last executing test programs: 3m9.188947826s ago: executing program 0 (id=194): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r1, 0x402, 0x5) preadv(r1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x3524, 0x20, 0x3, 0x201, 0x0, r1}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="03", 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44], 0x30}], 0x1, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000003c0)={0x0, 'ip6_vti0\x00', 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) 3m6.393486696s ago: executing program 0 (id=201): r0 = syz_open_dev$video(0x0, 0x7fff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaabb0800450000740067000000019078ac1e0001ac1414aa03019078036100004600000000004000002f0009ac141410ac1414bb4444e4367a6f1994b4eacee80001000086dd00000000ac1414bb00000000ac14143280000000000000000000004fe0000002000000007f00000100000000ac1414aa00000004e000000100000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000009e40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000425"], 0x4c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x5842, 0x136) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0xec000000, 0xcd}]}) socket$packet(0x11, 0x3, 0x300) r10 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r11 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r13, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r10], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) writev(r6, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 3m1.869416318s ago: executing program 0 (id=210): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000140)="0f6c300d768c1fe097f9588a0b9dd2a94962358fa898155d98fe974f4ea0d6d5e650a5171b21b27f8e2f8d14593c8b5f83c1752ca4d9457d3e38602afccede51f0e3f2e3e44022221581660d7f4ee5a0a63509638f2f2d9e71a0505c710b56d59d382a7945dc1e2b03f73e9e0993b0ca2af0994da9c6bb9f79df61c85c039f2a953c2caf8756d75a038a1f536c14d541cdc9e05f745a96e8b9f2b4c2343cca2148fa0da51553341d51b5086e10e052bc6d07c774faf09d09a31d1740c1", 0xbd}, {&(0x7f0000000200)="6a2dcaf116d161660c3717aee23ecc4744b910f9179b4427b9f9a3b7511d94fcf876e257271aa80d372979ec010a37aec2cd251be25075dec5e9c746f84b88ad", 0x40}, {&(0x7f0000000240)="47ba4a23cfc538831e4a8ad063389c50a745bdac704890c6f477a42496d781c252d5735a859d97ba5353910669b7b8e4d56f7d0adc64610e41ccff099ca49d7a3b532fa8bd8695cb453bc1ca9497edc491debfbf6ef5d818c0c1ab9df4ed271d313741f43c0fb37c0162b544dce0b5d401afa08ac4eab6d526e2c124e1b8b3f5c2cf9da2", 0x84}, {&(0x7f0000000300)="d60318b7c224b228b5bf0bf327a5106e401f7c5da0a9a8956d034a9e7ba6ef81a4d0b96fa132d0ae04d21a98b5f842047f1b7c1eb95b550c2a85b72d6e073f7b4e9f3717b757c3be4e3057a707aedd872a320a3547b6a9d8ebf2c34d0c510f5110ccd4439faf933a20537e790ad71d0fdc91e99cd03c4fa5a69c14701f94a0fc852dca56f9a7e11a0e91664ad530d60d95f9997e693f6d1fb1c10f9563facdb651b3a781f13095535f7520792820b0853b77b06561f1b2de31edb4933369724e52254f9b90f10ab52c2603e7ec1ee97b09f1e22f7fd900c7fa3b1efe9f57684d62235e9455e75723b6c5c94d9e8d3aa602caa1398a2a2c85ccf022611f19f377cb2f626e20a7a32de09a9b141be01a9eadd2d1f609b208a50b9aff2d163c27767bc06d61fe47dfb1f9fd33783ced463fde15db10443e6bfa2749ae39c4b8f081a389ae2ce9e44bef5ad34c72cde8e7a043aba3d6424c93f06dd5872e010b38fcda9647e07715808938604c5936c643c31345089e65e7a9a0df35a6b3965b8d267eed713b583e43171aa18db17ac2b2b83c47561c9664d4ab0c2462c7b0e267eebb783865c5adf97d19c95d54bc1cf4716ea2d13c7eeaa777aa878fc887604929713d81e71424bfd8fa143e2972f95239954a71d7495e918ffce67026b7b2566d9a537bb393b776506f3ff8cb6ee8e72e41dac7822a2d681a768c3924d23b24f5fa565ca8a341e3115a3c6d2d3e847b02b8972e6c0ac5451d6934c944d2a176e5e4e9939b8aa0a0cd36e959bf9c0b143f373d6c0a56ec6efce2303e27b44ca0c34041cb1fec24f340fbd6ea39fdae6fc5a7864ad20ea19841b12971ee540b6bbda35b6265fbf47449b078c8aed41279791b56f4e78a1faaed8c83ffc8ff2548e894cdb4aad13596ad73face5bacd9600c41fa0b2b96ae4b6d9dd1cffbb8b93e0158745e0e735a2222dc63cc6a768d699121c6ad801b6f86e470dc176aa5cc6d043d42e670eb1124c8cb290199a0a57026bb5ad9522363c965740e855dbe13f5d8665fa16a7e2a799f20623146568ec0ec6733d1e4f300d728127ed45bc53b9f38e1e95bb8b3c080c88f9706624483c1606caabbbd9a552015ff0fcfa096b0d3cd270733be5d147b71436c1bb562bc1d7fd7c71912758a689a0854e7f9160459776295d1c1f2ad1025c1ac7ddcb4eff2a38de27a554a19aac0301e380a52f1253af50af46b7ab2cf79db4d3e8ccf6eaa198f74516b18039980e3b0a6deebfb89f53988b8f22f69d0a3eabffb3bb5466426fe70def9e83d30bdf7213392149c5b0496f027f40fe29da541e9449ce3a05981acfb4ba05b074b8ff86392ce75af8a442868a725959bf8be45bc364e30e990814a46e14b5895b204fd71dd97f52dccee132c963291667be30702c0ff2070cb3220bd7b37cf53d685c4832ae128bd7c7b649f999792ec7df1f16fd29177baac0ddbb225d9a25b382b4f1e608dc28dac329dee91d0e1592d1b293d39419ae9ea681898df7c1defa47758b492d268b929b8d2527aaccaecdbd7da002055e1fd329b522918fbef5ac786b1fbd05018d9e4ecfaea8b1e972d2a05fc9e4b768fcef3ded12376fe30c0cf39ada491102d45548e02230fdc0cb8d1d0693d6f43ea003ac132a6930ede9d65b3d428e7b0875509a568c98fcb1edc7d2c94e25a31408362038ae0c33596a8234fceb3d898a74f5dfddd0e614695cf50fb08c11167e1ef28a69b1c4f31453f8985414485357378d1244efff0b381ee4325fecbcd8971553a0ee91e582de1dcd418b4d6fe79b95e7123a67fcbef91f176b2e991eda16f924f9d421220b40618d1edcd09d9785de5bfea50c22311ebc723035450b8003332b3678d7741b434abbfa22aae9af75490c251c7b9035ea7978ec4da89fae96128a691eca4376daca214ee56ae5ce59180361484aee2cbbc6f22561eb85d15d3d9395197b5a82574b8422915cc3fe127629b1ae605e2d413ab3113a5c95af4cd4bc52c561b3685677553d9255136854743789d56036785bbeec2275f52059ba07af99788e31fdae4c99dae4accecad2266bd570d7e4c3ee86621fe9c0d3fa7075268ec712f7a7a4a2f5034abaf9ffd626be4622e530f7e9a15e374453d803a7cd89fd0942df8d9f0b1ab3b47325ee225cd59d0fe1013680f7f811602f872e11913e01e1ff12026f7dd816e167c606350fad77805e937b550ffd616aa03570a61ed660931310d7ba79ecb217531e8ad2dff21c79423aad21baf8ec6a5eaaebb671fc2e20e43f0d2b17d1d5348056b23a7dda40a31853cc9592a93065e2940d49f3e8e12c7aa888527f49a72757e461fa2800bd74028868a7ea1d36b674e0dd9cb11cbb4b3c58200c3b72389c8389cc2aef703987ed0c80071434c2dda45a718837adecac66fff56e08375742230a21e758467f3811301b7070fcf994c95437b7c15448f7a847d7dfeb79fcea32d1e6ded5ce06b10810b87331bffb9711af28afd9d2c1608c262ee1c00c9b79d2cee0890857e079924f817b66ddd401ea2639f6687d0e3b1c146a91033ce50c9da911a317610bd2c8138b5f648d88a2f27e3415278a07294551b7cf4da84185b2f39ca833312b50822e48e69eac4caed42bb5a02670d0ae5ed518baff0c8439ca364671ad9436861d93382c4273006e535a6dbb6f77be61c513a43e22b18610f37a19eb95e29ded4eabb734c4af7efc22d7f795256e8994e81ddba353e44fd1a024661698e62936db7232997527cfe13c222fdeb5488ef3db63e74a28631a3dc362b3999ba8e6378a93bbcc602d9942d7f4576f7afd5fea92a38756f4a39e4658b776ade18302a955d5890282fcb4597fd21ebb8b2883786460672fc86f5240aa8a03ace753a821a70481edcdf272809a2c88e83891c06ebb8fedce0531c270c0a50850523dfde62fdff2e0f32326a5d0881996c996382eda7fb82e4467c8339cf2546ac36dbcfc5a4d4b692d84ec956dc6ab5a32304a7e201fcd44015260bfd4b24e0275c380b1af955600a3107ca3c0f857d7bfaf7635981002a5f459546824599f6d58d6f80d054068b42b941c2656642038c1f685b10e1656212186c6c21abdaac78741d7dbcf854f969c304e9e8c8bdad812b7171d75e8ad4a7b4a6c4037ee6c9da8f5eb9757980979e368c8fcc1c0acb7827cc560d002e62b061744f12739fe8f6038615272fb4b71743b6a0327365437ca9cce4f0175d1c484cb9937d33c0d0e2bc4a07074e4678b549b3cf6ab2c124b4ac4001f21ac728a152544959acc03d12ea7d9e19ec7006ebafed69bd5086cc9b4ab35962df7afee6af00d5987c756ef64d047303f82e2f9ee400ee9e2c5922e3d84de3922892f1b65b8febf644e4fa3b212b9dcbda18b2421d5544ae60ea8b68f740e9cd60a36694d882d0a4cd29b6f48bb824e49137f67338cfc56e6587eb6f76ff04d6ebd1fb65c7d19df29e31c5379ed4717ef470cf4dd6e359afdc06dd14867e036a0d8304e93106a18c4c30d787c593d24b0ae14efcd7bb8bfaa9599dc055767b0aafbc62c2b6979bc76dbac329a206a040c9747bada751377c91ecf23edf9cd49705e9e9f55b41d0a278d5cfd1df3c399b1340f56ec54acd56a030ab246aac87be45c3e9fee7ec8f0595eb5ade4310b8aa2dd68d2b7be681c99e22b8ece8e926c85262df51259353f534ba65e4cc7549b7bb70a32eb1f498d3ba672e217e848bba0a6b2bb693090b963f6627981e5b6753da466fd0de84998ebed2678458281656cab7f9065f45624ffee6f0ae47d6a2e7cd8eb298c743e0d92667964f570da5cce0141c3defbb099493ab34224a45c5a8aaa264d3b49127795c54d5e83b45b6727ac9b0e573e2e0a5d4bd2d394d9299fcc06e8e35f0fb42b111caabd27f29ed544b354094921d3dd194a02f2a30d646d0113afe1b0479fc02097046e392fd1682a62c8693191472e3573e65665c5c59cdecfe53adfa452a99602657fa4250149826e8e8a915894d4b3d690b3b832321013edd621f8a77b8ac0f606382ab9a1eb9d98f86ef9fcaf9f4688719bb73fe11567c0a792308c5c6c65a77370eb0b0656015d8b9efe84572cc938a49ea6c868cda008221746a6373bd57631bd4d8204e811a03e7c12427dd454efce55201f64202c6d1a3a8f4c802b2d5cb823b62a1398161cb7562999ddb5c4f955de354cb119efa10b3003dde5a36eeb68f0c6f2ed7ed3a9c59bf639f876c5e5690f713d811918b2d0cce3bb89041905f252579365ff9a0270366b7c1a010dac8be368ba30d7f8c42a87864578ca358800fa52a34ac32a10ca0c6eda26b9b34cfa7e4b7037c0af376795c7672c34ee93453ebe460c76750f0e885b49cd276c938ae1d8e159b1e7974e5bf64a084f7a5da2a61b1fe2ed1bda0a018b7263e2566d38a05894bdbe72e543d2e40d6478be05bc5f958479516406600d564d8683f9c2948164bea4c79a10a477e3ab59b12fd3faeb497f344d29eea810860fa6808a9b2425fe591cb7b58a82e63a8a5f17c6807e8cd3b28bf9464a622c83c47bd366d3baf4eb0ab59f4f205f92656327095c37eb6dc68e0851b0926c647094874999d154eae68d781b234a96c3744fc2e453ec6dbe81f292fdb4884346b139e078f28800e6dfb1c1e2c8853bfcaaa979bc67771171644316fee93a87f98346deb1f4f8ca25aebf0dd57d505e05457151cc7ef09b7e32a6e75f7d4a45ced3f5617970c166ea07d7e5c87d6de25d980f74de441740a2d467b6ae653ba0977dda2711897d5055a37f8ce3f0bbcbca592b3294896acb61c039fce8214b4e75642b2b99eca46c12255b11481159313fb1a8e72c866f3248a665f82726189b45c088801d87b097a32d7b8f482af000a0c7f18a678690c35edf9034ba40bde98ce2da1995a0382c25ccc4d7f3b9fdec92a8d030e18aea44960ff150c6eccabf5e16bc8fe04200c692262f4bb869e2a9a30aa7d06ccfdb8ea27cfb7599cb61b6b905f22427d412419dddf612cf6aceb2d28331550dd5aaabb700f349e7ff8fdb5596785f3eb5cd5556ce255cf6afe47a9bd768ea4d9d6df991288c3de17f32ec543f3de817a1e8000cbbc3b000124e07297a6d098a7f6323ce8d7dd78fdaed945dd9b210828acffab96d153fbf629fc326dce6945c998a77a308fe42b704bab82a947fe4e5e173e916e207faac1f88d115ec80601a3d31d31a6821c196571fe18c897ec053b011410b3a0017efce7464819fc8c7fa6b3a66a2c30068ab2235019c132be3e0c4cf312be39d5eb79f9480cd8a5742c7ab5c97b1ba36164bfa2a0b32e03f643aa41f6ba954a4b8ead7813292f9607dafc44cfc10016a7c759712032fb2a1386af7f3f18d0b99a32b145e57e1336509fab842af255069ef6919ccfb4696ff04cbe180af96c1c68299085f1240b8bd81bb76912b1bd4d6771d890c48eb306eb2841ef248d02e90a7612c1606509402124c041fa6820f4eb164885584b8635ad5fc028059f3804f50a00506ea4ef7436e87f99c416f0c740428e9fa99467dbba8895563b0165216c3c00752bffd9be64c63e67ce21bbdd95767e66547b51b5e09e0dba42beaf24dfa4ef4497d899bfe4d046b00c42562f0ae8d2b6f0be26bb6ea5177bb900a124ff45966edff6ab755c06d5b90310165e0857ff2ee19e4f8b5f13f7c077ebd1cdb8e37a53b69bcdbc75bfa99d668121f5cdbef0362c7031b797e05605bf0198b90b2a765a7b2cb214d08cefbcb52d12d3043f3e8fddb4acb5cfaaa22e4786bea285da", 0x1000}], 0x4) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000001780)=@abs, &(0x7f0000001440)=0x42) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000000c0)=@nullb, 0x0, &(0x7f0000001580)={0x7, 0x5, 0x0, 0x5}) connect$unix(r4, &(0x7f00000014c0)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x3, 0x0, 0x3, 0x2, 0xfffffffa}, 0x0) socket$netlink(0x10, 0x3, 0x9) r5 = dup(r1) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r6, 0x200004) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="870200000000000007080000000300010320090000000000000015000000000000000a6cff010000000000"], 0x20) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x0) r8 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f00000015c0)={0x84, &(0x7f0000001540)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r4, @ANYRESHEX, @ANYRES8=r4, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000000)=':-@.\x00', 0x0, r7) sendfile(r5, r2, 0x0, 0x80001d00c0d1) 2m59.702802998s ago: executing program 0 (id=217): socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x12, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = userfaultfd(0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 2m58.625357019s ago: executing program 0 (id=219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f00006bf000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$rxrpc(0x21, 0x2, 0x2) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb99529", 0xa) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\x01\x00\x00\x00\x00\x00\x00\x00\'\x11\x13:\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcdR\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00', 0x0) sendmmsg$unix(r3, &(0x7f0000000680), 0x4924924924925c6, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x5) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) sysfs$3(0x3) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000140)=""/61, 0x3d}, &(0x7f0000000180), 0x6b}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x2e, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0xb8f7) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) 2m55.734879391s ago: executing program 0 (id=227): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r6, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0x1000000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4000) sendfile(r1, r0, 0x0, 0x80009) 2m39.556691002s ago: executing program 32 (id=227): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r6, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0x1000000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x4400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4000) sendfile(r1, r0, 0x0, 0x80009) 22.044012937s ago: executing program 3 (id=532): socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, 0x0) socket$l2tp(0x2, 0x2, 0x73) 18.474291537s ago: executing program 5 (id=539): socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x59) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500005800000000002f907800000000e0000001b48065580000000010000800000086dd080088be00000000100000008035000000000000080022"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgrp(0x0) r2 = getuid() keyctl$get_persistent(0x16, r2, 0xfffffffffffffffb) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000240)=0x4) r4 = socket(0xa, 0x3, 0xff) gettid() sendmsg$inet6(r4, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x922bac8576b92dde) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) symlink(0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007700)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 17.559762356s ago: executing program 3 (id=542): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x1000006, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(0x0, 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x23, 0xfc, [@rand_addr=0x64010101, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000841) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40) ptrace$ARCH_SHSTK_STATUS(0x1e, r2, 0x0, 0x5005) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x6}, [{}, {0x2, 0x1}, {0x2, 0x6}, {0x2, 0x5}, {}], {0x4, 0x4}, [{}, {}, {0x8, 0x1}, {0x8, 0x4}, {}, {0x8, 0x4}, {0x8, 0x5}], {0x10, 0x4}, {0x20, 0x4}}, 0x84, 0x2) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf0500050012", 0x2d}], 0x1}, 0x0) 17.225650515s ago: executing program 1 (id=543): write$nci(0xffffffffffffffff, 0x0, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xb6e, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) clock_adjtime(0x3, &(0x7f0000000100)={0x8, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x200000005, 0xd, 0x422, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x20000006, 0x2, 0x0, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c0d4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r5) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 15.545876441s ago: executing program 5 (id=546): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = io_uring_setup(0x7a76, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r7, 0x0, 0x0) close_range(r6, r7, 0x0) r8 = openat2(0xffffffffffffff9c, &(0x7f000001bd80)='./file0\x00', &(0x7f000001bdc0)={0xe0100, 0x80, 0x2}, 0x18) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f000001be00)={0x2, 0x1, 0x7, 0x80000, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001bf00)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001ba40)=[{&(0x7f000001aa40)="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", 0x1000}], 0x1, &(0x7f000001be40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x28, 0x1, 0x1, [r6, r8, r9, r2, r3, r1]}}], 0xb0, 0x8000}}], 0x1, 0x4000000) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r10 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r10, 0x0) 14.431970964s ago: executing program 5 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x9, 0x8, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r5, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000080000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r7}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xd000, 0x7000}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="92276d95ae3a"]}, @typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) 12.860974171s ago: executing program 3 (id=550): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_simple={0x34, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "82af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x10000084) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) unshare(0x2c020400) r6 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r6, 0x4}) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x1014e2, 0x4, 0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000059cd443f6b68ffae7f0500100005ffffffffffffffff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB], 0x50) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r7, 0x7001) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11.84609545s ago: executing program 1 (id=552): syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a", @ANYBLOB="4ad8"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000013000100fcff0700040000000300000004004880100001800c002470363e108004000880"], 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4048094) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x2, {0x0, 0x1, 0x0, 0x1, 0x5}, 0x4}) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$pfkey(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000300)={{&(0x7f000087a000/0x2000)=nil, 0x2000}, 0x1}) syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[], 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x2400c080) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b70000000a0000009500"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000240)=0x5, 0x4, 0x2) 10.694573755s ago: executing program 3 (id=553): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f0000000680)={0x2, 0x4ea3, @private=0xa010100}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000340)="0501cd074c03d5204bd58f1f67b2bb98c4", 0x11}], 0x1}}], 0x2, 0xc044) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, 0xffffffffffffff09) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() setpgid(r3, r3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000040)=0xd, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') brk(0x7fffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) 9.371934323s ago: executing program 2 (id=556): r0 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYRES16=r3, @ANYBLOB="000127bd7000fddbdf2508000000140002000000000000000000000000000000000114000200fc00000000000000000000000000000009fd03000000000000000000000000000000000108000500e000000114000300fc01000000000000000000000000000008000500e000000214000200fe80000000000000000000"], 0x88}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x8}, &(0x7f0000000480)=0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f01c, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="10d40000a58b542a240012800e00010069703665727370616e000000100002800400120008000d0007"], 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x20000840) 8.051501779s ago: executing program 3 (id=557): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0xe, 0x5, 0x6, 0x4}, 0x10) unshare(0x20060400) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) syz_emit_ethernet(0x1d2, &(0x7f0000000a00)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x198, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x1, 0x0, 0x27a2, {0x5, 0x6, "54c03a", 0x402, 0x88, 0x1, @loopback, @rand_addr=' \x01\x00', [@fragment={0x3b, 0x0, 0xc, 0x0, 0x0, 0x3, 0x65}, @hopopts={0xc, 0x2b, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x116, "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"}, @calipso={0x7, 0x38, {0x2, 0xc, 0xff, 0x7fff, [0x0, 0xfffffffffffffffc, 0x91bc, 0xffffffffffffffff, 0x8, 0xe]}}]}]}}}}}}}, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r6}) ftruncate(r5, 0x1000006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r8, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.643436125s ago: executing program 5 (id=558): gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xdab1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b20, &(0x7f0000000080)={'virt_wifi0\x00', @random='\x00\x00]\x00j\v'}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x20000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x24, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x50) timer_create(0x1, 0x0, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') fchdir(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000486000/0x3000)=nil, 0x3000, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 7.085896077s ago: executing program 2 (id=560): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000980000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000080), 0x0, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x3, 0x13c}, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fstat(r0, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r8 = dup(r7) ptrace$peeksig(0x4209, r4, 0x0, 0x0) ioctl$BLKRRPART(r8, 0x125f, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x2, 0x2, 0xb, 0x8, 0x100}, 0x20) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r9, @ANYBLOB="87d240"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, 0x0, 0x4000010) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010101030000000000000000020000090c0003800600034000040000040019"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40040) 7.059667047s ago: executing program 4 (id=561): fsopen(&(0x7f0000000200)='9p\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d11, &(0x7f00000000c0)=0x53) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x82004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x2c, r7, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) 6.296420338s ago: executing program 1 (id=562): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8000) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x9f7d, 0xffffffffea110f45, 0x6, 0x4, 0x10, 0xfffffffd, 0x0, 0x0, 0x40, 0x4}}, 0x9e) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) openat$pidfd(0xffffffffffffff9c, 0x0, 0x80080, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x1}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80002, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001140), 0xffffffffffffffff) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x35dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc000) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001180)={0x2c, r7, 0x401, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @local, 0x5}, 0x1c) 6.073612443s ago: executing program 2 (id=563): syz_socket_connect_nvme_tcp() symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, 0x0, &(0x7f0000000180)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 5.810487696s ago: executing program 3 (id=564): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x38, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", '\x00', "00001000"}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000440)={{0x9, 0xfd}, 'port0\x00', 0x10, 0x11069, 0x3, 0x8000, 0x55814893, 0x80, 0x7fffffff, 0x0, 0x1, 0x3}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r2) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) accept4$tipc(0xffffffffffffffff, &(0x7f0000000180)=@id, &(0x7f0000000240)=0x10, 0x8f2eaf272c693c3b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rseq(0x0, 0x0, 0x0, 0x0) mlockall(0x7) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x1fe, 0x0, 0x10}) 5.168346479s ago: executing program 1 (id=565): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_open_dev$sg(0x0, 0x6f5e, 0x6e4800) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) r3 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x22, 0x2, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x4b, &(0x7f0000000080)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000010000000900010073797a307f0000003c000000090a010400000000000000000100000508000a40000000000900020073797a32000000000900010073797a300000000008000540000000101400000749dcedf058764c3628f43e0010000100"], 0x84}}, 0x20000080) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) mlockall(0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x5, 0x8001, 0x100000000000, 0x1000001004, 0x45}, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0, 0xfffffe63, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0xffffffff, 0x0, [], [0x0, 0x7], [0x0, 0x88000002, 0x2], [0x0, 0x0, 0x7, 0x1]}) 4.876217046s ago: executing program 2 (id=566): r0 = socket$pppoe(0x18, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syncfs(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x26) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002500)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f0000000400)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f0000000380)='./file0\x00') sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000003c0)={@any, 0xb80}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x5) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r8, &(0x7f00000004c0)={0x2020}, 0x2020) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x1e) syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r0) 4.491352449s ago: executing program 1 (id=567): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) r4 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r7 = gettid() process_vm_writev(r7, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffff8000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0cc5605, &(0x7f0000000740)={0x2, @pix={0x1, 0x5, 0x33424752, 0x7, 0xf3, 0x3, 0x5, 0x40, 0x1, 0x2, 0x2}}) 4.297777053s ago: executing program 5 (id=568): syz_usb_connect(0x0, 0x59, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec13b2106d04d308170b0102030109024700010000000009046900000e0100000824020102"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/168}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7e) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d72e56c61746976652c00"]) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000500)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x46}, @device_b, @device_b, @broadcast, {0x9}, @broadcast}}, 0x1e) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@getqdisc={0x2c, 0x26, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0xf}, {0x2, 0xd}, {0xa, 0xa}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 4.275973184s ago: executing program 4 (id=569): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x84, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) epoll_create(0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000192c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0xffffffff, 0xfffffffd, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000, 0xffffffff}}}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x60}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000040)={0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = getpgrp(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1, r7}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = accept4$nfc_llcp(r2, &(0x7f0000000380), &(0x7f0000000100)=0x60, 0x800) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000500)={r8, r4, 0xf, 0xc4, &(0x7f0000000400)="b73bbabfe2967e515aea1f40c8769d5ca5333e726cc6fd4fb7f153375d1559f00827c47d2ff7d7084bb0cdfb487987533d224ea3ba89ef48f1c9f8e88d03678e33707fb6e4e9367d72d838ca934f6edae8277264740dc6dc3c5c3c83fcd2067297fd2b29896af87ca80bb0d7692baa74e4175b67ea3069f9d07500b8921e52bc6991d7cc67cbc4e213b8d154aff705345fae38f43e2842698929cce06c5976938b54481389ccd76d6c1716be76e87bdfa9804223e654f535a3cec9c57082c8eb0c995223", 0xbc, 0x2, 0xf23, 0x0, 0x2, 0x3, 0x4, 'syz0\x00'}) 3.752344061s ago: executing program 4 (id=570): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x22, 0x2, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x2ed, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f569a1", 0x2b3, 0x2f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@routing={0x5e, 0x8, 0x0, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, @private0, @empty]}, @routing={0x88, 0xa, 0x2, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x23}, @private0, @mcast1, @remote, @private1]}, @fragment={0x62, 0x0, 0x4c, 0x1, 0x0, 0x17, 0x64}, @hopopts={0x2b, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0xfc, 0xd, [0x6]}}]}, @srh={0x8, 0x4, 0x4, 0x2, 0x2, 0x0, 0x1ff, [@empty, @mcast2]}, @fragment={0x1, 0x0, 0x3, 0x0, 0x0, 0x10, 0x66}, @routing={0x3b, 0x4, 0x2, 0x4, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0xe}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x76, 0x1, [], "dc95e94cb1d34f6b07d41202c1027dff2b3eca1ed5e3f7d11b4c76168ea2a689ba295b20a03050bde7084027b2af51a22138531080041e71bdb2909064178b957666b53aab72ce70692cb676457fa47b50289e40d4ef78213bfda99508960dd49182a8ef1f37bb29b8dbda507574f9cea79ab621a4e3"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "dc8cadc6fcca952f251a6f59c829eb874529312ed56ca888564ef958339bfd5d8270bc159ce78e87035db4f719ceca7daa56d5429fa6a5568e5481950fc187d3caa36dee944477e39ec01b11d5defa4cef245284d46e14491bb248702e3cc3f9befc59875c049206f03e6700009453092437b403cfd55212cb87bae631cb195d31f63ea07fbd4c4a6e3cb56a0b8d6c"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x9], "fe06159e21f2b3b15636be106fa9a76cd2eed2c013db5fa59fd87341669595ac332d98dfb85e5f93a47174888b7d6976648c0dff883f5a95941e7354fec5b30230"}, {0x8, 0x88be, 0x0, {{0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x9}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0xe, 0x2, 0x2, 0x1, 0x0, 0x1, 0x5, 0x9}, 0x2, {0x0, 0x1, 0x0, 0x18, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, ';*Et^'}}}}}}}, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0) 2.221501407s ago: executing program 4 (id=571): r0 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x74, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYRES16=r3, @ANYBLOB="000127bd7000fddbdf2508000000140002000000000000000000000000000000000114000200fc00000000000000000000000000000009fd03000000000000000000000000000000000108000500e000000114000300fc01000000000000000000000000000008000500e000000214000200fe80000000000000000000"], 0x88}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x8}, &(0x7f0000000480)=0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f01c, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110000000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="10d40000a58b542a240012800e00010069703665727370616e000000100002800400120008000d0007"], 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x20000840) 1.997010733s ago: executing program 2 (id=572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e02, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0801000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008000800080000100000"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x4040000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000780)={@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0xa, 0xfa, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x0, 0x3}) io_uring_enter(r5, 0x6a8a, 0xffefffff, 0x21, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) creat(&(0x7f0000000100)='./file2\x00', 0xd931d3864d39dcc4) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b01660cfb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0x3, 0x5479, 0x2000001035, 0x200000000006, 0x0, 0x5, 0x3, 0x892, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.909726222s ago: executing program 2 (id=573): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'veth1_virt_wifi\x00', 0x400}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0xa01, 0xd9d}, 0x8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/146, 0x92) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) 1.746440325s ago: executing program 1 (id=574): socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0xb, 0x5, 0xffa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4952, &(0x7f0000000300)={0x0, 0xe3d6, 0x8, 0x1, 0x141}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(0xffffffffffffffff, 0x24020000) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) landlock_create_ruleset(0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 929.608069ms ago: executing program 5 (id=575): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f00000000c0)={0xa, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25}}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, 0x0) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001200576d10000010fbdbdf2507", @ANYRES32=0x0, @ANYBLOB="00000200000000000a003d"], 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x0) syz_io_uring_setup(0x892, &(0x7f0000000340)={0x0, 0x6994, 0x80, 0x0, 0xbfdffffc}, &(0x7f0000000300), &(0x7f00000001c0), &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 775.566471ms ago: executing program 4 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f00000016c0)=ANY=[@ANYBLOB="04131505"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x111}}, 0x20) unshare(0x2c020400) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r1}}, 0x18) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r6, 0x400, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x80000031}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 4 (id=577): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$TIOCMIWAIT(r4, 0x5453, 0x7cb7562f2d67) ioctl$TIOCMSET(r4, 0x5418, &(0x7f00000000c0)=0xfff7bdff) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mkdir(0x0, 0x0) timer_create(0x1, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x40010) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0xf}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x10000000007, 0x0) kernel console output (not intermixed with test programs): sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.218569][ T29] audit: type=1400 audit(1776224117.775:247): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 100.276203][ T29] audit: type=1400 audit(1776224117.805:248): avc: denied { setopt } for pid=6185 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.336302][ T29] audit: type=1400 audit(1776224117.895:249): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.386164][ T5912] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 100.604058][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.640285][ T5912] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 100.669866][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.705464][ T5912] usb 4-1: Product: syz [ 100.716704][ T5912] usb 4-1: Manufacturer: syz [ 100.730265][ T5912] usb 4-1: SerialNumber: syz [ 100.792832][ T5912] usb 4-1: config 0 descriptor?? [ 100.901461][ T5855] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.093486][ T5855] usb 3-1: Using ep0 maxpacket: 8 [ 101.129905][ T5855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.176942][ T5855] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 101.249761][ T5855] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=9f.7a [ 101.274077][ T6209] sctp: [Deprecated]: syz.3.49 (pid 6209) Use of int in max_burst socket option deprecated. [ 101.274077][ T6209] Use struct sctp_assoc_value instead [ 101.289838][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.326197][ T5855] usb 3-1: Product: syz [ 101.343498][ T5855] usb 3-1: Manufacturer: syz [ 101.358302][ T5855] usb 3-1: SerialNumber: syz [ 101.394910][ T5855] usb 3-1: config 0 descriptor?? [ 102.040003][ T6214] netem: incorrect ge model size [ 102.046664][ T6214] netem: change failed [ 103.000132][ T6225] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.55'. [ 103.435321][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 103.435337][ T29] audit: type=1400 audit(1776224120.875:272): avc: denied { write } for pid=6220 comm="syz.4.55" name="mcfilter" dev="proc" ino=4026532827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 103.477355][ T29] audit: type=1400 audit(1776224120.895:273): avc: denied { write } for pid=6220 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.550801][ T29] audit: type=1400 audit(1776224121.095:274): avc: denied { read } for pid=6220 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.887005][ T6236] netlink: 56 bytes leftover after parsing attributes in process `syz.4.57'. [ 103.989472][ T5912] usb 3-1: USB disconnect, device number 2 [ 104.061229][ T29] audit: type=1400 audit(1776224121.915:275): avc: denied { read write } for pid=6231 comm="syz.4.57" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.166148][ T29] audit: type=1400 audit(1776224121.945:276): avc: denied { open } for pid=6231 comm="syz.4.57" path="/dev/sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.219834][ T5912] usb 4-1: USB disconnect, device number 3 [ 104.271510][ T29] audit: type=1400 audit(1776224121.985:277): avc: denied { ioctl } for pid=6231 comm="syz.4.57" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 104.304993][ T6240] syz.2.58 (6240): /proc/6238/oom_adj is deprecated, please use /proc/6238/oom_score_adj instead. [ 104.377809][ T29] audit: type=1400 audit(1776224121.985:278): avc: denied { write } for pid=6231 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.447281][ T29] audit: type=1400 audit(1776224122.285:279): avc: denied { getopt } for pid=6238 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.585770][ T6246] netlink: 35 bytes leftover after parsing attributes in process `syz.3.59'. [ 104.897266][ T29] audit: type=1400 audit(1776224122.725:280): avc: denied { write } for pid=6249 comm="syz.0.60" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 105.073599][ T29] audit: type=1400 audit(1776224122.845:281): avc: denied { checkpoint_restore } for pid=6249 comm="syz.0.60" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 106.292639][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 106.898311][ T6267] warning: `syz.0.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.755674][ T6275] kvm: user requested TSC rate below hardware speed [ 108.859082][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 108.859098][ T29] audit: type=1400 audit(1776224126.715:290): avc: denied { setopt } for pid=6276 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 109.148003][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 109.243911][ T29] audit: type=1400 audit(1776224126.985:291): avc: denied { create } for pid=6286 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 109.760655][ T6302] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 109.768123][ T6302] overlayfs: failed to set xattr on upper [ 109.773917][ T6302] overlayfs: ...falling back to redirect_dir=nofollow. [ 109.780789][ T6302] overlayfs: ...falling back to index=off. [ 109.787446][ T6302] overlayfs: ...falling back to uuid=null. [ 109.828331][ T6303] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 109.842257][ T29] audit: type=1400 audit(1776224127.605:292): avc: denied { mounton } for pid=6297 comm="syz.3.68" path="/file0" dev="ramfs" ino=9965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 110.419054][ T29] audit: type=1400 audit(1776224128.265:293): avc: denied { create } for pid=6317 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.491353][ T29] audit: type=1400 audit(1776224128.345:294): avc: denied { create } for pid=6323 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.570818][ T29] audit: type=1400 audit(1776224128.405:295): avc: denied { connect } for pid=6323 comm="syz.2.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.752197][ T2149] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 110.943270][ T2149] usb 4-1: Using ep0 maxpacket: 16 [ 111.019998][ T2149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.054377][ T791] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.197084][ T2149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.284225][ T6340] 9pnet_virtio: no channels available for device 127.0.0.1 [ 111.664094][ T2149] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.713297][ T2149] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.730927][ T29] audit: type=1400 audit(1776224129.585:296): avc: denied { bind } for pid=6342 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 111.763220][ T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.777411][ T2149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.790744][ T2149] usb 4-1: config 0 descriptor?? [ 111.822377][ T791] usb 3-1: config 0 has no interfaces? [ 111.847632][ T791] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.893377][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.991040][ T791] usb 3-1: config 0 descriptor?? [ 112.129358][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 112.406219][ T791] usb 3-1: USB disconnect, device number 3 [ 112.560725][ T29] audit: type=1400 audit(1776224130.415:297): avc: denied { ioctl } for pid=6317 comm="syz.3.71" path="socket:[9126]" dev="sockfs" ino=9126 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.808894][ T29] audit: type=1400 audit(1776224130.665:298): avc: denied { open } for pid=6351 comm="syz.4.75" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 113.089899][ T6355] mmap: syz.4.75 (6355) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.137884][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 114.164411][ T2149] usbhid 4-1:0.0: can't add hid device: -71 [ 114.211862][ T2149] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 114.269439][ T2149] usb 4-1: USB disconnect, device number 4 [ 114.303789][ T6364] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.76'. [ 115.079105][ T6376] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.79'. [ 116.425692][ T29] audit: type=1400 audit(1776224133.895:299): avc: denied { setopt } for pid=6384 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 117.717026][ T29] audit: type=1400 audit(1776224133.905:300): avc: denied { ioctl } for pid=6384 comm="syz.3.82" path="socket:[10086]" dev="sockfs" ino=10086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.252048][ T29] audit: type=1400 audit(1776224136.105:301): avc: denied { create } for pid=6410 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.564279][ T29] audit: type=1400 audit(1776224136.105:302): avc: denied { setopt } for pid=6410 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.610648][ T6416] Invalid source name [ 118.646506][ T6408] netlink: 'syz.2.83': attribute type 4 has an invalid length. [ 118.705868][ T29] audit: type=1400 audit(1776224136.135:303): avc: denied { create } for pid=6400 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 118.836901][ T29] audit: type=1400 audit(1776224136.465:304): avc: denied { mounton } for pid=6410 comm="syz.0.85" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 119.181075][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.674284][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 119.688384][ T24] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 119.714543][ T24] usb 3-1: config 0 has an invalid interface number: 98 but max is 1 [ 119.754477][ T24] usb 3-1: config 0 has no interface number 0 [ 119.783660][ T24] usb 3-1: config 0 has no interface number 1 [ 119.814527][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 119.847536][ T6434] libceph: resolve '0..' (ret=-3): failed [ 119.915256][ T24] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 119.943745][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.985537][ T24] usb 3-1: Product: syz [ 119.989809][ T29] audit: type=1400 audit(1776224137.835:305): avc: denied { ioctl } for pid=6425 comm="syz.3.87" path="socket:[10310]" dev="sockfs" ino=10310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.016185][ T6434] netlink: 'syz.3.87': attribute type 11 has an invalid length. [ 120.069472][ T24] usb 3-1: Manufacturer: syz [ 120.082262][ T24] usb 3-1: SerialNumber: syz [ 120.093838][ T24] usb 3-1: config 0 descriptor?? [ 120.135345][ T29] audit: type=1400 audit(1776224137.835:306): avc: denied { write } for pid=6428 comm="syz.4.89" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 120.216024][ T24] viperboard 3-1:0.61: version 0.00 found at bus 003 address 004 [ 120.321120][ T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 120.332847][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 120.353098][ T24] viperboard 3-1:0.98: version 0.00 found at bus 003 address 004 [ 120.473196][ T29] audit: type=1400 audit(1776224137.895:307): avc: denied { read write } for pid=6432 comm="syz.0.88" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 120.497030][ T29] audit: type=1400 audit(1776224137.895:308): avc: denied { open } for pid=6432 comm="syz.0.88" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 120.688498][ T24] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 120.709838][ T24] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 122.122924][ T6480] netlink: 'syz.0.92': attribute type 12 has an invalid length. [ 122.144167][ T9] usb 3-1: USB disconnect, device number 4 [ 122.220876][ T6480] Cannot find add_set index 0 as target [ 123.748891][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 123.748928][ T29] audit: type=1400 audit(1776224141.585:314): avc: denied { accept } for pid=6492 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.132257][ T29] audit: type=1400 audit(1776224141.595:315): avc: denied { write } for pid=6492 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 124.774695][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 126.699479][ T29] audit: type=1400 audit(1776224144.415:316): avc: denied { watch } for pid=6526 comm="syz.3.103" path="/15/file0" dev="tmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 127.266825][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.703087][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.105933][ T6533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.102'. [ 128.882196][ T42] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 129.025038][ T29] audit: type=1400 audit(1776224146.885:317): avc: denied { ioctl } for pid=6543 comm="syz.2.106" path="socket:[11401]" dev="sockfs" ino=11401 ioctlcmd=0x8991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 129.351591][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.367690][ T42] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.384005][ T42] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 129.399061][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.420280][ T42] usb 2-1: config 0 descriptor?? [ 129.511111][ T29] audit: type=1400 audit(1776224147.365:318): avc: denied { getopt } for pid=6548 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.002473][ T29] audit: type=1400 audit(1776224147.775:319): avc: denied { name_connect } for pid=6541 comm="syz.1.105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 130.319653][ T29] audit: type=1400 audit(1776224147.785:320): avc: denied { write } for pid=6541 comm="syz.1.105" lport=39362 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 130.387673][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 130.396729][ T29] audit: type=1400 audit(1776224147.795:321): avc: denied { setopt } for pid=6541 comm="syz.1.105" lport=39362 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 130.677688][ T6540] : entered promiscuous mode [ 131.568166][ T5825] usb 2-1: USB disconnect, device number 2 [ 131.916475][ T6562] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 131.990442][ T6562] bond1 (unregistering): Released all slaves [ 136.959693][ T29] audit: type=1400 audit(1776224154.475:322): avc: denied { create } for pid=6618 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.135858][ T29] audit: type=1400 audit(1776224154.995:323): avc: denied { ioctl } for pid=6607 comm="syz.1.117" path="socket:[11575]" dev="sockfs" ino=11575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.210069][ T29] audit: type=1400 audit(1776224155.025:324): avc: denied { bind } for pid=6607 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.472643][ T29] audit: type=1400 audit(1776224155.025:325): avc: denied { setopt } for pid=6607 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.001393][ T6636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.059128][ T29] audit: type=1400 audit(1776224155.035:326): avc: denied { write } for pid=6607 comm="syz.1.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.163878][ T29] audit: type=1326 audit(1776224155.205:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6626 comm="syz.2.120" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff54a99c819 code=0x0 [ 138.321413][ T29] audit: type=1400 audit(1776224155.435:328): avc: denied { mounton } for pid=6633 comm="syz.3.121" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.523878][ T29] audit: type=1400 audit(1776224156.015:329): avc: denied { ioctl } for pid=6612 comm="syz.4.118" path="socket:[10750]" dev="sockfs" ino=10750 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 138.602892][ T6647] erofs (device nullb0): cannot find valid erofs superblock [ 138.616903][ T6647] ptrace attach of "./syz-executor exec"[5809] was attempted by ""[6647] [ 138.968586][ T29] audit: type=1400 audit(1776224156.235:330): avc: denied { mount } for pid=6640 comm="syz.0.132" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 139.192203][ T2149] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.311064][ T29] audit: type=1400 audit(1776224157.165:331): avc: denied { name_bind } for pid=6641 comm="syz.3.122" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 139.525743][ T2149] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 139.551389][ T2149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.578938][ T2149] usb 1-1: config 0 descriptor?? [ 139.595337][ T2149] cp210x 1-1:0.0: cp210x converter detected [ 139.949012][ T6656] netlink: 'syz.1.124': attribute type 2 has an invalid length. [ 140.089476][ T6660] netlink: 'syz.1.124': attribute type 2 has an invalid length. [ 140.219122][ T6656] !: entered promiscuous mode [ 140.359909][ T6671] netlink: 'syz.4.125': attribute type 4 has an invalid length. [ 140.671752][ T5877] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.876624][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 140.919217][ T5877] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 140.936928][ T5877] usb 5-1: config 0 has an invalid interface number: 98 but max is 1 [ 140.955923][ T6662] block device autoloading is deprecated and will be removed. [ 140.971941][ T5877] usb 5-1: config 0 has no interface number 0 [ 140.984951][ T5877] usb 5-1: config 0 has no interface number 1 [ 141.028468][ T5877] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 141.042522][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.081571][ T5877] usb 5-1: Product: syz [ 141.097435][ T5877] usb 5-1: Manufacturer: syz [ 141.109664][ T5877] usb 5-1: SerialNumber: syz [ 141.126833][ T5877] usb 5-1: config 0 descriptor?? [ 141.253317][ T5877] viperboard 5-1:0.61: version 0.00 found at bus 005 address 002 [ 141.297486][ T5877] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 141.378272][ T2149] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 141.416155][ T5877] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 141.428812][ T2149] cp210x 1-1:0.0: querying part number failed [ 141.631367][ T5877] viperboard 5-1:0.98: version 0.00 found at bus 005 address 002 [ 141.786524][ T6687] vlan2: entered promiscuous mode [ 141.791620][ T6687] bridge0: entered promiscuous mode [ 142.074638][ T5877] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 142.085609][ T5877] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 142.105077][ T2149] usb 1-1: cp210x converter now attached to ttyUSB0 [ 142.208342][ T2149] usb 1-1: USB disconnect, device number 3 [ 142.259348][ T2149] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.371227][ T2149] cp210x 1-1:0.0: device disconnected [ 142.931263][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 142.931297][ T29] audit: type=1400 audit(1776224160.745:334): avc: denied { read } for pid=6695 comm="syz.2.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 143.420657][ T29] audit: type=1326 audit(1776224161.255:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e1f9c819 code=0x7ffc0000 [ 143.595324][ T29] audit: type=1326 audit(1776224161.265:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f41e1f9c819 code=0x7ffc0000 [ 143.657675][ T29] audit: type=1326 audit(1776224161.265:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e1f9c819 code=0x7ffc0000 [ 143.813854][ T29] audit: type=1326 audit(1776224161.285:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f41e1f9c819 code=0x7ffc0000 [ 143.863636][ T42] usb 5-1: USB disconnect, device number 2 [ 143.914017][ T29] audit: type=1326 audit(1776224161.285:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e1f9c819 code=0x7ffc0000 [ 144.084327][ T29] audit: type=1326 audit(1776224161.285:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41e1f9c819 code=0x7ffc0000 [ 144.214074][ T29] audit: type=1326 audit(1776224161.285:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e1f9c819 code=0x7ffc0000 [ 144.344090][ T29] audit: type=1326 audit(1776224161.285:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f41e1f9c819 code=0x7ffc0000 [ 144.428491][ T29] audit: type=1326 audit(1776224161.285:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6700 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e1f9c819 code=0x7ffc0000 [ 145.280818][ T6720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.137'. [ 145.292239][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.459942][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 145.491573][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 145.538671][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 145.576210][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.606909][ T24] usb 1-1: Product: syz [ 145.620366][ T24] usb 1-1: Manufacturer: syz [ 145.635389][ T24] usb 1-1: SerialNumber: syz [ 145.754445][ T24] usb 1-1: config 0 descriptor?? [ 145.877125][ T6733] overlayfs: failed to clone upperpath [ 147.916467][ T6742] erofs (device nullb0): cannot find valid erofs superblock [ 147.929145][ T6742] ptrace attach of "./syz-executor exec"[5807] was attempted by ""[6742] [ 148.562524][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 148.752831][ T24] usb 1-1: USB disconnect, device number 4 [ 148.957065][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.143'. [ 148.957486][ T6753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.222644][ T6753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.234860][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 149.287593][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.363441][ T9] usb 4-1: config 0 descriptor?? [ 149.424376][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 149.424389][ T29] audit: type=1400 audit(1776224167.285:361): avc: denied { bind } for pid=6754 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.481377][ T29] audit: type=1400 audit(1776224167.315:362): avc: denied { append } for pid=6754 comm="syz.1.144" name="comedi3" dev="devtmpfs" ino=1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.484569][ T6464] udevd[6464]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.521333][ T9] cp210x 4-1:0.0: cp210x converter detected [ 149.532541][ T791] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.580591][ T6751] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 149.627747][ T29] audit: type=1400 audit(1776224167.485:363): avc: denied { mount } for pid=6757 comm="syz.2.145" name="/" dev="hugetlbfs" ino=11825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 149.728293][ T6758] overlayfs: failed to resolve './file2': -2 [ 149.735236][ T791] usb 5-1: Using ep0 maxpacket: 32 [ 149.741050][ T29] audit: type=1400 audit(1776224167.585:364): avc: denied { mounton } for pid=6757 comm="syz.2.145" path="/file0" dev="hugetlbfs" ino=11826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 149.766929][ T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.790734][ T791] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 149.809999][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.859963][ T791] usb 5-1: Product: syz [ 149.874274][ T791] usb 5-1: Manufacturer: syz [ 149.883876][ T791] usb 5-1: SerialNumber: syz [ 149.924177][ T791] usb 5-1: config 0 descriptor?? [ 149.949882][ T791] smsc75xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 149.977122][ T791] smsc75xx 5-1:0.0: probe with driver smsc75xx failed with error -22 [ 150.196641][ T29] audit: type=1400 audit(1776224168.055:365): avc: denied { bind } for pid=6762 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 150.302866][ T173] batman_adv: batadv_iv_ogm_emit: mesh interface switch for queued OGM [ 150.713445][ T9] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 150.750611][ T9] cp210x 4-1:0.0: querying part number failed [ 150.764608][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 150.791523][ T9] usb 4-1: USB disconnect, device number 5 [ 150.820355][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 150.855182][ T9] cp210x 4-1:0.0: device disconnected [ 151.685231][ T24] usb 5-1: USB disconnect, device number 3 [ 151.731779][ T29] audit: type=1400 audit(1776224169.585:366): avc: denied { bind } for pid=6780 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.752581][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.149'. [ 151.989313][ T29] audit: type=1400 audit(1776224169.845:367): avc: denied { write } for pid=6780 comm="syz.4.150" path="socket:[11941]" dev="sockfs" ino=11941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.035098][ T6784] Bluetooth: MGMT ver 1.23 [ 152.532091][ T6794] 9pnet_virtio: no channels available for device 127.0.0.1 [ 155.253723][ T6813] openvswitch: netlink: IP tunnel TTL not specified. [ 155.357750][ T6814] comedi comedi0: Minor 2 could not be opened [ 155.553435][ T29] audit: type=1400 audit(1776224173.205:368): avc: denied { write } for pid=6809 comm="syz.0.157" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 155.585425][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 155.874973][ T29] audit: type=1400 audit(1776224173.725:369): avc: denied { connect } for pid=6808 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 155.944021][ T6816] nbd0: detected capacity change from 0 to 63 [ 156.051193][ T29] audit: type=1400 audit(1776224173.905:370): avc: denied { ioctl } for pid=6821 comm="syz.0.159" path="socket:[11046]" dev="sockfs" ino=11046 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 156.159249][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.159'. [ 156.274605][ T29] audit: type=1400 audit(1776224174.105:371): avc: denied { write } for pid=6810 comm="syz.3.158" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.451881][ T6812] input: syz1 as /devices/virtual/input/input6 [ 156.664290][ T29] audit: type=1400 audit(1776224174.515:372): avc: denied { setopt } for pid=6830 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 157.012952][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.161'. [ 157.033266][ T29] audit: type=1400 audit(1776224174.865:373): avc: denied { nlmsg_read } for pid=6834 comm="syz.3.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 157.316722][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 157.547376][ T6845] 9pnet_virtio: no channels available for device 127.0.0.1 [ 157.976668][ T50] block nbd0: Receive control failed (result -104) [ 159.043840][ T29] audit: type=1326 audit(1776224176.905:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 161.084300][ T29] audit: type=1326 audit(1776224176.905:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 161.115485][ T29] audit: type=1326 audit(1776224176.935:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 162.101121][ T29] audit: type=1326 audit(1776224176.935:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 162.135207][ T29] audit: type=1326 audit(1776224176.935:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 162.366736][ T29] audit: type=1326 audit(1776224176.935:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 162.390271][ T29] audit: type=1326 audit(1776224176.935:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 162.413752][ T29] audit: type=1326 audit(1776224176.935:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 162.478932][ T29] audit: type=1326 audit(1776224176.935:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.1.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 162.683944][ T29] audit: type=1400 audit(1776224180.535:383): avc: denied { create } for pid=6873 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 162.704706][ T6882] netlink: 16 bytes leftover after parsing attributes in process `syz.1.170'. [ 163.072194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 163.242197][ T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 163.422040][ T24] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 163.454473][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.480223][ T24] usb 2-1: config 0 has no interfaces? [ 163.494471][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 163.515540][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.547546][ T24] usb 2-1: config 0 descriptor?? [ 165.357168][ T6899] erofs (device nullb0): cannot find valid erofs superblock [ 165.369062][ T6899] ptrace attach of "./syz-executor exec"[5802] was attempted by ""[6899] [ 165.832842][ T5877] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 166.031934][ T5877] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 166.059215][ T24] usb 2-1: string descriptor 0 read error: -71 [ 166.071493][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.132260][ T6906] 9pnet_virtio: no channels available for device 127.0.0.1 [ 166.498394][ T24] usb 2-1: USB disconnect, device number 3 [ 166.515846][ T5877] usb 5-1: config 0 descriptor?? [ 166.641222][ T5877] cp210x 5-1:0.0: cp210x converter detected [ 167.658223][ T6923] 9p: Bad value for 'rfdno' [ 168.295996][ T5877] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 169.168916][ T5877] cp210x 5-1:0.0: querying part number failed [ 169.189387][ T5877] usb 5-1: cp210x converter now attached to ttyUSB0 [ 169.280572][ T5877] usb 5-1: USB disconnect, device number 4 [ 169.346339][ T5877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 169.376362][ T5877] cp210x 5-1:0.0: device disconnected [ 170.055611][ T6937] syz.1.181 uses obsolete (PF_INET,SOCK_PACKET) [ 170.419200][ T29] audit: type=1400 audit(1776224188.275:384): avc: denied { append } for pid=6940 comm="syz.4.183" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 170.477472][ T6936] veth3: entered promiscuous mode [ 170.485954][ T6936] veth3: entered allmulticast mode [ 170.790536][ T6948] xt_TPROXY: Can be used only with -p tcp or -p udp [ 171.286219][ T29] audit: type=1400 audit(1776224189.108:385): avc: denied { write } for pid=6951 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.331341][ T29] audit: type=1400 audit(1776224189.146:386): avc: denied { setopt } for pid=6951 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.494920][ T6961] kAFS: unable to lookup cell 'ÿ' [ 171.543837][ T6963] kAFS: unable to lookup cell '(,c¾Ì' [ 171.937363][ T29] audit: type=1400 audit(1776224189.707:387): avc: denied { read } for pid=6959 comm="syz.3.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 172.431405][ T6975] 9pnet_virtio: no channels available for device 127.0.0.1 [ 172.615588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 172.961184][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 173.633517][ T29] audit: type=1400 audit(1776224191.307:388): avc: denied { watch_reads } for pid=6988 comm="syz.0.194" path="/35" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 173.765884][ T6987] netlink: 'syz.3.193': attribute type 13 has an invalid length. [ 174.279072][ T6996] SET target dimension over the limit! [ 176.070298][ T7004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.058573][ T5877] Process accounting resumed [ 178.363265][ T29] audit: type=1800 audit(1776224195.387:389): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.203" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=12602 res=0 errno=0 [ 179.117771][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 179.987781][ T7063] netlink: 'syz.4.206': attribute type 30 has an invalid length. [ 180.135583][ T7065] netlink: 'syz.4.206': attribute type 30 has an invalid length. [ 180.407588][ T7074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'. [ 180.440594][ T29] audit: type=1400 audit(1776224197.661:390): avc: denied { setopt } for pid=7059 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 180.565854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 181.407196][ T29] audit: type=1400 audit(1776224198.578:391): avc: denied { write } for pid=7085 comm="syz.0.210" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 181.495678][ T29] audit: type=1400 audit(1776224198.578:392): avc: denied { open } for pid=7085 comm="syz.0.210" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 181.773300][ T5877] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 181.959853][ T5877] usb 1-1: config 0 has an invalid interface number: 166 but max is 0 [ 182.004186][ T5877] usb 1-1: config 0 has no interface number 0 [ 182.024169][ T5877] usb 1-1: too many endpoints for config 0 interface 166 altsetting 239: 129, using maximum allowed: 30 [ 182.056432][ T5877] usb 1-1: config 0 interface 166 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 182.082441][ T5877] usb 1-1: config 0 interface 166 has no altsetting 0 [ 182.093972][ T5877] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.111716][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.153080][ T5877] usb 1-1: config 0 descriptor?? [ 182.193239][ T7096] netlink: 'syz.3.213': attribute type 13 has an invalid length. [ 182.295580][ T7097] syzkaller0: Caught tx_queue_len zero misconfig [ 182.396867][ T5877] usb 1-1: string descriptor 0 read error: -71 [ 182.430865][ T5877] cp210x 1-1:0.166: cp210x converter detected [ 182.445010][ T5877] cp210x 1-1:0.166: failed to get vendor val 0x370b size 1: -71 [ 182.470093][ T5877] cp210x 1-1:0.166: querying part number failed [ 182.498887][ T7096] netlink: 'syz.3.213': attribute type 1 has an invalid length. [ 182.508120][ T5877] usb 1-1: cp210x converter now attached to ttyUSB0 [ 182.521383][ T7096] netlink: 280 bytes leftover after parsing attributes in process `syz.3.213'. [ 182.552051][ T5877] usb 1-1: USB disconnect, device number 5 [ 182.585179][ T5877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.625831][ T5877] cp210x 1-1:0.166: device disconnected [ 182.966471][ T7101] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 183.084385][ T29] audit: type=1400 audit(1776224200.151:393): avc: denied { create } for pid=7103 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 183.152813][ T29] audit: type=1400 audit(1776224200.151:394): avc: denied { setopt } for pid=7103 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.482203][ T7127] fuse: Bad value for 'fd' [ 185.017184][ T7125] mkiss: ax0: crc mode is auto. [ 187.205251][ T2012] block nbd0: Possible stuck request ffff888028077000: control (read@0,1024B). Runtime 30 seconds [ 187.219086][ T2012] block nbd0: Possible stuck request ffff8880280771c0: control (read@1024,1024B). Runtime 30 seconds [ 187.230329][ T2012] block nbd0: Possible stuck request ffff888028077380: control (read@2048,1024B). Runtime 30 seconds [ 187.245080][ T2012] block nbd0: Possible stuck request ffff888028077540: control (read@3072,1024B). Runtime 30 seconds [ 187.478255][ T7167] xt_TCPMSS: Only works on TCP SYN packets [ 188.018288][ T7167] sit1: entered allmulticast mode [ 189.835318][ T29] audit: type=1400 audit(1776224206.383:395): avc: denied { bind } for pid=7186 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.141496][ T29] audit: type=1400 audit(1776224206.383:396): avc: denied { listen } for pid=7186 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.141538][ T29] audit: type=1400 audit(1776224206.402:397): avc: denied { connect } for pid=7186 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.141570][ T29] audit: type=1400 audit(1776224206.467:398): avc: denied { accept } for pid=7186 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.141603][ T29] audit: type=1400 audit(1776224206.533:399): avc: denied { read } for pid=7186 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 190.166878][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 190.166930][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 190.284336][ T29] audit: type=1400 audit(1776224206.879:400): avc: denied { getopt } for pid=7188 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 192.331227][ T5810] Bluetooth: hci3: command 0x0406 tx timeout [ 192.331280][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 192.341784][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 192.417533][ T5810] Bluetooth: hci1: command 0x0406 tx timeout [ 192.870658][ T7222] veth3: left promiscuous mode [ 193.514044][ T29] audit: type=1400 audit(1776224209.911:401): avc: denied { write } for pid=7223 comm="syz.2.239" path="socket:[13793]" dev="sockfs" ino=13793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.541769][ T29] audit: type=1400 audit(1776224209.911:402): avc: denied { setopt } for pid=7223 comm="syz.2.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.663605][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.672120][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.719710][ T7226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.732035][ T7226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.833193][ T7226] batman_adv: batadv0: Interface deactivated: macsec1 [ 193.890830][ T7020] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.910195][ T7020] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.951234][ T7020] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.970361][ T7020] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.028858][ T7232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.465285][ T29] audit: type=1326 audit(1776224212.672:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7258 comm="syz.3.246" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41e1f9c819 code=0x0 [ 196.721592][ T7266] lo: Caught tx_queue_len zero misconfig [ 197.138535][ T7270] pim6reg: entered allmulticast mode [ 197.896269][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.248'. [ 198.006077][ T29] audit: type=1400 audit(1776224214.085:404): avc: denied { create } for pid=7272 comm="syz.4.248" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 198.190239][ T29] audit: type=1400 audit(1776224214.094:405): avc: denied { link } for pid=7272 comm="syz.4.248" name="#9" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 198.218109][ T7280] netlink: 'syz.4.248': attribute type 39 has an invalid length. [ 198.674417][ T29] audit: type=1400 audit(1776224214.094:406): avc: denied { rename } for pid=7272 comm="syz.4.248" name="#a" dev="tmpfs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 198.715830][ T29] audit: type=1400 audit(1776224214.375:407): avc: denied { mount } for pid=7276 comm="syz.2.249" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 198.820757][ T7284] netlink: 128 bytes leftover after parsing attributes in process `syz.3.250'. [ 198.829893][ T7284] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 199.435977][ T29] audit: type=1400 audit(1776224214.384:408): avc: denied { search } for pid=7276 comm="syz.2.249" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.491512][ T29] audit: type=1400 audit(1776224214.384:409): avc: denied { setattr } for pid=7276 comm="syz.2.249" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.538128][ T7289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.252'. [ 199.618427][ T7290] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 199.646593][ T7290] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 199.716206][ T29] audit: type=1400 audit(1776224214.917:410): avc: denied { bind } for pid=7279 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 199.739677][ T29] audit: type=1400 audit(1776224214.917:411): avc: denied { connect } for pid=7279 comm="syz.3.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 199.836056][ T29] audit: type=1400 audit(1776224215.544:412): avc: denied { create } for pid=7285 comm="syz.3.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 200.401339][ T7297] 9pnet_virtio: no channels available for device 127.0.0.1 [ 201.074196][ T7300] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 202.311657][ T7314] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 202.330665][ T5815] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 203.350319][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.370100][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.380248][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.387986][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.395767][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.349336][ T7330] chnl_net:caif_netlink_parms(): no params data found [ 204.455718][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.463906][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.471217][ T7330] bridge_slave_0: entered allmulticast mode [ 204.480332][ T7330] bridge_slave_0: entered promiscuous mode [ 204.495314][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.504355][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.511539][ T7330] bridge_slave_1: entered allmulticast mode [ 204.520543][ T7330] bridge_slave_1: entered promiscuous mode [ 204.576247][ T7330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.593763][ T7330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.980157][ T7330] team0: Port device team_slave_0 added [ 204.994127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 205.007284][ T7330] team0: Port device team_slave_1 added [ 205.198616][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.617090][ T5804] Bluetooth: hci5: command tx timeout [ 205.723086][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.752129][ T7330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.833736][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 206.806272][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.806288][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.806310][ T7330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.969337][ T7351] overlay: ./file0 is not a directory [ 207.975144][ T5804] Bluetooth: hci5: command tx timeout [ 207.996530][ T7365] tipc: Started in network mode [ 208.001481][ T7365] tipc: Node identity , cluster identity 3 [ 208.007384][ T7365] tipc: Failed to obtain node identity [ 208.012905][ T7365] tipc: Enabling of bearer rejected, failed to enable media [ 208.033981][ T7330] hsr_slave_0: entered promiscuous mode [ 208.614381][ T7330] hsr_slave_1: entered promiscuous mode [ 208.648444][ T7330] debugfs: 'hsr0' already exists in 'hsr' [ 208.662015][ T7330] Cannot create hsr debugfs directory [ 208.695336][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 208.695351][ T29] audit: type=1400 audit(1776224224.116:414): avc: denied { create } for pid=7373 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 208.756583][ T29] audit: type=1400 audit(1776224224.154:415): avc: denied { write } for pid=7373 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 208.822490][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 209.161749][ T7380] netlink: 120 bytes leftover after parsing attributes in process `syz.2.272'. [ 209.206442][ T29] audit: type=1400 audit(1776224224.594:416): avc: denied { read } for pid=7373 comm="syz.1.270" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.269924][ T29] audit: type=1400 audit(1776224224.594:417): avc: denied { open } for pid=7373 comm="syz.1.270" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.496104][ T7384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7384 comm=syz.2.273 [ 210.056870][ T29] audit: type=1400 audit(1776224224.697:418): avc: denied { ioctl } for pid=7373 comm="syz.1.270" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 210.198414][ T5804] Bluetooth: hci5: command tx timeout [ 210.267323][ T7330] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 210.294238][ T7330] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 210.332967][ T7330] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 210.347840][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 210.364741][ T7330] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.422601][ T791] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 210.549865][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 210.582756][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 210.615392][ T791] usb 5-1: Using ep0 maxpacket: 32 [ 210.624499][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 210.640948][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.667628][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 210.684256][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.720635][ T791] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.752216][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 210.761723][ T791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.783372][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.805686][ T791] usb 5-1: config 0 descriptor?? [ 210.824233][ T24] usb 2-1: Product: syz [ 210.849887][ T791] hub 5-1:0.0: USB hub found [ 210.856561][ T24] usb 2-1: Manufacturer: syz [ 210.880751][ T24] usb 2-1: SerialNumber: syz [ 210.888059][ T7330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.927529][ T24] usb 2-1: config 0 descriptor?? [ 210.944085][ T7375] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 210.965360][ T7330] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.998571][ T24] usb 2-1: ucan: probing device on interface #0 [ 211.007716][ T24] usb 2-1: ucan: invalid in_ep MaxPacketSize [ 211.028973][ T24] usb 2-1: ucan: probe failed; try to update the device firmware [ 211.039083][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.046145][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.639973][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.647137][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.432680][ T5804] Bluetooth: hci5: command tx timeout [ 212.585653][ T24] usb 2-1: USB disconnect, device number 4 [ 213.399254][ T791] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 213.491587][ T791] usbhid 5-1:0.0: can't add hid device: -71 [ 213.516595][ T791] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 213.537835][ T7330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.584094][ T791] usb 5-1: USB disconnect, device number 5 [ 213.726452][ T29] audit: type=1400 audit(1776224228.814:419): avc: denied { create } for pid=7415 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 213.799956][ T29] audit: type=1326 audit(1776224228.870:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.4.279" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4c319c819 code=0x0 [ 213.871112][ T29] audit: type=1400 audit(1776224228.880:421): avc: denied { module_request } for pid=7330 comm="syz-executor" kmod="netdevsim5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 213.962248][ T29] audit: type=1326 audit(1776224228.926:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 214.046769][ T29] audit: type=1326 audit(1776224228.926:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 214.100493][ T7330] veth0_vlan: entered promiscuous mode [ 214.113826][ T7330] veth1_vlan: entered promiscuous mode [ 214.132550][ T29] audit: type=1326 audit(1776224228.926:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 214.174617][ T7330] veth0_macvtap: entered promiscuous mode [ 214.185417][ T7330] veth1_macvtap: entered promiscuous mode [ 214.202135][ T29] audit: type=1326 audit(1776224228.926:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 214.251125][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.262160][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.275171][ T29] audit: type=1326 audit(1776224228.926:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 214.313300][ T7015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.333401][ T7015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.343414][ T29] audit: type=1326 audit(1776224228.926:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 214.388094][ T7015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.421344][ T29] audit: type=1326 audit(1776224228.945:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 214.549649][ T7015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.563496][ T29] audit: type=1326 audit(1776224228.954:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7415 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b9d9c819 code=0x7ffc0000 [ 214.617809][ T7439] bridge_slave_0: left allmulticast mode [ 214.623682][ T7439] bridge_slave_0: left promiscuous mode [ 214.660614][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.804899][ T7439] bridge_slave_1: left allmulticast mode [ 214.823387][ T7439] bridge_slave_1: left promiscuous mode [ 214.846885][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.997036][ T7439] bond0: (slave bond_slave_0): Releasing backup interface [ 215.020131][ T7439] bond0: (slave bond_slave_1): Releasing backup interface [ 215.095500][ T7439] team0: Port device team_slave_0 removed [ 215.161056][ T7439] team0: Port device team_slave_1 removed [ 215.176528][ T7439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.207530][ T7439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.277752][ T7439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.381876][ T7022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.401080][ T7022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.643532][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.662917][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.830586][ T29] audit: type=1400 audit(1776224230.798:430): avc: denied { mounton } for pid=7330 comm="syz-executor" path="/root/syzkaller.X51ifP/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 215.895010][ T29] audit: type=1400 audit(1776224230.817:431): avc: denied { mounton } for pid=7330 comm="syz-executor" path="/root/syzkaller.X51ifP/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 215.996275][ T29] audit: type=1400 audit(1776224230.817:432): avc: denied { mounton } for pid=7330 comm="syz-executor" path="/root/syzkaller.X51ifP/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 216.683344][ T7465] netlink: 52 bytes leftover after parsing attributes in process `syz.4.284'. [ 216.776079][ T7465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.284'. [ 217.563579][ T7471] netlink: 36 bytes leftover after parsing attributes in process `syz.5.285'. [ 218.021429][ T3569] Bluetooth: (null): Invalid header checksum [ 218.044518][ T3569] Bluetooth: (null): Invalid header checksum [ 218.056629][ T3569] Bluetooth: (null): Invalid header checksum [ 218.062903][ T3569] Bluetooth: (null): Invalid header checksum [ 218.250727][ T7016] Bluetooth: (null): Invalid header checksum [ 219.372237][ T2012] block nbd0: Possible stuck request ffff888028077000: control (read@0,1024B). Runtime 60 seconds [ 219.382952][ T2012] block nbd0: Possible stuck request ffff8880280771c0: control (read@1024,1024B). Runtime 60 seconds [ 219.394438][ T2012] block nbd0: Possible stuck request ffff888028077380: control (read@2048,1024B). Runtime 60 seconds [ 219.405582][ T2012] block nbd0: Possible stuck request ffff888028077540: control (read@3072,1024B). Runtime 60 seconds [ 219.510095][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 219.510116][ T29] audit: type=1400 audit(1776224234.204:436): avc: denied { mount } for pid=7475 comm="syz.4.287" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 220.092872][ T7494] trusted_key: encrypted_key: insufficient parameters specified [ 220.118070][ T29] audit: type=1400 audit(1776224234.803:437): avc: denied { connect } for pid=7486 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.172769][ T29] audit: type=1400 audit(1776224234.850:438): avc: denied { bind } for pid=7486 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.345736][ T29] audit: type=1400 audit(1776224235.018:439): avc: denied { connect } for pid=7499 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.825898][ T7501] veth3: entered promiscuous mode [ 220.880310][ T7501] veth3: entered allmulticast mode [ 221.866222][ T7517] bond0: (slave rose0): refused to change device type [ 222.042140][ T29] audit: type=1400 audit(1776224236.319:440): avc: denied { getopt } for pid=7514 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.246333][ T29] audit: type=1400 audit(1776224236.796:441): avc: denied { write } for pid=7522 comm="syz.2.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 222.970745][ T29] audit: type=1400 audit(1776224237.311:442): avc: denied { create } for pid=7527 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 223.487085][ T7526] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 223.520350][ T29] audit: type=1400 audit(1776224237.414:443): avc: denied { sys_admin } for pid=7527 comm="syz.1.298" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 224.370310][ T29] audit: type=1400 audit(1776224238.790:444): avc: denied { ioctl } for pid=7538 comm="syz.4.300" path="socket:[14906]" dev="sockfs" ino=14906 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 224.785103][ T2149] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 224.795204][ T7548] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 225.043091][ T2149] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 225.056126][ T2149] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 225.066598][ T2149] usb 4-1: config 0 interface 0 has no altsetting 0 [ 225.096158][ T2149] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 225.123224][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 225.160943][ T2149] usb 4-1: Product: syz [ 225.170329][ T2149] usb 4-1: Manufacturer: syz [ 225.184882][ T2149] usb 4-1: SerialNumber: syz [ 225.199934][ T2149] usb 4-1: config 0 descriptor?? [ 225.213951][ T7557] netlink: 'syz.1.304': attribute type 39 has an invalid length. [ 225.225612][ T2149] hub 4-1:0.0: bad descriptor, ignoring hub [ 225.237597][ T2149] hub 4-1:0.0: probe with driver hub failed with error -5 [ 225.262197][ T2149] usb 4-1: selecting invalid altsetting 0 [ 226.049114][ T7544] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 226.480800][ T7565] netlink: 56 bytes leftover after parsing attributes in process `syz.4.305'. [ 226.816013][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.862782][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.327998][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 227.751626][ T2149] IPVS: starting estimator thread 0... [ 227.776896][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 227.789049][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 227.836627][ T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 227.858961][ T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 227.960534][ T7582] IPVS: using max 80 ests per chain, 192000 per kthread [ 228.166715][ T24] usb 2-1: Product: syz [ 228.174865][ T24] usb 2-1: Manufacturer: syz [ 228.184651][ T24] usb 2-1: SerialNumber: syz [ 228.207702][ T24] usb 2-1: config 0 descriptor?? [ 228.222725][ T7576] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 228.242593][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 228.253507][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 228.289687][ T5877] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 228.439304][ T5877] usb 5-1: device descriptor read/64, error -71 [ 228.499443][ T24] usb 4-1: USB disconnect, device number 6 [ 228.511980][ T7576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.547798][ T7576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.717116][ T5877] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 228.877603][ T5877] usb 5-1: device descriptor read/64, error -71 [ 228.941707][ T5855] usb 2-1: USB disconnect, device number 5 [ 228.995281][ T5877] usb usb5-port1: attempt power cycle [ 229.322950][ T7594] netlink: 'syz.5.312': attribute type 13 has an invalid length. [ 229.370931][ T5877] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 229.422499][ T5877] usb 5-1: device descriptor read/8, error -71 [ 229.452163][ T7594] netlink: 'syz.5.312': attribute type 1 has an invalid length. [ 229.462184][ T7594] netlink: 280 bytes leftover after parsing attributes in process `syz.5.312'. [ 229.892570][ T5877] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 229.926312][ T5877] usb 5-1: device descriptor read/8, error -71 [ 229.961760][ T29] audit: type=1400 audit(1776224244.012:445): avc: denied { ioctl } for pid=7595 comm="syz.1.313" path="socket:[15958]" dev="sockfs" ino=15958 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 230.023585][ T7609] netlink: 'syz.1.313': attribute type 4 has an invalid length. [ 230.061849][ T5877] usb usb5-port1: unable to enumerate USB device [ 230.102094][ T7611] netlink: 'syz.1.313': attribute type 4 has an invalid length. [ 230.850341][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 231.100798][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 231.110561][ T29] audit: type=1400 audit(1776224245.088:446): avc: denied { read write } for pid=7622 comm="syz.2.319" name="file1" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 231.159395][ T24] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 231.474107][ T7626] netlink: 260 bytes leftover after parsing attributes in process `syz.4.318'. [ 231.702585][ T24] usb 2-1: config 0 has an invalid interface number: 98 but max is 1 [ 231.712190][ T24] usb 2-1: config 0 has no interface number 0 [ 231.718311][ T24] usb 2-1: config 0 has no interface number 1 [ 231.750037][ T29] audit: type=1400 audit(1776224245.088:447): avc: denied { open } for pid=7622 comm="syz.2.319" path="/79/file1" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 231.780704][ T7623] netlink: 'syz.2.319': attribute type 7 has an invalid length. [ 231.801298][ T7022] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.818251][ T24] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 231.838139][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.853011][ T7022] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.871479][ T24] usb 2-1: Product: syz [ 231.880716][ T29] audit: type=1400 audit(1776224245.219:448): avc: denied { mount } for pid=7620 comm="syz.4.318" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 231.905807][ T7022] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.925996][ T7022] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.941792][ T24] usb 2-1: Manufacturer: syz [ 231.983790][ T29] audit: type=1400 audit(1776224245.237:449): avc: denied { remount } for pid=7620 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 232.043340][ T24] usb 2-1: SerialNumber: syz [ 232.069470][ T24] usb 2-1: config 0 descriptor?? [ 232.074097][ T29] audit: type=1400 audit(1776224245.687:450): avc: denied { listen } for pid=7622 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.187509][ T29] audit: type=1400 audit(1776224245.715:451): avc: denied { accept } for pid=7622 comm="syz.2.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.254645][ T24] viperboard 2-1:0.61: version 0.00 found at bus 002 address 006 [ 232.401100][ T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 232.536564][ T7636] binder: binder_mmap: 7631 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 232.551600][ T29] audit: type=1400 audit(1776224246.379:452): avc: denied { ioctl } for pid=7631 comm="syz.4.321" path="socket:[16006]" dev="sockfs" ino=16006 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 232.806021][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 232.838464][ T29] audit: type=1400 audit(1776224246.379:453): avc: denied { bind } for pid=7631 comm="syz.4.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.878357][ T29] audit: type=1400 audit(1776224246.426:454): avc: denied { map } for pid=7631 comm="syz.4.321" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.910968][ T24] viperboard 2-1:0.98: version 0.00 found at bus 002 address 006 [ 232.956033][ T24] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 232.996257][ T24] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 233.684375][ T5855] usb 2-1: USB disconnect, device number 6 [ 233.924027][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 234.240504][ T7652] CIFS: VFS: UNC: path must begin with // or \\ [ 234.247416][ T7652] Malformed UNC in devname [ 234.247416][ T7652] [ 234.266656][ T7653] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 234.278215][ T7653] SET target dimension over the limit! [ 234.285648][ T7652] CIFS: VFS: Malformed UNC in devname [ 235.472828][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 235.497913][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 235.516125][ T24] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 235.525512][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.533529][ T24] usb 6-1: Product: syz [ 235.555161][ T24] usb 6-1: Manufacturer: syz [ 235.673755][ T24] usb 6-1: SerialNumber: syz [ 235.781055][ T7666] 9pnet_virtio: no channels available for device 127.0.0.1 [ 236.267357][ T24] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 236.268526][ T7660] veth3: entered promiscuous mode [ 236.281957][ T7660] veth3: entered allmulticast mode [ 236.309319][ T24] usb 6-1: clock source 0 is not valid, cannot use [ 236.326586][ T24] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 236.352572][ T24] usb 6-1: 1:1: cannot set freq 48000 (v2/v3): err -71 [ 236.711220][ T24] usb 6-1: USB disconnect, device number 2 [ 237.736578][ T7692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.331'. [ 238.207559][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 238.877627][ T7703] ªªªªªª: renamed from vlan0 (while UP) [ 239.075205][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.334'. [ 239.114264][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.334'. [ 239.124768][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.334'. [ 239.138147][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.334'. [ 240.439828][ T7725] overlayfs: failed to resolve './file0': -2 [ 241.194057][ T7730] 9pnet_virtio: no channels available for device 127.0.0.1 [ 241.620979][ T29] audit: type=1400 audit(1776224254.914:455): avc: denied { wake_alarm } for pid=7731 comm="syz.2.340" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.522943][ T7749] Mount JFS Failure: -22 [ 243.527366][ T7749] jfs_mount failed w/return code = -22 [ 244.457657][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 244.508831][ T7758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.580878][ T7760] netlink: 112 bytes leftover after parsing attributes in process `syz.4.346'. [ 244.618941][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 244.630343][ T10] usb 2-1: config 0 has no interfaces? [ 244.646348][ T10] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 244.655788][ T5877] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 244.667384][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.688492][ T10] usb 2-1: Product: syz [ 244.701341][ T10] usb 2-1: Manufacturer: syz [ 244.717812][ T10] usb 2-1: SerialNumber: syz [ 244.739211][ T10] usb 2-1: config 0 descriptor?? [ 244.827128][ T5877] usb 6-1: unable to get BOS descriptor or descriptor too short [ 244.853083][ T5877] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 244.871183][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.893191][ T5877] usb 6-1: Product: syz [ 244.905508][ T5877] usb 6-1: Manufacturer: syz [ 244.915035][ T5877] usb 6-1: SerialNumber: syz [ 244.951572][ T5877] usb 6-1: selecting invalid altsetting 1 [ 244.967289][ T5877] usb 6-1: unit 6 not found! [ 245.309564][ T29] audit: type=1400 audit(1776224258.367:456): avc: denied { mount } for pid=7752 comm="syz.5.344" name="/" dev="autofs" ino=16266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 245.341002][ T2149] usb 2-1: USB disconnect, device number 7 [ 245.362866][ T7753] netlink: 52719 bytes leftover after parsing attributes in process `syz.5.344'. [ 246.123334][ T29] audit: type=1400 audit(1776224259.134:457): avc: denied { watch_mount } for pid=7769 comm="syz.1.347" path="/70" dev="tmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 246.678524][ T5877] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 246.693370][ T29] audit: type=1400 audit(1776224259.677:458): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 246.715936][ T5877] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 246.728721][ T5877] usb 6-1: selecting invalid altsetting 1 [ 246.738895][ T5877] usb 6-1: unit 6 not found! [ 246.746838][ T5877] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2) [ 246.760195][ T5877] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 246.781074][ T5877] usb 6-1: selecting invalid altsetting 1 [ 246.788984][ T5877] usb 6-1: unit 6 not found! [ 246.795403][ T5877] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2) [ 247.858175][ T5877] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 247.890756][ T5877] usb 6-1: USB disconnect, device number 3 [ 248.561084][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.631632][ T7803] xt_TCPMSS: Only works on TCP SYN packets [ 250.643228][ T5804] Bluetooth: hci6: command 0x1003 tx timeout [ 250.653409][ T5815] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 251.335123][ T7815] overlayfs: failed to clone lowerpath [ 252.254399][ T29] audit: type=1400 audit(1776224264.019:459): avc: denied { mount } for pid=7811 comm="syz.2.356" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 252.256057][ T2012] block nbd0: Possible stuck request ffff888028077000: control (read@0,1024B). Runtime 90 seconds [ 252.288491][ T2012] block nbd0: Possible stuck request ffff8880280771c0: control (read@1024,1024B). Runtime 90 seconds [ 252.299393][ T2012] block nbd0: Possible stuck request ffff888028077380: control (read@2048,1024B). Runtime 90 seconds [ 252.393579][ T2012] block nbd0: Possible stuck request ffff888028077540: control (read@3072,1024B). Runtime 90 seconds [ 253.230531][ T29] audit: type=1400 audit(1776224265.788:460): avc: denied { ioctl } for pid=7828 comm="syz.4.359" path="socket:[17409]" dev="sockfs" ino=17409 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 253.241380][ T7829] netlink: 180 bytes leftover after parsing attributes in process `syz.4.359'. [ 253.344228][ T7829] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7829 comm=syz.4.359 [ 253.358103][ T7829] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7829 comm=syz.4.359 [ 253.383455][ T5815] Bluetooth: hci0: Invalid handle: 0x45c9 > 0x0eff [ 253.936629][ T7837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.074677][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 254.094256][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 254.389286][ T7836] ceph: No mds server is up or the cluster is laggy [ 255.186437][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 255.420479][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.464238][ T10] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 255.517747][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 255.601198][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.610272][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.671426][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.683045][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.730851][ T10] usb 2-1: SerialNumber: syz [ 255.764489][ T10] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 255.784744][ T10] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 255.804811][ T10] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 256.036983][ T10] usb 2-1: USB disconnect, device number 8 [ 256.500426][ T29] audit: type=1400 audit(1776224268.520:461): avc: denied { ioctl } for pid=7854 comm="syz.2.365" path="socket:[16892]" dev="sockfs" ino=16892 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 256.617560][ T29] audit: type=1400 audit(1776224268.960:462): avc: denied { create } for pid=7847 comm="syz.5.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 256.680109][ T7858] netlink: 'syz.5.362': attribute type 4 has an invalid length. [ 257.161020][ T7858] netlink: 'syz.5.362': attribute type 4 has an invalid length. [ 257.188144][ T29] audit: type=1400 audit(1776224268.969:463): avc: denied { ioctl } for pid=7847 comm="syz.5.362" path="socket:[16904]" dev="sockfs" ino=16904 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 257.283483][ T29] audit: type=1400 audit(1776224269.587:464): avc: denied { read } for pid=7863 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 257.336999][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 257.346423][ T29] audit: type=1400 audit(1776224269.634:465): avc: denied { ioctl } for pid=7863 comm="syz.2.366" path="socket:[16916]" dev="sockfs" ino=16916 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 257.386453][ T29] audit: type=1400 audit(1776224269.634:466): avc: denied { write } for pid=7863 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 257.516444][ T5855] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 257.686935][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 257.970608][ T29] audit: type=1400 audit(1776224270.045:467): avc: denied { create } for pid=7867 comm="syz.4.367" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.995511][ T5855] usb 6-1: config 0 has an invalid interface number: 61 but max is 1 [ 258.021216][ T5855] usb 6-1: config 0 has an invalid interface number: 98 but max is 1 [ 258.039790][ T5855] usb 6-1: config 0 has no interface number 0 [ 258.046644][ T5855] usb 6-1: config 0 has no interface number 1 [ 258.085852][ T5855] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 258.096507][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.104687][ T5855] usb 6-1: Product: syz [ 258.111905][ T5855] usb 6-1: Manufacturer: syz [ 258.116959][ T5855] usb 6-1: SerialNumber: syz [ 258.136489][ T5855] usb 6-1: config 0 descriptor?? [ 258.264504][ T5855] viperboard 6-1:0.61: version 0.00 found at bus 006 address 004 [ 258.352806][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 258.365294][ T29] audit: type=1400 audit(1776224270.598:468): avc: denied { unlink } for pid=5802 comm="syz-executor" name="file5" dev="tmpfs" ino=447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 258.440207][ T5855] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 258.497267][ T5855] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 258.536279][ T9] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 258.561584][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.583670][ T9] usb 2-1: Product: syz [ 258.591263][ T9] usb 2-1: Manufacturer: syz [ 258.613676][ T9] usb 2-1: SerialNumber: syz [ 258.646067][ T9] usb 2-1: config 0 descriptor?? [ 258.656011][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 258.668383][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 258.686413][ T5855] viperboard 6-1:0.98: version 0.00 found at bus 006 address 004 [ 258.754465][ T5855] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 258.803231][ T5855] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 258.896007][ T5855] usb 6-1: USB disconnect, device number 4 [ 259.157997][ T7891] netlink: 'syz.1.378': attribute type 10 has an invalid length. [ 259.712346][ T7890] bridge0: port 3(syz_tun) entered blocking state [ 259.719793][ T7890] bridge0: port 3(syz_tun) entered disabled state [ 259.726368][ T7890] syz_tun: entered allmulticast mode [ 259.734697][ T7890] syz_tun: entered promiscuous mode [ 259.741178][ T7890] bridge0: port 3(syz_tun) entered blocking state [ 259.749065][ T7890] bridge0: port 3(syz_tun) entered forwarding state [ 259.757318][ T7891] bridge0: port 3(syz_tun) entered disabled state [ 259.763963][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.772456][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.783033][ T7891] bridge0: port 3(syz_tun) entered blocking state [ 259.789556][ T7891] bridge0: port 3(syz_tun) entered forwarding state [ 259.796322][ T7891] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.803415][ T7891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.810753][ T7891] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.817853][ T7891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.828762][ T7891] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 259.949627][ T7896] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 260.796539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 261.680576][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 262.015683][ T29] audit: type=1400 audit(1776224273.985:469): avc: denied { getopt } for pid=7912 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.375286][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 262.385606][ T29] audit: type=1400 audit(1776224274.341:470): avc: denied { firmware_load } for pid=9 comm="kworker/0:0" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=414 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 262.420566][ T9] dib0700: firmware download failed at 7 with -22 [ 263.041469][ T9] usb 2-1: USB disconnect, device number 9 [ 263.180766][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 263.242002][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 263.902690][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 263.902934][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 263.920596][ T29] audit: type=1400 audit(1776224275.417:471): avc: denied { read } for pid=7923 comm="syz.1.379" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 263.962167][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 265.188575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 265.224876][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 265.242126][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 265.271222][ T7925] ceph: No mds server is up or the cluster is laggy [ 265.671478][ T7949] IPv6: sit1: Disabled Multicast RS [ 266.734795][ T7948] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 266.762676][ T7948] PKCS7: Only support pkcs7_signedData type [ 267.759862][ T7972] FAT-fs (nullb0): bogus number of reserved sectors [ 267.772218][ T7972] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 268.161141][ T791] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 268.362473][ T791] usb 5-1: Using ep0 maxpacket: 32 [ 268.391314][ T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 268.607185][ T791] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=bf.99 [ 268.616286][ T791] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 268.624602][ T791] usb 5-1: Product: syz [ 268.631140][ T791] usb 5-1: SerialNumber: syz [ 269.067188][ T791] usb 5-1: config 0 descriptor?? [ 271.578874][ T5804] Bluetooth: hci6: command 0x1003 tx timeout [ 271.580540][ T5815] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 272.577004][ T8024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.395'. [ 274.023115][ T8037] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 274.095732][ T5825] usb 5-1: USB disconnect, device number 10 [ 274.586098][ T8049] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 276.070347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 276.131465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 276.647092][ T8060] 9pnet_fd: Insufficient options for proto=fd [ 276.657751][ T7012] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 276.732034][ T7012] Bluetooth: hci6: Frame reassembly failed (-84) [ 276.744582][ T29] audit: type=1400 audit(1776224286.800:472): avc: denied { create } for pid=8062 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 277.570131][ T29] audit: type=1400 audit(1776224287.455:473): avc: denied { ioctl } for pid=8062 comm="syz.4.402" path="socket:[17354]" dev="sockfs" ino=17354 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 277.941520][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.403'. [ 278.222197][ T8073] binder: 8071:8073 ioctl c0306201 200000000000 returned -22 [ 278.251232][ T8073] comedi comedi0: Minor 3 could not be opened [ 278.588906][ T5815] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 278.655186][ T8060] syz.1.401 (8060) used greatest stack depth: 19280 bytes left [ 279.409374][ T791] libceph: connect (1)[c::]:6789 error -101 [ 279.419388][ T791] libceph: mon0 (1)[c::]:6789 connect error [ 279.451207][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'. [ 279.645813][ T8081] ceph: No mds server is up or the cluster is laggy [ 280.097028][ T8093] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 280.104580][ T8093] sch_tbf: burst 2 is lower than device veth0_to_hsr mtu (1514) ! [ 280.596638][ T29] audit: type=1326 audit(1776224290.403:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03a99c819 code=0x7ffc0000 [ 280.629693][ T29] audit: type=1326 audit(1776224290.431:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa03a99c819 code=0x7ffc0000 [ 280.692155][ T29] audit: type=1326 audit(1776224290.468:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03a99c819 code=0x7ffc0000 [ 280.726177][ T29] audit: type=1326 audit(1776224290.487:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03a99c819 code=0x7ffc0000 [ 280.757497][ T29] audit: type=1326 audit(1776224290.552:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa03a99c819 code=0x7ffc0000 [ 280.784779][ T29] audit: type=1326 audit(1776224290.552:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03a99c819 code=0x7ffc0000 [ 280.847672][ T29] audit: type=1326 audit(1776224290.552:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa03a99c819 code=0x7ffc0000 [ 280.888358][ T29] audit: type=1326 audit(1776224290.674:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8105 comm="syz.5.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03a99c819 code=0x7ffc0000 [ 281.744847][ T8118] batman_adv: batadv0: Adding interface: macsec1 [ 281.751308][ T8118] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.776967][ T8118] batman_adv: batadv0: Interface activated: macsec1 [ 283.044970][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 283.045003][ T29] audit: type=1400 audit(1776224292.658:490): avc: denied { bind } for pid=8127 comm="syz.5.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 283.428064][ T29] audit: type=1400 audit(1776224292.658:491): avc: denied { write } for pid=8127 comm="syz.5.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 283.801265][ T8139] 9pnet_virtio: no channels available for device 127.0.0.1 [ 284.157449][ T29] audit: type=1400 audit(1776224292.920:492): avc: denied { bind } for pid=8119 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 284.176883][ T29] audit: type=1400 audit(1776224293.042:493): avc: denied { create } for pid=8119 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 284.260773][ T29] audit: type=1400 audit(1776224293.042:494): avc: denied { setopt } for pid=8119 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 284.505722][ T29] audit: type=1400 audit(1776224293.042:495): avc: denied { listen } for pid=8119 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 284.629779][ T29] audit: type=1400 audit(1776224294.183:496): avc: denied { ioctl } for pid=8142 comm="syz.1.422" path="socket:[18052]" dev="sockfs" ino=18052 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 284.961639][ T5815] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 284.961710][ T5815] Bluetooth: hci3: Malformed LE Event: 0x02 [ 285.011300][ T2012] block nbd0: Possible stuck request ffff888028077000: control (read@0,1024B). Runtime 120 seconds [ 285.022152][ T2012] block nbd0: Possible stuck request ffff8880280771c0: control (read@1024,1024B). Runtime 120 seconds [ 285.033169][ T2012] block nbd0: Possible stuck request ffff888028077380: control (read@2048,1024B). Runtime 120 seconds [ 285.044237][ T2012] block nbd0: Possible stuck request ffff888028077540: control (read@3072,1024B). Runtime 120 seconds [ 285.085004][ T8146] capability: warning: `syz.5.421' uses deprecated v2 capabilities in a way that may be insecure [ 285.235553][ T5877] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 285.423301][ T5877] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 62, changing to 4 [ 285.448696][ T5877] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 47767, setting to 0 [ 285.491872][ T5877] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 285.516078][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.836491][ T5877] usb 2-1: string descriptor 0 read error: -71 [ 287.851950][ T5877] hub 2-1:32.0: bad descriptor, ignoring hub [ 287.859129][ T5877] hub 2-1:32.0: probe with driver hub failed with error -5 [ 288.554641][ T5877] usb 2-1: USB disconnect, device number 10 [ 288.930033][ T29] audit: type=1400 audit(1776224297.201:497): avc: denied { create } for pid=8186 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 290.501068][ T29] audit: type=1400 audit(1776224298.661:498): avc: denied { shutdown } for pid=8186 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 292.389525][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.5.438'. [ 293.804822][ T29] audit: type=1400 audit(1776224300.542:499): avc: denied { setopt } for pid=8213 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 295.435207][ T8240] 9pnet_virtio: no channels available for device 127.0.0.1 [ 295.785960][ T29] audit: type=1400 audit(1776224303.611:500): avc: denied { mount } for pid=8225 comm="syz.1.439" name="/" dev="rpc_pipefs" ino=18707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 295.855914][ T29] audit: type=1400 audit(1776224303.686:501): avc: denied { map } for pid=8243 comm="syz.4.441" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 296.621232][ T8253] /dev/nullb0: Can't open blockdev [ 297.142779][ T8253] orangefs_mount: mount request failed with -4 [ 297.988792][ T8262] bridge2: entered promiscuous mode [ 297.994108][ T8262] bridge2: entered allmulticast mode [ 298.818407][ T29] audit: type=1400 audit(1776224306.456:502): avc: denied { write } for pid=8264 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 299.866693][ T42] libceph: connect (1)[c::]:6789 error -101 [ 299.886248][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 300.013133][ T8269] ceph: No mds server is up or the cluster is laggy [ 300.309922][ T8280] sp0: Synchronizing with TNC [ 301.627924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 301.760137][ T29] audit: type=1400 audit(1776224309.011:503): avc: denied { read } for pid=5472 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 302.568326][ T8293] netlink: 60 bytes leftover after parsing attributes in process `syz.3.450'. [ 302.578021][ T8293] unsupported nlmsg_type 40 [ 302.638300][ T8293] netlink: 96 bytes leftover after parsing attributes in process `syz.3.450'. [ 302.735699][ T29] audit: type=1400 audit(1776224309.956:504): avc: denied { bind } for pid=8289 comm="syz.3.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 304.487578][ T29] audit: type=1400 audit(1776224311.762:505): avc: denied { connect } for pid=8312 comm="syz.5.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 305.073505][ T8330] netlink: 60 bytes leftover after parsing attributes in process `syz.1.454'. [ 305.510303][ T8337] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 305.663927][ T8336] 9pnet_virtio: no channels available for device 127.0.0.1 [ 306.030377][ T8343] netlink: 35 bytes leftover after parsing attributes in process `syz.2.458'. [ 306.350492][ T8351] binder: binder_mmap: 8344 2000003d3000-2000003d7000 bad vm_flags failed -1 [ 306.734319][ T8350] netlink: 236 bytes leftover after parsing attributes in process `syz.5.460'. [ 306.799146][ T29] audit: type=1400 audit(1776224313.924:506): avc: denied { write } for pid=8345 comm="syz.5.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 306.969918][ T8357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 307.710356][ T8368] netlink: 'syz.1.461': attribute type 2 has an invalid length. [ 307.871673][ T8364] bridge1: entered promiscuous mode [ 307.876898][ T8364] bridge1: entered allmulticast mode [ 308.678455][ T8373] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=10150 sclass=netlink_xfrm_socket pid=8373 comm=syz.4.464 [ 309.990139][ T8380] tmpfs: Bad value for 'mpol' [ 310.747566][ T29] audit: type=1400 audit(1776224317.461:507): avc: denied { read } for pid=8393 comm="syz.5.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 312.008975][ T42] IPVS: starting estimator thread 0... [ 312.143110][ T8407] IPVS: using max 41 ests per chain, 98400 per kthread [ 312.753886][ T29] audit: type=1400 audit(1776224319.492:508): avc: denied { write } for pid=8414 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 313.064229][ T8422] 9pnet_virtio: no channels available for device 127.0.0.1 [ 314.186781][ T29] audit: type=1400 audit(1776224320.839:509): avc: denied { bind } for pid=8427 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 314.321933][ T8430] bridge1: entered promiscuous mode [ 314.327855][ T8430] bridge1: entered allmulticast mode [ 314.647848][ T29] audit: type=1400 audit(1776224321.260:510): avc: denied { load_policy } for pid=8427 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 314.766263][ T29] audit: type=1400 audit(1776224321.354:511): avc: denied { read write } for pid=8427 comm="syz.1.475" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 314.993111][ T29] audit: type=1400 audit(1776224321.354:512): avc: denied { open } for pid=8427 comm="syz.1.475" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 315.105726][ T29] audit: type=1400 audit(1776224321.354:513): avc: denied { ioctl } for pid=8427 comm="syz.1.475" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 315.231109][ T29] audit: type=1400 audit(1776224321.373:514): avc: denied { set_context_mgr } for pid=8427 comm="syz.1.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 315.317204][ T29] audit: type=1400 audit(1776224321.784:515): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 317.145362][ T2012] block nbd0: Possible stuck request ffff888028077000: control (read@0,1024B). Runtime 150 seconds [ 317.159554][ T2012] block nbd0: Possible stuck request ffff8880280771c0: control (read@1024,1024B). Runtime 150 seconds [ 317.172726][ T2012] block nbd0: Possible stuck request ffff888028077380: control (read@2048,1024B). Runtime 150 seconds [ 317.184588][ T2012] block nbd0: Possible stuck request ffff888028077540: control (read@3072,1024B). Runtime 150 seconds [ 317.366112][ T8449] trusted_key: encrypted_key: insufficient parameters specified [ 317.424151][ T8465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.587458][ T8463] libceph: resolve '0..' (ret=-3): failed [ 317.673644][ T8456] team0: entered allmulticast mode [ 317.702572][ T8456] team_slave_1: entered allmulticast mode [ 318.089849][ T8474] 9pnet_virtio: no channels available for device 127.0.0.1 [ 318.481019][ T29] audit: type=1400 audit(1776224324.854:516): avc: denied { setopt } for pid=8476 comm="syz.2.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 318.895145][ T8456] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 319.309964][ T8487] 9pnet_virtio: no channels available for device 127.0.0.1 [ 319.437694][ T8483] hub 1-0:1.0: USB hub found [ 319.460340][ T8483] hub 1-0:1.0: 1 port detected [ 321.250695][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.634541][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.377723][ T8517] trusted_key: encrypted_key: insufficient parameters specified [ 322.831838][ T29] audit: type=1400 audit(1776224328.934:517): avc: denied { read } for pid=8515 comm="syz.1.491" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 322.899323][ T29] audit: type=1400 audit(1776224328.934:518): avc: denied { open } for pid=8515 comm="syz.1.491" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 322.941897][ T29] audit: type=1400 audit(1776224328.934:519): avc: denied { ioctl } for pid=8515 comm="syz.1.491" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 324.201121][ T8533] 9pnet_virtio: no channels available for device 127.0.0.1 [ 324.655136][ T29] audit: type=1804 audit(1776224330.637:520): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.498" name="bus" dev="ramfs" ino=19336 res=1 errno=0 [ 324.684328][ T29] audit: type=1804 audit(1776224330.665:521): pid=8539 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.498" name="bus" dev="ramfs" ino=19336 res=1 errno=0 [ 325.180213][ T8549] bridge1: entered promiscuous mode [ 325.185514][ T8549] bridge1: entered allmulticast mode [ 325.514062][ T8553] bridge0: port 3(syz_tun) entered blocking state [ 325.520727][ T8553] bridge0: port 3(syz_tun) entered disabled state [ 325.529172][ T8553] syz_tun: entered allmulticast mode [ 325.539932][ T8553] syz_tun: entered promiscuous mode [ 325.552161][ T8553] bridge0: port 3(syz_tun) entered blocking state [ 325.558770][ T8553] bridge0: port 3(syz_tun) entered forwarding state [ 325.581999][ T29] audit: type=1400 audit(1776224331.432:522): avc: denied { write } for pid=8546 comm="syz.4.500" path="socket:[19425]" dev="sockfs" ino=19425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 326.593812][ T8562] bridge2: entered promiscuous mode [ 326.599116][ T8562] bridge2: entered allmulticast mode [ 327.361649][ T8569] CIFS: VFS: UNC: path must begin with // or \\ [ 327.367990][ T8569] Malformed UNC in devname [ 327.367990][ T8569] [ 327.374736][ T8569] CIFS: VFS: Malformed UNC in devname [ 327.404974][ T8569] SET target dimension over the limit! [ 328.486279][ T29] audit: type=1400 audit(1776224334.212:523): avc: denied { getopt } for pid=8574 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.114508][ T8585] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 332.749928][ T8602] trusted_key: encrypted_key: insufficient parameters specified [ 332.759344][ T8612] netlink: 56 bytes leftover after parsing attributes in process `syz.1.513'. [ 333.004887][ T8617] overlayfs: failed to clone upperpath [ 335.046236][ T29] audit: type=1400 audit(1776224340.360:524): avc: denied { setopt } for pid=8637 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 335.268375][ T8639] tmpfs: Bad value for 'mpol' [ 335.395842][ T791] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 335.579292][ T791] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 335.587678][ T791] usb 4-1: config 0 has no interface number 0 [ 335.601824][ T791] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 335.627968][ T791] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 335.653605][ T791] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 335.680919][ T791] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 335.699187][ T791] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 335.726117][ T791] usb 4-1: Product: syz [ 335.741800][ T791] usb 4-1: SerialNumber: syz [ 335.800106][ T791] usb 4-1: config 0 descriptor?? [ 335.832005][ T791] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 336.014837][ T791] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input8 [ 336.125327][ T8649] bridge3: entered promiscuous mode [ 336.130615][ T8649] bridge3: entered allmulticast mode [ 337.465134][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 337.516959][ T29] audit: type=1400 audit(1776224342.671:525): avc: denied { read } for pid=5162 comm="acpid" name="event4" dev="devtmpfs" ino=2949 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.627509][ T8656] netlink: 'syz.2.523': attribute type 10 has an invalid length. [ 337.641320][ T8656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.653099][ T8656] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 337.667723][ T8656] netlink: 'syz.2.523': attribute type 10 has an invalid length. [ 337.675671][ T8656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.523'. [ 337.685863][ T8656] batadv0: entered promiscuous mode [ 337.691158][ T8656] batadv0: entered allmulticast mode [ 338.124938][ T8656] bond0: (slave batadv0): Releasing backup interface [ 338.135068][ T8656] bridge0: port 1(batadv0) entered blocking state [ 338.141602][ T8656] bridge0: port 1(batadv0) entered disabled state [ 338.172674][ T48] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 338.183707][ T48] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 338.196933][ T29] audit: type=1400 audit(1776224342.700:526): avc: denied { open } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2949 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.262893][ T29] audit: type=1400 audit(1776224342.700:527): avc: denied { ioctl } for pid=5162 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2949 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 338.558139][ T8663] zonefs (nullb0) ERROR: Not a zoned block device [ 339.821228][ T5877] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 339.984500][ T5877] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 340.007719][ T5877] usb 5-1: config 0 has no interface number 0 [ 340.027882][ T5877] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.143245][ T5877] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 340.192316][ T5877] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 340.230767][ T5877] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 340.286788][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.321458][ T5877] usb 5-1: config 0 descriptor?? [ 340.367778][ T8670] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 340.379243][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.390070][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.399739][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.407490][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.414912][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.422226][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.429525][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.436740][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.443983][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.451154][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.460203][ T42] usb 4-1: USB disconnect, device number 7 [ 340.466092][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 340.495759][ T5877] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input9 [ 340.775081][ T42] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 340.798192][ T29] audit: type=1400 audit(1776224344.748:528): avc: denied { write } for pid=8669 comm="syz.4.527" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 340.971765][ C0] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 341.572896][ T29] audit: type=1400 audit(1776224345.478:529): avc: denied { create } for pid=8669 comm="syz.4.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 341.580867][ T8670] netlink: 'syz.4.527': attribute type 21 has an invalid length. [ 341.615462][ T8670] netlink: 156 bytes leftover after parsing attributes in process `syz.4.527'. [ 342.582513][ T8670] netlink: 'syz.4.527': attribute type 21 has an invalid length. [ 342.605176][ T8670] netlink: 156 bytes leftover after parsing attributes in process `syz.4.527'. [ 342.685170][ T8702] libceph: resolve '0..' (ret=-3): failed [ 343.416692][ T8713] comedi comedi0: adq12b: I/O port conflict (0x8,16) [ 343.909385][ T29] audit: type=1326 audit(1776224347.649:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8716 comm="syz.1.536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4b9d9c819 code=0x0 [ 344.071055][ T8695] 9pnet_virtio: no channels available for device 127.0.0.1 [ 344.587519][ T5877] usb 5-1: USB disconnect, device number 11 [ 345.691398][ T8740] netlink: 236 bytes leftover after parsing attributes in process `syz.1.543'. [ 346.391826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 346.509946][ T8742] overlay: Unknown parameter 'appraise' [ 347.989531][ T8759] netlink: 'syz.2.547': attribute type 4 has an invalid length. [ 348.261321][ T29] audit: type=1400 audit(1776224351.729:531): avc: denied { name_bind } for pid=8763 comm="syz.4.545" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 348.525658][ T8771] netlink: 'syz.5.548': attribute type 10 has an invalid length. [ 348.562783][ T8771] netlink: 40 bytes leftover after parsing attributes in process `syz.5.548'. [ 348.657458][ T8771] bridge0: port 3(dummy0) entered blocking state [ 348.764479][ T8773] netlink: 'syz.5.548': attribute type 23 has an invalid length. [ 349.161766][ T8771] bridge0: port 3(dummy0) entered disabled state [ 349.228464][ T8771] dummy0: entered allmulticast mode [ 349.291458][ T2012] block nbd0: Possible stuck request ffff888028077000: control (read@0,1024B). Runtime 180 seconds [ 349.302846][ T2012] block nbd0: Possible stuck request ffff8880280771c0: control (read@1024,1024B). Runtime 180 seconds [ 349.328877][ T2012] block nbd0: Possible stuck request ffff888028077380: control (read@2048,1024B). Runtime 180 seconds [ 349.348120][ T2012] block nbd0: Possible stuck request ffff888028077540: control (read@3072,1024B). Runtime 180 seconds [ 351.149754][ T8798] netlink: 'syz.3.550': attribute type 7 has an invalid length. [ 351.184414][ T8798] netlink: 'syz.3.550': attribute type 8 has an invalid length. [ 351.259245][ T29] audit: type=1400 audit(1776224354.536:532): avc: denied { ioctl } for pid=8784 comm="syz.3.550" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 351.863005][ T5855] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 351.891102][ T8771] dummy0: entered promiscuous mode [ 351.917104][ T8771] bridge0: port 3(dummy0) entered blocking state [ 351.923659][ T8771] bridge0: port 3(dummy0) entered forwarding state [ 352.089900][ T5855] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 352.098373][ T5855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.109327][ T5855] usb 2-1: config 0 has no interface number 0 [ 352.115498][ T5855] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 352.126855][ T5855] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 352.140454][ T5855] usb 2-1: config 0 interface 106 has no altsetting 0 [ 352.147347][ T5855] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 352.157368][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.171382][ T5855] usb 2-1: config 0 descriptor?? [ 352.192323][ T5855] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 352.332529][ T29] audit: type=1400 audit(1776224355.538:533): avc: denied { ioctl } for pid=8824 comm="syz.4.554" path="socket:[20256]" dev="sockfs" ino=20256 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 353.330091][ T7017] usb 2-1: Failed to submit usb control message: -110 [ 353.362802][ T7017] usb 2-1: unable to send the bmi data to the device: -110 [ 353.925174][ T7017] usb 2-1: unable to get target info from device [ 353.966684][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.990046][ T7017] usb 2-1: could not get target info (-110) [ 354.146773][ T7017] usb 2-1: could not probe fw (-110) [ 354.160302][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.284892][ T8845] 9pnet_virtio: no channels available for device 127.0.0.1 [ 355.066615][ T8850] ip6_vti0: Caught tx_queue_len zero misconfig [ 355.490814][ T8853] IPv6: Can't replace route, no match found [ 355.500921][ T8853] IPv6: Can't replace route, no match found [ 355.878550][ T8859] netlink: 'syz.2.560': attribute type 3 has an invalid length. [ 356.391041][ T2149] usb 2-1: USB disconnect, device number 11 [ 356.538481][ T8864] trusted_key: encrypted_key: insufficient parameters specified [ 358.478640][ T8889] kAFS: unable to lookup cell 'ÿ' [ 358.487264][ T8889] kAFS: unable to lookup cell '(,c¾Ì' [ 358.716281][ T8898] binder: 8890:8898 ioctl c018620c 200000000040 returned -1 [ 358.927060][ T5877] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 359.038878][ T29] audit: type=1400 audit(1776224361.817:534): avc: denied { read } for pid=8903 comm="syz.4.570" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 359.112535][ T29] audit: type=1400 audit(1776224361.817:535): avc: denied { open } for pid=8903 comm="syz.4.570" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 359.162123][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 359.183539][ T5877] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 359.200882][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.212178][ T5877] usb 6-1: config 0 has no interface number 0 [ 359.221485][ T5877] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 359.231443][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.240318][ T5877] usb 6-1: Product: syz [ 359.244562][ T5877] usb 6-1: Manufacturer: syz [ 359.250444][ T5877] usb 6-1: SerialNumber: syz [ 359.261064][ T5877] usb 6-1: config 0 descriptor?? [ 359.275214][ T5877] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 359.340854][ T5877] uvcvideo 6-1:0.105: No valid video chain found. [ 359.493271][ T8907] ufs: You didn't specify the type of your ufs filesystem [ 359.493271][ T8907] [ 359.493271][ T8907] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 359.493271][ T8907] [ 359.493271][ T8907] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 359.526219][ T8907] ufs: ufstype=old is supported read-only [ 359.536264][ T8907] ufs: ufs_fill_super(): bad magic number [ 360.023967][ T8909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.822704][ T8916] 9pnet_virtio: no channels available for device 127.0.0.1 [ 361.641856][ T8918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.744469][ T2149] usb 6-1: USB disconnect, device number 5 [ 362.767389][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.5.575'. [ 362.828117][ T29] audit: type=1400 audit(1776224364.351:536): avc: denied { read write } for pid=8927 comm="syz.5.575" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 362.879634][ T8918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.978373][ T30] INFO: task syz.0.227:7161 blocked for more than 144 seconds. [ 363.004070][ T30] Tainted: G L syzkaller #0 [ 363.021975][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 363.062601][ T30] task:syz.0.227 state:D stack:28792 pid:7161 tgid:7156 ppid:5809 task_flags:0x400040 flags:0x00080002 [ 363.110749][ T30] Call Trace: [ 363.127460][ T30] [ 363.136186][ T30] __schedule+0x10e9/0x6820 [ 363.153399][ T30] ? irqentry_exit+0x2b3/0x740 [ 363.174296][ T30] ? __pfx___schedule+0x10/0x10 [ 363.191734][ T30] ? find_held_lock+0x2b/0x80 [ 363.216591][ T30] ? schedule+0x2bf/0x390 [ 363.235434][ T30] schedule+0xdd/0x390 [ 363.245233][ T29] audit: type=1400 audit(1776224364.398:537): avc: denied { open } for pid=8927 comm="syz.5.575" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 363.270580][ T30] schedule_preempt_disabled+0x13/0x30 [ 363.297107][ T30] __mutex_lock+0xced/0x1b10 [ 363.308241][ T30] ? bdev_open+0x41a/0xe40 [ 363.319688][ T30] ? find_inode_fast+0x5e3/0x910 [ 363.344909][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 363.360643][ T30] ? find_inode_fast+0x1fa/0x910 [ 363.377422][ T30] ? bdev_open+0x41a/0xe40 [ 363.391397][ T30] bdev_open+0x41a/0xe40 [ 363.408038][ T30] ? iput+0x3a/0x40 [ 363.419560][ T30] blkdev_open+0x34e/0x4f0 [ 363.439212][ T30] do_dentry_open+0x6d8/0x1660 [ 363.519186][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 363.538534][ T30] vfs_open+0x82/0x3f0 [ 363.547818][ T30] path_openat+0x208c/0x31a0 [ 363.558891][ T30] ? __pfx_path_openat+0x10/0x10 [ 363.575406][ T30] do_file_open+0x20e/0x430 [ 363.586763][ T30] ? __pfx_do_file_open+0x10/0x10 [ 363.592569][ T30] ? alloc_fd+0x476/0x790 [ 363.598634][ T30] ? do_getname+0x191/0x390 [ 363.604290][ T30] do_sys_openat2+0x10d/0x1e0 [ 363.610975][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 363.618152][ T30] __x64_sys_openat+0x12d/0x210 [ 363.624070][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 363.631847][ T30] ? rcu_is_watching+0x12/0xc0 [ 363.637822][ T30] do_syscall_64+0x10b/0xf80 [ 363.643039][ T30] ? clear_bhb_loop+0x40/0x90 [ 363.651258][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.658423][ T30] RIP: 0033:0x7f3eda75d04e [ 363.665646][ T30] RSP: 002b:00007f3edb6c6b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 363.676524][ T30] RAX: ffffffffffffffda RBX: 00007f3edb6c76c0 RCX: 00007f3eda75d04e [ 363.687817][ T30] RDX: 0000000000000000 RSI: 00007f3edb6c6c00 RDI: ffffffffffffff9c [ 363.699900][ T30] RBP: 00007f3edb6c6c00 R08: 0000000000000000 R09: 0000000000000000 [ 363.710185][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 363.718838][ T30] R13: 00007f3edaa16218 R14: 00007f3edaa16180 R15: 00007fffdfb8c098 [ 363.729203][ T30] [ 363.732607][ T30] INFO: task syz.0.227:7164 blocked for more than 144 seconds. [ 363.749014][ T30] Tainted: G L syzkaller #0 [ 363.755615][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 363.765036][ T30] task:syz.0.227 state:D stack:28792 pid:7164 tgid:7156 ppid:5809 task_flags:0x400040 flags:0x00080002 [ 363.778424][ T30] Call Trace: [ 363.782935][ T30] [ 363.785908][ T30] __schedule+0x10e9/0x6820 [ 363.790893][ T2149] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 363.801879][ T30] ? __pfx___schedule+0x10/0x10 [ 363.806761][ T30] ? find_held_lock+0x2b/0x80 [ 363.812259][ T30] ? schedule+0x2bf/0x390 [ 363.816635][ T30] schedule+0xdd/0x390 [ 363.822061][ T30] schedule_preempt_disabled+0x13/0x30 [ 363.828681][ T30] __mutex_lock+0xced/0x1b10 [ 363.833899][ T30] ? bdev_open+0x41a/0xe40 [ 363.838372][ T30] ? find_inode_fast+0x5e3/0x910 [ 363.843944][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 363.848984][ T30] ? find_inode_fast+0x1fa/0x910 [ 363.855414][ T30] ? bdev_open+0x41a/0xe40 [ 363.859877][ T30] bdev_open+0x41a/0xe40 [ 363.864740][ T30] ? iput+0x3a/0x40 [ 363.868617][ T30] blkdev_open+0x34e/0x4f0 [ 363.873073][ T30] do_dentry_open+0x6d8/0x1660 [ 363.879728][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 363.886481][ T30] vfs_open+0x82/0x3f0 [ 363.891352][ T30] path_openat+0x208c/0x31a0 [ 363.896957][ T30] ? __pfx_path_openat+0x10/0x10 [ 363.902821][ T30] do_file_open+0x20e/0x430 [ 363.911423][ T30] ? __pfx_do_file_open+0x10/0x10 [ 363.918361][ T30] ? alloc_fd+0x476/0x790 [ 363.922769][ T30] ? do_getname+0x191/0x390 [ 363.927285][ T30] do_sys_openat2+0x10d/0x1e0 [ 363.933130][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 363.939423][ T30] ? do_raw_spin_lock+0x128/0x260 [ 363.944564][ T30] ? kcov_ioctl+0x16a/0x720 [ 363.949784][ T30] __x64_sys_openat+0x12d/0x210 [ 363.954676][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 363.961667][ T30] ? kcov_ioctl+0x16a/0x720 [ 363.966501][ T30] ? rcu_is_watching+0x12/0xc0 [ 363.972867][ T30] do_syscall_64+0x10b/0xf80 [ 363.977556][ T2149] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 363.986944][ T2149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.995544][ T30] ? clear_bhb_loop+0x40/0x90 [ 364.000992][ T2149] usb 5-1: Product: syz [ 364.005867][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.011853][ T2149] usb 5-1: Manufacturer: syz [ 364.016868][ T30] RIP: 0033:0x7f3eda75d04e [ 364.021585][ T2149] usb 5-1: SerialNumber: syz [ 364.027377][ T30] RSP: 002b:00007f3edb6a5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 364.037965][ T2149] usb 5-1: config 0 descriptor?? [ 364.048988][ T30] RAX: ffffffffffffffda RBX: 00007f3edb6a66c0 RCX: 00007f3eda75d04e [ 364.073260][ T30] RDX: 0000000000000000 RSI: 00007f3edb6a5c00 RDI: ffffffffffffff9c [ 364.094394][ T30] RBP: 00007f3edb6a5c00 R08: 0000000000000000 R09: 0000000000000000 [ 364.115133][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 364.134461][ T30] R13: 00007f3edaa16308 R14: 00007f3edaa16270 R15: 00007fffdfb8c098 [ 364.155448][ T30] [ 364.169282][ T30] [ 364.169282][ T30] Showing all locks held in the system: [ 364.204327][ T30] 1 lock held by khungtaskd/30: [ 364.225720][ T30] #0: ffffffff8e7e7260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 364.247572][ T30] 2 locks held by getty/5562: [ 364.253132][ T30] #0: ffff8880394c20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 364.264026][ T30] #1: ffffc9000332b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 364.276311][ T30] 1 lock held by udevd/6196: [ 364.281587][ T30] #0: ffff888027b67350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 364.299315][ T30] 1 lock held by syz.0.227/7161: [ 364.304366][ T30] #0: ffff888027b67350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 364.313941][ T30] 1 lock held by syz.0.227/7164: [ 364.318903][ T30] #0: ffff888027b67350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 364.329560][ T30] 6 locks held by syz.2.573/8918: [ 364.335276][ T30] #0: ffffffff906c67e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 364.343522][ T30] #1: ffff88802673b128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x2ff/0x420 [ 364.354833][ T30] #2: ffff88802673a248 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x307/0x420 [ 364.367271][ T30] #3: ffffffff9061a4e0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x108/0x830 [ 364.376845][ T30] #4: ffff888057424d88 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xd49/0x2580 [ 364.389635][ T30] #5: ffffffff8e7f2da8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 364.400383][ T30] 1 lock held by syz.4.577/8937: [ 364.405368][ T30] [ 364.407690][ T30] ============================================= [ 364.407690][ T30] [ 364.416734][ T30] NMI backtrace for cpu 0 [ 364.416755][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 364.416780][ T30] Tainted: [L]=SOFTLOCKUP [ 364.416786][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 364.416796][ T30] Call Trace: [ 364.416803][ T30] [ 364.416810][ T30] dump_stack_lvl+0x100/0x190 [ 364.416834][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 364.416856][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 364.416878][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 364.416905][ T30] sys_info+0x141/0x190 [ 364.416924][ T30] watchdog+0xd18/0x1040 [ 364.416948][ T30] ? __pfx_watchdog+0x10/0x10 [ 364.416965][ T30] ? __kthread_parkme+0x18c/0x230 [ 364.416994][ T30] ? kthread+0x13a/0x450 [ 364.417017][ T30] ? __pfx_watchdog+0x10/0x10 [ 364.417031][ T30] kthread+0x370/0x450 [ 364.417048][ T30] ? __pfx_kthread+0x10/0x10 [ 364.417067][ T30] ret_from_fork+0x72b/0xd50 [ 364.417090][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 364.417111][ T30] ? __switch_to+0x800/0x1100 [ 364.417135][ T30] ? __pfx_kthread+0x10/0x10 [ 364.417154][ T30] ret_from_fork_asm+0x1a/0x30 [ 364.417188][ T30] [ 364.417195][ T30] Sending NMI from CPU 0 to CPUs 1: [ 364.537819][ T8918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.541881][ C1] NMI backtrace for cpu 1 [ 364.541898][ C1] CPU: 1 UID: 0 PID: 8918 Comm: syz.2.573 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.541918][ C1] Tainted: [L]=SOFTLOCKUP [ 364.541922][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 364.541930][ C1] RIP: 0010:record_print_text+0x0/0x3c0 [ 364.541949][ C1] Code: 5f e9 d4 10 ad 09 e8 9f d0 a9 09 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 57 41 56 49 89 fe 41 55 41 89 d5 41 54 55 48 bd 00 00 00 00 00 [ 364.541961][ C1] RSP: 0018:ffffc90005bce648 EFLAGS: 00000246 [ 364.541973][ C1] RAX: 000000000005a102 RBX: 1ffff92000b79ccf RCX: ffffc90005621000 [ 364.541982][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90005bce698 [ 364.541990][ C1] RBP: ffffc90005bce870 R08: 0000000000000001 R09: 0000000000000000 [ 364.541998][ C1] R10: 0000000000000000 R11: 0000000000010630 R12: 0000000000000000 [ 364.542010][ C1] R13: 0000000000000001 R14: ffffc90005bce698 R15: ffffc90005bce6d8 [ 364.542019][ C1] FS: 00007ff54b8ef6c0(0000) GS:ffff888124427000(0000) knlGS:0000000000000000 [ 364.542032][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.542041][ C1] CR2: 0000001b2fb03ff8 CR3: 000000004787a000 CR4: 00000000003526f0 [ 364.542049][ C1] Call Trace: [ 364.542054][ C1] [ 364.542059][ C1] printk_get_next_message+0x2d1/0x6c0 [ 364.542080][ C1] ? __pfx_printk_get_next_message+0x10/0x10 [ 364.542102][ C1] ? lock_acquire+0x1b1/0x370 [ 364.542119][ C1] console_flush_one_record+0x67c/0xe50 [ 364.542138][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 364.542154][ C1] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 364.542174][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 364.542194][ C1] console_unlock+0x103/0x260 [ 364.542210][ C1] ? __pfx_console_unlock+0x10/0x10 [ 364.542226][ C1] ? lock_acquire+0x140/0x370 [ 364.542242][ C1] vprintk_emit+0x407/0x6b0 [ 364.542259][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 364.542277][ C1] ? __lock_acquire+0x4a5/0x2630 [ 364.542291][ C1] dev_vprintk_emit+0x394/0x3e0 [ 364.542309][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 364.542330][ C1] dev_printk_emit+0xd2/0x10d [ 364.542346][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 364.542362][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 364.542376][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 364.542395][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 364.542408][ C1] ? kernel_text_address+0x8d/0x100 [ 364.542423][ C1] ? __kernel_text_address+0xd/0x30 [ 364.542440][ C1] __netdev_printk+0x1d1/0x290 [ 364.542461][ C1] netdev_info+0xef/0x127 [ 364.542478][ C1] ? __pfx_netdev_info+0x10/0x10 [ 364.542501][ C1] nsim_udp_tunnel_unset_port.cold+0x90/0xb7 [ 364.542520][ C1] __udp_tunnel_nic_device_sync.part.0+0x982/0xdf0 [ 364.542541][ C1] ? __pfx___udp_tunnel_nic_device_sync.part.0+0x10/0x10 [ 364.542556][ C1] ? find_held_lock+0x2b/0x80 [ 364.542573][ C1] ? udp_tunnel_nic_entry_adj+0x170/0x2e0 [ 364.542588][ C1] udp_tunnel_nic_flush+0x2de/0x5d0 [ 364.542601][ C1] ? vxlan_netdevice_event+0xd7/0x370 [ 364.542617][ C1] udp_tunnel_nic_netdevice_event+0x9e0/0x1dd0 [ 364.542633][ C1] notifier_call_chain+0x99/0x400 [ 364.542650][ C1] call_netdevice_notifiers_info+0xbe/0x110 [ 364.542666][ C1] unregister_netdevice_many_notify+0x1208/0x2580 [ 364.542689][ C1] ? nsim_destroy+0x108/0x830 [ 364.542703][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 364.542722][ C1] ? __kfree_rcu_sheaf+0x195/0x720 [ 364.542752][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 364.542821][ C1] ? __kfree_rcu_sheaf+0x19a/0x720 [ 364.542842][ C1] unregister_netdevice_queue+0x30b/0x3c0 [ 364.542865][ C1] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 364.542890][ C1] nsim_destroy+0x1a0/0x830 [ 364.542906][ C1] ? nsim_dev_reload_destroy+0x10a/0x4a0 [ 364.542925][ C1] __nsim_dev_port_del+0x189/0x240 [ 364.542942][ C1] nsim_dev_reload_destroy+0x10a/0x4a0 [ 364.542962][ C1] nsim_dev_reload_down+0x66/0xd0 [ 364.542980][ C1] devlink_reload+0x173/0x790 [ 364.543006][ C1] ? __pfx_devlink_reload+0x10/0x10 [ 364.543028][ C1] devlink_nl_reload_doit+0xd84/0x1280 [ 364.543048][ C1] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 364.543066][ C1] ? __pfx_devlink_get_from_attrs_lock+0x10/0x10 [ 364.543084][ C1] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 364.543104][ C1] genl_family_rcv_msg_doit+0x214/0x300 [ 364.543120][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 364.543140][ C1] ? bpf_lsm_capable+0x9/0x10 [ 364.543156][ C1] ? security_capable+0x80/0x260 [ 364.543172][ C1] genl_rcv_msg+0x560/0x800 [ 364.543189][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.543204][ C1] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 364.543220][ C1] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 364.543238][ C1] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 364.543256][ C1] ? __lock_acquire+0x4a5/0x2630 [ 364.543272][ C1] netlink_rcv_skb+0x159/0x420 [ 364.543286][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.543301][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.543319][ C1] ? netlink_deliver_tap+0x1ae/0xcc0 [ 364.543340][ C1] genl_rcv+0x28/0x40 [ 364.543353][ C1] netlink_unicast+0x5aa/0x870 [ 364.543369][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 364.543386][ C1] netlink_sendmsg+0x8b0/0xda0 [ 364.543401][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.543413][ C1] ? __might_fault+0x80/0x140 [ 364.543437][ C1] ____sys_sendmsg+0x9e1/0xb70 [ 364.543452][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.543466][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.543483][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 364.543505][ C1] ___sys_sendmsg+0x190/0x1e0 [ 364.543521][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.543550][ C1] __sys_sendmsg+0x170/0x220 [ 364.543570][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 364.543588][ C1] ? __x64_sys_futex+0x34f/0x4d0 [ 364.543609][ C1] ? rcu_is_watching+0x12/0xc0 [ 364.543627][ C1] do_syscall_64+0x10b/0xf80 [ 364.543640][ C1] ? clear_bhb_loop+0x40/0x90 [ 364.543656][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.543669][ C1] RIP: 0033:0x7ff54a99c819 [ 364.543684][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.543696][ C1] RSP: 002b:00007ff54b8ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.543710][ C1] RAX: ffffffffffffffda RBX: 00007ff54ac15fa0 RCX: 00007ff54a99c819 [ 364.543719][ C1] RDX: 0000000006048800 RSI: 0000200000000080 RDI: 0000000000000005 [ 364.543728][ C1] RBP: 00007ff54aa32c91 R08: 0000000000000000 R09: 0000000000000000 [ 364.543736][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.543744][ C1] R13: 00007ff54ac16038 R14: 00007ff54ac15fa0 R15: 00007ffe0921f728 [ 364.543758][ C1] [ 364.580397][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 364.580417][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 364.580439][ T30] Tainted: [L]=SOFTLOCKUP [ 364.580445][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 364.580455][ T30] Call Trace: [ 364.580461][ T30] [ 364.580468][ T30] dump_stack_lvl+0x100/0x190 [ 364.580490][ T30] vpanic+0x552/0x970 [ 364.580506][ T30] ? __pfx_vpanic+0x10/0x10 [ 364.580521][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 364.580544][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 364.580567][ T30] panic+0xd1/0xe0 [ 364.580581][ T30] ? __pfx_panic+0x10/0x10 [ 364.580598][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 364.580618][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 364.580638][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 364.580657][ T30] ? watchdog.cold+0x1a0/0x1d2 [ 364.580673][ T30] ? watchdog+0xd28/0x1040 [ 364.580690][ T30] watchdog.cold+0x1b1/0x1d2 [ 364.580714][ T30] ? __pfx_watchdog+0x10/0x10 [ 364.580728][ T30] ? __kthread_parkme+0x18c/0x230 [ 364.580754][ T30] ? kthread+0x13a/0x450 [ 364.580769][ T30] ? __pfx_watchdog+0x10/0x10 [ 364.580782][ T30] kthread+0x370/0x450 [ 364.580797][ T30] ? __pfx_kthread+0x10/0x10 [ 364.580817][ T30] ret_from_fork+0x72b/0xd50 [ 364.580836][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 364.580855][ T30] ? __switch_to+0x800/0x1100 [ 364.580876][ T30] ? __pfx_kthread+0x10/0x10 [ 364.580893][ T30] ret_from_fork_asm+0x1a/0x30 [ 364.580923][ T30] [ 364.584914][ T30] Kernel Offset: disabled