last executing test programs: 24m22.672762372s ago: executing program 32 (id=1882): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f000905", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x43c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x185e, 0x7, 0xa0, 0x8, 0x0, 0x1, 0x2, 0xfffffffa, 0x40, 0x1, 0x7fffffff, 0xa0000, 0x8, 0x1, 0x1, 0x10001, 0x101, 0x2, 0x6, 0x3, 0x6, 0x8, 0x0, 0x3, 0xc9da, 0x3, 0x1b92, 0xff, 0x3, 0x3, 0x110, 0x4, 0xf36d, 0x30b, 0x2, 0x46, 0x6, 0x8, 0xc2b, 0x2, 0x8, 0x8, 0x8, 0x4, 0x0, 0x6a3, 0x8, 0xd, 0x4, 0x5, 0xffffffa4, 0x8, 0x6, 0x8, 0x7, 0x100, 0xd8, 0x5, 0x3e, 0x5, 0x4, 0x101, 0x2, 0xffffff80, 0x0, 0x1, 0x6, 0x480, 0x0, 0xfe, 0x6, 0x9, 0x9, 0x2, 0x4e, 0x8, 0x983, 0x200, 0x0, 0x8, 0x7ff, 0x5, 0x633ee1ca, 0x7f, 0x5b2, 0x0, 0xf1, 0x7, 0x5, 0x5, 0x3, 0xc2, 0x7, 0x2, 0x8, 0x4, 0x0, 0x9, 0x6, 0x45, 0x64, 0xea, 0x4, 0x1, 0x8f6d, 0xfffffff2, 0x8, 0x2, 0x40, 0x7, 0xdf, 0x10, 0x3, 0x1, 0x788ceffb, 0x7fffffff, 0x6, 0xffff, 0xfff, 0x5, 0x4, 0x5, 0xca8, 0xfffff2a2, 0xffffffff, 0x0, 0x81, 0x4, 0xe, 0x800, 0x25, 0x8, 0xfffffff9, 0x81, 0x4924, 0x0, 0x7fffffff, 0x6, 0x1, 0x2, 0xfc43, 0xa, 0x400, 0x9, 0x6, 0xb1, 0x60000, 0x7, 0x400, 0xb68, 0xf, 0x0, 0x6, 0x10001, 0x2aa, 0xfff, 0x77, 0x5, 0x3fc, 0x1ff, 0x0, 0x7f, 0x7, 0x401, 0xdb29, 0xffffd26e, 0xa6, 0x80, 0x80000000, 0x6, 0x5, 0x1897, 0x0, 0x70, 0x1, 0x4f873fba, 0x0, 0x9, 0x1000, 0xf825, 0x8, 0x4, 0x3, 0x3, 0x0, 0x7, 0xfff, 0x440, 0x61d8aa85, 0x7fc000, 0x1, 0x4, 0x2, 0x0, 0x2, 0xe, 0x5, 0x8a02, 0x3, 0x7f, 0x803c, 0xb, 0x9, 0x40ab, 0xc, 0xb, 0x2, 0x280000, 0x2, 0x0, 0x9, 0x1, 0x7, 0x200, 0x9, 0x53, 0xfffffff8, 0x60f00, 0x8, 0x800, 0x101, 0xf09d, 0x7, 0x6, 0xff, 0xffff, 0xa, 0xfc4, 0x0, 0xa, 0x81, 0x1400, 0x2, 0x0, 0x6, 0xfffffff9, 0x658, 0x81, 0x8, 0x0, 0x5, 0x8, 0x2, 0x7fff, 0x8, 0x0, 0x4, 0x8e, 0xba, 0x7fff, 0x6, 0xc99f, 0x2, 0x493e, 0xffffff81]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100000000000000000000008500000011000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xf, 0x2) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0xfffffff8, 0x1, 0x9, 0x5, 0x2, 0x2, 0x2}, 0x1c) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) gettid() kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000080), 0x12) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 22m43.787792007s ago: executing program 33 (id=2065): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mkdir(0x0, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x71bd0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0xd}, 0x18) 21m42.286331862s ago: executing program 34 (id=2275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000580)=0x7, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4d0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='[', 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, '\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = memfd_secret(0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) ftruncate(r7, 0xb7a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r7, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x60, 0xa5b2, 0x80000000, 0x8, 0x40, 0x100000000, 0x0, 0xff}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010029bd7000fcdbdf2503000000060001004e230800"], 0x1c}}, 0x800) 18m36.403731226s ago: executing program 4 (id=2843): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400a43, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x1, 0x5000003a, r1, 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9) rename(&(0x7f00000003c0)='./file1/file3\x00', &(0x7f0000000100)='./file0\x00') readv(r2, &(0x7f0000000080)=[{&(0x7f0000000240)=""/206, 0xce}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x0, 0x20, '\b\x00\x00\x00\x00 \x00\x00\x00\x00\"\x00'}) r3 = syz_open_pts(r0, 0x101000) r4 = dup3(r3, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) 18m35.291503561s ago: executing program 4 (id=2847): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e40201"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 18m33.042658648s ago: executing program 35 (id=2854): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = eventfd(0x3) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfd, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xa, 0x1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa8d}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) r11 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r12 = getpid() sched_setscheduler(r12, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r13, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r13, &(0x7f0000000800)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000380)="99246aaf8064f7af7a9baf54abcb502ef9aa828ebd3329c2ba5981a9e5580a8baecdde443ba3723269ea1546704caec845fcca5b4497caf202c0a910d2a301674a4939d623e03f2881af2cc1dec635ddf61a3989e209ff1b5c240bfa3576c90b2e1a55b459504893c32076e9d393dd6199fe432abf3b00b83d5ce4f82864a95426bcd0", 0x83}, {&(0x7f0000000440)="8b0c5fea271c26436331ba38e07df69727804296cdcf27a7378b83d2b68222bcd915027bd5e3f9aa100872b7f0ac01cfa21c60ff2f725d887a810f5b447dba70c1c576f9f166838c76703719cd4f5181cd312d019c04c3a40f226b9624a41428b0a8de86c71439596afb72a09c11941f49d6a5f5943f69f4ef23ae68a54c917cbd742ef5746a71358714f5d601b54891464b999b0b4bc478fb3461516cf9bf210a5ebc6baf9a69de3fff3d3c6549893dda1958b3c5e1234855b281fbc23dab0bb667461436da1d7e107a37ac179c10d0b7e98d3ceb409b7b3b79846cca712301ce122499893dd647136f3021fd400ebf348c10ce2fc24e61", 0xf8}], 0x2, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [r9]}}], 0x18}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="f03b580723d8a8654549834f3f59780d00", 0x11}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x28, 0x1, 0x1, [r5, r1, r11, r4, r5, r2]}}], 0x78, 0x4000}}, {{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600), 0x0, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r12}}}], 0x20, 0x40041}}], 0x3, 0x4040010) recvmmsg(r13, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071105000000000001d300200000000004704000001ed030407030000020000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa0"], 0x0}, 0x94) 18m32.131394461s ago: executing program 4 (id=2860): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000003c0)=0x9, 0x99d, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@default, @default, @default, @default, @netrom, @default, @rose, @netrom]}, &(0x7f0000000400)=0x48) accept4$ax25(r4, &(0x7f0000000300)={{0x3, @netrom}, [@bcast, @netrom, @bcast, @null, @bcast, @default, @null, @rose]}, &(0x7f0000000280)=0x48, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) socket(0x10, 0x80002, 0x0) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000380)={@bcast, @default, 0x2, 0x44}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4bf844acf6f384, 0x0) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) ioctl$PTP_PIN_SETFUNC(r5, 0x40603d07, &(0x7f0000000200)={'\x00', 0x8, 0x1, 0x8}) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = socket$kcm(0x10, 0x3, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="7395915d3604267b2d80c7df6de30203010902120001000010000904e10000def59c000000000000c0d8a2c69a80e54900"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="401540"], 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1b0000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08", 0x1b}], 0x1}, 0x40400) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYRES16=r8, @ANYRES8=r8]) 18m28.508353865s ago: executing program 4 (id=2869): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="00800000000000000045a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x4c) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4048081) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1000003, {0x0, 0x0, 0x0, 0x0, 0xe82, 0x1800}, [@IFLA_LINKINFO={0x3d, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1032, 0x20a}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)="669051", 0x3, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x100000000000f7) read$watch_queue(r4, &(0x7f0000000000)=""/12, 0xc) keyctl$revoke(0x3, r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) 18m27.588956468s ago: executing program 4 (id=2873): r0 = socket(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000080)="49343b975d3a180c21009741353de36d69514ccd11fe48ba8af995a79377da41084c5737a22143f5809a23f536d0cbcadc1550f10fe6b9110b493bd6d892a4cb222e69440b56776d3366dbfe9e1ec1afc627dd4630542d51780d73436838e02b0a0485431effbb2dd69d9274ff5a8dbe60788b4ba064be2359d7a8eae0da22ed6bbe8826403cf780231c8516093f982c85bc72a899d5f5bd7bd1c5554d22ac725a383ed3fb07583b66f980b82a3380209d15bf2e69089d1b36d15b18b938d437767d929838401bb480ef8ca019763fb8ccdd1261172f4ea0", 0xd8, 0x801, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000440)}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000005000000caf9000007000000bf940100", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000030000000900000000000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x589f1d3d3ed5ab65, 0x1, 0x5, 0x66c6, 0x4, @mcast2, @remote, 0x20, 0x10, 0x3, 0x5}}) bind$can_j1939(r6, &(0x7f0000000200)={0x1d, r7, 0x0, {0x2, 0xff, 0x3}, 0xfe}, 0x18) socket$unix(0x1, 0x1, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)={0x40, r8, 0x1, 0x1, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_GET(r6, 0x0, 0x4) pipe2$9p(0x0, 0x84000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x940b9000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) 18m22.44913829s ago: executing program 4 (id=2881): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100feffffff000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="14000005080002ff080001002001000000000000"], 0x30}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x1, 0x1, 0x4}, 0x0, 0x6, 'id0\x00', 'timer0\x00'}) 17m48.914766399s ago: executing program 36 (id=2878): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x4b7093ff931a8458, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmsg$nl_route(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r6, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 17m48.599206096s ago: executing program 37 (id=2880): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x10000000000002, 0x400, 0x0, 0xa, 0x1, 0x1, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6780820040000000000000033324dbdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f246eb000200", "b7324536181c208220000000b901000000e5ffffff002db267e6a281befc00", [0x40004]}) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000440)={0x100000001, {{0xa, 0xce22, 0xffffffff, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="020000"], 0x3) syz_open_dev$usbmon(&(0x7f0000000000), 0x7fffffff, 0x0) epoll_create1(0x80000) syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x149041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x1c02, 0x2, 0x7f, "cc33101d3f0000002000"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) syz_open_pts(0xffffffffffffffff, 0x42) dup3(r4, r1, 0x0) 17m43.990835371s ago: executing program 38 (id=2879): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000040)={0x0}) (async) syz_open_dev$radio(0x0, 0x0, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) fcntl$notify(0xffffffffffffffff, 0x402, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000001800599c6d0eab070004000523"], 0xfe33) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r3 = socket$isdn(0x22, 0x2, 0x3) bind$isdn(r3, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) (async) read$msr(r2, &(0x7f0000002700)=""/102392, 0xfffffd88) (async) writev(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) close(r4) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x52, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) splice(0xffffffffffffffff, 0x0, r5, &(0x7f0000000140)=0x8008, 0x3, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES32=0x0], 0x48) 17m43.811345862s ago: executing program 39 (id=2881): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8000, '\x00', @string=&(0x7f0000000200)=0x7d}}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100feffffff000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="14000005080002ff080001002001000000000000"], 0x30}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x1, 0x1, 0x4}, 0x0, 0x6, 'id0\x00', 'timer0\x00'}) 17m25.608888876s ago: executing program 6 (id=2892): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x1d, 0x2, 0x6) socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x220) setpgid(0x0, r3) open_tree(0xffffffffffffff9c, 0x0, 0x901) mount(0x0, 0x0, 0x0, 0x2000, 0x0) bind$can_j1939(r2, 0x0, 0x0) epoll_create(0x2) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYRES32=0x0], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000300"/28], 0x50) pread64(r4, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) 17m23.519747765s ago: executing program 6 (id=2895): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="00800000000000000045a9000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x4c) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4048081) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)="669051", 0x3, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x100000000000f7) read$watch_queue(r4, &(0x7f0000000000)=""/12, 0xc) keyctl$revoke(0x3, r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) 17m22.467911559s ago: executing program 6 (id=2899): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000001e00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x26000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f00000038c0)=""/4118, 0x1016}], 0x1) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000001fc0)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffff800}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000000700)="15808d9f209de330706107d2bdd11859ad45cc4f5d3307", 0x17}, {&(0x7f0000000780)="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", 0xfd1}, {&(0x7f0000000540)="e91f455a7b282ff50269e44396970115661e34b79ff0905d5f2d4fe388362904ee6b235e6ffccdcbc6a291f7b56ea01000172f3e39f2ae332ab71e6995fe0537a1ffb7ea487fd59935705c57dde83c948fd9d6684b83485e32e3a66522d77790dd460fb5cf51a24b0ee824660013d291ad12753cc80833e222604f69b70029478b047d150b4bfc36ffa065447cf5eaeb96836821ae31c23e3ee7b7f82fffe473a87fdd11eed4d2125d2f32069981270a63c295b74000330ce6c64e198749b716a1609037b66d9c730ecf8d6e2b45", 0xce}, {&(0x7f0000000640)}, {&(0x7f0000001780)="b0219e9ade02f8df1de8e1e7256779da11db8fd82a6a2153788ac46284b4d19dd0b10f439d88cec386904c601bc62b166abcbad185312d47c39bf2070fb672cf6cef2986bdc35ce98f124471135106cdcf5770e10f2fec3c7af370c6ffe3ac5984137f006d92bcfb6dedbfd52fcfe447d98ba4d864806a61823d7fd14fc4652b125b7439b13024277cc8be8ab44f9d6e591f5a83ba829980b68246ab1c03cea9d9bf05", 0xa3}, {&(0x7f0000001840)="3626a0a1c93b2907a1aa28ac4a2bb1970fd14f468ff61c111b02c505dec6b4be4628d399fc0d6db074bef26c21d218c5dddc874e6076f2c062a5eb684edcb99db40c0cda9965872f466d134d943c4062dd04a3b9cb855bfa178cb583f6f8b926cc0885beadd95ae83ca738ae27d63cdebae2289cbd7a1c96c3d1b8f918246804408a9efbd22394685b36c0a828a021e4978493d732976e04eb92177e8e4b7e98a76a10cbcfd42a7005db866c197011c24172f4da0e7a71b3b6", 0xb9}, {&(0x7f0000001900)="425c7892980eebabb6af05e79ba58883f8f3a8ed6fcde942bfd1335f01eae15bb2af3c261521a283718cb716137fb25c138adb12c15bddea64319883dd0c9a9e2e154c208b79a46e3372b4393c4e9001e549daf1b8628bfa1e41b22e43e580a77c657fbe913a0b2c9d9c7e5bc715000bddc819c9071ab4bff951b8d0b3c4d7084fe46ec2b39fcb76b941c9a5f037e47f5bdd5ac9a3dc41d0c5b5f2ef148cade8d239cdab20aa1030add236836ef6f874c97f19f6ed6a4c7f825ea8b2606f3036ddcd6ebdea", 0xc5}, {0x0}], 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1f0}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f00000002c0)="1dc9682245df07e8d8dd3ebe6eb7e39ec8a23350525647166bf75ca355b6f042ea454d0bb7f990de8ea1dc1dece87df3adfdfb882743cb4a4f1cd9376588230bbdb17c", 0x43, 0x3b00, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002e0001002abd70a7ab763d9c14fa880000000000f26c6b0800000059868d8dfe4669b0229dbfef725ab7a09e37ce152734c815cf5fa39e13dd7112ee347defa898f7f80d7b7c0c6d01b6688fdb39115f55405d6c2fa6a5150bfb7a9ea51ea1c6fac9826090774eb3cc2119835e93e3b59ee852a7701cbcbec9cfda5a3275378c0558e627b1c7566763a1a70d99308312f5ec168bfacd94c4dc752e60"], 0x2c}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r8, 0x9, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7, 0x1}) 17m19.473634581s ago: executing program 6 (id=2907): fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xb, &(0x7f0000000040)={0x8, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x400e8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f00000001c0)) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x64}}, 0x0) setuid(r0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, 0x0, 0x0) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r9, 0x1, 0x14, 0x0, &(0x7f0000000180)) pidfd_send_signal(r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0xfffffffa}, 0x2) r10 = msgget$private(0x0, 0x2) msgsnd(r10, &(0x7f0000000180)=ANY=[], 0x401, 0x800) mkdir(&(0x7f00000005c0)='./cgroup\x00', 0x8311096d6c6ea473) write$sndseq(r5, &(0x7f00000009c0)=[{0xf, 0x7, 0x80, 0xfd, @time={0x5, 0x1}, {0x8}, {0xe}, @connect={{}, {0x1}}}], 0x1c) 17m15.196522111s ago: executing program 6 (id=2922): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x1c243811) keyctl$chown(0x4, r6, 0xee00, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r6, r7, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17m13.504760413s ago: executing program 6 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x3d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{}, &(0x7f0000000200), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xf, 0xfffffe0000000001, 0xfa15, 0x1ff}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000e00000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x255f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000001c0)={0x32, 0x1, 0x0, "c8010000000a00010000b6035c2299230500e20000432600", 0x32314d56}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$packet(0x11, 0x2, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 16m58.457582569s ago: executing program 40 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x3d, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{}, &(0x7f0000000200), &(0x7f0000000540)='%pS \x00'}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xf, 0xfffffe0000000001, 0xfa15, 0x1ff}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000e00000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x255f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000001c0)={0x32, 0x1, 0x0, "c8010000000a00010000b6035c2299230500e20000432600", 0x32314d56}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) socket$packet(0x11, 0x2, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 14m29.0735889s ago: executing program 1 (id=3851): listxattr(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xff, 0x4, 0x6d, 0xc9fa, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 14m28.521838965s ago: executing program 1 (id=3855): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r4, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 14m27.825231085s ago: executing program 1 (id=3860): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000e00)=[@acquire, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1001}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 14m26.749687999s ago: executing program 1 (id=3870): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 14m26.549067466s ago: executing program 1 (id=3875): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0}) 14m26.208775534s ago: executing program 1 (id=3880): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) setuid(0xee01) 14m25.97649905s ago: executing program 41 (id=3880): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) setuid(0xee01) 14m25.008323096s ago: executing program 7 (id=3887): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x1, &(0x7f0000000e40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000002440), 0x0, &(0x7f00000000c0), 0x0, 0x0) 14m24.778705719s ago: executing program 7 (id=3890): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x80000001, 0x3a, '\xbb\xbb\xbb\xbb\xbb\xbb', 0x3a, '/dev/kvm\x00', 0x3a, './cgroup.cpu/cpuset.cpus'}, 0x47) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c08d3fc141120004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 14m24.574579866s ago: executing program 7 (id=3892): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000200)={&(0x7f0000000300), 0x0}) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={0x0, &(0x7f0000001480)=""/4120, 0x1018}) 14m24.435236185s ago: executing program 7 (id=3893): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 14m24.302107647s ago: executing program 7 (id=3894): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0x1094001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) read$FUSE(r2, 0x0, 0x0) 14m23.340190503s ago: executing program 7 (id=3896): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52", 0xf8}], 0x1}}], 0x2, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="14", 0xfffffffffffffe96, 0x10008095, 0x0, 0x0) 14m22.881480207s ago: executing program 42 (id=3896): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8", 0xda}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52", 0xf8}], 0x1}}], 0x2, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="14", 0xfffffffffffffe96, 0x10008095, 0x0, 0x0) 14m22.836585689s ago: executing program 9 (id=3899): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x1, &(0x7f0000000e40)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000002440), 0x0, &(0x7f00000000c0), 0x0, 0x0) 14m22.647676395s ago: executing program 9 (id=3902): open(&(0x7f0000000740)='./bus\x00', 0x163361, 0x501c998c4dfcafcd) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 14m22.408583834s ago: executing program 9 (id=3904): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0x10, 0x4) r1 = dup(r0) sendmmsg$inet(r1, &(0x7f000000d4c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="9e3b074a8988e293861a347e432f5979dc366a208834c6d2a000bc8c67a48d77135afb45fe124800911b188a404dbb73455a75862204ea9a0fedea6988408c58e85ba4d1a4e491a6de5c60edba18f1b7ea7a08a5561df73ef826a79dfde7e6cc23a80962e8d56d361457f106add67ca5afe80d98e7c92de1156ebb54c01283942ac9b13d6f5a2d319cfd2104ae52bb40a3d35dc6340f126aeffdb8db0f61c11e854198723ba5eddf5f06a860", 0xac}, {&(0x7f0000000240)="7e34f6aca1463766d0659360d85c8deab4", 0x11}, {&(0x7f00000005c0)="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", 0x15e}], 0x3}}], 0x1, 0x95) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) sendto$inet6(r0, &(0x7f0000000180)="754236b449ae7a35416e6f38cb6f56ea97146067719764", 0x17, 0x0, 0x0, 0x0) 14m22.236912317s ago: executing program 9 (id=3906): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) 14m22.098443604s ago: executing program 9 (id=3908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 14m21.733384535s ago: executing program 9 (id=3911): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) 14m21.485350385s ago: executing program 43 (id=3911): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) 17.216428805s ago: executing program 5 (id=6879): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0xfffff000, 0x4000}) signalfd4(r1, &(0x7f0000000080), 0x8, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0xa, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001880)={'#! ', './file0', [], 0xa, "cd7d"}, 0xd) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) shmat(0x0, &(0x7f0000874000/0x3000)=nil, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x2, 0xf}) 16.025545515s ago: executing program 5 (id=6880): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x210002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) 13.766552998s ago: executing program 8 (id=6886): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$pppoe(0x18, 0x1, 0x0) r1 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0xfffff000, 0x4000}) signalfd4(r1, &(0x7f0000000080), 0x8, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0xa, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001880)={'#! ', './file0', [], 0xa, "cd7d"}, 0xd) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) shmat(0x0, &(0x7f0000874000/0x3000)=nil, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x2, 0xf}) 12.876356172s ago: executing program 8 (id=6887): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f2500402900"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) syz_emit_ethernet(0x82, &(0x7f0000000480)={@link_local, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local, {[@lsrr={0x83, 0x7, 0x0, [@multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@remote}, {@broadcast}, {@dev}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r8, 0xc01464a6, &(0x7f0000000180)={r9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x38}}, 0x4000801) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x50, &(0x7f0000000100), 0x48) mq_open(&(0x7f0000000240)='#)}\xaf\x00', 0x40, 0x2, &(0x7f0000000280)={0x80000000, 0x4, 0xff, 0x9}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd9, 0x2, &(0x7f0000000040)={0x8, "810556c721393f4084cc9efc7ddbe76f2fb91f7abe359f7ed2401f27a7f77d040b"}}) 12.68208223s ago: executing program 5 (id=6888): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x210002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) (fail_nth: 2) 10.820641003s ago: executing program 2 (id=6895): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r1) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000001e00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x26000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) readv(r5, &(0x7f0000000040)=[{&(0x7f00000038c0)=""/4118, 0x1016}], 0x1) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000001fc0)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffff800}, 0x1c, &(0x7f0000001c80)=[{&(0x7f0000000700)="15808d9f209de330706107d2bdd11859ad45cc4f5d", 0x15}, {&(0x7f0000000780)="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", 0xfd1}, {&(0x7f0000000540)="e91f455a7b282ff50269e44396970115661e34b79ff0905d5f2d4fe388362904ee6b235e6ffccdcbc6a291f7b56ea01000172f3e39f2ae332ab71e6995fe0537a1ffb7ea487fd59935705c57dde83c948fd9d6684b83485e32e3a66522d77790dd460fb5cf51a24b0ee824660013d291ad12753cc80833e222604f69b70029478b047d150b4bfc36ffa065447cf5eaeb96836821ae31c23e3ee7b7f82fffe473a87fdd11eed4d2125d2f32069981270a63c295b74000330ce6c64e198749b716a1609037b66d9c730ecf8d6e2b45", 0xce}, {&(0x7f0000000640)}, {&(0x7f0000001780)="b0219e9ade02f8df1de8e1e7256779da11db8fd82a6a2153788ac46284b4d19dd0b10f439d88cec386904c601bc62b166abcbad185312d47c39bf2070fb672cf6cef2986bdc35ce98f124471135106cdcf5770e10f2fec3c7af370c6ffe3ac5984137f006d92bcfb6dedbfd52fcfe447d98ba4d864806a61823d7fd14fc4652b125b7439b13024277cc8be8ab44f9d6e591f5a83ba829980b68246ab1c03cea9d9bf05", 0xa3}, {&(0x7f0000001840)="3626a0a1c93b2907a1aa28ac4a2bb1970fd14f468ff61c111b02c505dec6b4be4628d399fc0d6db074bef26c21d218c5dddc874e6076f2c062a5eb684edcb99db40c0cda9965872f466d134d943c4062dd04a3b9cb855bfa178cb583f6f8b926cc0885beadd95ae83ca738ae27d63cdebae2289cbd7a1c96c3d1b8f918246804408a9efbd22394685b36c0a828a021e4978493d732976e04eb92177e8e4b7e98a76a10cbcfd42a7005db866c197011c24172f4da0e7a71b3b6", 0xb9}, {&(0x7f0000001900)="425c7892980eebabb6af05e79ba58883f8f3a8ed6fcde942bfd1335f01eae15bb2af3c261521a283718cb716137fb25c138adb12c15bddea64319883dd0c9a9e2e154c208b79a46e3372b4393c4e9001e549daf1b8628bfa1e41b22e43e580a77c657fbe913a0b2c9d9c7e5bc715000bddc819c9071ab4bff951b8d0b3c4d7084fe46ec2b39fcb76b941c9a5f037e47f5bdd5ac9a3dc41d0c5b5f2ef148cade8d239cdab20aa1030add236836ef6f874c97f19f6ed6a4c7f825ea8b2606f3036ddcd6ebdea", 0xc5}, {&(0x7f0000001a00)}], 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x1f0}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f00000002c0)="1dc9682245df07e8d8dd3ebe6eb7e39ec8a23350525647166bf75ca355b6f042ea454d0bb7f990de8ea1dc1dece87df3adfdfb882743cb4a4f1cd9376588230bbdb17c", 0x43, 0x3b00, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000002e0001002abd70a7ab763d9c14fa880000000000f26c6b0800000059868d8dfe4669b0229dbfef725ab7a09e37ce152734c815cf5fa39e13dd7112ee347defa898f7f80d7b7c0c6d01b6688fdb39115f55405d6c2fa6a5150bfb7a9ea51ea1c6fac9826090774eb3cc2119835e93e3b59ee852a7701cbcbec9cfda5a3275378c0558e627b1c7566763a1a70d99308312f5ec168bfacd94c4dc752e60"], 0x2c}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r8, 0x9, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7, 0x1}) 9.448358711s ago: executing program 8 (id=6898): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket(0x10, 0x5, 0x3c434955) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000efa8aa3ec8c500000000000000000000003b1200"/34], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003500010029bd7000fedbdf2503000000beab450ea8605d8fc7383cd41b7aaa2a5c1c8076930b595967c9231608233796f791dbb84366fc462190ae2ccb0b0c6107ec7d7be195bcf5a3e999631e724945"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x40008010) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x149002) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1}) r3 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cd}, &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 7.750695211s ago: executing program 8 (id=6899): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x3, 0xfffffffffffffffe, &(0x7f00000000c0)) 7.361453481s ago: executing program 5 (id=6900): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0x8, 0x6, &(0x7f00000001c0)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) r3 = dup(r0) (async) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x0, 0x21, 0x33}}, 0x30) 7.260630281s ago: executing program 0 (id=6901): mmap(&(0x7f00005df000/0x3000)=nil, 0x3000, 0x2000003, 0x10010, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x5, 0x100000000000000, &(0x7f00000007c0)="dc6d2113f2"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf023}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) prlimit64(0x0, 0x1, &(0x7f0000000080)={0x800000, 0x8f}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)=0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0x8000) 7.239167451s ago: executing program 3 (id=6902): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mknod(0x0, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000000c0)=0xfe0c, &(0x7f0000000100)=0x2) mq_open(0x0, 0x1, 0x6, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdir(0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001814010000e9ffffffffffff070001"], 0x18}}, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000600)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000001740), 0x0) chdir(0x0) 6.040662472s ago: executing program 2 (id=6903): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) splice(r1, 0x0, r0, 0x0, 0x18, 0x7) 5.852608753s ago: executing program 3 (id=6904): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x23, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000081800000100000080000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000200"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r4, &(0x7f0000000580)="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", &(0x7f0000000280)=""/120}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0x40000041, 0x3bc}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x14, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r8 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) sendmmsg$inet(r8, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) setsockopt$sock_attach_bpf(r8, 0x1, 0x7, &(0x7f0000000340), 0x4) syz_usb_connect(0x0, 0x35a, 0x0, 0x0) 5.777830777s ago: executing program 0 (id=6905): openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./file0\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 5.644878832s ago: executing program 2 (id=6906): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) 5.130089903s ago: executing program 8 (id=6907): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000300)) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x578410eb) 4.740033372s ago: executing program 2 (id=6908): futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r4 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x21ac, &(0x7f00000001c0)=ANY=[@ANYBLOB="0010004e5644e27fc1a383d9ee5ee6b2de79fb5b1c498946cb7eb4dfe620eef65915125bded947342a50c63a79a1447333b4e1b6c2cbd5b856dc383c6e37f2f12beba6ac624f5308f80ca79a2807726d6c5693d297094667176123a4156e1e7819bb57b57576d89a533e92e426a02e0f218d86"]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r5, 0xf8923000) 3.984165541s ago: executing program 5 (id=6909): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 3.942501798s ago: executing program 0 (id=6910): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 3.59588442s ago: executing program 3 (id=6911): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00030000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) (fail_nth: 11) 2.809097074s ago: executing program 0 (id=6912): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x58, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d"}}}}}}}, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x48) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000300)=0x1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000440)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x2, 0x18}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x56, 0xff}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000}, 0x90) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 2.560128762s ago: executing program 3 (id=6913): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xb02f, 0x7ff, 0xe2, 0x3, 0x88d3, 0x8d, 0x1007, 0x1, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x401, 0x8, 0x3, 0x9, 0x8e, 0x8, 0x4003, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x8, 0xff, 0x400002, 0x4000001]}) 1.743544226s ago: executing program 3 (id=6914): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2400c000) socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @multicast, @val={@void, {0x8100, 0x5}}, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "091741ddde5481f6862a5d08519d777f152a080afe197f4866d64e3dd2e828331bafafd0f88681137a482866ad345781a2c040546fcf03544dcd7c90d1d849b9"}}}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.557104711s ago: executing program 0 (id=6915): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xeffbfb, 0x0, 0xfffffffd, 0x1}, 0x10) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1a5}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, r5, 0x0, 0x13, &(0x7f0000000340)='\x8e[@$[//^]&*%---\'-)\x00'}, 0x30) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x64, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x20, 0x2a, [@preq={0x82, 0x1a, {{0x1, 0x1, 0x1}, 0x6, 0x4, 0xc, @device_b, 0x9, @void, 0x1, 0x3}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x80) 792.739482ms ago: executing program 2 (id=6916): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="0500000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b1b378bcbf5a202"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 495.088649ms ago: executing program 3 (id=6917): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x3, 0xfffffffffffffffe, &(0x7f00000000c0)) 403.401502ms ago: executing program 0 (id=6918): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'macsec0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="28010000", @ANYRES16=r3, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x4004040}, 0x40884) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$kcm(0x2, 0x3, 0x106) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0x3}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004c090}, 0x80) sendmsg$inet(r5, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x40010) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="9401", @ANYRES64], 0x24) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 182.457532ms ago: executing program 2 (id=6919): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000206d0425c20000000000010902244c240000c0b109040000020300040009210101000122050009"], 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000c0ff0000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000580)={0x21b, 0x2, 0x4, {{0x500, 0xda, 0x800, 0x0, {}, 0x2810000, 0x0, 0x0, 0x0, 0x18, '\x04nodev{evo\x02\x00\x00\x00\x00\x00\x00\x00:\x8b\x92\x00\x00\x00', 0x38, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21b) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0x3) 12.595051ms ago: executing program 8 (id=6920): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000100)={@hyper}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000015}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @host, 0xc, 0x0, 0x5e, 0x2000001, 0x4, 0x1c, 0x4}) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f0000000200)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x7000000) 0s ago: executing program 5 (id=6921): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000500)="120000001200e7ef007b00e4c9a30c0de8", 0x11, 0x4040014, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40002100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r6, &(0x7f0000000300), 0x6) (fail_nth: 1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.3.6660'. [ 2145.320510][T31446] ubi: mtd0 is already attached to ubi31 [ 2145.907567][ T911] usb 3-1: USB disconnect, device number 66 [ 2146.114232][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 2146.114248][ T30] audit: type=1400 audit(2146.086:71159): avc: denied { read write } for pid=31451 comm="syz.0.6662" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2146.159166][ T30] audit: type=1400 audit(2146.086:71160): avc: denied { open } for pid=31451 comm="syz.0.6662" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2146.183241][ T30] audit: type=1400 audit(2146.086:71161): avc: denied { ioctl } for pid=31451 comm="syz.0.6662" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2146.232575][ T30] audit: type=1400 audit(2146.196:71162): avc: denied { ioctl } for pid=31451 comm="syz.0.6662" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2146.321271][ T30] audit: type=1400 audit(2146.246:71163): avc: denied { name_bind } for pid=31453 comm="syz.2.6663" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2146.352493][T19891] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2146.368527][ T30] audit: type=1400 audit(2146.246:71164): avc: denied { node_bind } for pid=31453 comm="syz.2.6663" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 2146.398630][ T30] audit: type=1400 audit(2146.256:71165): avc: denied { create } for pid=31453 comm="syz.2.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2146.435115][ T30] audit: type=1400 audit(2146.256:71166): avc: denied { bind } for pid=31453 comm="syz.2.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2146.455739][ T30] audit: type=1400 audit(2146.256:71167): avc: denied { setopt } for pid=31453 comm="syz.2.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2146.478854][ T30] audit: type=1400 audit(2146.256:71168): avc: denied { accept } for pid=31453 comm="syz.2.6663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2146.512689][T19891] usb 1-1: Using ep0 maxpacket: 32 [ 2146.548840][T19891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2146.569934][T19891] usb 1-1: config 0 has no interfaces? [ 2146.644633][T19891] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2146.678850][T19891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.864806][T19891] usb 1-1: config 0 descriptor?? [ 2148.479107][T31476] 9pnet_virtio: no channels available for device [ 2149.272761][ T5855] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2149.273891][T19891] usb 1-1: USB disconnect, device number 83 [ 2149.353275][T31488] syz_tun: entered allmulticast mode [ 2149.356880][T27678] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2149.400943][T31487] syz_tun: left allmulticast mode [ 2149.446160][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 2149.458033][ T5855] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2149.473700][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.496707][ T5855] usb 6-1: config 0 descriptor?? [ 2149.514742][T27678] usb 4-1: device descriptor read/64, error -71 [ 2149.710347][ T5855] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2150.633753][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2150.672502][T19891] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2150.676230][T27678] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2150.774795][ T5855] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2150.787722][ T5855] usb 6-1: media controller created [ 2150.816092][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2150.852718][T19891] usb 1-1: Using ep0 maxpacket: 32 [ 2150.876790][T19891] usb 1-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 2150.889173][T19891] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2150.915172][T19891] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2150.932801][T27678] usb 4-1: device descriptor read/64, error -71 [ 2150.934770][T19891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.984890][T19891] usb 1-1: config 0 descriptor?? [ 2151.053134][T27678] usb usb4-port1: attempt power cycle [ 2151.124425][ T30] kauditd_printk_skb: 179 callbacks suppressed [ 2151.124439][ T30] audit: type=1400 audit(2151.096:71348): avc: denied { read } for pid=31502 comm="syz.8.6676" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2151.196176][ T30] audit: type=1400 audit(2151.106:71349): avc: denied { open } for pid=31502 comm="syz.8.6676" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2151.282829][ T30] audit: type=1400 audit(2151.166:71350): avc: denied { ioctl } for pid=31481 comm="syz.3.6671" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2151.312850][ T30] audit: type=1400 audit(2151.196:71351): avc: denied { read } for pid=31489 comm="syz.0.6673" dev="nsfs" ino=4026534198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2151.352116][ T30] audit: type=1400 audit(2151.196:71352): avc: denied { open } for pid=31489 comm="syz.0.6673" path="net:[4026534198]" dev="nsfs" ino=4026534198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2151.406662][ T30] audit: type=1400 audit(2151.196:71353): avc: denied { create } for pid=31489 comm="syz.0.6673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2151.447258][T27678] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2151.506000][T27678] usb 4-1: device descriptor read/8, error -71 [ 2151.517543][ T30] audit: type=1400 audit(2151.326:71354): avc: denied { read } for pid=31489 comm="syz.0.6673" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2151.564863][ T30] audit: type=1400 audit(2151.326:71355): avc: denied { open } for pid=31489 comm="syz.0.6673" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2151.617339][ T30] audit: type=1400 audit(2151.356:71356): avc: denied { ioctl } for pid=31481 comm="syz.3.6671" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2151.658028][ T30] audit: type=1400 audit(2151.396:71357): avc: denied { setopt } for pid=31489 comm="syz.0.6673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2151.772694][T27678] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2151.805216][T27678] usb 4-1: device descriptor read/8, error -71 [ 2152.009406][T27678] usb usb4-port1: unable to enumerate USB device [ 2152.220303][T20851] usb 1-1: USB disconnect, device number 84 [ 2152.398713][ T5855] az6027: usb out operation failed. (-71) [ 2152.427874][ T5855] az6027: usb out operation failed. (-71) [ 2152.471507][ T5855] stb0899_attach: Driver disabled by Kconfig [ 2152.486669][ T5855] az6027: no front-end attached [ 2152.486669][ T5855] [ 2152.514397][ T5855] az6027: usb out operation failed. (-71) [ 2152.530121][ T5855] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2152.572111][ T5855] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input75 [ 2152.627763][ T5855] dvb-usb: schedule remote query interval to 400 msecs. [ 2152.783342][ T5855] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2152.905675][ T5855] usb 6-1: USB disconnect, device number 4 [ 2153.547435][ T5855] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2153.812498][T20851] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2153.863857][ T5855] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2154.002777][T20851] usb 1-1: Using ep0 maxpacket: 32 [ 2154.013052][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 2154.019664][T20851] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 2154.031346][ T5855] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2154.049029][T20851] usb 1-1: config 0 has no interface number 0 [ 2154.076286][ T5855] usb 6-1: can't read configurations, error -61 [ 2154.085631][T20851] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2154.097249][T20851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.113045][T20851] usb 1-1: Product: syz [ 2154.118012][T20851] usb 1-1: Manufacturer: syz [ 2154.123923][T20851] usb 1-1: SerialNumber: syz [ 2154.142484][T28244] usb 9-1: new high-speed USB device number 102 using dummy_hcd [ 2154.143428][T20851] usb 1-1: config 0 descriptor?? [ 2154.170302][T20851] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2154.252518][ T5855] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2154.292586][T28244] usb 9-1: Using ep0 maxpacket: 32 [ 2154.299234][T28244] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2154.308485][T28244] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.353898][T28244] usb 9-1: config 0 descriptor?? [ 2154.404546][T20851] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2154.434191][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 2154.440158][T20851] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2154.452473][T19891] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2154.465618][ T5855] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2154.492461][ T5855] usb 6-1: can't read configurations, error -61 [ 2154.512833][ T5855] usb usb6-port1: attempt power cycle [ 2154.562568][T25886] tipc: Resetting bearer [ 2154.696134][T25886] tipc: Disabling bearer [ 2154.762682][T19891] usb 4-1: Using ep0 maxpacket: 8 [ 2154.773691][T19891] usb 4-1: config 11 has an invalid interface number: 95 but max is 0 [ 2154.792622][T19891] usb 4-1: config 11 has no interface number 0 [ 2154.799283][T19891] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2154.853728][T19891] usb 4-1: config 11 interface 95 has no altsetting 0 [ 2154.979785][T19891] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 2155.035227][T31531] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2155.100184][T19891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.147111][T19891] usb 4-1: Product: syz [ 2155.168726][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2155.169737][ T911] usb 1-1: USB disconnect, device number 85 [ 2155.207202][T19891] usb 4-1: Manufacturer: syz [ 2155.249368][T19891] usb 4-1: SerialNumber: syz [ 2155.282019][ T911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2155.304595][ T5855] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2155.334461][ T911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2155.335584][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 2155.353235][T26180] bond0: (slave syz_tun): Releasing backup interface [ 2155.358498][ T911] quatech2 1-1:0.51: device disconnected [ 2155.365239][ T5855] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2155.381137][ T5855] usb 6-1: can't read configurations, error -61 [ 2155.430236][T29847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2155.439319][T29847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2155.451758][T29847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2155.463936][T29847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2155.471732][T29847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2155.534685][ T5855] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2155.555050][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.567365][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 2155.579339][T31544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2155.584325][ T5855] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 2155.588325][T31544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.600737][T31542] wg0 speed is unknown, defaulting to 1000 [ 2155.610640][ T5855] usb 6-1: can't read configurations, error -61 [ 2155.618896][T31542] lo speed is unknown, defaulting to 1000 [ 2155.625772][ T5855] usb usb6-port1: unable to enumerate USB device [ 2155.634673][T31542] lo speed is unknown, defaulting to 1000 [ 2155.690447][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.773068][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.837830][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.909505][T31542] chnl_net:caif_netlink_parms(): no params data found [ 2156.322575][ T30] kauditd_printk_skb: 188 callbacks suppressed [ 2156.322595][ T30] audit: type=1400 audit(2156.266:71546): avc: denied { setopt } for pid=31547 comm="syz.0.6687" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2156.348875][ C1] vkms_vblank_simulate: vblank timer overrun [ 2156.387943][ T30] audit: type=1400 audit(2156.276:71547): avc: denied { read write } for pid=21144 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2156.414937][ T30] audit: type=1400 audit(2156.286:71548): avc: denied { open } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2156.440246][ T30] audit: type=1400 audit(2156.286:71549): avc: denied { ioctl } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2156.465515][ C1] vkms_vblank_simulate: vblank timer overrun [ 2156.476468][ T30] audit: type=1400 audit(2156.336:71550): avc: denied { setopt } for pid=31547 comm="syz.0.6687" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2156.507437][ T30] audit: type=1400 audit(2156.476:71551): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 2156.531350][ T30] audit: type=1400 audit(2156.476:71552): avc: denied { mounton } for pid=31555 comm="syz.5.6688" path="/541/bus" dev="tmpfs" ino=2875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2156.554343][ T30] audit: type=1400 audit(2156.476:71553): avc: denied { search } for pid=5480 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2156.576237][ T30] audit: type=1400 audit(2156.476:71554): avc: denied { search } for pid=5480 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2156.597426][ C1] vkms_vblank_simulate: vblank timer overrun [ 2156.643847][ T30] audit: type=1400 audit(2156.476:71555): avc: denied { search } for pid=5480 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2156.932616][T28244] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 2156.962265][T28244] usb 9-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 2156.979877][T28244] usb 9-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 2157.217666][T19891] usbtouchscreen 4-1:11.95: probe with driver usbtouchscreen failed with error -22 [ 2157.268262][T19891] usb 4-1: USB disconnect, device number 77 [ 2157.276681][T31542] bridge0: port 1(bridge_slave_0) entered blocking state [ 2157.296897][T31542] bridge0: port 1(bridge_slave_0) entered disabled state [ 2157.308571][T31542] bridge_slave_0: entered allmulticast mode [ 2157.321759][ T5855] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2157.344227][T31542] bridge_slave_0: entered promiscuous mode [ 2157.354649][T31542] bridge0: port 2(bridge_slave_1) entered blocking state [ 2157.362225][T31542] bridge0: port 2(bridge_slave_1) entered disabled state [ 2157.379884][T31542] bridge_slave_1: entered allmulticast mode [ 2157.410747][T31542] bridge_slave_1: entered promiscuous mode [ 2157.464226][ T5855] usb 6-1: device descriptor read/64, error -71 [ 2157.558550][ T13] bridge_slave_1: left allmulticast mode [ 2157.572525][ T13] bridge_slave_1: left promiscuous mode [ 2157.572602][ T5824] Bluetooth: hci3: command tx timeout [ 2157.578298][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 2157.743523][ T13] bridge_slave_0: left allmulticast mode [ 2157.749409][ T13] bridge_slave_0: left promiscuous mode [ 2157.755257][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.292733][ T5855] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2158.443718][ T5855] usb 6-1: device descriptor read/64, error -71 [ 2158.567942][ T5855] usb usb6-port1: attempt power cycle [ 2158.922497][ T5855] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2159.033180][ T5855] usb 6-1: device descriptor read/8, error -71 [ 2159.119548][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2159.137895][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2159.156644][ T13] bond0 (unregistering): Released all slaves [ 2159.245745][T20851] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2159.268566][T31542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2159.272521][ T5855] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2159.286621][T31542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2159.317021][ T5855] usb 6-1: device descriptor read/8, error -71 [ 2159.418588][T20851] usb 1-1: Using ep0 maxpacket: 32 [ 2159.437063][T20851] usb 1-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 2159.447921][ T5855] usb usb6-port1: unable to enumerate USB device [ 2159.472788][T20851] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2159.481778][T20851] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2159.537924][ T13] tipc: Left network mode [ 2159.539433][T31542] team0: Port device team_slave_0 added [ 2159.573401][T20851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.592909][T31542] team0: Port device team_slave_1 added [ 2159.612861][ T5824] Bluetooth: hci3: command tx timeout [ 2159.723755][T20851] usb 1-1: config 0 descriptor?? [ 2159.882797][ T5824] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 2159.914890][T31542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2159.982374][T31542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2160.203036][T31542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2160.282921][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.289221][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.449693][T31542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2160.522160][T31542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2160.548132][ C1] vkms_vblank_simulate: vblank timer overrun [ 2161.150522][T31542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2161.348253][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 2161.348268][ T30] audit: type=1400 audit(2161.316:71764): avc: denied { read write } for pid=21144 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2161.383193][ T30] audit: type=1400 audit(2161.356:71765): avc: denied { read write open } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2161.408328][T20851] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2161.449967][ T30] audit: type=1400 audit(2161.356:71766): avc: denied { ioctl } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2161.493833][ T30] audit: type=1400 audit(2161.396:71767): avc: denied { ioctl } for pid=31606 comm="syz.3.6697" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2161.528172][T27678] usb 1-1: USB disconnect, device number 86 [ 2161.538815][ T30] audit: type=1400 audit(2161.406:71768): avc: denied { ioctl } for pid=31606 comm="syz.3.6697" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2161.585670][ T30] audit: type=1400 audit(2161.496:71769): avc: denied { ioctl } for pid=31606 comm="syz.3.6697" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2161.613342][T20851] usb 4-1: Using ep0 maxpacket: 32 [ 2161.629301][T31542] hsr_slave_0: entered promiscuous mode [ 2161.636351][T31542] hsr_slave_1: entered promiscuous mode [ 2161.646562][T31542] debugfs: 'hsr0' already exists in 'hsr' [ 2161.652832][T31542] Cannot create hsr debugfs directory [ 2161.658867][T20851] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2161.667987][T20851] usb 4-1: can't read configurations, error -61 [ 2161.693620][ T5824] Bluetooth: hci3: command tx timeout [ 2161.711461][T31613] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2161.722480][ T30] audit: type=1400 audit(2161.616:71770): avc: denied { ioctl } for pid=31606 comm="syz.3.6697" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2161.747104][ C1] vkms_vblank_simulate: vblank timer overrun [ 2161.768178][T31613] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2161.832208][T20851] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2161.839599][ T30] audit: type=1400 audit(2161.616:71771): avc: denied { ioctl } for pid=31606 comm="syz.3.6697" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2161.864355][ C1] vkms_vblank_simulate: vblank timer overrun [ 2161.892308][ T30] audit: type=1400 audit(2161.656:71772): avc: denied { ioctl } for pid=31606 comm="syz.3.6697" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2161.916892][ C1] vkms_vblank_simulate: vblank timer overrun [ 2161.933497][ T13] hsr_slave_0: left promiscuous mode [ 2161.953101][ T30] audit: type=1400 audit(2161.676:71773): avc: denied { mounton } for pid=31609 comm="syz.5.6698" path="/543/bus" dev="tmpfs" ino=2894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2161.980722][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2162.005104][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2162.024720][T20851] usb 4-1: Using ep0 maxpacket: 32 [ 2162.033918][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2162.041330][T20851] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2162.041365][T20851] usb 4-1: can't read configurations, error -61 [ 2162.059266][T20851] usb usb4-port1: attempt power cycle [ 2162.067859][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2162.091232][ T13] veth1_macvtap: left promiscuous mode [ 2162.097283][ T13] veth0_macvtap: left promiscuous mode [ 2162.103301][ T13] veth1_vlan: left promiscuous mode [ 2162.113054][ T13] veth0_vlan: left promiscuous mode [ 2162.473072][T20851] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2162.514455][T20851] usb 4-1: Using ep0 maxpacket: 32 [ 2162.531570][T20851] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2162.557678][T20851] usb 4-1: can't read configurations, error -61 [ 2162.620862][ T13] pim6reg (unregistering): left allmulticast mode [ 2162.823571][T20851] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2163.343792][T20851] usb 4-1: Using ep0 maxpacket: 32 [ 2163.379681][T20851] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2163.389105][T20851] usb 4-1: can't read configurations, error -61 [ 2163.416429][T20851] usb usb4-port1: unable to enumerate USB device [ 2163.673590][T31642] FAULT_INJECTION: forcing a failure. [ 2163.673590][T31642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2163.687550][T31642] CPU: 0 UID: 0 PID: 31642 Comm: syz.5.6702 Not tainted syzkaller #0 PREEMPT(full) [ 2163.687574][T31642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2163.687585][T31642] Call Trace: [ 2163.687592][T31642] [ 2163.687599][T31642] dump_stack_lvl+0x16c/0x1f0 [ 2163.687629][T31642] should_fail_ex+0x512/0x640 [ 2163.687657][T31642] _copy_from_user+0x2e/0xd0 [ 2163.687674][T31642] move_addr_to_kernel+0x65/0x170 [ 2163.687696][T31642] __copy_msghdr+0x386/0x470 [ 2163.687728][T31642] copy_msghdr_from_user+0xc1/0x160 [ 2163.687753][T31642] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2163.687791][T31642] ___sys_sendmsg+0xfe/0x1d0 [ 2163.687818][T31642] ? __pfx____sys_sendmsg+0x10/0x10 [ 2163.687856][T31642] ? find_held_lock+0x2b/0x80 [ 2163.687895][T31642] __sys_sendmmsg+0x200/0x420 [ 2163.687923][T31642] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2163.687956][T31642] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2163.687983][T31642] ? fput+0x9b/0xd0 [ 2163.688004][T31642] ? ksys_write+0x1ac/0x250 [ 2163.688018][T31642] ? __pfx_ksys_write+0x10/0x10 [ 2163.688037][T31642] __x64_sys_sendmmsg+0x9c/0x100 [ 2163.688062][T31642] ? lockdep_hardirqs_on+0x7c/0x110 [ 2163.688087][T31642] do_syscall_64+0xcd/0xfa0 [ 2163.688116][T31642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.688133][T31642] RIP: 0033:0x7f87e378eec9 [ 2163.688148][T31642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2163.688165][T31642] RSP: 002b:00007f87e19d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2163.688183][T31642] RAX: ffffffffffffffda RBX: 00007f87e39e6180 RCX: 00007f87e378eec9 [ 2163.688195][T31642] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000007 [ 2163.688206][T31642] RBP: 00007f87e19d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2163.688216][T31642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2163.688226][T31642] R13: 00007f87e39e6218 R14: 00007f87e39e6180 R15: 00007fff86ffb9e8 [ 2163.688253][T31642] [ 2163.913287][ T5824] Bluetooth: hci3: command tx timeout [ 2164.852488][T20851] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2164.992790][T20851] usb 4-1: device descriptor read/64, error -71 [ 2165.232489][T20851] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2165.388406][T20851] usb 4-1: device descriptor read/64, error -71 [ 2165.506130][T20851] usb usb4-port1: attempt power cycle [ 2165.853307][T20851] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2166.066440][T20851] usb 4-1: device descriptor read/8, error -71 [ 2166.232821][T31666] siw: device registration error -23 [ 2166.414155][T20851] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2166.423509][ T30] kauditd_printk_skb: 287 callbacks suppressed [ 2166.423520][ T30] audit: type=1400 audit(2166.396:72061): avc: denied { ioctl } for pid=31665 comm="syz.0.6708" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2166.528430][ T30] audit: type=1400 audit(2166.426:72062): avc: denied { search } for pid=31667 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2166.551069][ T30] audit: type=1400 audit(2166.426:72063): avc: denied { search } for pid=31667 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2166.576679][ T30] audit: type=1400 audit(2166.426:72064): avc: denied { search } for pid=31667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2166.578661][T20851] usb 4-1: device descriptor read/8, error -71 [ 2166.600411][ T911] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 2166.642518][ T30] audit: type=1400 audit(2166.486:72065): avc: denied { search } for pid=31667 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2166.701843][ T30] audit: type=1400 audit(2166.486:72066): avc: denied { search } for pid=31667 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2166.769744][ T911] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2166.770451][T20851] usb usb4-port1: unable to enumerate USB device [ 2166.777476][ T911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2166.785295][ T30] audit: type=1400 audit(2166.486:72067): avc: denied { search } for pid=31667 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2166.871470][ T911] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 2166.891438][ T30] audit: type=1400 audit(2166.486:72068): avc: denied { search } for pid=31667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2166.906746][ T911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 10593, setting to 8 [ 2166.941480][ T911] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2166.950717][ T911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2166.973556][ T911] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 2166.986359][ T911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 10593, setting to 8 [ 2167.002751][ T30] audit: type=1400 audit(2166.486:72069): avc: denied { read open } for pid=31667 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2167.009294][ T911] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2167.074249][ T30] audit: type=1400 audit(2166.486:72070): avc: denied { getattr } for pid=31667 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2167.100003][ T911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2167.120117][ T911] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 2167.186305][ T911] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 10593, setting to 8 [ 2167.216025][ T911] usb 1-1: string descriptor 0 read error: -22 [ 2167.222737][ T911] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2167.236253][ T911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2167.267780][ T911] adutux 1-1:168.0: interrupt endpoints not found [ 2167.305940][T31542] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2167.626590][ T911] usb 1-1: USB disconnect, device number 87 [ 2167.650369][T31542] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2167.715192][T31542] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2167.756243][T31542] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2169.202084][T31542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2169.246406][T31542] 8021q: adding VLAN 0 to HW filter on device team0 [ 2169.276742][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 2169.283932][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2169.291602][T27678] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2169.325707][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 2169.332856][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2169.452964][T27678] usb 1-1: Using ep0 maxpacket: 32 [ 2169.461001][T27678] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2169.475488][T27678] usb 1-1: can't read configurations, error -61 [ 2169.622658][T27678] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2169.880732][T31712] pim6reg: entered allmulticast mode [ 2170.003526][T27678] usb 1-1: Using ep0 maxpacket: 32 [ 2170.021845][T27678] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2170.029625][T27678] usb 1-1: can't read configurations, error -61 [ 2170.038506][T27678] usb usb1-port1: attempt power cycle [ 2170.413809][T27678] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2170.482946][T27678] usb 1-1: Using ep0 maxpacket: 32 [ 2170.516544][T27678] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2170.524367][T27678] usb 1-1: can't read configurations, error -61 [ 2170.562255][T31542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2170.672480][T27678] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2170.724011][T27678] usb 1-1: Using ep0 maxpacket: 32 [ 2170.731063][T27678] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2170.777707][T27678] usb 1-1: can't read configurations, error -61 [ 2170.917531][T27678] usb usb1-port1: unable to enumerate USB device [ 2170.934230][T31542] veth0_vlan: entered promiscuous mode [ 2170.951337][T31542] veth1_vlan: entered promiscuous mode [ 2171.061901][T31542] veth0_macvtap: entered promiscuous mode [ 2171.169125][T31542] veth1_macvtap: entered promiscuous mode [ 2171.273601][T31542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2171.302198][T31542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2171.415691][ T3025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.440704][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.460747][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.472914][ T30] kauditd_printk_skb: 312 callbacks suppressed [ 2171.472930][ T30] audit: type=1400 audit(2171.436:72383): avc: denied { search } for pid=31739 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2171.487324][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2171.921223][ T30] audit: type=1400 audit(2171.436:72384): avc: denied { search } for pid=31739 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2171.944232][ T30] audit: type=1400 audit(2171.436:72385): avc: denied { search } for pid=31739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2172.035100][T31742] bridge0: port 2(bridge_slave_1) entered disabled state [ 2172.040391][ T30] audit: type=1400 audit(2171.436:72386): avc: denied { search } for pid=31739 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2172.042457][T31742] bridge0: port 1(bridge_slave_0) entered disabled state [ 2172.289638][ T30] audit: type=1400 audit(2171.506:72387): avc: denied { create } for pid=31736 comm="syz.3.6717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2172.492337][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2172.502463][ T30] audit: type=1400 audit(2171.516:72388): avc: denied { setopt } for pid=31736 comm="syz.3.6717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2172.613611][T10692] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2172.623691][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2172.813272][ T30] audit: type=1400 audit(2171.516:72389): avc: denied { read } for pid=31736 comm="syz.3.6717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2172.896452][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2172.919137][T21144] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2172.924589][T31751] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2172.932150][T31751] audit: audit_lost=598 audit_rate_limit=0 audit_backlog_limit=64 [ 2172.958706][T10692] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2172.998589][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2173.043200][T10692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.160466][T10692] usb 1-1: Product: syz [ 2173.208335][T10692] usb 1-1: Manufacturer: syz [ 2173.274823][T10692] usb 1-1: SerialNumber: syz [ 2173.348428][T10692] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2173.533199][T31554] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2174.605608][T11547] usb 1-1: USB disconnect, device number 92 [ 2174.634871][T31554] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2174.642153][T31554] ath9k_htc: Failed to initialize the device [ 2174.836497][T11547] usb 1-1: ath9k_htc: USB layer deinitialized [ 2175.289417][T31780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6724'. [ 2175.313001][T31780] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2175.909625][T31790] fuse: Bad value for 'rootmode' [ 2176.497718][ T30] kauditd_printk_skb: 345 callbacks suppressed [ 2176.497733][ T30] audit: type=1400 audit(2176.466:72717): avc: denied { search } for pid=31809 comm="sed" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2176.530731][ T30] audit: type=1400 audit(2176.466:72718): avc: denied { read } for pid=31809 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2176.559893][ T30] audit: type=1400 audit(2176.466:72719): avc: denied { read open } for pid=31809 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2176.592747][T31554] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2176.593760][ T30] audit: type=1400 audit(2176.466:72720): avc: denied { getattr } for pid=31809 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2176.626546][ T30] audit: type=1400 audit(2176.496:72721): avc: denied { ioctl } for pid=31789 comm="syz.0.6726" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2176.682770][T11547] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2176.690587][ T30] audit: type=1400 audit(2176.556:72722): avc: denied { search } for pid=31812 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2176.736918][ T30] audit: type=1400 audit(2176.556:72723): avc: denied { search } for pid=31812 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2176.794587][T31554] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2176.821572][ T30] audit: type=1400 audit(2176.556:72724): avc: denied { search } for pid=31812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2176.823796][T31554] usb 1-1: config 160 has an invalid interface number: 186 but max is 0 [ 2176.896459][T11547] usb 4-1: Using ep0 maxpacket: 32 [ 2176.910835][T11547] usb 4-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 2176.932943][T11547] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2176.945444][T11547] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2176.984999][T11547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.045478][T11547] usb 4-1: config 0 descriptor?? [ 2177.053048][T31554] usb 1-1: config 160 has no interface number 0 [ 2177.062507][T31554] usb 1-1: config 160 interface 186 has no altsetting 0 [ 2177.070217][ T30] audit: type=1400 audit(2176.556:72725): avc: denied { search } for pid=31812 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2177.093669][ T30] audit: type=1400 audit(2176.596:72726): avc: denied { ioctl } for pid=31804 comm="syz.3.6729" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2177.941501][T31554] usb 1-1: New USB device found, idVendor=12d1, idProduct=ce42, bcdDevice= f.80 [ 2177.962700][T31554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.971826][T31554] usb 1-1: Product: syz [ 2177.989737][T31554] usb 1-1: Manufacturer: syz [ 2177.995506][T31554] usb 1-1: SerialNumber: syz [ 2178.620416][T31554] qmi_wwan 1-1:160.186: bogus CDC Union: master=0, slave=0 [ 2179.036763][T31554] qmi_wwan 1-1:160.186: probe with driver qmi_wwan failed with error -22 [ 2179.077523][T31554] usb 1-1: USB disconnect, device number 93 [ 2179.588528][T31849] siw: device registration error -23 [ 2180.312877][T11547] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 2180.324144][T31857] siw: device registration error -23 [ 2180.426217][T19891] usb 4-1: USB disconnect, device number 86 [ 2180.475076][T11547] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2180.498217][T11547] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2180.524092][T11547] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 2180.548974][T11547] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 10593, setting to 8 [ 2180.569806][T11547] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2180.578368][T11547] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2180.596094][T11547] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 2180.608104][ T5855] usb 1-1: new low-speed USB device number 94 using dummy_hcd [ 2180.618686][T11547] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 10593, setting to 8 [ 2180.632168][T11547] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2180.640080][T11547] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2180.652014][T11547] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 2180.664287][T11547] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 10593, setting to 8 [ 2180.681055][T11547] usb 6-1: string descriptor 0 read error: -22 [ 2180.689118][T11547] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2180.699716][T11547] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.726199][T11547] adutux 6-1:168.0: interrupt endpoints not found [ 2180.774608][ T5855] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2180.782122][ T5855] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2180.793963][ T5855] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 2180.822728][ T5855] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 10593, setting to 8 [ 2180.840203][ T5855] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2180.851487][ T5855] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2180.865405][ T5855] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 2180.882974][ T5855] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 10593, setting to 8 [ 2180.904986][ T5855] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2180.928868][ T5855] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2180.956450][T19891] usb 6-1: USB disconnect, device number 13 [ 2180.962760][ T5855] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xDD, changing to 0x8D [ 2181.010135][ T5855] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 10593, setting to 8 [ 2181.115056][ T5855] usb 1-1: string descriptor 0 read error: -22 [ 2181.129970][ T5855] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2181.154319][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.168517][ T5855] adutux 1-1:168.0: interrupt endpoints not found [ 2181.731674][ T30] kauditd_printk_skb: 310 callbacks suppressed [ 2181.731688][ T30] audit: type=1400 audit(2181.576:73037): avc: denied { ioctl } for pid=31866 comm="syz.2.6740" path="socket:[130648]" dev="sockfs" ino=130648 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2181.775680][ T30] audit: type=1400 audit(2181.746:73038): avc: denied { ioctl } for pid=31866 comm="syz.2.6740" path="/5/file0" dev="tmpfs" ino=47 ioctlcmd=0x1274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2181.856677][ T30] audit: type=1400 audit(2181.826:73039): avc: denied { read write } for pid=21144 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2181.874229][ T5855] usb 1-1: USB disconnect, device number 94 [ 2181.929111][ T30] audit: type=1400 audit(2181.826:73040): avc: denied { open } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2181.952956][ C1] vkms_vblank_simulate: vblank timer overrun [ 2182.021668][ T30] audit: type=1400 audit(2181.826:73041): avc: denied { ioctl } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2182.048896][ T30] audit: type=1400 audit(2181.826:73042): avc: denied { bind } for pid=31855 comm="syz.0.6737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2182.086346][ T30] audit: type=1400 audit(2181.986:73043): avc: denied { write } for pid=31873 comm="syz.5.6741" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2182.204498][T31875] SQUASHFS error: Failed to read block 0x0: -5 [ 2182.211361][T31875] unable to read squashfs_super_block [ 2182.275978][T31875] fuse: Unknown parameter 'group_id00000000000000000000' [ 2182.332765][ T30] audit: type=1400 audit(2182.016:73044): avc: denied { write open } for pid=31873 comm="syz.5.6741" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2182.453742][ T30] audit: type=1400 audit(2182.016:73045): avc: denied { ioctl } for pid=31873 comm="syz.5.6741" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2182.551949][ T30] audit: type=1400 audit(2182.086:73046): avc: denied { read write } for pid=31873 comm="syz.5.6741" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2182.873409][T10692] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2183.452540][T10692] usb 4-1: Using ep0 maxpacket: 32 [ 2183.459529][T10692] usb 4-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 2183.472609][T10692] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2183.506680][T10692] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2183.516577][T10692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2183.545826][T10692] usb 4-1: config 0 descriptor?? [ 2183.610735][T31892] usb usb8: usbfs: process 31892 (syz.5.6745) did not claim interface 0 before use [ 2184.794291][T31902] usb usb8: usbfs: process 31902 (syz.8.6746) did not claim interface 0 before use [ 2185.862648][T10692] usb 4-1: USB disconnect, device number 87 [ 2186.081878][T31909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6750'. [ 2186.153332][T31909] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2186.735071][ T30] kauditd_printk_skb: 137 callbacks suppressed [ 2186.735087][ T30] audit: type=1400 audit(2186.706:73184): avc: denied { prog_load } for pid=31913 comm="syz.5.6752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2186.963058][ T30] audit: type=1400 audit(2186.706:73185): avc: denied { bpf } for pid=31913 comm="syz.5.6752" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2186.987527][ T30] audit: type=1400 audit(2186.706:73186): avc: denied { unmount } for pid=31542 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 2187.073776][ T30] audit: type=1400 audit(2186.736:73187): avc: denied { create } for pid=31913 comm="syz.5.6752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2187.137783][ T30] audit: type=1400 audit(2186.736:73188): avc: denied { create } for pid=31913 comm="syz.5.6752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2187.173225][ T30] audit: type=1400 audit(2186.736:73189): avc: denied { write } for pid=31913 comm="syz.5.6752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2187.324794][ T30] audit: type=1400 audit(2186.736:73190): avc: denied { read } for pid=31913 comm="syz.5.6752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2187.437668][T31921] blktrace: Concurrent blktraces are not allowed on loop4 [ 2187.819637][ T30] audit: type=1400 audit(2186.736:73191): avc: denied { ioctl } for pid=31913 comm="syz.5.6752" path="socket:[130780]" dev="sockfs" ino=130780 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2187.847194][ T30] audit: type=1400 audit(2186.736:73192): avc: denied { ioctl } for pid=31913 comm="syz.5.6752" path="socket:[130779]" dev="sockfs" ino=130779 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2187.930080][ T30] audit: type=1400 audit(2186.736:73193): avc: denied { create } for pid=31913 comm="syz.5.6752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2190.312709][T31946] pim6reg: entered allmulticast mode [ 2190.802464][ T5855] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2190.962465][ T5855] usb 6-1: Using ep0 maxpacket: 32 [ 2190.969276][ T5855] usb 6-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 2190.980643][ T5855] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2190.989789][ T5855] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2190.998911][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.010424][ T5855] usb 6-1: config 0 descriptor?? [ 2191.641562][ T5855] usb 6-1: USB disconnect, device number 14 [ 2192.192276][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 2192.192293][ T30] audit: type=1400 audit(2192.156:73298): avc: denied { read write } for pid=21144 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2192.224726][ T30] audit: type=1400 audit(2192.156:73299): avc: denied { open } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2192.250890][ T30] audit: type=1400 audit(2192.156:73300): avc: denied { ioctl } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2192.286703][ T30] audit: type=1400 audit(2192.256:73301): avc: denied { read } for pid=31952 comm="syz.5.6762" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2192.310526][ T30] audit: type=1400 audit(2192.256:73302): avc: denied { read open } for pid=31952 comm="syz.5.6762" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2192.334432][ T30] audit: type=1400 audit(2192.276:73303): avc: denied { ioctl } for pid=31952 comm="syz.5.6762" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2192.363934][ T30] audit: type=1400 audit(2192.276:73304): avc: denied { prog_load } for pid=31952 comm="syz.5.6762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2192.478065][ T30] audit: type=1400 audit(2192.276:73305): avc: denied { bpf } for pid=31952 comm="syz.5.6762" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2192.500764][ T30] audit: type=1400 audit(2192.276:73306): avc: denied { perfmon } for pid=31952 comm="syz.5.6762" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2192.521790][ T30] audit: type=1400 audit(2192.276:73307): avc: denied { prog_run } for pid=31952 comm="syz.5.6762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2193.271539][T31963] overlayfs: failed to resolve './file1': -2 [ 2193.484236][T10692] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2193.573414][T31970] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.580771][T31970] bridge0: port 1(bridge_slave_0) entered disabled state [ 2193.643618][T10692] usb 6-1: Using ep0 maxpacket: 8 [ 2193.671274][T10692] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.682359][T10692] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2193.704192][T10692] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2193.721422][T10692] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2193.734398][T10692] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2193.747073][T10692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.841338][T10692] hub 6-1:1.0: bad descriptor, ignoring hub [ 2193.868025][T10692] hub 6-1:1.0: probe with driver hub failed with error -5 [ 2193.897685][T10692] cdc_wdm 6-1:1.0: skipping garbage [ 2193.907925][T10692] cdc_wdm 6-1:1.0: skipping garbage [ 2193.952312][T10692] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2193.958857][T10692] cdc_wdm 6-1:1.0: Unknown control protocol [ 2194.163122][ T5855] usb 6-1: USB disconnect, device number 15 [ 2194.193257][T31977] 9pnet_virtio: no channels available for device [ 2194.722520][T31554] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2194.852562][T31554] usb 3-1: device descriptor read/64, error -71 [ 2195.102537][T31554] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2195.232571][T31554] usb 3-1: device descriptor read/64, error -71 [ 2195.352803][T31554] usb usb3-port1: attempt power cycle [ 2195.692540][T31554] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2195.712849][T31554] usb 3-1: device descriptor read/8, error -71 [ 2195.952505][T31554] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2195.973065][T31554] usb 3-1: device descriptor read/8, error -71 [ 2196.083741][T31554] usb usb3-port1: unable to enumerate USB device [ 2197.207349][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 2197.207365][ T30] audit: type=1400 audit(2197.176:73422): avc: denied { read write } for pid=21144 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2197.248250][ T30] audit: type=1400 audit(2197.176:73423): avc: denied { open } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2197.274424][ T30] audit: type=1400 audit(2197.176:73424): avc: denied { ioctl } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2197.339597][ T30] audit: type=1400 audit(2197.256:73425): avc: denied { read } for pid=31993 comm="syz.5.6776" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2197.394175][T31994] netlink: 'syz.5.6776': attribute type 6 has an invalid length. [ 2197.423747][ T30] audit: type=1400 audit(2197.256:73426): avc: denied { open } for pid=31993 comm="syz.5.6776" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2197.450156][ T30] audit: type=1400 audit(2197.376:73427): avc: denied { read write } for pid=21270 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2197.477455][ T30] audit: type=1400 audit(2197.376:73428): avc: denied { open } for pid=21270 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2197.503209][ T30] audit: type=1400 audit(2197.376:73429): avc: denied { ioctl } for pid=21270 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2197.529525][ T30] audit: type=1400 audit(2197.396:73430): avc: denied { read write } for pid=21144 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2197.554916][ T30] audit: type=1400 audit(2197.396:73431): avc: denied { open } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2198.047816][T31996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2198.055278][T32013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=32013 comm=syz.2.6782 [ 2198.100196][T31996] autofs: Bad value for 'fd' [ 2198.811010][ T5855] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2198.982487][ T5855] usb 4-1: Using ep0 maxpacket: 8 [ 2199.152959][ T5855] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2199.194370][ T5855] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2199.215401][ T5855] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2199.335425][ T5855] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2199.864522][ T5855] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2199.873947][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.896053][ T5855] hub 4-1:1.0: bad descriptor, ignoring hub [ 2199.923872][ T5855] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2199.952142][ T5855] cdc_wdm 4-1:1.0: skipping garbage [ 2199.968956][ T5855] cdc_wdm 4-1:1.0: skipping garbage [ 2199.981857][ T5855] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2200.082443][ T5855] cdc_wdm 4-1:1.0: Unknown control protocol [ 2200.106013][ C0] wdm_int_callback: 8 callbacks suppressed [ 2200.106032][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2200.118651][ C0] wdm_int_callback: 8 callbacks suppressed [ 2200.118666][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2200.131239][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2200.137818][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2200.144035][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2200.150616][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2200.157087][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2200.163673][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2200.169898][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 2200.176490][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 2200.190380][ T5855] usb 4-1: Failed to suspend device, error -71 [ 2200.204412][ T5855] usb 4-1: USB disconnect, device number 88 [ 2202.699636][ T30] kauditd_printk_skb: 213 callbacks suppressed [ 2202.699670][ T30] audit: type=1400 audit(2202.316:73645): avc: denied { create } for pid=32047 comm="syz.8.6792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2203.157751][ T30] audit: type=1400 audit(2202.326:73646): avc: denied { ioctl } for pid=32047 comm="syz.8.6792" path="socket:[131757]" dev="sockfs" ino=131757 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2203.223735][ T30] audit: type=1400 audit(2202.746:73647): avc: denied { read write } for pid=28405 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2203.248834][ T30] audit: type=1400 audit(2202.746:73648): avc: denied { open } for pid=28405 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2203.272736][ C0] vkms_vblank_simulate: vblank timer overrun [ 2203.279666][ T30] audit: type=1400 audit(2202.766:73649): avc: denied { ioctl } for pid=28405 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3919 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2203.310490][ T30] audit: type=1400 audit(2203.066:73650): avc: denied { read write } for pid=29215 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2203.335049][ T30] audit: type=1400 audit(2203.066:73651): avc: denied { read write open } for pid=29215 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2203.359761][ C0] vkms_vblank_simulate: vblank timer overrun [ 2203.636482][T32061] pim6reg: entered allmulticast mode [ 2204.098422][ T30] audit: type=1400 audit(2203.066:73652): avc: denied { ioctl } for pid=29215 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2204.608587][ T30] audit: type=1400 audit(2203.276:73653): avc: denied { create } for pid=32055 comm="syz.8.6795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2204.628190][ T30] audit: type=1400 audit(2203.276:73654): avc: denied { create } for pid=32054 comm="syz.0.6794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2204.918615][T32071] fuse: Bad value for 'rootmode' [ 2205.312461][T19891] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2205.504619][T19891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2205.513525][T19891] usb 4-1: config 160 has an invalid interface number: 186 but max is 0 [ 2205.572774][T19891] usb 4-1: config 160 has no interface number 0 [ 2205.582208][T19891] usb 4-1: config 160 interface 186 has no altsetting 0 [ 2205.599319][T19891] usb 4-1: New USB device found, idVendor=12d1, idProduct=ce42, bcdDevice= f.80 [ 2205.610990][T19891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2205.624326][T19891] usb 4-1: Product: syz [ 2205.631929][T19891] usb 4-1: Manufacturer: syz [ 2205.641784][T19891] usb 4-1: SerialNumber: syz [ 2205.937921][T19891] qmi_wwan 4-1:160.186: bogus CDC Union: master=0, slave=0 [ 2206.139316][T19891] qmi_wwan 4-1:160.186: probe with driver qmi_wwan failed with error -22 [ 2206.153718][T19891] usb 4-1: USB disconnect, device number 89 [ 2206.212301][T32078] wg0 speed is unknown, defaulting to 1000 [ 2206.220372][T32078] lo speed is unknown, defaulting to 1000 [ 2207.052538][T11547] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2207.289644][T32096] blktrace: Concurrent blktraces are not allowed on loop10 [ 2207.612731][T11547] usb 1-1: Using ep0 maxpacket: 8 [ 2207.619425][T11547] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2207.629655][T11547] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2207.638544][T11547] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2207.650133][T11547] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2207.661425][T11547] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2207.670809][T11547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2207.687120][T11547] hub 1-1:1.0: bad descriptor, ignoring hub [ 2207.702822][T11547] hub 1-1:1.0: probe with driver hub failed with error -5 [ 2207.710387][T11547] cdc_wdm 1-1:1.0: skipping garbage [ 2207.727142][T11547] cdc_wdm 1-1:1.0: skipping garbage [ 2207.735525][T11547] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2207.741514][T11547] cdc_wdm 1-1:1.0: Unknown control protocol [ 2207.802107][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 2207.802122][ T30] audit: type=1400 audit(2207.766:73794): avc: denied { create } for pid=32097 comm="syz.3.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2207.945789][ T30] audit: type=1400 audit(2207.896:73795): avc: denied { read write } for pid=32086 comm="syz.0.6803" name="cdc-wdm0" dev="devtmpfs" ino=5658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 2207.982910][ T30] audit: type=1400 audit(2207.896:73796): avc: denied { open } for pid=32086 comm="syz.0.6803" path="/dev/cdc-wdm0" dev="devtmpfs" ino=5658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 2208.023644][T32104] fuse: Bad value for 'rootmode' [ 2208.035405][ T30] audit: type=1400 audit(2207.906:73797): avc: denied { unlink } for pid=21144 comm="syz-executor" name="file0" dev="tmpfs" ino=3074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2208.062657][ T30] audit: type=1400 audit(2207.906:73798): avc: denied { read write } for pid=21144 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2208.093322][ T30] audit: type=1400 audit(2207.906:73799): avc: denied { open } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2208.213531][ T30] audit: type=1400 audit(2207.906:73800): avc: denied { ioctl } for pid=21144 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2208.241829][ T30] audit: type=1400 audit(2207.946:73801): avc: denied { create } for pid=32097 comm="syz.3.6806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2208.287550][ T30] audit: type=1400 audit(2207.986:73802): avc: denied { read write } for pid=32103 comm="syz.5.6807" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2208.426449][ T30] audit: type=1400 audit(2207.986:73803): avc: denied { open } for pid=32103 comm="syz.5.6807" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2208.568351][ T5855] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2208.734225][ T5855] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2208.745748][ T5855] usb 6-1: config 160 has an invalid interface number: 186 but max is 0 [ 2208.754722][ T5855] usb 6-1: config 160 has no interface number 0 [ 2208.761430][ T5855] usb 6-1: config 160 interface 186 has no altsetting 0 [ 2208.770809][ T5855] usb 6-1: New USB device found, idVendor=12d1, idProduct=ce42, bcdDevice= f.80 [ 2208.780133][ T5855] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.788661][ T5855] usb 6-1: Product: syz [ 2208.793734][ T5855] usb 6-1: Manufacturer: syz [ 2208.798544][ T5855] usb 6-1: SerialNumber: syz [ 2209.049301][ T5855] qmi_wwan 6-1:160.186: bogus CDC Union: master=0, slave=0 [ 2209.249886][ T5855] qmi_wwan 6-1:160.186: probe with driver qmi_wwan failed with error -22 [ 2209.267585][ T5855] usb 6-1: USB disconnect, device number 16 [ 2209.662488][T19891] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2209.832637][T19891] usb 3-1: Using ep0 maxpacket: 8 [ 2209.847397][T19891] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2209.867164][T19891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2209.887233][T19891] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2209.902230][T19891] pvrusb2: ********** [ 2209.910470][T19891] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2209.935333][T19891] pvrusb2: Important functionality might not be entirely working. [ 2209.953588][T19891] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2209.979530][T19891] pvrusb2: ********** [ 2210.143449][ T2340] pvrusb2: Invalid write control endpoint [ 2210.699417][T32108] pvrusb2: Invalid write control endpoint [ 2210.713280][ T2340] pvrusb2: Invalid write control endpoint [ 2210.721370][T27678] usb 3-1: USB disconnect, device number 71 [ 2210.739298][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2210.759226][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2210.767227][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2210.780313][ T2340] pvrusb2: Device being rendered inoperable [ 2210.790529][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2210.799121][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 2210.815734][ T2340] pvrusb2: Attached sub-driver cx25840 [ 2210.823819][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2210.883632][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2211.512493][T19891] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 2211.757857][T19891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2211.772064][T19891] usb 4-1: not running at top speed; connect to a high speed hub [ 2211.787207][T19891] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2212.669643][T19891] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2212.679021][T11547] usb 1-1: USB disconnect, device number 95 [ 2212.679579][T19891] usb 4-1: config 1 has no interface number 1 [ 2212.685571][T27678] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 2212.692583][T19891] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2212.699779][T32088] cdc_wdm 1-1:1.0: Error autopm - -16 [ 2212.712607][T19891] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 2212.729845][T19891] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 65532, setting to 1023 [ 2212.797393][T19891] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2212.807144][T19891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.845444][T19891] usb 4-1: Product: syz [ 2212.850549][ T30] kauditd_printk_skb: 158 callbacks suppressed [ 2212.850564][ T30] audit: type=1400 audit(2212.816:73962): avc: denied { ioctl } for pid=32133 comm="syz.2.6816" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2212.932034][T19891] usb 4-1: Manufacturer: syz [ 2212.938194][T19891] usb 4-1: SerialNumber: syz [ 2212.960277][ T30] audit: type=1400 audit(2212.886:73963): avc: denied { ioctl } for pid=32133 comm="syz.2.6816" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2213.000271][ T30] audit: type=1400 audit(2212.886:73964): avc: denied { read write } for pid=28405 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2213.027961][T32142] input: syz1 as /devices/virtual/input/input77 [ 2213.030257][ T30] audit: type=1400 audit(2212.886:73965): avc: denied { read write open } for pid=28405 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2213.070137][T27678] usb 3-1: config index 0 descriptor too short (expected 19492, got 36) [ 2213.082652][T27678] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 2213.193528][ T30] audit: type=1400 audit(2212.886:73966): avc: denied { ioctl } for pid=28405 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3919 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2213.220174][ T30] audit: type=1400 audit(2212.896:73967): avc: denied { read write } for pid=32131 comm="syz.8.6817" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2213.252108][T27678] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.267311][T19891] hub 4-1:1.0: Invalid hub with more than one config or interface [ 2213.281188][T27678] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 2213.420663][T19891] hub 4-1:1.0: probe with driver hub failed with error -22 [ 2213.429564][ T30] audit: type=1400 audit(2212.896:73968): avc: denied { read write open } for pid=32131 comm="syz.8.6817" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2213.454401][ T30] audit: type=1400 audit(2212.896:73969): avc: denied { ioctl } for pid=32131 comm="syz.8.6817" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2213.479153][ T30] audit: type=1400 audit(2212.926:73970): avc: denied { ioctl } for pid=32118 comm="syz.3.6812" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2213.504609][T19891] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 2213.558262][ T30] audit: type=1400 audit(2212.956:73971): avc: denied { read write } for pid=32140 comm="syz.0.6819" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2213.675351][T27678] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2213.697792][T27678] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 2213.732072][T27678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2213.749242][T19891] usb 4-1: USB disconnect, device number 90 [ 2213.754242][T27678] usb 3-1: config 0 descriptor?? [ 2213.769654][T27678] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2213.887884][T24991] udevd[24991]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2214.235208][T10692] usb 3-1: USB disconnect, device number 72 [ 2216.406995][T32167] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6823'. [ 2216.778734][T32117] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2216.945442][T32117] usb 6-1: Using ep0 maxpacket: 8 [ 2217.194302][T32117] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2217.225683][T32117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.247537][T32117] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2217.386066][T32117] pvrusb2: ********** [ 2217.464630][T32117] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2217.523024][T32117] pvrusb2: Important functionality might not be entirely working. [ 2217.548539][T32117] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2217.579335][T32117] pvrusb2: ********** [ 2217.595389][ T2340] pvrusb2: Invalid write control endpoint [ 2217.827222][T32171] pvrusb2: Invalid write control endpoint [ 2217.915745][T32117] usb 6-1: USB disconnect, device number 17 [ 2218.007430][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 2218.007447][ T30] audit: type=1400 audit(2217.946:74140): avc: denied { create } for pid=32186 comm="syz.8.6829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2218.326210][ T2340] pvrusb2: Invalid write control endpoint [ 2218.333656][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2218.375560][ T30] audit: type=1400 audit(2217.956:74141): avc: denied { setopt } for pid=32186 comm="syz.8.6829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2218.405512][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2218.458245][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2218.481197][ T30] audit: type=1400 audit(2217.956:74142): avc: denied { read } for pid=32186 comm="syz.8.6829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2218.501278][ T2340] pvrusb2: Device being rendered inoperable [ 2218.509426][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2218.521207][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 2218.533775][ T2340] pvrusb2: Attached sub-driver cx25840 [ 2218.540737][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2218.552121][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2218.561621][ T30] audit: type=1400 audit(2217.976:74143): avc: denied { create } for pid=32186 comm="syz.8.6829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2218.697921][ T30] audit: type=1400 audit(2217.976:74144): avc: denied { ioctl } for pid=32186 comm="syz.8.6829" path="socket:[132016]" dev="sockfs" ino=132016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2218.776822][ T30] audit: type=1400 audit(2217.976:74145): avc: denied { module_request } for pid=32186 comm="syz.8.6829" kmod="netdev-bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2218.798496][ C1] vkms_vblank_simulate: vblank timer overrun [ 2218.805915][ T30] audit: type=1400 audit(2218.366:74146): avc: denied { read write } for pid=28405 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2218.829846][ C1] vkms_vblank_simulate: vblank timer overrun [ 2218.986313][T32196] bridge0: port 2(bridge_slave_1) entered disabled state [ 2218.993643][T32196] bridge0: port 1(bridge_slave_0) entered disabled state [ 2219.296511][ T30] audit: type=1400 audit(2218.366:74147): avc: denied { read write open } for pid=28405 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2219.321622][ T30] audit: type=1400 audit(2218.366:74148): avc: denied { ioctl } for pid=28405 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3919 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2219.346963][ C1] vkms_vblank_simulate: vblank timer overrun [ 2219.353542][ T30] audit: type=1400 audit(2218.576:74149): avc: denied { execmem } for pid=32192 comm="syz.0.6830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2219.743883][T32206] overlayfs: missing 'lowerdir' [ 2220.972492][T19891] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 2221.198634][T19891] usb 3-1: config index 0 descriptor too short (expected 19492, got 36) [ 2221.209217][T19891] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 2221.220520][T19891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2221.231801][T19891] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 2221.242270][T19891] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2221.258336][T19891] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 2221.272294][T19891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.310041][T19891] usb 3-1: config 0 descriptor?? [ 2221.341141][T19891] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2221.482519][T32117] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2221.699880][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.701033][T28244] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2221.706306][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.874548][T11547] usb 3-1: USB disconnect, device number 73 [ 2221.917690][T32117] usb 1-1: Using ep0 maxpacket: 32 [ 2221.927421][T32117] usb 1-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 2221.948599][T32117] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2221.957923][T32117] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2221.967322][T32117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.976897][T28244] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 2221.986779][T32117] usb 1-1: config 0 descriptor?? [ 2222.043310][T28244] usb 9-1: USB disconnect, device number 102 [ 2222.422908][T28244] usb 9-1: new high-speed USB device number 103 using dummy_hcd [ 2222.713793][T28244] usb 9-1: Using ep0 maxpacket: 32 [ 2222.739183][T28244] usb 9-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 2222.884462][T28244] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2222.944004][T11547] usb 1-1: USB disconnect, device number 96 [ 2222.944848][T28244] usb 9-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2222.988415][T28244] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.026511][ T30] kauditd_printk_skb: 163 callbacks suppressed [ 2223.026522][ T30] audit: type=1400 audit(2222.996:74313): avc: denied { read write } for pid=21270 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2223.064509][T28244] usb 9-1: config 0 descriptor?? [ 2223.089364][ T30] audit: type=1400 audit(2223.026:74314): avc: denied { open } for pid=21270 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2223.116791][ T30] audit: type=1400 audit(2223.026:74315): avc: denied { ioctl } for pid=21270 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2223.142694][T32117] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2223.153123][ T30] audit: type=1400 audit(2223.046:74316): avc: denied { ioctl } for pid=32239 comm="syz.2.6842" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2223.180118][ T30] audit: type=1400 audit(2223.056:74317): avc: denied { ioctl } for pid=32212 comm="syz.8.6834" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2223.215316][ T30] audit: type=1400 audit(2223.086:74318): avc: denied { create } for pid=32241 comm="syz.3.6843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2223.236194][ T30] audit: type=1400 audit(2223.086:74319): avc: denied { bind } for pid=32241 comm="syz.3.6843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2223.255678][ T30] audit: type=1400 audit(2223.086:74320): avc: denied { name_bind } for pid=32241 comm="syz.3.6843" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2223.278504][ T30] audit: type=1400 audit(2223.086:74321): avc: denied { node_bind } for pid=32241 comm="syz.3.6843" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 2223.300461][ T30] audit: type=1400 audit(2223.086:74322): avc: denied { listen } for pid=32241 comm="syz.3.6843" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2223.481980][T32117] usb 3-1: Using ep0 maxpacket: 8 [ 2223.593779][T32117] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2223.603251][T32117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.616818][T32117] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2223.631579][T32117] pvrusb2: ********** [ 2223.638448][T32117] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2223.652196][T32117] pvrusb2: Important functionality might not be entirely working. [ 2223.661931][T32117] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2223.674704][T32117] pvrusb2: ********** [ 2223.702566][T19891] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2223.855379][T27678] usb 9-1: USB disconnect, device number 103 [ 2223.882179][ T2340] pvrusb2: Invalid write control endpoint [ 2224.054323][T19891] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 2224.069907][ T2340] pvrusb2: Invalid write control endpoint [ 2224.072622][T19891] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2224.085719][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2224.106152][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2224.108362][T19891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2224.114078][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2224.139515][ T2340] pvrusb2: Device being rendered inoperable [ 2224.146004][T32240] pvrusb2: Attempted to execute control transfer when device not ok [ 2224.160054][T19891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2224.433208][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2224.572040][T32117] usb 3-1: USB disconnect, device number 74 [ 2224.597527][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 2224.601710][T19891] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2224.611927][ T2340] pvrusb2: Attached sub-driver cx25840 [ 2224.626536][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2224.635819][T19891] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2224.638659][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2224.651919][T19891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.680368][T19891] usb 4-1: config 0 descriptor?? [ 2224.690632][T32242] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2225.153716][T19891] plantronics 0003:047F:FFFF.0017: reserved main item tag 0xd [ 2225.217869][T19891] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2226.604413][T27678] usb 4-1: reset high-speed USB device number 91 using dummy_hcd [ 2227.286110][ T5824] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 2228.087618][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 2228.087635][ T30] audit: type=1400 audit(2228.056:74444): avc: denied { execmem } for pid=32283 comm="syz.5.6853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2228.216326][ T30] audit: type=1400 audit(2228.186:74445): avc: denied { read } for pid=32280 comm="syz.3.6852" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2228.241187][ T30] audit: type=1400 audit(2228.186:74446): avc: denied { open } for pid=32280 comm="syz.3.6852" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 2228.265013][ T30] audit: type=1400 audit(2228.226:74447): avc: denied { create } for pid=32283 comm="syz.5.6853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2228.287958][ T30] audit: type=1400 audit(2228.226:74448): avc: denied { map_create } for pid=32283 comm="syz.5.6853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2229.066533][ T30] audit: type=1400 audit(2228.226:74449): avc: denied { prog_load } for pid=32283 comm="syz.5.6853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2229.162807][T32117] usb 4-1: USB disconnect, device number 91 [ 2229.182443][ T30] audit: type=1400 audit(2228.226:74450): avc: denied { bpf } for pid=32283 comm="syz.5.6853" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2229.338560][ T30] audit: type=1400 audit(2228.236:74451): avc: denied { map_create } for pid=32283 comm="syz.5.6853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2229.364321][ T30] audit: type=1400 audit(2228.236:74452): avc: denied { prog_load } for pid=32283 comm="syz.5.6853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2229.883689][ T30] audit: type=1400 audit(2228.236:74453): avc: denied { bpf } for pid=32283 comm="syz.5.6853" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2230.565631][T32117] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2230.899775][T32304] blktrace: Concurrent blktraces are not allowed on loop4 [ 2230.928831][T32117] usb 6-1: Using ep0 maxpacket: 32 [ 2231.240489][T32117] usb 6-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 2231.251576][T32117] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2231.936983][T32117] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2231.948425][T32117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.961044][T32117] usb 6-1: config 0 descriptor?? [ 2233.202878][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 2233.202894][ T30] audit: type=1400 audit(2233.176:74544): avc: denied { read } for pid=32310 comm="syz.2.6861" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2233.207685][T32311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2233.244695][ T30] audit: type=1400 audit(2233.176:74545): avc: denied { open } for pid=32310 comm="syz.2.6861" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2233.282476][ T30] audit: type=1400 audit(2233.176:74546): avc: denied { ioctl } for pid=32310 comm="syz.2.6861" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2233.666921][ T30] audit: type=1400 audit(2233.326:74547): avc: denied { ioctl } for pid=32310 comm="syz.2.6861" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2233.727924][T32320] FAULT_INJECTION: forcing a failure. [ 2233.727924][T32320] name failslab, interval 1, probability 0, space 0, times 0 [ 2233.762788][T32117] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2233.781293][T32320] CPU: 0 UID: 0 PID: 32320 Comm: syz.8.6862 Not tainted syzkaller #0 PREEMPT(full) [ 2233.781316][T32320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2233.781326][T32320] Call Trace: [ 2233.781332][T32320] [ 2233.781338][T32320] dump_stack_lvl+0x16c/0x1f0 [ 2233.781367][T32320] should_fail_ex+0x512/0x640 [ 2233.781392][T32320] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 2233.781421][T32320] should_failslab+0xc2/0x120 [ 2233.781437][T32320] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 2233.781455][T32320] ? shmem_alloc_inode+0x25/0x50 [ 2233.781469][T32320] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 2233.781480][T32320] ? shmem_alloc_inode+0x25/0x50 [ 2233.781490][T32320] shmem_alloc_inode+0x25/0x50 [ 2233.781501][T32320] alloc_inode+0x61/0x240 [ 2233.781516][T32320] new_inode+0x22/0x1c0 [ 2233.781532][T32320] shmem_get_inode+0x19a/0xfb0 [ 2233.781548][T32320] shmem_mknod+0x1a8/0x450 [ 2233.781563][T32320] ? __pfx_shmem_create+0x10/0x10 [ 2233.781575][T32320] lookup_open.isra.0+0x11d3/0x1580 [ 2233.781596][T32320] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 2233.781615][T32320] ? find_held_lock+0x2b/0x80 [ 2233.781638][T32320] ? __pfx_down_write+0x10/0x10 [ 2233.781653][T32320] path_openat+0x893/0x2cb0 [ 2233.781670][T32320] ? __pfx_path_openat+0x10/0x10 [ 2233.781685][T32320] do_filp_open+0x20b/0x470 [ 2233.781696][T32320] ? __pfx_do_filp_open+0x10/0x10 [ 2233.781718][T32320] ? alloc_fd+0x471/0x7d0 [ 2233.781733][T32320] do_sys_openat2+0x11b/0x1d0 [ 2233.781747][T32320] ? __pfx_do_sys_openat2+0x10/0x10 [ 2233.781762][T32320] ? __fget_files+0x20e/0x3c0 [ 2233.781776][T32320] __x64_sys_openat+0x174/0x210 [ 2233.781790][T32320] ? __pfx___x64_sys_openat+0x10/0x10 [ 2233.781804][T32320] ? ksys_write+0x1ac/0x250 [ 2233.781819][T32320] do_syscall_64+0xcd/0xfa0 [ 2233.781837][T32320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2233.781849][T32320] RIP: 0033:0x7feec738eec9 [ 2233.781858][T32320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2233.781869][T32320] RSP: 002b:00007feec820e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2233.781882][T32320] RAX: ffffffffffffffda RBX: 00007feec75e5fa0 RCX: 00007feec738eec9 [ 2233.781889][T32320] RDX: 0000000000105042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 2233.781896][T32320] RBP: 00007feec820e090 R08: 0000000000000000 R09: 0000000000000000 [ 2233.781903][T32320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2233.781909][T32320] R13: 00007feec75e6038 R14: 00007feec75e5fa0 R15: 00007fff716349f8 [ 2233.781925][T32320] [ 2234.069236][ T30] audit: type=1400 audit(2233.336:74548): avc: denied { mounton } for pid=32293 comm="syz.0.6855" path="/186/bus" dev="tmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2234.091751][ T30] audit: type=1400 audit(2233.346:74549): avc: denied { read write } for pid=32310 comm="syz.2.6861" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2234.116088][ T30] audit: type=1400 audit(2233.346:74550): avc: denied { open } for pid=32310 comm="syz.2.6861" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2234.192536][ T30] audit: type=1400 audit(2233.346:74551): avc: denied { ioctl } for pid=32310 comm="syz.2.6861" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2234.217582][T32117] usb 3-1: too many configurations: 64, using maximum allowed: 8 [ 2234.227522][ T30] audit: type=1400 audit(2233.366:74552): avc: denied { unlink } for pid=32293 comm="syz.0.6855" name="#d2" dev="tmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2234.250350][ T30] audit: type=1400 audit(2233.366:74553): avc: denied { ioctl } for pid=32310 comm="syz.2.6861" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2234.332356][T32117] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2234.340317][T32117] usb 3-1: can't read configurations, error -61 [ 2234.492648][T32117] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2234.628356][T10692] usb 6-1: USB disconnect, device number 18 [ 2234.675863][T32117] usb 3-1: too many configurations: 64, using maximum allowed: 8 [ 2234.688541][T32117] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2234.755761][T32117] usb 3-1: can't read configurations, error -61 [ 2235.103948][T32117] usb usb3-port1: attempt power cycle [ 2235.653072][T32338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6865'. [ 2235.895470][T32343] usb usb8: usbfs: process 32343 (syz.2.6868) did not claim interface 0 before use [ 2236.571274][T27678] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2236.772491][T27678] usb 1-1: device descriptor read/64, error -71 [ 2237.252855][T27678] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2237.382472][T27678] usb 1-1: device descriptor read/64, error -71 [ 2237.543241][T27678] usb usb1-port1: attempt power cycle [ 2237.912789][T27678] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2237.934116][T27678] usb 1-1: device descriptor read/8, error -71 [ 2238.250247][ T30] kauditd_printk_skb: 147 callbacks suppressed [ 2238.250262][ T30] audit: type=1400 audit(2238.216:74701): avc: denied { ioctl } for pid=32344 comm="syz.0.6869" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2238.769280][T27678] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2238.778561][ T30] audit: type=1400 audit(2238.266:74702): avc: denied { read } for pid=32364 comm="syz.2.6874" dev="nsfs" ino=4026533361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2238.799978][ T30] audit: type=1400 audit(2238.266:74703): avc: denied { open } for pid=32364 comm="syz.2.6874" path="net:[4026533361]" dev="nsfs" ino=4026533361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2238.824423][ T30] audit: type=1400 audit(2238.266:74704): avc: denied { create } for pid=32364 comm="syz.2.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2238.824638][T27678] usb 1-1: device descriptor read/8, error -71 [ 2238.868092][ T30] audit: type=1400 audit(2238.266:74705): avc: denied { getopt } for pid=32364 comm="syz.2.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2238.912310][ T30] audit: type=1400 audit(2238.356:74706): avc: denied { read } for pid=32364 comm="syz.2.6874" dev="nsfs" ino=4026533361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2238.934215][ T30] audit: type=1400 audit(2238.356:74707): avc: denied { read open } for pid=32364 comm="syz.2.6874" path="net:[4026533361]" dev="nsfs" ino=4026533361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2238.957954][ T30] audit: type=1400 audit(2238.356:74708): avc: denied { create } for pid=32364 comm="syz.2.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2238.978449][ T30] audit: type=1400 audit(2238.386:74709): avc: denied { create } for pid=32364 comm="syz.2.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2239.048600][T27678] usb usb1-port1: unable to enumerate USB device [ 2239.081781][ T30] audit: type=1400 audit(2238.396:74710): avc: denied { connect } for pid=32364 comm="syz.2.6874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2239.109999][T32369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6873'. [ 2239.119625][T32369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6873'. [ 2239.164932][T32369] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6873'. [ 2239.218491][T32369] ubi: mtd0 is already attached to ubi31 [ 2239.374319][T32374] : entered promiscuous mode [ 2239.597831][T27678] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2239.832449][T27678] usb 3-1: Using ep0 maxpacket: 32 [ 2239.875369][T27678] usb 3-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 2239.887255][T27678] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2239.898306][T27678] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 2239.908705][T27678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2239.936166][T32381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6878'. [ 2239.945246][T32381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6878'. [ 2240.127495][T32383] ubi: mtd0 is already attached to ubi31 [ 2240.279557][T27678] usb 3-1: config 0 descriptor?? [ 2240.284926][T32382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6878'. [ 2240.783838][T32389] usb usb8: usbfs: process 32389 (syz.5.6879) did not claim interface 0 before use [ 2241.924005][T11547] usb 3-1: USB disconnect, device number 78 [ 2242.062681][T27678] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2242.072442][T10692] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2242.222458][T27678] usb 6-1: Using ep0 maxpacket: 16 [ 2242.229252][T27678] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2242.241061][T27678] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2242.242458][T10692] usb 4-1: Using ep0 maxpacket: 16 [ 2242.256601][T27678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.258256][T10692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.265085][T27678] usb 6-1: Product: syz [ 2242.277842][T10692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2242.280449][T27678] usb 6-1: Manufacturer: syz [ 2242.289875][T10692] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2242.289918][T10692] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2242.289940][T10692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.292794][T10692] usb 4-1: config 0 descriptor?? [ 2242.330937][T27678] usb 6-1: SerialNumber: syz [ 2242.347841][T27678] usb 6-1: config 0 descriptor?? [ 2242.363548][T27678] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2242.373306][T27678] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2242.549235][T10692] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0018/input/input79 [ 2242.597769][T32403] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6883'. [ 2242.605039][T10692] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 2243.470853][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 2243.470872][ T30] audit: type=1400 audit(2242.986:74829): avc: denied { read } for pid=32391 comm="syz.5.6880" dev="nsfs" ino=4026532793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2243.524813][T32410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6884'. [ 2243.610508][T32413] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6885'. [ 2243.621549][T32410] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2243.645073][ T30] audit: type=1400 audit(2242.986:74830): avc: denied { open } for pid=32391 comm="syz.5.6880" path="net:[4026532793]" dev="nsfs" ino=4026532793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2243.683823][T27678] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2243.696467][ T30] audit: type=1400 audit(2242.986:74831): avc: denied { create } for pid=32391 comm="syz.5.6880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2243.869710][ T30] audit: type=1400 audit(2243.006:74832): avc: denied { ioctl } for pid=32391 comm="syz.5.6880" path="socket:[132752]" dev="sockfs" ino=132752 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2243.896093][T27678] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2243.972616][T32418] usb usb8: usbfs: process 32418 (syz.8.6886) did not claim interface 0 before use [ 2244.103842][T27678] em28xx 6-1:0.0: board has no eeprom [ 2244.291115][ T30] audit: type=1400 audit(2243.016:74833): avc: denied { create } for pid=32391 comm="syz.5.6880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2244.422442][ T30] audit: type=1400 audit(2243.016:74834): avc: denied { write } for pid=32391 comm="syz.5.6880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2244.443986][ T30] audit: type=1400 audit(2243.466:74835): avc: denied { create } for pid=32409 comm="syz.0.6884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2244.464445][T27678] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2244.472566][T27678] em28xx 6-1:0.0: dvb set to bulk mode. [ 2244.478262][T32117] em28xx 6-1:0.0: Binding DVB extension [ 2244.496892][ T30] audit: type=1400 audit(2243.476:74836): avc: denied { write } for pid=32409 comm="syz.0.6884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2244.758475][T10692] usb 6-1: USB disconnect, device number 19 [ 2244.765474][T10692] em28xx 6-1:0.0: Disconnecting em28xx [ 2244.831464][T19891] usb 4-1: USB disconnect, device number 92 [ 2244.846673][ T30] audit: type=1400 audit(2243.476:74837): avc: denied { read } for pid=32409 comm="syz.0.6884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2244.923637][T32117] em28xx 6-1:0.0: Registering input extension [ 2244.948524][T31554] usb 9-1: new high-speed USB device number 104 using dummy_hcd [ 2244.961550][T10692] em28xx 6-1:0.0: Closing input extension [ 2245.019262][ T30] audit: type=1400 audit(2243.486:74838): avc: denied { create } for pid=32409 comm="syz.0.6884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2245.050590][T10692] em28xx 6-1:0.0: Freeing device [ 2245.153219][T31554] usb 9-1: Using ep0 maxpacket: 32 [ 2245.173532][T31554] usb 9-1: no configurations [ 2245.178289][T31554] usb 9-1: can't read configurations, error -22 [ 2245.636295][T31554] usb 9-1: new high-speed USB device number 105 using dummy_hcd [ 2245.697634][T10692] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2246.212480][T31554] usb 9-1: Using ep0 maxpacket: 32 [ 2246.218752][T31554] usb 9-1: no configurations [ 2246.224719][T10692] usb 6-1: Using ep0 maxpacket: 16 [ 2246.230019][T31554] usb 9-1: can't read configurations, error -22 [ 2246.242167][T31554] usb usb9-port1: attempt power cycle [ 2246.255424][T10692] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2246.416880][T10692] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2246.429924][T10692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.438289][T10692] usb 6-1: Product: syz [ 2246.627106][T10692] usb 6-1: Manufacturer: syz [ 2246.632689][T10692] usb 6-1: SerialNumber: syz [ 2246.753443][T31554] usb 9-1: new high-speed USB device number 106 using dummy_hcd [ 2246.764372][T10692] usb 6-1: config 0 descriptor?? [ 2246.772894][T31554] usb 9-1: Using ep0 maxpacket: 32 [ 2246.779620][T10692] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2246.789524][T31554] usb 9-1: no configurations [ 2246.794446][T31554] usb 9-1: can't read configurations, error -22 [ 2246.801471][T10692] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2246.992231][T31554] usb 9-1: new high-speed USB device number 107 using dummy_hcd [ 2247.283809][T31554] usb 9-1: Using ep0 maxpacket: 32 [ 2247.289568][T31554] usb 9-1: no configurations [ 2247.298007][T31554] usb 9-1: can't read configurations, error -22 [ 2247.310220][T31554] usb usb9-port1: unable to enumerate USB device [ 2247.579413][T32450] FAULT_INJECTION: forcing a failure. [ 2247.579413][T32450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2247.592769][T32450] CPU: 0 UID: 0 PID: 32450 Comm: syz.5.6888 Not tainted syzkaller #0 PREEMPT(full) [ 2247.592786][T32450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2247.592793][T32450] Call Trace: [ 2247.592796][T32450] [ 2247.592802][T32450] dump_stack_lvl+0x16c/0x1f0 [ 2247.592834][T32450] should_fail_ex+0x512/0x640 [ 2247.592862][T32450] _copy_from_user+0x2e/0xd0 [ 2247.592879][T32450] move_addr_to_kernel+0x65/0x170 [ 2247.592894][T32450] __sys_sendto+0x1be/0x520 [ 2247.592910][T32450] ? __pfx___sys_sendto+0x10/0x10 [ 2247.592929][T32450] ? find_held_lock+0x2b/0x80 [ 2247.592964][T32450] __x64_sys_sendto+0xe0/0x1c0 [ 2247.592986][T32450] ? do_syscall_64+0x91/0xfa0 [ 2247.593010][T32450] ? lockdep_hardirqs_on+0x7c/0x110 [ 2247.593033][T32450] do_syscall_64+0xcd/0xfa0 [ 2247.593050][T32450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2247.593061][T32450] RIP: 0033:0x7f87e3790d5c [ 2247.593071][T32450] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 2247.593082][T32450] RSP: 002b:00007f87e19d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2247.593093][T32450] RAX: ffffffffffffffda RBX: 00007f87e19d3fc0 RCX: 00007f87e3790d5c [ 2247.593104][T32450] RDX: 0000000000000020 RSI: 00007f87e19d4010 RDI: 0000000000000007 [ 2247.593114][T32450] RBP: 0000000000000000 R08: 00007f87e19d3f14 R09: 000000000000000c [ 2247.593125][T32450] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 2247.593134][T32450] R13: 00007f87e19d3f68 R14: 00007f87e19d4010 R15: 0000000000000000 [ 2247.593159][T32450] [ 2248.575892][ T30] kauditd_printk_skb: 210 callbacks suppressed [ 2248.582191][ T30] audit: type=1400 audit(2248.496:75049): avc: denied { create } for pid=32454 comm="syz.3.6897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2248.847626][ T30] audit: type=1400 audit(2248.766:75050): avc: denied { write } for pid=32445 comm="syz.2.6895" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2248.889309][T10692] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2248.903441][ T30] audit: type=1400 audit(2248.766:75051): avc: denied { map_create } for pid=32445 comm="syz.2.6895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2248.928933][ T30] audit: type=1400 audit(2248.766:75052): avc: denied { connect } for pid=32445 comm="syz.2.6895" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2248.951168][ T30] audit: type=1400 audit(2248.916:75053): avc: denied { create } for pid=32460 comm="syz.8.6898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2248.970492][ C1] vkms_vblank_simulate: vblank timer overrun [ 2248.978448][ T30] audit: type=1400 audit(2248.936:75054): avc: denied { map_create } for pid=32460 comm="syz.8.6898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2249.009874][T10692] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2249.408567][ T30] audit: type=1400 audit(2248.946:75055): avc: denied { prog_load } for pid=32460 comm="syz.8.6898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2249.431606][ T30] audit: type=1400 audit(2248.946:75056): avc: denied { bpf } for pid=32460 comm="syz.8.6898" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2249.452297][T10692] em28xx 6-1:0.0: board has no eeprom [ 2249.469629][ T30] audit: type=1400 audit(2248.966:75057): avc: denied { map_create } for pid=32460 comm="syz.8.6898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2249.496738][ T30] audit: type=1400 audit(2248.966:75058): avc: denied { prog_load } for pid=32460 comm="syz.8.6898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2249.533371][T32448] team0 (unregistering): Port device team_slave_0 removed [ 2249.559507][T32448] team0 (unregistering): Port device team_slave_1 removed [ 2249.612636][T10692] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2249.622650][T10692] em28xx 6-1:0.0: dvb set to bulk mode. [ 2249.638121][T31554] em28xx 6-1:0.0: Binding DVB extension [ 2249.777105][T31554] em28xx 6-1:0.0: Registering input extension [ 2249.847696][T31554] usb 6-1: USB disconnect, device number 20 [ 2249.882008][T31554] em28xx 6-1:0.0: Disconnecting em28xx [ 2249.909982][T31554] em28xx 6-1:0.0: Closing input extension [ 2250.013051][T31554] em28xx 6-1:0.0: Freeing device [ 2250.257100][T32474] binder: 32473:32474 ioctl c0306201 200000000500 returned -14 [ 2250.472745][T32117] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2250.833627][T32478] netlink: 'syz.3.6902': attribute type 1 has an invalid length. [ 2250.865581][T32117] usb 6-1: Using ep0 maxpacket: 32 [ 2251.208806][T32117] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2251.218052][T32117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.258069][T32117] usb 6-1: config 0 descriptor?? [ 2251.482291][T32117] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2251.684855][T32117] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2251.697880][T32117] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2251.712595][T32117] usb 6-1: media controller created [ 2251.742656][T32117] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2251.952677][T32495] overlayfs: failed to resolve './file1': -2 [ 2252.052470][T27678] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2252.202572][T27678] usb 4-1: Using ep0 maxpacket: 8 [ 2252.212766][T27678] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2252.229844][T27678] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2252.341728][T27678] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2252.365267][T27678] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2252.377570][T27678] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2252.387404][T27678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.499792][T27678] hub 4-1:1.0: bad descriptor, ignoring hub [ 2252.537190][T27678] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2252.556805][T27678] cdc_wdm 4-1:1.0: skipping garbage [ 2252.574818][T27678] cdc_wdm 4-1:1.0: skipping garbage [ 2252.642781][T27678] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2252.704581][T27678] cdc_wdm 4-1:1.0: Unknown control protocol [ 2252.751011][T27678] usb 4-1: USB disconnect, device number 93 [ 2253.452815][T32117] az6027: usb out operation failed. (-71) [ 2253.465711][T32117] az6027: usb out operation failed. (-71) [ 2253.471526][T32117] stb0899_attach: Driver disabled by Kconfig [ 2253.523099][T32117] az6027: no front-end attached [ 2253.523099][T32117] [ 2253.692501][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 2253.692519][ T30] audit: type=1400 audit(2253.506:75160): avc: denied { read write } for pid=28405 comm="syz-executor" name="loop0" dev="devtmpfs" ino=3919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2253.698834][T32117] az6027: usb out operation failed. (-71) [ 2253.745963][ T30] audit: type=1400 audit(2253.506:75161): avc: denied { execmem } for pid=32510 comm="syz.5.6909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2253.765814][ T30] audit: type=1400 audit(2253.606:75162): avc: denied { read write open } for pid=28405 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2253.801858][ T30] audit: type=1400 audit(2253.606:75163): avc: denied { ioctl } for pid=28405 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=3919 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2254.011529][ T30] audit: type=1400 audit(2253.816:75164): avc: denied { mounton } for pid=32510 comm="syz.5.6909" path="/594/bus" dev="tmpfs" ino=3170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2254.032191][T32117] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2254.563829][T32519] audit: audit_lost=605 audit_rate_limit=0 audit_backlog_limit=64 [ 2254.572572][ T30] audit: type=1400 audit(2253.816:75165): avc: denied { unlink } for pid=32510 comm="syz.5.6909" name="#d4" dev="tmpfs" ino=3174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2254.691242][ T30] audit: type=1400 audit(2253.826:75166): avc: denied { mount } for pid=32510 comm="syz.5.6909" name="/" dev="overlay" ino=3169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2254.714295][T32519] audit: out of memory in audit_log_start [ 2254.729714][T32117] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input82 [ 2254.782815][ T30] audit: type=1400 audit(2253.836:75167): avc: denied { read write } for pid=21270 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2254.895400][T32117] dvb-usb: schedule remote query interval to 400 msecs. [ 2254.946458][T32117] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2255.182187][T32117] usb 6-1: USB disconnect, device number 21 [ 2255.824791][T32117] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2256.795302][T32534] blktrace: Concurrent blktraces are not allowed on loop0 [ 2257.323424][T32539] veth1_macvtap: left promiscuous mode [ 2257.623404][T32117] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 2258.374396][T32552] FAULT_INJECTION: forcing a failure. [ 2258.374396][T32552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2258.376346][T32552] [ 2258.376355][T32552] ====================================================== [ 2258.376361][T32552] WARNING: possible circular locking dependency detected [ 2258.376368][T32552] syzkaller #0 Not tainted [ 2258.376377][T32552] ------------------------------------------------------ [ 2258.376383][T32552] syz.5.6921/32552 is trying to acquire lock: [ 2258.376392][T32552] ffffffff8e2d16c0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 2258.376436][T32552] [ 2258.376436][T32552] but task is already holding lock: [ 2258.376442][T32552] ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 2258.376480][T32552] [ 2258.376480][T32552] which lock already depends on the new lock. [ 2258.376480][T32552] [ 2258.376486][T32552] [ 2258.376486][T32552] the existing dependency chain (in reverse order) is: [ 2258.376492][T32552] [ 2258.376492][T32552] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 2258.376513][T32552] _raw_spin_lock_nested+0x31/0x40 [ 2258.376535][T32552] raw_spin_rq_lock_nested+0x29/0x130 [ 2258.376555][T32552] task_rq_lock+0xcf/0x490 [ 2258.376573][T32552] cgroup_move_task+0x81/0x2a0 [ 2258.376595][T32552] css_set_move_task+0x288/0x5f0 [ 2258.376611][T32552] cgroup_post_fork+0x201/0x9d0 [ 2258.376632][T32552] copy_process+0x602d/0x76a0 [ 2258.376652][T32552] kernel_clone+0xfc/0x930 [ 2258.376672][T32552] user_mode_thread+0xc8/0x110 [ 2258.376692][T32552] rest_init+0x23/0x2b0 [ 2258.376710][T32552] start_kernel+0x3f3/0x4e0 [ 2258.376732][T32552] x86_64_start_reservations+0x18/0x30 [ 2258.376756][T32552] x86_64_start_kernel+0x130/0x190 [ 2258.376777][T32552] common_startup_64+0x13e/0x148 [ 2258.376795][T32552] [ 2258.376795][T32552] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 2258.376816][T32552] _raw_spin_lock_irqsave+0x3a/0x60 [ 2258.376838][T32552] try_to_wake_up+0xb7/0x1870 [ 2258.376857][T32552] __wake_up_common+0x135/0x1f0 [ 2258.376881][T32552] __wake_up+0x31/0x60 [ 2258.376901][T32552] tty_port_default_wakeup+0x47/0x60 [ 2258.376921][T32552] serial8250_tx_chars+0x68e/0x860 [ 2258.376941][T32552] serial8250_handle_irq+0x761/0xcb0 [ 2258.376961][T32552] serial8250_default_handle_irq+0x9e/0x270 [ 2258.376983][T32552] serial8250_interrupt+0xf8/0x1d0 [ 2258.377006][T32552] __handle_irq_event_percpu+0x236/0x920 [ 2258.377026][T32552] handle_irq_event+0xab/0x1e0 [ 2258.377045][T32552] handle_edge_irq+0x3ca/0x9e0 [ 2258.377064][T32552] __common_interrupt+0xcd/0x2f0 [ 2258.377085][T32552] common_interrupt+0xba/0xe0 [ 2258.377119][T32552] asm_common_interrupt+0x26/0x40 [ 2258.377136][T32552] kasan_check_range+0x12/0x1b0 [ 2258.377157][T32552] perf_event_mmap+0xa0/0xd40 [ 2258.377171][T32552] __mmap_region+0x94d/0x27a0 [ 2258.377194][T32552] mmap_region+0x1ab/0x3f0 [ 2258.377216][T32552] do_mmap+0xa3e/0x1210 [ 2258.377232][T32552] vm_mmap_pgoff+0x29e/0x470 [ 2258.377247][T32552] ksys_mmap_pgoff+0x32c/0x5c0 [ 2258.377263][T32552] __x64_sys_mmap+0x125/0x190 [ 2258.377277][T32552] do_syscall_64+0xcd/0xfa0 [ 2258.377300][T32552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2258.377316][T32552] [ 2258.377316][T32552] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 2258.377343][T32552] _raw_spin_lock_irqsave+0x3a/0x60 [ 2258.377364][T32552] __wake_up+0x1c/0x60 [ 2258.377384][T32552] tty_port_default_wakeup+0x47/0x60 [ 2258.377403][T32552] serial8250_tx_chars+0x68e/0x860 [ 2258.377422][T32552] serial8250_handle_irq+0x761/0xcb0 [ 2258.377442][T32552] serial8250_default_handle_irq+0x9e/0x270 [ 2258.377464][T32552] serial8250_interrupt+0xf8/0x1d0 [ 2258.377487][T32552] __handle_irq_event_percpu+0x236/0x920 [ 2258.377507][T32552] handle_irq_event+0xab/0x1e0 [ 2258.377526][T32552] handle_edge_irq+0x3ca/0x9e0 [ 2258.377543][T32552] __common_interrupt+0xcd/0x2f0 [ 2258.377563][T32552] common_interrupt+0xba/0xe0 [ 2258.377580][T32552] asm_common_interrupt+0x26/0x40 [ 2258.377595][T32552] _raw_spin_unlock_irqrestore+0x31/0x80 [ 2258.377617][T32552] uart_write+0x2a4/0xb30 [ 2258.377635][T32552] n_tty_write+0x41e/0x11e0 [ 2258.377655][T32552] file_tty_write.constprop.0+0x500/0x9b0 [ 2258.377673][T32552] redirected_tty_write+0xd4/0x150 [ 2258.377689][T32552] vfs_write+0x7d0/0x11d0 [ 2258.377703][T32552] ksys_write+0x12a/0x250 [ 2258.377716][T32552] do_syscall_64+0xcd/0xfa0 [ 2258.377739][T32552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2258.377754][T32552] [ 2258.377754][T32552] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 2258.377775][T32552] _raw_spin_lock_irqsave+0x3a/0x60 [ 2258.377797][T32552] serial8250_console_write+0x181/0x1890 [ 2258.377820][T32552] console_flush_all+0x801/0xc60 [ 2258.377838][T32552] console_unlock+0xd8/0x210 [ 2258.377856][T32552] vprintk_emit+0x3d7/0x680 [ 2258.377876][T32552] _printk+0xc7/0x100 [ 2258.377889][T32552] register_console+0xc2d/0x11b0 [ 2258.377910][T32552] univ8250_console_init+0x5f/0x90 [ 2258.377934][T32552] console_init+0x14f/0x680 [ 2258.377956][T32552] start_kernel+0x29f/0x4e0 [ 2258.377977][T32552] x86_64_start_reservations+0x18/0x30 [ 2258.377999][T32552] x86_64_start_kernel+0x130/0x190 [ 2258.378021][T32552] common_startup_64+0x13e/0x148 [ 2258.378037][T32552] [ 2258.378037][T32552] -> #0 (console_owner){-.-.}-{0:0}: [ 2258.378059][T32552] __lock_acquire+0x12a6/0x1ce0 [ 2258.378083][T32552] lock_acquire+0x179/0x350 [ 2258.378096][T32552] console_lock_spinning_enable+0x72/0x80 [ 2258.378115][T32552] console_flush_all+0x7aa/0xc60 [ 2258.378133][T32552] console_unlock+0xd8/0x210 [ 2258.378150][T32552] vprintk_emit+0x3d7/0x680 [ 2258.378169][T32552] _printk+0xc7/0x100 [ 2258.378181][T32552] should_fail_ex+0x4e7/0x640 [ 2258.378205][T32552] copy_to_user_nofault+0xac/0x1c0 [ 2258.378228][T32552] bpf_probe_write_user+0xaf/0xf0 [ 2258.378243][T32552] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 2258.378256][T32552] bpf_trace_run4+0x24f/0x5b0 [ 2258.378274][T32552] __bpf_trace_sched_switch+0x145/0x190 [ 2258.378293][T32552] __traceiter_sched_switch+0x6c/0xc0 [ 2258.378310][T32552] __schedule+0x183b/0x5de0 [ 2258.378331][T32552] schedule+0xe7/0x3a0 [ 2258.378355][T32552] exit_to_user_mode_loop+0x6b/0x130 [ 2258.378371][T32552] do_syscall_64+0x426/0xfa0 [ 2258.378394][T32552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2258.378409][T32552] [ 2258.378409][T32552] other info that might help us debug this: [ 2258.378409][T32552] [ 2258.378414][T32552] Chain exists of: [ 2258.378414][T32552] console_owner --> &p->pi_lock --> &rq->__lock [ 2258.378414][T32552] [ 2258.378437][T32552] Possible unsafe locking scenario: [ 2258.378437][T32552] [ 2258.378442][T32552] CPU0 CPU1 [ 2258.378447][T32552] ---- ---- [ 2258.378452][T32552] lock(&rq->__lock); [ 2258.378461][T32552] lock(&p->pi_lock); [ 2258.378472][T32552] lock(&rq->__lock); [ 2258.378484][T32552] lock(console_owner); [ 2258.378494][T32552] [ 2258.378494][T32552] *** DEADLOCK *** [ 2258.378494][T32552] [ 2258.378498][T32552] 4 locks held by syz.5.6921/32552: [ 2258.378507][T32552] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 2258.378548][T32552] #1: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 2258.378587][T32552] #2: ffffffff8e3b1b00 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 2258.378621][T32552] #3: ffffffff8e3b1b70 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 2258.378661][T32552] [ 2258.378661][T32552] stack backtrace: [ 2258.378670][T32552] CPU: 0 UID: 0 PID: 32552 Comm: syz.5.6921 Not tainted syzkaller #0 PREEMPT(full) [ 2258.378689][T32552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2258.378700][T32552] Call Trace: [ 2258.378705][T32552] [ 2258.378712][T32552] dump_stack_lvl+0x116/0x1f0 [ 2258.378738][T32552] print_circular_bug+0x275/0x350 [ 2258.378764][T32552] check_noncircular+0x14c/0x170 [ 2258.378792][T32552] __lock_acquire+0x12a6/0x1ce0 [ 2258.378822][T32552] lock_acquire+0x179/0x350 [ 2258.378836][T32552] ? console_lock_spinning_enable+0x61/0x80 [ 2258.378858][T32552] ? console_lock_spinning_enable+0x4a/0x80 [ 2258.378880][T32552] console_lock_spinning_enable+0x72/0x80 [ 2258.378899][T32552] ? console_lock_spinning_enable+0x61/0x80 [ 2258.378919][T32552] console_flush_all+0x7aa/0xc60 [ 2258.378941][T32552] ? __pfx_console_flush_all+0x10/0x10 [ 2258.378965][T32552] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2258.378990][T32552] console_unlock+0xd8/0x210 [ 2258.379010][T32552] ? __pfx_console_unlock+0x10/0x10 [ 2258.379030][T32552] ? do_raw_spin_unlock+0xe0/0x230 [ 2258.379049][T32552] ? _printk+0xc7/0x100 [ 2258.379065][T32552] ? __down_trylock_console_sem+0xb0/0x140 [ 2258.379083][T32552] vprintk_emit+0x3d7/0x680 [ 2258.379105][T32552] ? __pfx_vprintk_emit+0x10/0x10 [ 2258.379125][T32552] ? __schedule+0x11a3/0x5de0 [ 2258.379151][T32552] _printk+0xc7/0x100 [ 2258.379165][T32552] ? __pfx__printk+0x10/0x10 [ 2258.379181][T32552] ? __lock_acquire+0x62e/0x1ce0 [ 2258.379207][T32552] ? __pfx____ratelimit+0x10/0x10 [ 2258.379233][T32552] should_fail_ex+0x4e7/0x640 [ 2258.379259][T32552] copy_to_user_nofault+0xac/0x1c0 [ 2258.379285][T32552] bpf_probe_write_user+0xaf/0xf0 [ 2258.379303][T32552] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 2258.379317][T32552] bpf_trace_run4+0x24f/0x5b0 [ 2258.379343][T32552] ? __pfx_bpf_trace_run4+0x10/0x10 [ 2258.379366][T32552] ? __lock_acquire+0xb97/0x1ce0 [ 2258.379394][T32552] __bpf_trace_sched_switch+0x145/0x190 [ 2258.379415][T32552] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 2258.379435][T32552] ? lock_acquire+0x179/0x350 [ 2258.379453][T32552] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 2258.379478][T32552] __traceiter_sched_switch+0x6c/0xc0 [ 2258.379496][T32552] ? set_next_task_rt+0x403/0x6a0 [ 2258.379521][T32552] __schedule+0x183b/0x5de0 [ 2258.379551][T32552] ? __pfx___schedule+0x10/0x10 [ 2258.379573][T32552] ? __fget_files+0x20e/0x3c0 [ 2258.379592][T32552] ? fput+0x9b/0xd0 [ 2258.379612][T32552] ? ksys_write+0x1ac/0x250 [ 2258.379629][T32552] schedule+0xe7/0x3a0 [ 2258.379651][T32552] exit_to_user_mode_loop+0x6b/0x130 [ 2258.379669][T32552] do_syscall_64+0x426/0xfa0 [ 2258.379695][T32552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2258.379712][T32552] RIP: 0033:0x7f87e378d97f [ 2258.379726][T32552] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2258.379743][T32552] RSP: 002b:00007f87e19d5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2258.379759][T32552] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 00007f87e378d97f [ 2258.379770][T32552] RDX: 0000000000000001 RSI: 00007f87e19d5090 RDI: 0000000000000008 [ 2258.379781][T32552] RBP: 00007f87e19d5090 R08: 0000000000000000 R09: 00007f87e19d4df7 [ 2258.379792][T32552] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2258.379802][T32552] R13: 00007f87e39e6218 R14: 00007f87e39e6180 R15: 00007fff86ffb9e8 [ 2258.379821][T32552] [ 2259.460449][T32552] CPU: 0 UID: 0 PID: 32552 Comm: syz.5.6921 Not tainted syzkaller #0 PREEMPT(full) [ 2259.460466][T32552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2259.460474][T32552] Call Trace: [ 2259.460479][T32552] [ 2259.460485][T32552] dump_stack_lvl+0x116/0x1f0 [ 2259.460506][T32552] should_fail_ex+0x512/0x640 [ 2259.460524][T32552] copy_to_user_nofault+0xac/0x1c0 [ 2259.460542][T32552] bpf_probe_write_user+0xaf/0xf0 [ 2259.460560][T32552] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 2259.460570][T32552] bpf_trace_run4+0x24f/0x5b0 [ 2259.460583][T32552] ? __pfx_bpf_trace_run4+0x10/0x10 [ 2259.460597][T32552] ? __lock_acquire+0xb97/0x1ce0 [ 2259.460615][T32552] __bpf_trace_sched_switch+0x145/0x190 [ 2259.460629][T32552] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 2259.460643][T32552] ? lock_acquire+0x179/0x350 [ 2259.460653][T32552] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 2259.460669][T32552] __traceiter_sched_switch+0x6c/0xc0 [ 2259.460683][T32552] ? set_next_task_rt+0x403/0x6a0 [ 2259.460699][T32552] __schedule+0x183b/0x5de0 [ 2259.460718][T32552] ? __pfx___schedule+0x10/0x10 [ 2259.460732][T32552] ? __fget_files+0x20e/0x3c0 [ 2259.460744][T32552] ? fput+0x9b/0xd0 [ 2259.460756][T32552] ? ksys_write+0x1ac/0x250 [ 2259.460767][T32552] schedule+0xe7/0x3a0 [ 2259.460781][T32552] exit_to_user_mode_loop+0x6b/0x130 [ 2259.460794][T32552] do_syscall_64+0x426/0xfa0 [ 2259.460811][T32552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2259.460822][T32552] RIP: 0033:0x7f87e378d97f [ 2259.460832][T32552] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2259.460843][T32552] RSP: 002b:00007f87e19d5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2259.460854][T32552] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 00007f87e378d97f [ 2259.460860][T32552] RDX: 0000000000000001 RSI: 00007f87e19d5090 RDI: 0000000000000008 [ 2259.460867][T32552] RBP: 00007f87e19d5090 R08: 0000000000000000 R09: 00007f87e19d4df7 [ 2259.460873][T32552] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2259.460880][T32552] R13: 00007f87e39e6218 R14: 00007f87e39e6180 R15: 00007fff86ffb9e8 [ 2259.460890][T32552] [ 2259.681690][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 2259.681706][ T30] audit: type=1400 audit(2258.296:75272): avc: denied { prog_load } for pid=32548 comm="syz.5.6921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2259.706957][ T30] audit: type=1400 audit(2258.306:75273): avc: denied { bpf } for pid=32548 comm="syz.5.6921" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2259.727166][ T30] audit: type=1400 audit(2258.306:75274): avc: denied { perfmon } for pid=32548 comm="syz.5.6921" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2259.747715][ T30] audit: type=1400 audit(2258.306:75275): avc: denied { bpf } for pid=32548 comm="syz.5.6921" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2259.767984][ T30] audit: type=1400 audit(2258.316:75276): avc: denied { prog_run } for pid=32548 comm="syz.5.6921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2259.786990][ T30] audit: type=1400 audit(2258.316:75277): avc: denied { map_create } for pid=32548 comm="syz.5.6921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2259.805858][ T30] audit: type=1400 audit(2258.316:75278): avc: denied { prog_load } for pid=32548 comm="syz.5.6921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2259.824646][ T30] audit: type=1400 audit(2258.326:75279): avc: denied { read } for pid=32548 comm="syz.5.6921" dev="nsfs" ino=4026532793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2259.845492][ T30] audit: type=1400 audit(2258.326:75280): avc: denied { open } for pid=32548 comm="syz.5.6921" path="net:[4026532793]" dev="nsfs" ino=4026532793 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2259.868530][ T30] audit: type=1400 audit(2258.336:75281): avc: denied { create } for pid=32548 comm="syz.5.6921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2259.902319][T32117] usb 3-1: config index 0 descriptor too short (expected 19492, got 36) [ 2259.910735][T32117] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 2260.032731][T32117] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 2260.531618][T32117] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2260.545507][T32117] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 2260.554697][T32117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2260.571692][T32117] usb 3-1: config 0 descriptor?? [ 2260.591831][T32117] usb 3-1: can't set config #0, error -71 [ 2260.599749][T32117] usb 3-1: USB disconnect, device number 79