.075034][ T30] audit: type=1400 audit(1758095363.528:4139): avc: denied { unlink } for pid=31445 comm="syz.3.6500" name="#1a2" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2613.698591][ T30] audit: type=1400 audit(1758095363.549:4140): avc: denied { mount } for pid=31445 comm="syz.3.6500" name="/" dev="overlay" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2613.725453][ T30] audit: type=1400 audit(1758095364.137:4141): avc: denied { unmount } for pid=30288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2613.804599][ T30] audit: type=1400 audit(1758095364.337:4142): avc: denied { ioctl } for pid=31459 comm="syz.3.6502" path="/dev/binderfs/binder0" dev="binder" ino=25 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2613.921813][ T30] audit: type=1400 audit(1758095364.337:4143): avc: denied { set_context_mgr } for pid=31459 comm="syz.3.6502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2614.003984][ T30] audit: type=1400 audit(1758095364.463:4144): avc: denied { read write } for pid=31459 comm="syz.3.6502" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2614.013861][ T5965] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2614.055043][ T30] audit: type=1400 audit(1758095364.463:4145): avc: denied { open } for pid=31459 comm="syz.3.6502" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2614.133141][T30431] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2614.266417][T30431] usb 5-1: device descriptor read/64, error -71 [ 2614.272812][ T5965] usb 3-1: Using ep0 maxpacket: 16 [ 2614.288469][ T5965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2614.300636][ T5965] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2614.310263][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.328233][ T5965] usb 3-1: Product: syz [ 2614.342365][ T5965] usb 3-1: Manufacturer: syz [ 2614.363902][ T5965] usb 3-1: SerialNumber: syz [ 2614.386373][ T5965] usb 3-1: config 0 descriptor?? [ 2614.513769][T30431] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 2614.532237][ T5965] hub 3-1:0.0: bad descriptor, ignoring hub [ 2614.584717][ T5965] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2614.599636][T27196] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2614.625681][ T5965] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input91 [ 2614.647312][T30431] usb 5-1: device descriptor read/64, error -71 [ 2614.752317][T30431] usb usb5-port1: attempt power cycle [ 2614.760629][T27196] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2614.771302][T27196] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2614.807262][T27196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2614.886204][T27196] usb 2-1: config 0 descriptor?? [ 2614.922373][T27196] pwc: Askey VC010 type 2 USB webcam detected. [ 2615.135939][T30431] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 2616.032383][T31466] Bluetooth: hci4: command 0x0406 tx timeout [ 2616.040090][T31466] Bluetooth: hci6: command 0x0406 tx timeout [ 2616.179207][T27196] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2616.407065][T27196] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2616.576318][T27196] pwc: recv_control_msg error -32 req 04 val 1000 [ 2617.073940][T27196] pwc: recv_control_msg error -32 req 04 val 1300 [ 2617.276566][T27196] pwc: recv_control_msg error -32 req 04 val 1400 [ 2617.476294][T27196] pwc: recv_control_msg error -32 req 02 val 2000 [ 2617.681872][T27196] pwc: recv_control_msg error -71 req 04 val 1500 [ 2617.688962][T27196] pwc: recv_control_msg error -71 req 02 val 2500 [ 2618.019210][T27196] pwc: recv_control_msg error -71 req 02 val 2400 [ 2618.069376][T27196] pwc: recv_control_msg error -71 req 02 val 2600 [ 2618.114554][T27196] pwc: recv_control_msg error -71 req 02 val 2900 [ 2618.190605][T27196] pwc: recv_control_msg error -71 req 02 val 2800 [ 2618.318547][T27196] pwc: recv_control_msg error -71 req 04 val 1100 [ 2618.333886][T27196] pwc: recv_control_msg error -71 req 04 val 1200 [ 2618.344036][T30431] usb 5-1: device descriptor read/8, error -71 [ 2618.454356][T31485] comedi: No check for data length of config insn id 1001 is implemented [ 2618.463272][T31485] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 2618.472842][T31485] comedi: Assuming n=15 is correct [ 2618.873008][T27196] pwc: Registered as video103. [ 2618.888696][T27196] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input92 [ 2618.907533][ T30] audit: type=1400 audit(1758095369.680:4146): avc: denied { ioctl } for pid=31484 comm="syz.3.6509" path="socket:[118829]" dev="sockfs" ino=118829 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2619.039408][T27196] usb 2-1: USB disconnect, device number 73 [ 2619.189648][T31492] Invalid ELF header magic: != ELF [ 2619.517186][ T30] audit: type=1400 audit(1758095370.331:4147): avc: denied { ioctl } for pid=31494 comm="syz.8.6512" path="socket:[118903]" dev="sockfs" ino=118903 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2619.635697][T31498] openvswitch: netlink: Message has 4 unknown bytes. [ 2619.873126][ T30] audit: type=1400 audit(1758095370.552:4148): avc: denied { shutdown } for pid=31493 comm="syz.4.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2620.030322][ T30] audit: type=1400 audit(1758095370.877:4149): avc: denied { getopt } for pid=31494 comm="syz.8.6512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2620.295808][T21916] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2620.343535][T25004] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2620.544065][T25004] usb 2-1: device descriptor read/64, error -71 [ 2620.564943][T21916] usb 4-1: Using ep0 maxpacket: 32 [ 2620.650623][T21916] usb 4-1: config 12 has no interfaces? [ 2620.663317][T21916] usb 4-1: New USB device found, idVendor=0db0, idProduct=3871, bcdDevice=87.5f [ 2620.675757][T21916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2620.685896][T21916] usb 4-1: Product: syz [ 2620.691262][T21916] usb 4-1: Manufacturer: syz [ 2620.699478][T21916] usb 4-1: SerialNumber: syz [ 2620.857832][T25004] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2621.080960][T21916] usb 4-1: USB disconnect, device number 126 [ 2621.287209][T25004] usb 2-1: device descriptor read/64, error -71 [ 2621.391797][T25004] usb usb2-port1: attempt power cycle [ 2621.440227][T31527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2621.546682][ T5204] usb 3-1: reset high-speed USB device number 34 using dummy_hcd [ 2621.671529][ T5204] usb 3-1: device reset changed ep0 maxpacket size! [ 2621.725012][T25004] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2621.834934][T30314] usb 3-1: USB disconnect, device number 34 [ 2622.307708][T25004] usb 2-1: device descriptor read/8, error -71 [ 2622.448720][T30314] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2622.534834][T25004] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2622.573576][T25004] usb 2-1: device descriptor read/8, error -71 [ 2622.620081][T30314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2622.631897][T30314] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2622.663456][ T5965] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 2622.674426][T31540] Invalid ELF header magic: != ELF [ 2622.937270][T25004] usb usb2-port1: unable to enumerate USB device [ 2622.981398][T30314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.085628][T30314] usb 3-1: config 0 descriptor?? [ 2623.092861][T30314] pwc: Askey VC010 type 2 USB webcam detected. [ 2623.163023][ T5965] usb 5-1: device descriptor read/64, error -71 [ 2624.858573][ T5965] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 2624.887833][T30314] pwc: recv_control_msg error -71 req 02 val 2b00 [ 2624.896745][T30314] pwc: recv_control_msg error -71 req 02 val 2700 [ 2625.007396][T30314] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2625.057773][T31548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2625.088342][T30314] pwc: recv_control_msg error -71 req 04 val 1000 [ 2625.117497][T30314] pwc: recv_control_msg error -71 req 04 val 1300 [ 2625.134704][T30314] pwc: recv_control_msg error -71 req 04 val 1400 [ 2625.251729][T30314] pwc: recv_control_msg error -71 req 02 val 2000 [ 2625.258668][T30314] pwc: recv_control_msg error -71 req 02 val 2100 [ 2625.265544][T30314] pwc: recv_control_msg error -71 req 04 val 1500 [ 2625.526776][T30314] pwc: recv_control_msg error -71 req 02 val 2500 [ 2625.556823][T30314] pwc: recv_control_msg error -71 req 02 val 2400 [ 2626.142368][T30314] pwc: recv_control_msg error -71 req 02 val 2600 [ 2626.170418][ T31] INFO: task syz-executor:24542 blocked for more than 143 seconds. [ 2626.170655][T30314] pwc: recv_control_msg error -71 req 02 val 2900 [ 2626.214061][T30314] pwc: recv_control_msg error -71 req 02 val 2800 [ 2626.221613][ T31] Not tainted syzkaller #0 [ 2626.233094][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2626.334255][T30314] pwc: recv_control_msg error -71 req 04 val 1100 [ 2626.344076][ T31] task:syz-executor state:D stack:23688 pid:24542 tgid:24542 ppid:1 task_flags:0x400140 flags:0x00004004 [ 2626.383509][ T30] audit: type=1400 audit(1758095377.512:4150): avc: denied { read write } for pid=31556 comm="syz.8.6528" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2626.747069][ T30] audit: type=1400 audit(1758095377.512:4151): avc: denied { open } for pid=31556 comm="syz.8.6528" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2626.771468][T30314] pwc: recv_control_msg error -71 req 04 val 1200 [ 2626.802832][ T30] audit: type=1400 audit(1758095377.512:4152): avc: denied { ioctl } for pid=31556 comm="syz.8.6528" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2626.809473][ T31] Call Trace: [ 2626.942075][ T30] audit: type=1400 audit(1758095377.638:4153): avc: denied { mount } for pid=31556 comm="syz.8.6528" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 2627.002110][T30314] pwc: Registered as video103. [ 2627.013257][T30314] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input93 [ 2627.053656][ T31] [ 2627.083997][ T31] __schedule+0x1190/0x5de0 [ 2627.104026][T30314] usb 3-1: USB disconnect, device number 35 [ 2627.110310][ T31] ? __pfx___schedule+0x10/0x10 [ 2627.142917][ T31] ? find_held_lock+0x2b/0x80 [ 2627.171927][ T31] ? schedule+0x2d7/0x3a0 [ 2627.200800][ T31] schedule+0xe7/0x3a0 [ 2627.235475][ T31] v9fs_evict_inode+0x26f/0x300 [ 2627.266639][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 2627.301424][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 2627.347673][ T31] ? evict+0x3a2/0x920 [ 2627.375045][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 2627.411638][ T31] evict+0x3e6/0x920 [ 2627.440663][ T31] ? __pfx_evict+0x10/0x10 [ 2627.451934][ T31] ? iput+0x519/0x880 [ 2627.470920][ T31] iput+0x521/0x880 [ 2627.474848][ T31] ? __pfx_v9fs_drop_inode+0x10/0x10 [ 2627.482123][ T31] dentry_unlink_inode+0x29c/0x480 [ 2627.493108][ T31] __dentry_kill+0x1d0/0x600 [ 2627.503466][ T31] dput.part.0+0x4b1/0x9b0 [ 2627.517029][ T31] shrink_dcache_for_umount+0x159/0x3e0 [ 2627.527007][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2627.532345][ T31] generic_shutdown_super+0x6c/0x390 [ 2627.545291][ T31] kill_anon_super+0x3a/0x60 [ 2627.553066][ T31] v9fs_kill_super+0x3d/0xa0 [ 2627.574927][ T31] deactivate_locked_super+0xbe/0x1a0 [ 2627.595484][ T31] deactivate_super+0xde/0x100 [ 2627.618187][ T31] cleanup_mnt+0x225/0x450 [ 2627.625090][ T31] task_work_run+0x150/0x240 [ 2627.637621][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2627.655109][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 2627.664158][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 2627.687717][ T31] do_syscall_64+0x41c/0x4e0 [ 2627.707318][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2627.719112][ T31] RIP: 0033:0x7f5a5cf8fed7 [ 2627.733927][ T31] RSP: 002b:00007ffc85530518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2627.776759][ T31] RAX: 0000000000000000 RBX: 00007f5a5d011c05 RCX: 00007f5a5cf8fed7 [ 2627.793962][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc855305d0 [ 2627.803704][ T31] RBP: 00007ffc855305d0 R08: 0000000000000000 R09: 0000000000000000 [ 2627.815831][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc85531660 [ 2627.824093][ T31] R13: 00007f5a5d011c05 R14: 000000000027710f R15: 00007ffc855316a0 [ 2627.832338][ T31] [ 2627.835752][ T31] INFO: task syz-executor:28852 blocked for more than 145 seconds. [ 2627.898041][ T31] Not tainted syzkaller #0 [ 2627.913312][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2627.922550][ T31] task:syz-executor state:D stack:23864 pid:28852 tgid:28852 ppid:1 task_flags:0x400140 flags:0x00004004 [ 2627.934707][ T31] Call Trace: [ 2627.938209][ T31] [ 2627.941266][ T31] __schedule+0x1190/0x5de0 [ 2627.946082][ T31] ? __pfx___schedule+0x10/0x10 [ 2627.951074][ T31] ? find_held_lock+0x2b/0x80 [ 2627.956059][ T31] ? schedule+0x2d7/0x3a0 [ 2627.960467][ T31] schedule+0xe7/0x3a0 [ 2627.966627][ T31] v9fs_evict_inode+0x26f/0x300 [ 2627.971559][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 2627.977270][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 2627.982856][ T31] ? evict+0x3a2/0x920 [ 2627.987053][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 2627.992485][ T31] evict+0x3e6/0x920 [ 2627.996557][ T31] ? __pfx_evict+0x10/0x10 [ 2628.001041][ T31] ? iput+0x519/0x880 [ 2628.007338][ T31] iput+0x521/0x880 [ 2628.011269][ T31] ? __pfx_v9fs_drop_inode+0x10/0x10 [ 2628.016648][ T31] dentry_unlink_inode+0x29c/0x480 [ 2628.022003][ T31] __dentry_kill+0x1d0/0x600 [ 2628.026777][ T31] dput.part.0+0x4b1/0x9b0 [ 2628.031343][ T31] shrink_dcache_for_umount+0x159/0x3e0 [ 2628.036968][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2628.042322][ T31] generic_shutdown_super+0x6c/0x390 [ 2628.047668][ T31] kill_anon_super+0x3a/0x60 [ 2628.052347][ T31] v9fs_kill_super+0x3d/0xa0 [ 2628.056984][ T31] deactivate_locked_super+0xbe/0x1a0 [ 2628.062489][ T31] deactivate_super+0xde/0x100 [ 2628.067312][ T31] cleanup_mnt+0x225/0x450 [ 2628.076983][ T31] task_work_run+0x150/0x240 [ 2628.082211][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2628.087398][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 2628.092869][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 2628.098271][ T31] do_syscall_64+0x41c/0x4e0 [ 2628.103981][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2628.109995][ T31] RIP: 0033:0x7f27fab8fed7 [ 2628.114450][ T31] RSP: 002b:00007fff1a60d8f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2628.122996][ T31] RAX: 0000000000000000 RBX: 00007f27fac11c05 RCX: 00007f27fab8fed7 [ 2628.131064][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1a60d9b0 [ 2628.139184][ T31] RBP: 00007fff1a60d9b0 R08: 0000000000000000 R09: 0000000000000000 [ 2628.147408][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff1a60ea40 [ 2628.155530][ T31] R13: 00007f27fac11c05 R14: 00000000002770fb R15: 00007fff1a60ea80 [ 2628.163843][ T31] [ 2628.167205][ T31] [ 2628.167205][ T31] Showing all locks held in the system: [ 2628.217705][ T31] 1 lock held by khungtaskd/31: [ 2628.228783][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 2628.239127][ T31] 1 lock held by acpid/5204: [ 2628.245767][ T31] #0: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 2628.258169][ T31] 2 locks held by getty/5605: [ 2628.262991][ T31] #0: ffff8880368470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2628.273069][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 2628.287383][ T31] 4 locks held by kworker/1:7/5965: [ 2628.293034][ T31] 3 locks held by kworker/u8:12/18495: [ 2628.310081][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2628.324782][ T31] #1: ffffc9000394fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2628.337392][ T31] #2: ffffffff903851c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 2628.347560][ T31] 1 lock held by syz-executor/24542: [ 2628.352903][ T31] #0: ffff88807766c0e0 (&type->s_umount_key#78){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 2628.363599][ T31] 1 lock held by syz-executor/28852: [ 2628.370006][ T31] #0: ffff88803509e0e0 (&type->s_umount_key#78){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 2628.380836][ T31] 6 locks held by kworker/1:2/30314: [ 2628.390398][ T31] #0: ffff888023ee1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2628.402137][ T31] #1: ffffc90003e2fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2628.414516][ T31] #2: ffff888029c49198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 2628.424177][ T31] #3: ffff888079857198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9c0 [ 2628.433505][ T31] #4: ffff888079852160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 2628.747214][ T31] #5: ffffffff8fb98f08 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x184/0x4d0 [ 2628.776445][ T31] 1 lock held by syz.8.6528/31556: [ 2628.783743][ T31] #0: ffffffff903851c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 2628.797387][ T31] 1 lock held by syz.2.6529/31565: [ 2628.802624][ T31] #0: ffffffff903851c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x255/0x48b0 [ 2628.813560][ T31] [ 2628.815947][ T31] ============================================= [ 2628.815947][ T31] [ 2628.824580][ T31] NMI backtrace for cpu 0 [ 2628.824596][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2628.824619][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2628.824630][ T31] Call Trace: [ 2628.824637][ T31] [ 2628.824646][ T31] dump_stack_lvl+0x116/0x1f0 [ 2628.824672][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2628.824689][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 2628.824713][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2628.824741][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2628.824763][ T31] watchdog+0xf0e/0x1260 [ 2628.824789][ T31] ? __pfx_watchdog+0x10/0x10 [ 2628.824808][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2628.824832][ T31] ? __kthread_parkme+0x19e/0x250 [ 2628.824862][ T31] ? __pfx_watchdog+0x10/0x10 [ 2628.824882][ T31] kthread+0x3c2/0x780 [ 2628.824902][ T31] ? __pfx_kthread+0x10/0x10 [ 2628.824923][ T31] ? rcu_is_watching+0x12/0xc0 [ 2628.824947][ T31] ? __pfx_kthread+0x10/0x10 [ 2628.824967][ T31] ret_from_fork+0x56a/0x730 [ 2628.824985][ T31] ? __pfx_kthread+0x10/0x10 [ 2628.825004][ T31] ret_from_fork_asm+0x1a/0x30 [ 2628.825039][ T31] [ 2628.825047][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2628.946668][ C1] NMI backtrace for cpu 1 [ 2628.946685][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2628.946708][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2628.946720][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2628.946748][ C1] Code: 7d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 56 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2628.946767][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 2628.946783][ C1] RAX: 000000000c429e77 RBX: 0000000000000001 RCX: ffffffff8b94bb49 [ 2628.946796][ C1] RDX: 0000000000000000 RSI: ffffffff8de52c58 RDI: ffffffff8c163300 [ 2628.946808][ C1] RBP: ffffed1003c5e488 R08: 0000000000000001 R09: ffffed10170a6655 [ 2628.946821][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 2628.946833][ C1] R13: ffff88801e2f2440 R14: ffffffff90ab7290 R15: 0000000000000000 [ 2628.946845][ C1] FS: 0000000000000000(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 2628.946864][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2628.946876][ C1] CR2: 00007f552296df98 CR3: 000000007da85000 CR4: 00000000003526f0 [ 2628.946889][ C1] Call Trace: [ 2628.946897][ C1] [ 2628.946904][ C1] default_idle+0x13/0x20 [ 2628.946931][ C1] default_idle_call+0x6d/0xb0 [ 2628.946957][ C1] do_idle+0x391/0x510 [ 2628.946983][ C1] ? __pfx_do_idle+0x10/0x10 [ 2628.947005][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 2628.947031][ C1] cpu_startup_entry+0x4f/0x60 [ 2628.947054][ C1] start_secondary+0x21d/0x2b0 [ 2628.947083][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2628.947114][ C1] common_startup_64+0x13e/0x148 [ 2628.947146][ C1] [ 2629.123338][ C1] vkms_vblank_simulate: vblank timer overrun [ 2629.130776][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2629.137633][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2629.146726][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2629.156758][ T31] Call Trace: [ 2629.160015][ T31] [ 2629.162927][ T31] dump_stack_lvl+0x3d/0x1f0 [ 2629.167504][ T31] vpanic+0x6e8/0x7a0 [ 2629.171480][ T31] ? __pfx_vpanic+0x10/0x10 [ 2629.175975][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 2629.181864][ T31] panic+0xca/0xd0 [ 2629.185565][ T31] ? __pfx_panic+0x10/0x10 [ 2629.189959][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2629.195316][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 2629.201450][ T31] ? watchdog+0xd78/0x1260 [ 2629.205850][ T31] ? watchdog+0xd6b/0x1260 [ 2629.210246][ T31] watchdog+0xd89/0x1260 [ 2629.214473][ T31] ? __pfx_watchdog+0x10/0x10 [ 2629.219129][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2629.224311][ T31] ? __kthread_parkme+0x19e/0x250 [ 2629.229322][ T31] ? __pfx_watchdog+0x10/0x10 [ 2629.233977][ T31] kthread+0x3c2/0x780 [ 2629.238027][ T31] ? __pfx_kthread+0x10/0x10 [ 2629.242597][ T31] ? rcu_is_watching+0x12/0xc0 [ 2629.247342][ T31] ? __pfx_kthread+0x10/0x10 [ 2629.251910][ T31] ret_from_fork+0x56a/0x730 [ 2629.256480][ T31] ? __pfx_kthread+0x10/0x10 [ 2629.261048][ T31] ret_from_fork_asm+0x1a/0x30 [ 2629.265805][ T31] [ 2629.269016][ T31] Kernel Offset: disabled [ 2629.273318][ T31] Rebooting in 86400 seconds..