last executing test programs: 6m54.28454797s ago: executing program 1 (id=2): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendfile(r0, r1, &(0x7f00000001c0), 0xfffffffffffffffb) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0xb, 0x6, 0x0, 0x5}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r2, r2, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)="05", 0x1}]) 6m51.841436126s ago: executing program 1 (id=9): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, 0x3a) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x8000}) 6m50.826086558s ago: executing program 1 (id=11): syz_io_uring_setup(0x237, 0x0, &(0x7f0000000040)=0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000008) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x80200, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0xe, 0x12, 0x0, 0x3}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) syz_io_uring_submit(r0, 0x0, 0x0) 6m49.719113865s ago: executing program 1 (id=12): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xc3100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) 6m48.213299993s ago: executing program 1 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) 6m31.843729776s ago: executing program 32 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000300)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200808e4}, 0x8000) 17.253835535s ago: executing program 3 (id=796): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x6, 0x0, &(0x7f0000000440)="553fc696f4b1"}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000"], 0x74}}, 0x0) 15.110579435s ago: executing program 2 (id=803): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffffffffffae, 0x0, 0x0}, 0x58) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x25, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0xffb, 0x0, 0xb49, 0xc, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000004) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000280)={0xdddd1000, 0x11f000}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x6}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="000c0000000c0000000200000000000000000000040000000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x0, 0x5, 0xdd, &(0x7f0000000840)=""/221, 0x41000, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0x10}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x8}, 0x94) r6 = epoll_create1(0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f00000000c0)={0x60000005}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x4, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r8, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.130879439s ago: executing program 3 (id=806): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x7, 0x4) writev(r2, &(0x7f0000000100), 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socket$inet6(0xa, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7bacb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000440)=ANY=[@ANYBLOB="14010000", @ANYRES16=r3, @ANYBLOB="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"], 0x114}}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) 13.093712422s ago: executing program 0 (id=807): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40894) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x33, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYRES64, @ANYRES64], 0xffffffa5) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0xd, 0x6, '9P2000'}, 0x13) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 11.917050516s ago: executing program 3 (id=808): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2a100, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r3 = gettid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x64, &(0x7f0000000040), 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2001, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000040)=0xa8, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) 11.912239622s ago: executing program 0 (id=809): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x218}) socket$kcm(0x21, 0x2, 0xa) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff46}], 0x2) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x400, 0x0, 0x3, 0x8000000000, 0x2, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x3, 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x802, 0xff, 0xf, 0x402, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000740)={0x0, 0x0, @pic={0x0, 0x5f, 0x5, 0x0, 0x56, 0x9, 0x7, 0x6, 0xa0, 0x2, 0x8a, 0x2, 0x6, 0x1, 0x8}}) read$qrtrtun(r0, 0x0, 0x0) 10.764053502s ago: executing program 2 (id=810): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') write$uinput_user_dev(r3, 0x0, 0x0) syz_io_uring_setup(0x57d6, &(0x7f0000000000)={0x0, 0xc847, 0x1, 0x1, 0x44, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000100)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') 10.760518506s ago: executing program 4 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x6001) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x3, 0x2, 0x10, @local}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040), &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 9.845565665s ago: executing program 0 (id=812): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet(r6, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x80800}) listen(r6, 0x5) io_uring_enter(0xffffffffffffffff, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24044810) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) getsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000000c0), 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) sendto$inet(r9, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x81, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0)) 9.795613125s ago: executing program 4 (id=813): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x100, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x20, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(0xffffffffffffffff) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r8, 0x0, r9) write$UHID_INPUT(r8, &(0x7f0000002080)={0x9, {"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", 0x1000}}, 0x1006) 8.546617046s ago: executing program 2 (id=815): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$netrom(r0, 0x0, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x1, 0x4, 0x1, 0x0, 0x1}, 0x50) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000140)={{r1}, {@void, @max}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc43", 0xf) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000011d80)=@newtfilter={0x104c, 0x2c, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x9, 0xfff1}, {0xfff3, 0x7}}, [@f_rsvp6={{0xa}, {0x101c, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x1, 0x21, 0x6, 0x4, 0xc, 0xa, 0x6, 0x3, 0xe23f, 0x243c, 0x58b, 0x1000, 0x2, 0x5, 0x6, 0x80000000, 0x1, 0x80000000, 0x7, 0x1, 0x7, 0xc7, 0x7, 0x5, 0x7, 0x200, 0x7, 0x7, 0xde7, 0x3, 0x88f00000, 0x30000000, 0x2, 0x6, 0x3, 0x5, 0xd3a, 0x3, 0x5, 0x4, 0x0, 0x0, 0x6, 0x39f0, 0x72, 0x7, 0x0, 0x28, 0x91, 0x4, 0x2, 0xffff, 0x3, 0x7, 0x1, 0xcc9, 0x6, 0x10000, 0x0, 0x1, 0x2, 0x9, 0xfffffffb, 0x7, 0x1, 0x0, 0x9a, 0xe25, 0x5, 0x9, 0x80, 0x200, 0xffff, 0x0, 0xfff, 0x4027, 0xa, 0x1, 0x4, 0x8, 0x700, 0x0, 0xe97, 0x5, 0x4, 0x4, 0x6, 0x0, 0x10001, 0x4, 0x7, 0xb36, 0xe, 0x6, 0x6, 0x9, 0x7, 0x8000, 0x2, 0x3, 0x20, 0x0, 0x0, 0x101, 0x7, 0x13, 0x10, 0x2, 0xc, 0x5, 0x7, 0x4, 0xfffffffa, 0x9, 0x1, 0x1, 0x8, 0x81, 0x2, 0x0, 0xa, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0x8, 0x6a0ff34, 0xfffffff8, 0x0, 0x3, 0x7, 0x36, 0x401, 0xfffffff5, 0xac4, 0x5, 0x40, 0x80000000, 0x1, 0x85f, 0x3, 0x8, 0xfffffffc, 0x0, 0x4, 0x3, 0x5, 0x3, 0x300000, 0x1, 0x0, 0x8cb, 0x0, 0x9a89, 0x3, 0x0, 0xd, 0xfffffff8, 0xffff, 0xfffff1b5, 0x94f, 0x7, 0x2, 0x45, 0x8, 0x7, 0x2, 0x7fff, 0x2, 0x401, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x6, 0x3, 0x1, 0x6, 0xffffffff, 0x1ff, 0x9, 0x951e, 0x10000, 0x2, 0x7fffffff, 0x6, 0x3, 0x6, 0x9, 0x1, 0x7, 0x3, 0x9, 0x2, 0x3, 0x4, 0x5, 0xa, 0x7d8, 0xff, 0x6, 0x2, 0x5, 0x11, 0x2e0c, 0x1ff, 0x0, 0x8, 0x6, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x5, 0xd, 0x6899, 0x2d87, 0x2, 0x8, 0x8, 0x8, 0x5, 0x4, 0x9, 0x1, 0x3, 0x6, 0x9, 0xff, 0x2000, 0x4, 0x75, 0x1, 0x4, 0x4, 0x0, 0xd, 0x5, 0x433, 0x9, 0x4, 0x5, 0x7ff, 0x200, 0x81, 0xfffffffb, 0x6, 0x5, 0x7, 0x7ff, 0x80000001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x964, 0x2, 0x5, 0x0, 0x3, 0x24000000, 0x3, 0x8, 0x307, 0x6, 0x80, 0x3, 0x3, 0x8000, 0x832b, 0x6, 0x10000, 0x0, 0x0, 0x5, 0x5, 0x1, 0x6, 0x93c, 0xf75f, 0x7, 0x7f, 0x0, 0x2800000, 0x6, 0x9, 0x3, 0xa, 0x6, 0x7, 0x3, 0x0, 0xaa3, 0x2, 0x101, 0x3, 0x9, 0x1, 0xe, 0x4, 0xfffffc01, 0x101, 0x8, 0x2, 0x3, 0x4, 0xffff, 0x7fffffff, 0x6, 0x5, 0x4a, 0xbcc, 0xff, 0x8, 0x5, 0xff, 0xff, 0x6, 0x9b4, 0x3, 0x0, 0x2, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4, 0x81, 0x4, 0x8, 0x10000, 0x74f, 0x5, 0x7fffffff, 0x2, 0x4, 0x8, 0xfffffffa, 0x80, 0x1000, 0x400, 0x7, 0xd2a, 0x3, 0x400, 0x1b, 0x400, 0x4, 0x8, 0x10000, 0x1ff, 0x1, 0xad9d, 0xff, 0xb, 0x3, 0x2, 0xa99, 0x4, 0xa, 0x6609, 0x5, 0x3, 0x4, 0x101, 0x7, 0x7, 0x21, 0x8, 0x8, 0x2, 0x1020, 0xc, 0x0, 0x5, 0x7fffffff, 0xffffffff, 0x9, 0xc, 0x1, 0x7ff, 0x9, 0x1, 0xff, 0x8, 0x7, 0xc, 0x5, 0x6, 0x8000, 0xc, 0x8, 0x37, 0x55, 0x4, 0x4, 0xefaf, 0x80000001, 0x4, 0x6, 0x0, 0x3, 0x1, 0x1, 0x9, 0xd25e, 0xc, 0x5a44, 0xd3, 0x3, 0x8, 0x6, 0x2, 0x4, 0x2d, 0xab, 0x6, 0xffff, 0x5, 0xb, 0x5, 0xffff6e32, 0x4, 0x800, 0xffff, 0x3, 0x1ff, 0x3da9, 0x6, 0x8, 0x2, 0x6, 0xf, 0x5, 0x78, 0x0, 0x7, 0x200000, 0xfff, 0x8001, 0x5, 0x1ff, 0x90000000, 0x7968a3e5, 0x5, 0x9, 0x7fff, 0x2, 0x81, 0x0, 0x100, 0x0, 0xfff, 0x6, 0x4, 0x10, 0x1ff, 0x7f, 0x9, 0x7, 0x10, 0x3, 0x3b, 0x2, 0xfffffff8, 0x9, 0x2, 0xffff7597, 0xc, 0x8, 0xfffffffb, 0x1, 0x2, 0xc, 0x9, 0x65c, 0xd, 0x7, 0x7, 0x5, 0x5, 0x2, 0x5, 0x0, 0x1, 0x0, 0x5, 0x9, 0x4, 0x1, 0x5, 0x8000, 0x1, 0x7, 0x21f, 0x24000000, 0x2, 0x8, 0x9, 0x4, 0x4bf, 0x1, 0x1, 0x6d9, 0x1, 0x3, 0x4, 0x0, 0x9]}]}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0xc, 0x80, 0x40, 0x7, 0x1, 0x7ed, 0x9, 0x9, 0x34b, 0x5, 0x7ff, 0x400, 0x7a8d, 0x4, 0x74e8b26a, 0x81, 0x2, 0x3, 0x6, 0x3, 0x9, 0x9, 0x7, 0xf, 0x5279, 0x10000, 0x7, 0x4, 0x9, 0x1, 0x25, 0x81f, 0xf, 0x9, 0x8, 0x1, 0x80000000, 0x8, 0x5, 0xe, 0xd37, 0x7, 0x800, 0x4, 0x10, 0x2, 0x2, 0xffffffff, 0x8001, 0x6, 0x3, 0xee99, 0x474, 0x10000, 0x9, 0x9, 0x8cce, 0x100, 0x2, 0x4, 0x7, 0xffffffff, 0x0, 0x6, 0xfffffff8, 0x8, 0x2, 0x1, 0x7, 0x1, 0xac, 0x3, 0x9, 0xfffffffc, 0x80, 0x10, 0x7fff, 0x7, 0x4, 0x2, 0x101, 0x78b, 0x7ff, 0x8, 0x78000000, 0x101, 0xc, 0x5, 0x3, 0xf534, 0x4, 0x2, 0x4000, 0x14ac, 0x64ebc947, 0x10001, 0xacd, 0x6, 0x6, 0xfffffffd, 0x0, 0x4, 0x2c, 0x0, 0x5, 0x7, 0x13a6, 0xb9, 0x1, 0x8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x0, 0x80000000, 0xf73, 0x10001, 0x5, 0x10001, 0x9, 0x7, 0x8fcf, 0x63165378, 0x9, 0x8, 0x6, 0x6, 0x3, 0xf33, 0x3, 0x9, 0x498, 0x6, 0x9, 0xffff41fd, 0x2, 0x8, 0x4, 0x6, 0x6, 0x4, 0x7, 0x200, 0x0, 0x1, 0xff, 0x9, 0x5, 0xfffffff8, 0x7, 0x5, 0x6, 0x4, 0x0, 0x9, 0x1, 0x6, 0x3, 0x14f4, 0x8, 0x6, 0x9, 0x954, 0xc, 0x7fffffff, 0xffffffff, 0x480000, 0x8, 0x7, 0x8, 0x4401, 0x6, 0xe6, 0x4, 0x9, 0x0, 0xffffffff, 0xe9, 0x32, 0xf1, 0x800, 0x20080, 0x9, 0x1, 0x976, 0x0, 0x7, 0x8, 0x9, 0xffffc69c, 0xbb2, 0x4, 0x3, 0x9, 0x7fff, 0x16, 0xd, 0x3, 0x6, 0x1, 0x1ff, 0x80000001, 0x7, 0xb, 0x3c0b, 0xffffffff, 0x4, 0x3caa, 0x100, 0x2, 0x1, 0xfffffff9, 0x4, 0xd6c7, 0xffffe53f, 0x99, 0x0, 0x3, 0x7, 0xf, 0x7701, 0x7, 0x7, 0xfff, 0x280, 0x2, 0xc12, 0x7, 0x9, 0x1, 0x3, 0x3, 0x40000000, 0xff, 0x4, 0x3ff, 0x8, 0xe2e4, 0xf, 0x5, 0x200, 0x9, 0x0, 0x9, 0x5, 0x0, 0x3, 0x8, 0x0, 0x401, 0x9, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x100, 0xffffffff, 0x407, 0x8, 0xb8, 0x0, 0x80000000, 0x2, 0x1, 0x1, 0x9, 0x5, 0xffffff6a, 0xd09, 0x4, 0x3, 0x3, 0x6a, 0x6, 0x4, 0x9, 0x1, 0xfffffff8, 0x4, 0xde39, 0x2, 0x7f, 0x4837, 0x0, 0x92, 0x1, 0x8000000, 0x5, 0x9, 0x5, 0x9, 0x3, 0xffff, 0x81, 0x4, 0xc, 0x3ff, 0x3, 0xdac, 0x8, 0x7ff, 0x5, 0x634, 0x10001, 0x9, 0x4, 0x0, 0x1, 0x3, 0x5, 0x9, 0x400, 0x1, 0x86b0, 0x9, 0x4, 0x2, 0x6, 0x3, 0x101, 0xff, 0xc, 0x9, 0xfff, 0x2, 0x7, 0x4f0, 0x9, 0x80000001, 0x4, 0x0, 0x0, 0x4, 0xcab5, 0xed, 0x6, 0x7f, 0x40, 0x6, 0x9, 0x2, 0xb4, 0x7, 0x4, 0x7ff, 0xb2, 0x0, 0x5, 0x1, 0x7, 0xebe, 0x9, 0x2, 0x9, 0x0, 0x7, 0x6a, 0x680, 0x34a, 0x200, 0x4, 0x4d, 0x2, 0x1, 0x1, 0x3, 0x3, 0x6, 0x7, 0x2, 0x7fff, 0xf, 0xfe, 0x3, 0x9, 0x3, 0x6, 0x4, 0x800, 0xd9, 0xe, 0x1, 0xde2, 0x5, 0x1, 0x5d, 0xf17, 0x4, 0x6, 0x7, 0x8, 0x9, 0x2, 0x59, 0x1010, 0xd, 0x100, 0x680acdce, 0x9, 0x8, 0x2, 0x0, 0x7, 0xa41d, 0xb3, 0x40, 0x7, 0xffffff4a, 0x6, 0x0, 0x8, 0x6, 0x8, 0xa4, 0xd, 0x101, 0xfff, 0x78, 0x7, 0xb, 0x80000000, 0x8, 0x7f, 0xa, 0x7, 0x7, 0x8, 0x8b, 0x4, 0x1, 0x558, 0xc6f2, 0x7, 0x8, 0x3, 0x639, 0x6, 0x400, 0x10000, 0x9, 0xa05, 0x2, 0x4d58, 0x4, 0x6, 0x1, 0x9, 0x8, 0x5, 0x8000, 0xfffffff7, 0x3ff, 0x2, 0xb, 0x3, 0x9, 0x4a, 0x9, 0x7fff, 0x8, 0x1000, 0x6, 0x3, 0x9, 0x7c25, 0x6, 0x68, 0x9a0, 0x9, 0xfffffffe, 0x800a, 0xa60, 0x10001, 0xd76c, 0x9, 0x1, 0x3, 0xffff, 0x6e7, 0xad2, 0x1000, 0x40, 0x7, 0x65301570, 0x4, 0x7ff, 0xb676, 0x5, 0xe, 0x8, 0x3, 0x6340, 0x5, 0xa0f7, 0x6, 0x0, 0x1, 0x4, 0x8000, 0x40, 0x2, 0xefa2, 0x0, 0xf2c, 0xb, 0x8, 0x100, 0x8f3776d, 0x8]}]}]}}]}, 0x104c}, 0x1, 0x0, 0x0, 0x20044010}, 0x81) recvmmsg$unix(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x54}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x14, r9, 0x801, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2a, &(0x7f0000000040)) r11 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xa, "bba899a3"}, @main=@item_4={0x3, 0x0, 0xa, "ff54582f"}]}}, 0x0}, 0x0) 8.424019008s ago: executing program 3 (id=816): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$inet6(0xa, 0x3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r4}, 0x38) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r7, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x541b, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r8) 8.073865101s ago: executing program 0 (id=817): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x6, 0x0, &(0x7f0000000440)="553fc696f4b1"}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b03, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500000000"], 0x74}}, 0x0) 7.461553478s ago: executing program 5 (id=818): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x2, 0x80805, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x4, 0x5, 0x1, 0x0, 0x1}) sendmmsg$inet_sctp(r4, &(0x7f0000000880), 0x0, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/39, @ANYRES32=0x0], 0x30}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6}) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40046201, &(0x7f0000000040)='/dev/dma_heap/system\x00') ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086201, &(0x7f0000000080)=0x2) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) 6.611740267s ago: executing program 4 (id=819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x1, 0x8, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/rt_acct\x00') preadv(r6, &(0x7f0000000000)=[{0x0}], 0x1, 0x4, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8014}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0xfffd}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r8, &(0x7f0000002180)=""/4101, 0x1005, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xfffffffffffffed2, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0xc, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x2004004}, 0x40080) 5.94075864s ago: executing program 5 (id=820): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETPID(0x0, 0x3, 0xb, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000004c00), 0x1, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYBLOB='&'], 0x10) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000002) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r8, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="20000000020703000000000000000000020000070900010073797a300000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.223076123s ago: executing program 2 (id=821): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffffffffffae, 0x0, 0x0}, 0x58) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x25, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0xffb, 0x0, 0xb49, 0xc, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000004) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000280)={0xdddd1000, 0x11f000}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x6}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="000c0000000c0000000200000000000000000000040000000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x0, 0x5, 0xdd, &(0x7f0000000840)=""/221, 0x41000, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0x10}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x8}, 0x94) r6 = epoll_create1(0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f00000000c0)={0x60000005}) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x4, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r8, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.099732621s ago: executing program 3 (id=822): syz_io_uring_setup(0x16440, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3}, &(0x7f0000000040), &(0x7f0000001700)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x8}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x27, 0x1, 0x9) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x30100) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fanotify_init(0x200, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200, 0x8000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000100)={0x3, 0x0, '\x00', {0x0, @bt={0x6, 0xfff, 0x0, 0x2, 0xed8, 0x8, 0x3, 0x3, 0x9, 0x6, 0x984, 0x3, 0x100, 0x9, 0x1, 0x2, {0x7ff, 0x6}, 0xd, 0x61}}}) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000001c0)=0x10001) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x10000) read$dsp(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r1, &(0x7f0000000200)=""/168, 0xa8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) 4.991035888s ago: executing program 5 (id=823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x1, 0x8, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/rt_acct\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x8014}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r8, &(0x7f0000002180)=""/4101, 0x1005, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r9, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xfffffffffffffed2, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0xc, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x2004004}, 0x40080) 4.613484365s ago: executing program 4 (id=824): getpid() socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000bf85f34018", @ANYRES16=0x0, @ANYBLOB="200028bd7000fddbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e000300"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) sendmsg$AUDIT_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x806, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x1, r0, 0xe, 0x9, 0x6, 0xffffffff, 0x0, 0x7fff, 0x9}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x412240, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 3.452751582s ago: executing program 0 (id=825): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') write$uinput_user_dev(r3, 0x0, 0x0) syz_io_uring_setup(0x57d6, &(0x7f0000000000)={0x0, 0xc847, 0x1, 0x1, 0x44, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000100)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') 3.24756486s ago: executing program 4 (id=826): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x8001}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000889}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @none, 0x7}, 0xe) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="1709000000000000000001000000050007000000000008000900ffff"], 0x58}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r9, 0x80845663, &(0x7f00000003c0)) 3.064140367s ago: executing program 5 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve0\x00'}}, 0x1e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semctl$IPC_RMID(0x0, 0x0, 0x10) socket$pppoe(0x18, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000180)=0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYRES16=r8], 0x20}}, 0x40014) r10 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r10, 0x40084146, &(0x7f00000001c0)={0x99, [[0x5, 0x0, 0x6, 0x1, 0x3, 0x8, 0x6, 0x1ffd], [0x1000, 0x0, 0x7, 0x6], [0x4000, 0x0, 0x400, 0x0, 0x1, 0x1, 0x4]], '\x00', [{0x8000}, {0x9}, {}, {0x0, 0xfffffff8}, {0x0, 0x2}, {0x3}, {0x4}, {}, {0x20, 0xb9f985e}, {}, {0x0, 0x9}, {0xffffffff}], '\x00', 0x4a0}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2.085649308s ago: executing program 5 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0), 0x228a034, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0/file0\x00', 0x48) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1885006, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) getrlimit(0x6, &(0x7f0000000000)) 2.056008254s ago: executing program 2 (id=829): r0 = socket(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = timerfd_create(0x6, 0x0) timerfd_settime(r3, 0x2, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e20, @multicast1}, 0x10) timer_create(0x7, &(0x7f0000000080)={0x0, 0x29, 0x1}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x2, 0x0) splice(r7, 0x0, r6, 0x0, 0x41c, 0xe) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) r9 = socket$kcm(0xa, 0x7, 0x73) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, 0x0, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x44004}, 0x0) sendmsg$kcm(r9, &(0x7f0000000340)={&(0x7f0000000380)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0}, 0x4008004) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000280)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4806}, 0x20040040) 1.58451724s ago: executing program 3 (id=830): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000000c0)={r1}) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x2, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0xfffffffffffffffd, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0xd2c, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) r7 = socket(0x10, 0x803, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x1b4, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xfff3}, {0x0, 0x3}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x180, 0x2, [@TCA_MATCHALL_ACT={0x17c, 0x2, [@m_gact={0x178, 0x16, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x3, 0x2, 0x9, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1e7e, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x8d9, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x57f0, 0xffffffffffffffff, 0x2, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x81d7, 0x8, 0x7, 0x0, 0x19}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x10000006, 0x81, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x24b8, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x9, 0x20000000, 0xd, 0xfff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffeffff, 0x7fff, 0x0, 0x42a, 0x1}}]}, {0x97, 0x6, "44753bf3797902c6d453257312b7cf1e01cd3783e7f28860c0f02dc20a4223203b95d3f8bf07ed0da77adae297c048ea0773fe2035e85a599624ae5603a1534996a8a8f861996a6d0e118b874664071534fe6d5f58348c357ab754c5e188934c3528fe55fbe9913ad7b78eddb6aae2fd78f225dfe0029e5b0b9a6c29c3e3cb5dab56c787ca42224ce109d9f5fe425c449da1c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.445742404s ago: executing program 5 (id=831): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {0x0}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) setrlimit(0x9, &(0x7f00000001c0)={0x5, 0xdbc}) 1.033193139s ago: executing program 0 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0xef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20010, 0xffffffffffffffff, 0x200000) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8926, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r6 = accept4(r0, &(0x7f00000002c0)=@xdp, &(0x7f0000000140)=0x80, 0x80800) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa) connect$bt_rfcomm(r6, 0x0, 0x0) 817.458422ms ago: executing program 2 (id=833): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4800, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$inet6(0xa, 0x3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r4}, 0x38) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r7, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x541b, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r8) 0s ago: executing program 4 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x54593, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x100000, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}}, 0x108) r5 = syz_open_dev$usbmon(0x0, 0x7, 0x20000) read$usbmon(r5, 0x0, 0x0) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) syz_open_dev$usbfs(0x0, 0x205, 0x44680) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xf63, 0x5}, {0x800}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r8, 0x0, 0xfdef) kernel console output (not intermixed with test programs): audit: type=1400 audit(2000000194.786:1094): avc: denied { nlmsg_write } for pid=8590 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 303.136053][ T30] audit: type=1400 audit(2000000196.016:1095): avc: denied { create } for pid=8594 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 306.122344][ T8636] netlink: 48 bytes leftover after parsing attributes in process `syz.3.433'. [ 307.025140][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 307.051965][ T30] audit: type=1400 audit(2000000199.766:1118): avc: denied { read write } for pid=8642 comm="syz.4.436" name="vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 307.484596][ T30] audit: type=1400 audit(2000000199.766:1119): avc: denied { open } for pid=8642 comm="syz.4.436" path="/dev/vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 307.512058][ T30] audit: type=1400 audit(2000000199.926:1120): avc: denied { ioctl } for pid=8645 comm="syz.0.437" path="/dev/vbi0" dev="devtmpfs" ino=952 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 307.541826][ T30] audit: type=1400 audit(2000000199.936:1121): avc: denied { setopt } for pid=8642 comm="syz.4.436" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 307.668589][ T30] audit: type=1400 audit(2000000200.016:1122): avc: denied { firmware_load } for pid=8642 comm="syz.4.436" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 307.748057][ T30] audit: type=1400 audit(2000000200.326:1123): avc: denied { read write } for pid=8629 comm="syz.2.443" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 308.043726][ T30] audit: type=1400 audit(2000000200.336:1124): avc: denied { open } for pid=8629 comm="syz.2.443" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 308.180322][ T30] audit: type=1400 audit(2000000200.956:1125): avc: denied { read write } for pid=8656 comm="syz.5.440" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 308.231724][ T30] audit: type=1400 audit(2000000200.956:1126): avc: denied { open } for pid=8656 comm="syz.5.440" path="/dev/sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 308.257634][ T30] audit: type=1400 audit(2000000200.966:1127): avc: denied { connect } for pid=8656 comm="syz.5.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 309.063350][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.439'. [ 309.334322][ T8665] : renamed from bridge_slave_0 (while UP) [ 309.601964][ T8644] syz.4.436 (8644) used greatest stack depth: 19752 bytes left [ 310.554406][ T8682] geneve2: entered promiscuous mode [ 312.092591][ T8707] trusted_key: encrypted_key: key user:syz not found [ 312.229910][ T8711] @: renamed from vlan0 [ 312.295992][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 312.296008][ T30] audit: type=1400 audit(2000000205.186:1133): avc: denied { ioctl } for pid=8708 comm="syz.3.453" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 312.561335][ T30] audit: type=1400 audit(2000000205.446:1134): avc: denied { execute } for pid=8713 comm="syz.5.464" name="file1" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 312.583437][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.727840][ T30] audit: type=1400 audit(2000000205.446:1135): avc: denied { execute_no_trans } for pid=8713 comm="syz.5.464" path="/68/file1" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 312.751083][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.830860][ T30] audit: type=1400 audit(2000000205.716:1136): avc: denied { execute } for pid=8714 comm="syz.4.454" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 312.930661][ T30] audit: type=1400 audit(2000000205.756:1137): avc: denied { bind } for pid=8714 comm="syz.4.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 313.055689][ T30] audit: type=1400 audit(2000000205.866:1138): avc: denied { read write } for pid=8724 comm="syz.2.455" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.231710][ T30] audit: type=1400 audit(2000000205.866:1139): avc: denied { open } for pid=8724 comm="syz.2.455" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 313.325669][ T30] audit: type=1400 audit(2000000205.946:1140): avc: denied { mount } for pid=8724 comm="syz.2.455" name="/" dev="configfs" ino=1059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 314.959012][ T30] audit: type=1400 audit(2000000207.846:1141): avc: denied { read write } for pid=8736 comm="syz.4.457" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 314.988484][ T30] audit: type=1400 audit(2000000207.876:1142): avc: denied { open } for pid=8736 comm="syz.4.457" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 315.995706][ T8747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.189035][ T8740] ceph: No mds server is up or the cluster is laggy [ 316.798724][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.805181][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.247479][ T8766] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 317.311643][ T5983] Bluetooth: hci5: Frame reassembly failed (-84) [ 317.338035][ T8762] sctp_transport_update_pmtu: 58 callbacks suppressed [ 317.338054][ T8762] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 317.361276][ T8762] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 317.371971][ T8762] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 317.389347][ T8762] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 317.407637][ T8762] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 317.418232][ T8762] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 317.428754][ T8762] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 317.471200][ T8762] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 317.485662][ T8762] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 317.498777][ T8762] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 317.597563][ T43] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 317.605369][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.462'. [ 317.732963][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 317.732975][ T30] audit: type=1400 audit(2000000210.626:1159): avc: denied { read } for pid=8775 comm="syz.5.465" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.781588][ T6134] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 317.792584][ T43] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 317.802672][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.817420][ T30] audit: type=1400 audit(2000000210.626:1160): avc: denied { open } for pid=8775 comm="syz.5.465" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.851766][ T43] usb 3-1: Product: syz [ 317.863842][ T43] usb 3-1: Manufacturer: syz [ 317.871880][ T43] usb 3-1: SerialNumber: syz [ 317.890579][ T43] usb 3-1: config 0 descriptor?? [ 317.908615][ T43] ttusb_dec_send_command: command bulk message failed: error -22 [ 317.927700][ T43] ttusb-dec 3-1:0.0: probe with driver ttusb-dec failed with error -22 [ 317.971618][ T6134] usb 5-1: Using ep0 maxpacket: 8 [ 317.983441][ T6134] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 318.009556][ T6134] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 318.047950][ T6134] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 318.072449][ T6134] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 318.094741][ T6134] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.164125][ T8757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.195014][ T30] audit: type=1400 audit(2000000211.056:1161): avc: denied { write } for pid=8756 comm="syz.2.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 318.215354][ T6134] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 318.238529][ T8757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.274116][ T6134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.295001][ T9] usb 3-1: USB disconnect, device number 16 [ 318.772535][ T6134] usb 5-1: usb_control_msg returned -32 [ 318.781048][ T6134] usbtmc 5-1:16.0: can't read capabilities [ 318.821679][ T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 319.019096][ T43] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 319.065058][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.122208][ T43] usb 4-1: Product: syz [ 319.142704][ T8789] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 319.176227][ T43] usb 4-1: Manufacturer: syz [ 319.264717][ T43] usb 4-1: SerialNumber: syz [ 319.272828][ T5865] Bluetooth: hci5: command 0x1003 tx timeout [ 319.282275][ T5861] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 319.320910][ T43] usb 4-1: config 0 descriptor?? [ 319.327729][ T5983] Bluetooth: hci6: Frame reassembly failed (-84) [ 319.369789][ T43] ttusb_dec_send_command: command bulk message failed: error -22 [ 319.469909][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 319.478887][ T8772] netlink: 'syz.4.459': attribute type 5 has an invalid length. [ 319.479267][ T8759] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 319.494036][ T43] ttusb-dec 4-1:0.0: probe with driver ttusb-dec failed with error -22 [ 319.538882][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.4.459'. [ 319.682245][ T8772] geneve2: entered promiscuous mode [ 319.689834][ T8772] geneve2: entered allmulticast mode [ 319.693251][ T8783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.960309][ T8795] qnx6: unable to read the first superblock [ 320.303413][ T1162] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 320.316781][ T8783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.338317][ T1162] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 320.381155][ T9] usb 4-1: USB disconnect, device number 17 [ 320.409027][ T1162] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 320.442856][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 321.107808][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.5.471'. [ 321.202784][ T5848] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 321.238925][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 321.694181][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 321.733968][ T8805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.741648][ T8805] IPv6: NLM_F_CREATE should be set when creating new route [ 321.766858][ T30] audit: type=1400 audit(2000000214.221:1162): avc: denied { bind } for pid=8803 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 321.824469][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 321.851854][ T3421] usb 5-1: USB disconnect, device number 14 [ 321.930934][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.957676][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.972862][ T30] audit: type=1400 audit(2000000214.221:1163): avc: denied { write } for pid=8803 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 322.004118][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.026053][ T30] audit: type=1400 audit(2000000214.231:1164): avc: denied { lock } for pid=8803 comm="syz.3.472" path="socket:[17987]" dev="sockfs" ino=17987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 322.049890][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.151743][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 322.160813][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.261724][ T5916] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 323.326248][ T9] usb 1-1: usb_control_msg returned -32 [ 323.337239][ T9] usbtmc 1-1:16.0: can't read capabilities [ 323.354073][ T6134] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 323.422424][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 323.429404][ T5916] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 323.443775][ T5916] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 323.453996][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.464591][ T5916] usb 4-1: Product: syz [ 323.468995][ T5916] usb 4-1: Manufacturer: syz [ 323.477304][ T5916] usb 4-1: SerialNumber: syz [ 323.486789][ T5916] usb 4-1: config 0 descriptor?? [ 323.498159][ T8809] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 323.507018][ T5916] hub 4-1:0.0: bad descriptor, ignoring hub [ 323.513115][ T5916] hub 4-1:0.0: probe with driver hub failed with error -5 [ 323.528619][ T6134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.556153][ T6134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.570425][ T30] audit: type=1400 audit(2000000216.461:1165): avc: denied { bind } for pid=8822 comm="syz.5.477" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.601106][ T30] audit: type=1400 audit(2000000216.471:1166): avc: denied { name_bind } for pid=8822 comm="syz.5.477" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 323.624641][ T30] audit: type=1400 audit(2000000216.471:1167): avc: denied { node_bind } for pid=8822 comm="syz.5.477" saddr=fc02::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 323.649010][ T30] audit: type=1400 audit(2000000216.481:1168): avc: denied { mount } for pid=8822 comm="syz.5.477" name="/" dev="pstore" ino=4220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 323.672087][ T6134] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 323.681215][ T6134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.705666][ T6134] usb 5-1: config 0 descriptor?? [ 323.790705][ T30] audit: type=1400 audit(2000000216.671:1169): avc: denied { mounton } for pid=8808 comm="syz.3.474" path="/proc/485/task" dev="proc" ino=18031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 324.102019][ T8829] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 324.110067][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 324.121565][ T8827] netlink: 'syz.0.470': attribute type 5 has an invalid length. [ 324.130278][ T8827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'. [ 324.572186][ T6134] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 324.649207][ T6134] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 324.861132][ T30] audit: type=1400 audit(2000000217.721:1170): avc: denied { create } for pid=8820 comm="syz.4.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 325.032977][ T8839] capability: warning: `syz.4.476' uses 32-bit capabilities (legacy support in use) [ 325.521204][ T6134] usb 1-1: USB disconnect, device number 26 [ 325.591745][ T5916] usb 4-1: USB disconnect, device number 18 [ 325.907504][ T8844] bridge0: port 3(team0) entered disabled state [ 326.877676][ T30] audit: type=1400 audit(2000000218.851:1171): avc: denied { mount } for pid=8842 comm="syz.3.480" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 326.952625][ T9] usb 5-1: USB disconnect, device number 15 [ 327.274356][ T8854] netlink: 'syz.2.479': attribute type 4 has an invalid length. [ 327.282271][ T30] audit: type=1400 audit(2000000220.131:1172): avc: denied { accept } for pid=8846 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 327.311871][ T8844] : left allmulticast mode [ 327.317449][ T8844] : left promiscuous mode [ 327.322114][ T8844] bridge0: port 1() entered disabled state [ 327.336687][ T8844] bridge_slave_1: left allmulticast mode [ 327.343494][ T8844] bridge_slave_1: left promiscuous mode [ 327.359236][ T8844] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.420524][ T8844] bond0: (slave bond_slave_0): Releasing backup interface [ 327.435405][ T30] audit: type=1400 audit(2000000220.321:1173): avc: denied { write } for pid=8840 comm="syz.2.479" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 327.535991][ T8844] bond0: (slave bond_slave_1): Releasing backup interface [ 327.599177][ T30] audit: type=1400 audit(2000000220.321:1174): avc: denied { ioctl } for pid=8840 comm="syz.2.479" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 327.660755][ T8844] team_slave_0: left promiscuous mode [ 327.676261][ T8844] team_slave_0: left allmulticast mode [ 327.753458][ T8844] team0: Port device team_slave_0 removed [ 327.781126][ T8844] team_slave_1: left promiscuous mode [ 327.797220][ T8844] team_slave_1: left allmulticast mode [ 327.840994][ T8844] team0: Port device team_slave_1 removed [ 327.896850][ T8844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.927560][ T8844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.975992][ T8844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.986745][ T8861] netlink: 20 bytes leftover after parsing attributes in process `syz.5.483'. [ 328.014274][ T8844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.038394][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.483'. [ 328.542811][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 328.604651][ T8869] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 329.407228][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 329.418841][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.427577][ T9] usb 5-1: Product: syz [ 329.434513][ T9] usb 5-1: Manufacturer: syz [ 329.440376][ T9] usb 5-1: SerialNumber: syz [ 329.483769][ T9] usb 5-1: config 0 descriptor?? [ 329.498252][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 329.509046][ T9] ttusb-dec 5-1:0.0: probe with driver ttusb-dec failed with error -22 [ 330.142105][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 330.142120][ T30] audit: type=1400 audit(2000000222.951:1179): avc: denied { ioctl } for pid=8872 comm="syz.2.486" path="socket:[18091]" dev="sockfs" ino=18091 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 330.419973][ T9] usb 5-1: USB disconnect, device number 16 [ 330.512261][ T30] audit: type=1400 audit(2000000223.141:1180): avc: denied { sys_module } for pid=8872 comm="syz.2.486" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 331.761791][ T5916] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 331.908579][ T8910] netlink: 'syz.3.492': attribute type 4 has an invalid length. [ 332.327055][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 332.349333][ T5916] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 332.349387][ T5916] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.349402][ T5916] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.349419][ T5916] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.349436][ T5916] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.349456][ T5916] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 332.349468][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.355990][ T30] audit: type=1400 audit(2000000224.891:1181): avc: denied { getopt } for pid=8907 comm="syz.4.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 332.553277][ T5916] usb 1-1: usb_control_msg returned -32 [ 332.553302][ T5916] usbtmc 1-1:16.0: can't read capabilities [ 333.392325][ T8916] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 333.591012][ T8921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.408822][ T8913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8913 comm=syz.4.494 [ 334.463793][ T30] audit: type=1400 audit(2000000227.171:1182): avc: denied { write } for pid=8912 comm="syz.4.494" name="wireless" dev="proc" ino=4026532972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 334.566393][ T30] audit: type=1400 audit(2000000227.451:1183): avc: denied { write } for pid=8923 comm="syz.3.496" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 335.001075][ T30] audit: type=1400 audit(2000000227.881:1184): avc: denied { read } for pid=8923 comm="syz.3.496" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 335.100315][ T30] audit: type=1400 audit(2000000227.891:1185): avc: denied { open } for pid=8923 comm="syz.3.496" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 335.137074][ T30] audit: type=1400 audit(2000000227.891:1186): avc: denied { ioctl } for pid=8923 comm="syz.3.496" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 335.613072][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 336.064813][ T9] usb 1-1: USB disconnect, device number 27 [ 336.189709][ T24] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 336.509071][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.522991][ T24] usb 6-1: Product: syz [ 336.641663][ T24] usb 6-1: Manufacturer: syz [ 336.651285][ T24] usb 6-1: SerialNumber: syz [ 336.683067][ T24] usb 6-1: config 0 descriptor?? [ 337.126964][ T30] audit: type=1400 audit(2000000229.781:1187): avc: denied { unlink } for pid=8945 comm="syz.2.501" name="#12" dev="tmpfs" ino=534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 337.215994][ T5916] libceph: connect (1)[b::]:6789 error -101 [ 337.219337][ T6134] libceph: connect (1)[c::]:6789 error -101 [ 337.239383][ T24] ttusb_dec_send_command: command bulk message failed: error -22 [ 337.256920][ T5916] libceph: mon0 (1)[b::]:6789 connect error [ 337.309028][ T30] audit: type=1400 audit(2000000229.791:1188): avc: denied { mount } for pid=8945 comm="syz.2.501" name="/" dev="overlay" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 337.338832][ T6134] libceph: mon0 (1)[c::]:6789 connect error [ 337.344905][ T30] audit: type=1400 audit(2000000229.901:1189): avc: denied { create } for pid=8945 comm="syz.2.501" name="#16" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 337.438800][ T8942] ceph: No mds server is up or the cluster is laggy [ 337.439055][ T24] ttusb-dec 6-1:0.0: probe with driver ttusb-dec failed with error -22 [ 337.471858][ T8944] ceph: No mds server is up or the cluster is laggy [ 337.533414][ T5916] libceph: connect (1)[b::]:6789 error -101 [ 337.606813][ T8936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.621002][ T8936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.777582][ T24] libceph: connect (1)[c::]:6789 error -101 [ 337.797675][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 337.811687][ T5916] libceph: mon0 (1)[b::]:6789 connect error [ 337.818589][ T30] audit: type=1400 audit(2000000229.911:1190): avc: denied { link } for pid=8945 comm="syz.2.501" name="#16" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 337.861936][ T30] audit: type=1400 audit(2000000229.911:1191): avc: denied { rename } for pid=8945 comm="syz.2.501" name="#17" dev="tmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 337.884734][ T30] audit: type=1400 audit(2000000230.321:1192): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 338.384474][ T9] usb 6-1: USB disconnect, device number 14 [ 338.665274][ T8973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.173230][ T30] audit: type=1400 audit(2000000232.171:1193): avc: denied { shutdown } for pid=8976 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 340.451584][ T30] audit: type=1400 audit(2000000233.321:1194): avc: denied { mount } for pid=8975 comm="syz.5.506" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 340.743338][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.505'. [ 340.791394][ T6070] Bluetooth: hci5: Frame reassembly failed (-84) [ 341.016241][ T30] audit: type=1400 audit(2000000233.901:1195): avc: denied { connect } for pid=8989 comm="syz.3.509" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 341.451639][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 341.490932][ T30] audit: type=1400 audit(2000000234.371:1196): avc: denied { unmount } for pid=6304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 341.907692][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 341.934181][ T24] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 341.961873][ T24] usb 1-1: config 0 has no interface number 0 [ 341.983879][ T24] usb 1-1: config 0 interface 230 has no altsetting 0 [ 342.062762][ T24] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 342.123381][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.167826][ T24] usb 1-1: Product: syz [ 342.193781][ T24] usb 1-1: Manufacturer: syz [ 342.202538][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 342.202553][ T30] audit: type=1400 audit(2000000235.091:1199): avc: denied { write } for pid=9001 comm="syz.5.511" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 342.257266][ T24] usb 1-1: SerialNumber: syz [ 342.290372][ T24] usb 1-1: config 0 descriptor?? [ 342.321161][ T24] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 342.372948][ T30] audit: type=1400 audit(2000000235.251:1200): avc: denied { map } for pid=9001 comm="syz.5.511" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 342.435218][ T9010] CUSE: info not properly terminated [ 342.461119][ T30] audit: type=1400 audit(2000000235.311:1201): avc: denied { create } for pid=9001 comm="syz.5.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 342.658706][ T30] audit: type=1400 audit(2000000235.541:1202): avc: denied { read } for pid=9014 comm="syz.3.513" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 342.691575][ T9] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 342.898198][ T5861] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 342.993047][ T24] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 343.092087][ T9] usb 6-1: config 0 has no interfaces? [ 343.100792][ T9] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 343.133041][ T30] audit: type=1400 audit(2000000235.571:1203): avc: denied { open } for pid=9014 comm="syz.3.513" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 343.179793][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.250056][ T9] usb 6-1: Product: syz [ 343.273458][ T9] usb 6-1: Manufacturer: syz [ 343.295485][ T9] usb 6-1: SerialNumber: syz [ 343.300231][ T30] audit: type=1400 audit(2000000235.611:1204): avc: denied { bind } for pid=9014 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 343.351976][ T9] usb 6-1: config 0 descriptor?? [ 343.578177][ T30] audit: type=1400 audit(2000000236.451:1205): avc: denied { execute } for pid=9001 comm="syz.5.511" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 343.845274][ T30] audit: type=1326 audit(2000000236.731:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d918ec29 code=0x7ffc0000 [ 343.926793][ T30] audit: type=1326 audit(2000000236.731:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d918ec29 code=0x7ffc0000 [ 344.045959][ T6077] Bluetooth: hci5: Frame reassembly failed (-84) [ 344.077924][ T30] audit: type=1326 audit(2000000236.811:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9023 comm="syz.4.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f20d918ec29 code=0x7ffc0000 [ 345.088835][ T24] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 345.100012][ T24] usb 1-1: USB disconnect, device number 28 [ 345.304562][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.518'. [ 345.514250][ T9] usb 6-1: USB disconnect, device number 15 [ 345.846770][ T24] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 346.071612][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 346.585812][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 346.685948][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 346.852294][ T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 346.861343][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.884192][ T24] usb 1-1: Product: syz [ 346.906884][ T24] usb 1-1: Manufacturer: syz [ 346.911555][ T24] usb 1-1: SerialNumber: syz [ 346.917427][ T24] usb 1-1: config 0 descriptor?? [ 347.222184][ T9045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.234337][ T9045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.480275][ T9075] netlink: 'syz.3.526': attribute type 4 has an invalid length. [ 347.529515][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 347.529531][ T30] audit: type=1400 audit(2000000240.381:1256): avc: denied { bind } for pid=9063 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 347.556118][ T3421] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 347.755374][ T3421] usb 6-1: config 0 has no interfaces? [ 347.844302][ T3421] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 347.866462][ T3421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.903027][ T3421] usb 6-1: Product: syz [ 347.933904][ T3421] usb 6-1: Manufacturer: syz [ 347.962356][ T3421] usb 6-1: SerialNumber: syz [ 347.972225][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.524'. [ 347.994835][ T3421] usb 6-1: config 0 descriptor?? [ 348.000149][ T30] audit: type=1400 audit(2000000240.851:1257): avc: denied { setopt } for pid=9063 comm="syz.2.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 348.628161][ T9080] netlink: 'syz.0.527': attribute type 5 has an invalid length. [ 348.673097][ T24] usb 1-1: USB disconnect, device number 29 [ 348.725257][ T9080] netlink: 'syz.0.527': attribute type 7 has an invalid length. [ 349.595916][ T6783] udevd[6783]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.684915][ T30] audit: type=1326 audit(2000000242.571:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9066 comm="syz.5.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe68778ec29 code=0x0 [ 349.969894][ T9074] ieee80211 phy17: Failed to add default virtual iface [ 350.001716][ T24] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 350.011757][ T30] audit: type=1400 audit(2000000242.851:1259): avc: denied { connect } for pid=9094 comm="syz.3.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 350.054309][ T9080] : entered promiscuous mode [ 350.258096][ T30] audit: type=1400 audit(2000000243.101:1260): avc: denied { write } for pid=9094 comm="syz.3.530" path="socket:[19576]" dev="sockfs" ino=19576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 350.306684][ T5989] usb 6-1: USB disconnect, device number 16 [ 350.335163][ T30] audit: type=1400 audit(2000000243.191:1261): avc: denied { read } for pid=5515 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 350.385398][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.398025][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 350.448835][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 350.464951][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 350.491070][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 350.501334][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 350.511999][ T24] usb 1-1: Manufacturer: syz [ 350.520826][ T24] usb 1-1: config 0 descriptor?? [ 350.725491][ T30] audit: type=1400 audit(2000000243.611:1262): avc: denied { write } for pid=9103 comm="syz.4.531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 351.001521][ T24] rc_core: IR keymap rc-hauppauge not found [ 351.007639][ T24] Registered IR keymap rc-empty [ 351.019717][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 351.073881][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 351.142513][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 351.208427][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 351.370243][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 351.371702][ T30] audit: type=1400 audit(2000000244.241:1263): avc: denied { read } for pid=5205 comm="acpid" name="event4" dev="devtmpfs" ino=3059 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.399364][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.415086][ T30] audit: type=1400 audit(2000000244.241:1264): avc: denied { open } for pid=5205 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3059 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.444250][ T30] audit: type=1400 audit(2000000244.241:1265): avc: denied { ioctl } for pid=5205 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3059 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.469214][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.519151][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 351.691825][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 351.741834][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 351.781806][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 351.801908][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 351.882012][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 351.952256][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 352.013682][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 352.111773][ T5989] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 352.263503][ T24] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 352.271756][ T5989] usb 3-1: Using ep0 maxpacket: 32 [ 352.283496][ T5989] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.305129][ T5989] usb 3-1: config 0 interface 0 has no altsetting 0 [ 352.393591][ T5989] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 352.403217][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.456416][ T5989] usb 3-1: config 0 descriptor?? [ 352.573205][ T9135] netlink: 32 bytes leftover after parsing attributes in process `syz.3.537'. [ 353.771622][ T24] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 353.786568][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 353.786606][ T30] audit: type=1400 audit(2000000246.631:1267): avc: denied { unmount } for pid=9128 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 353.787216][ T6134] Process accounting resumed [ 353.824116][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 353.919958][ T5989] vrc2 0003:07C0:1125.0002: fixing up VRC-2 report descriptor [ 354.015113][ T24] usb 1-1: USB disconnect, device number 30 [ 354.061691][ T5989] input: HID 07c0:1125 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:07C0:1125.0002/input/input17 [ 354.128683][ T9143] netlink: 'syz.3.538': attribute type 4 has an invalid length. [ 354.612079][ T5989] vrc2 0003:07C0:1125.0002: input,hidraw0: USB HID v0.02 Joystick [HID 07c0:1125] on usb-dummy_hcd.2-1/input0 [ 354.945433][ T9157] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 355.432326][ T30] audit: type=1400 audit(2000000248.231:1268): avc: denied { create } for pid=9158 comm="syz.4.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 355.756384][ T5989] usb 3-1: USB disconnect, device number 17 [ 355.770325][ T30] audit: type=1400 audit(2000000248.251:1269): avc: denied { ioctl } for pid=9158 comm="syz.4.541" path="socket:[19711]" dev="sockfs" ino=19711 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 355.951749][ T24] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 356.058396][ T30] audit: type=1400 audit(2000000248.921:1270): avc: denied { search } for pid=9165 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.145546][ T30] audit: type=1400 audit(2000000248.941:1271): avc: denied { search } for pid=9165 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.182129][ T30] audit: type=1400 audit(2000000248.941:1272): avc: denied { search } for pid=9165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.206623][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.221989][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 356.241870][ T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 356.261058][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.309176][ T30] audit: type=1400 audit(2000000248.941:1273): avc: denied { search } for pid=9165 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.326123][ T24] usb 5-1: config 0 descriptor?? [ 356.417062][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 356.439361][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 356.453259][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 356.472220][ T30] audit: type=1400 audit(2000000248.971:1274): avc: denied { read open } for pid=9168 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.477420][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 356.512210][ T24] usb 5-1: media controller created [ 356.525902][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.641691][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 356.671026][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 356.678593][ T30] audit: type=1400 audit(2000000248.971:1275): avc: denied { getattr } for pid=9168 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.709736][ T30] audit: type=1400 audit(2000000248.971:1276): avc: denied { getattr } for pid=9168 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 356.740136][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 356.767876][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 356.866332][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 357.023024][ T6134] dvb-usb: bulk message failed: -22 (1/0) [ 357.030760][ T6134] dvb-usb: error while querying for an remote control event. [ 357.220785][ T9185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.542'. [ 357.231701][ T6134] dvb-usb: bulk message failed: -22 (1/0) [ 357.237506][ T6134] dvb-usb: error while querying for an remote control event. [ 357.240371][ T9185] : renamed from bridge_slave_0 (while UP) [ 357.460445][ T9192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.545'. [ 357.475024][ T6134] dvb-usb: bulk message failed: -22 (1/0) [ 357.500989][ T6134] dvb-usb: error while querying for an remote control event. [ 357.856904][ T6134] dvb-usb: bulk message failed: -22 (1/0) [ 357.960244][ T9200] overlayfs: missing 'lowerdir' [ 358.218725][ T5916] usb 5-1: USB disconnect, device number 17 [ 358.455746][ T9206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'. [ 358.520721][ T6134] dvb-usb: error while querying for an remote control event. [ 358.855835][ T9208] sctp_transport_update_pmtu: 105 callbacks suppressed [ 358.855856][ T9208] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 358.875171][ T9208] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 358.936347][ T9208] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 358.971783][ T9208] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 358.984379][ T9208] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 358.995174][ T9208] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 359.005731][ T9208] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 359.016262][ T9208] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 359.037040][ T9208] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 359.047932][ T9208] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 359.412014][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 359.412025][ T30] audit: type=1400 audit(2000000252.291:1288): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 359.540085][ T9221] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.550'. [ 359.763867][ T5916] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 360.104031][ T30] audit: type=1400 audit(2000000252.941:1289): avc: denied { write } for pid=9233 comm="syz.2.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 360.191741][ T5916] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 360.373273][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 360.379937][ T5916] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 360.404004][ T5916] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.429177][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.751934][ T5916] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.845534][ T30] audit: type=1400 audit(2000000253.721:1290): avc: denied { ioctl } for pid=9244 comm="syz.3.553" path="socket:[20545]" dev="sockfs" ino=20545 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 361.199722][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.552'. [ 361.209548][ T5916] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.282515][ T5916] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 361.306475][ T24] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 361.337517][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.387234][ T5916] usb 5-1: can't set config #16, error -71 [ 361.478369][ T5916] usb 5-1: USB disconnect, device number 18 [ 361.553065][ T24] usb 6-1: config 0 has an invalid interface number: 76 but max is 0 [ 361.613162][ T24] usb 6-1: config 0 has no interface number 0 [ 361.642051][ T24] usb 6-1: config 0 interface 76 has no altsetting 0 [ 361.690306][ T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=62.9a [ 361.710664][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.778511][ T24] usb 6-1: Product: syz [ 361.793268][ T24] usb 6-1: Manufacturer: syz [ 361.812534][ T24] usb 6-1: SerialNumber: syz [ 361.833184][ T24] usb 6-1: config 0 descriptor?? [ 362.753844][ T24] cp210x 6-1:0.76: cp210x converter detected [ 362.775767][ T9261] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.030773][ T9272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9272 comm=syz.5.554 [ 363.081951][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 363.297371][ T30] audit: type=1400 audit(2000000255.941:1291): avc: denied { read write } for pid=9246 comm="syz.5.554" name="mouse0" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 363.449191][ T30] audit: type=1400 audit(2000000255.941:1292): avc: denied { open } for pid=9246 comm="syz.5.554" path="/dev/input/mouse0" dev="devtmpfs" ino=975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 363.671563][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 364.271587][ T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 364.453839][ T30] audit: type=1400 audit(2000000256.001:1293): avc: denied { getopt } for pid=9246 comm="syz.5.554" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 364.591637][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.614926][ T24] cp210x 6-1:0.76: failed to get vendor val 0x370b size 1: -71 [ 364.619633][ T30] audit: type=1400 audit(2000000256.201:1294): avc: denied { accept } for pid=9253 comm="syz.2.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 364.633190][ T24] cp210x 6-1:0.76: querying part number failed [ 364.722746][ T30] audit: type=1400 audit(2000000256.541:1295): avc: denied { read } for pid=9276 comm="syz.0.560" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 364.778216][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 364.803104][ T24] usb 6-1: cp210x converter now attached to ttyUSB0 [ 364.811199][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 364.825350][ T9288] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 364.880326][ T30] audit: type=1400 audit(2000000256.541:1296): avc: denied { open } for pid=9276 comm="syz.0.560" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 364.923184][ T24] usb 6-1: USB disconnect, device number 17 [ 364.934564][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.960807][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 364.970807][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 365.012167][ T24] cp210x 6-1:0.76: device disconnected [ 365.118143][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.132601][ T9288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.222839][ T30] audit: type=1400 audit(2000000258.101:1297): avc: denied { ioctl } for pid=9276 comm="syz.0.560" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 365.279352][ T9294] netlink: 'syz.0.560': attribute type 10 has an invalid length. [ 365.302237][ T43] usb 4-1: can't set config #16, error -71 [ 365.323392][ T9289] vlan3: entered allmulticast mode [ 365.328654][ T9289] veth1: entered allmulticast mode [ 365.340122][ T30] audit: type=1400 audit(2000000258.221:1298): avc: denied { name_connect } for pid=9276 comm="syz.0.560" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 365.344064][ T9294] team0: Device hsr_slave_0 failed to register rx_handler [ 365.390491][ T43] usb 4-1: USB disconnect, device number 19 [ 365.392271][ T9296] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.562'. [ 365.673868][ T30] audit: type=1400 audit(2000000258.221:1299): avc: denied { listen } for pid=9276 comm="syz.0.560" lport=46867 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 365.749139][ T30] audit: type=1400 audit(2000000258.221:1300): avc: denied { accept } for pid=9276 comm="syz.0.560" lport=46867 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 365.906100][ T30] audit: type=1400 audit(2000000258.221:1301): avc: denied { setopt } for pid=9276 comm="syz.0.560" lport=46867 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 366.091813][ T5916] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 366.127591][ T30] audit: type=1400 audit(2000000259.011:1302): avc: denied { ioctl } for pid=9303 comm="syz.2.564" path="socket:[20623]" dev="sockfs" ino=20623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.262889][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 366.320861][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.564'. [ 366.330139][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 366.348549][ T5916] usb 6-1: config 0 has an invalid interface number: 53 but max is 0 [ 366.357808][ T5916] usb 6-1: config 0 has no interface number 0 [ 366.369579][ T5916] usb 6-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 366.380803][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.393763][ T5916] usb 6-1: Product: syz [ 366.404716][ T5916] usb 6-1: Manufacturer: syz [ 366.409521][ T5916] usb 6-1: SerialNumber: syz [ 366.536281][ T5916] usb 6-1: config 0 descriptor?? [ 366.640882][ T9316] geneve2: left promiscuous mode [ 366.897865][ T5989] vxcan1 speed is unknown, defaulting to 1000 [ 368.140801][ T9333] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 368.179631][ T5983] Bluetooth: hci5: Frame reassembly failed (-84) [ 368.595346][ T9339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.570'. [ 369.233912][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 369.314382][ T5989] usb 6-1: USB disconnect, device number 18 [ 369.482663][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 369.482676][ T30] audit: type=1400 audit(2000000262.361:1304): avc: denied { mount } for pid=9345 comm="syz.2.571" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 370.580201][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 370.631606][ T9360] overlayfs: missing 'lowerdir' [ 370.721079][ T30] audit: type=1400 audit(2000000263.601:1305): avc: denied { mount } for pid=9355 comm="syz.5.574" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 370.797742][ T9362] vxcan1 speed is unknown, defaulting to 1000 [ 371.111629][ T30] audit: type=1400 audit(2000000263.961:1306): avc: denied { unmount } for pid=6304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 371.537534][ T30] audit: type=1400 audit(2000000264.231:1307): avc: denied { create } for pid=9370 comm="syz.5.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 371.650213][ T30] audit: type=1400 audit(2000000264.251:1308): avc: denied { bind } for pid=9370 comm="syz.5.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 372.581647][ T30] audit: type=1400 audit(2000000265.411:1309): avc: denied { mounton } for pid=9385 comm="syz.4.579" path="/file0" dev="tmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 372.791668][ T92] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 372.820333][ T30] audit: type=1400 audit(2000000265.701:1310): avc: denied { setattr } for pid=9385 comm="syz.4.579" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.880623][ T9392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.580'. [ 372.940535][ T30] audit: type=1400 audit(2000000265.751:1311): avc: denied { write } for pid=9385 comm="syz.4.579" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 373.020632][ T92] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.044393][ T92] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 373.056361][ T30] audit: type=1400 audit(2000000265.751:1312): avc: denied { open } for pid=9385 comm="syz.4.579" path="/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 373.164491][ T92] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 373.244216][ T92] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.286960][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.412230][ T92] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 373.803971][ T30] audit: type=1400 audit(2000000266.651:1313): avc: denied { ioctl } for pid=9374 comm="syz.3.577" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 373.866358][ T9401] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 374.184685][ T6077] Bluetooth: hci5: Frame reassembly failed (-84) [ 374.298220][ T6294] udevd[6294]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.475802][ T92] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 375.134603][ T30] audit: type=1400 audit(2000000268.021:1314): avc: denied { mount } for pid=9416 comm="syz.4.585" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 375.167021][ T9417] netlink: 60 bytes leftover after parsing attributes in process `syz.2.583'. [ 375.577597][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.584'. [ 375.911833][ T5861] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 376.109081][ T30] audit: type=1400 audit(2000000268.991:1315): avc: denied { read } for pid=9429 comm="syz.0.586" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 376.132310][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.201603][ T30] audit: type=1400 audit(2000000268.991:1316): avc: denied { open } for pid=9429 comm="syz.0.586" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 376.496487][ T30] audit: type=1400 audit(2000000269.381:1317): avc: denied { create } for pid=9433 comm="syz.4.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.613157][ T30] audit: type=1400 audit(2000000269.411:1318): avc: denied { bind } for pid=9433 comm="syz.4.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.668829][ T9437] netlink: 'syz.4.587': attribute type 4 has an invalid length. [ 376.781615][ T30] audit: type=1400 audit(2000000269.661:1319): avc: denied { connect } for pid=9440 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 377.797279][ T30] audit: type=1400 audit(2000000270.681:1320): avc: denied { write } for pid=9448 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 377.871233][ T30] audit: type=1400 audit(2000000270.751:1321): avc: denied { connect } for pid=9448 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 377.894714][ T30] audit: type=1400 audit(2000000270.781:1322): avc: denied { read } for pid=9440 comm="syz.2.588" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 377.918381][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.924974][ T30] audit: type=1400 audit(2000000270.781:1323): avc: denied { open } for pid=9440 comm="syz.2.588" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 377.949050][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.235195][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.241571][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.309816][ T6134] usb 6-1: USB disconnect, device number 19 [ 378.817835][ T9458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.589'. [ 381.263824][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 381.263839][ T30] audit: type=1400 audit(2000000274.141:1327): avc: denied { create } for pid=9483 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 381.366765][ T30] audit: type=1400 audit(2000000274.241:1328): avc: denied { connect } for pid=9483 comm="syz.2.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 381.973545][ T9495] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 382.441672][ T30] audit: type=1400 audit(2000000275.321:1329): avc: denied { write } for pid=9497 comm="syz.5.599" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 382.464434][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.488439][ T30] audit: type=1400 audit(2000000276.371:1330): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 384.592128][ T9516] syz.3.602: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 384.592274][ T9516] CPU: 1 UID: 0 PID: 9516 Comm: syz.3.602 Not tainted syzkaller #0 PREEMPT(full) [ 384.592287][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.592294][ T9516] Call Trace: [ 384.592298][ T9516] [ 384.592303][ T9516] dump_stack_lvl+0x16c/0x1f0 [ 384.592322][ T9516] warn_alloc+0x248/0x3a0 [ 384.592345][ T9516] ? __pfx_warn_alloc+0x10/0x10 [ 384.592361][ T9516] ? hash_netport4_resize+0x1d8/0x1c50 [ 384.592374][ T9516] ? __vmalloc_node_noprof+0xad/0xf0 [ 384.592392][ T9516] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 384.592413][ T9516] ? hash_netport4_resize+0x1d8/0x1c50 [ 384.592427][ T9516] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 384.592446][ T9516] ? ___kmalloc_large_node+0xed/0x160 [ 384.592464][ T9516] __kvmalloc_node_noprof+0x30a/0x620 [ 384.592475][ T9516] ? hash_netport4_resize+0x1d8/0x1c50 [ 384.592485][ T9516] ? __kmalloc_noprof+0x242/0x510 [ 384.592495][ T9516] ? hash_netport4_resize+0x1d8/0x1c50 [ 384.592508][ T9516] ? hash_netport4_resize+0x1d8/0x1c50 [ 384.592518][ T9516] hash_netport4_resize+0x1d8/0x1c50 [ 384.592529][ T9516] ? __pfx_hash_netport4_add+0x10/0x10 [ 384.592540][ T9516] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 384.592556][ T9516] ? __pfx___mutex_lock+0x10/0x10 [ 384.592580][ T9516] ? __pfx_hash_netport4_resize+0x10/0x10 [ 384.592593][ T9516] call_ad.constprop.0+0x36d/0x940 [ 384.592617][ T9516] ? __pfx_hash_netport4_resize+0x10/0x10 [ 384.592629][ T9516] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 384.592646][ T9516] ? __pfx___nla_validate_parse+0x10/0x10 [ 384.592671][ T9516] ? __nla_parse+0x40/0x60 [ 384.592689][ T9516] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 384.592703][ T9516] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 384.592732][ T9516] nfnetlink_rcv_msg+0x9fc/0x1200 [ 384.592748][ T9516] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 384.592761][ T9516] ? find_held_lock+0x2b/0x80 [ 384.592787][ T9516] ? avc_has_perm_noaudit+0x149/0x3b0 [ 384.592803][ T9516] netlink_rcv_skb+0x158/0x420 [ 384.592818][ T9516] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 384.592830][ T9516] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.592851][ T9516] ? ns_capable+0xd7/0x110 [ 384.592868][ T9516] nfnetlink_rcv+0x1b3/0x430 [ 384.592878][ T9516] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 384.592892][ T9516] netlink_unicast+0x5a7/0x870 [ 384.592909][ T9516] ? __pfx_netlink_unicast+0x10/0x10 [ 384.592923][ T9516] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 384.592942][ T9516] netlink_sendmsg+0x8d1/0xdd0 [ 384.592959][ T9516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.592975][ T9516] ? security_socket_sendmsg+0x47/0x240 [ 384.592993][ T9516] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 384.593014][ T9516] ____sys_sendmsg+0xa95/0xc70 [ 384.593039][ T9516] ? copy_msghdr_from_user+0x10a/0x160 [ 384.593059][ T9516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.593087][ T9516] ? __pfx_futex_wake_mark+0x10/0x10 [ 384.593107][ T9516] ___sys_sendmsg+0x134/0x1d0 [ 384.593127][ T9516] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.593173][ T9516] __sys_sendmsg+0x16d/0x220 [ 384.593193][ T9516] ? __pfx___sys_sendmsg+0x10/0x10 [ 384.593212][ T9516] ? __x64_sys_futex+0x1e0/0x4c0 [ 384.593240][ T9516] do_syscall_64+0xcd/0x4e0 [ 384.593262][ T9516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.593274][ T9516] RIP: 0033:0x7f710538ec29 [ 384.593285][ T9516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.593295][ T9516] RSP: 002b:00007f710614f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.593306][ T9516] RAX: ffffffffffffffda RBX: 00007f71055d6180 RCX: 00007f710538ec29 [ 384.593314][ T9516] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000009 [ 384.593320][ T9516] RBP: 00007f7105411e41 R08: 0000000000000000 R09: 0000000000000000 [ 384.593326][ T9516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.593332][ T9516] R13: 00007f71055d6218 R14: 00007f71055d6180 R15: 00007fff17685c78 [ 384.593346][ T9516] [ 384.593361][ T9516] Mem-Info: [ 384.593368][ T9516] active_anon:18437 inactive_anon:0 isolated_anon:0 [ 384.593368][ T9516] active_file:13204 inactive_file:40851 isolated_file:0 [ 384.593368][ T9516] unevictable:768 dirty:668 writeback:16 [ 384.593368][ T9516] slab_reclaimable:12120 slab_unreclaimable:103715 [ 384.593368][ T9516] mapped:37361 shmem:8308 pagetables:1508 [ 384.593368][ T9516] sec_pagetables:3 bounce:0 [ 384.593368][ T9516] kernel_misc_reclaimable:0 [ 384.593368][ T9516] free:1287198 free_pcp:13508 free_cma:0 [ 384.593397][ T9516] Node 0 active_anon:73748kB inactive_anon:0kB active_file:52712kB inactive_file:163204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149388kB dirty:2672kB writeback:64kB shmem:31696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13180kB pagetables:5900kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 384.593425][ T9516] Node 1 active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 384.593452][ T9516] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 384.593482][ T9516] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 384.593505][ T9516] Node 0 DMA32 free:1247460kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:73724kB inactive_anon:0kB active_file:52712kB inactive_file:161876kB unevictable:1536kB writepending:2736kB present:3129332kB managed:2539316kB mlocked:0kB bounce:0kB free_pcp:33580kB local_pcp:14448kB free_cma:0kB [ 384.593537][ T9516] lowmem_reserve[]: 0 0 1 1 1 [ 384.593568][ T9516] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 384.593599][ T9516] lowmem_reserve[]: 0 0 0 0 0 [ 384.593624][ T9516] Node 1 Normal free:3885964kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20424kB local_pcp:11560kB free_cma:0kB [ 384.593655][ T9516] lowmem_reserve[]: 0 0 0 0 0 [ 384.593676][ T9516] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 384.593745][ T9516] Node 0 DMA32: 389*4kB (ME) 786*8kB (UME) 436*16kB (UME) 400*32kB (UME) 129*64kB (UM) 43*128kB (UME) 49*256kB (UM) 19*512kB (UM) 16*1024kB (UME) 6*2048kB (UME) 282*4096kB (UM) = 1247396kB [ 384.593842][ T9516] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 384.593903][ T9516] Node 1 Normal: 175*4kB (UE) 48*8kB (UME) 41*16kB (UE) 172*32kB (UE) 53*64kB (UME) 14*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3885964kB [ 384.593999][ T9516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 384.594009][ T9516] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 384.594018][ T9516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 384.594027][ T9516] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 384.594036][ T9516] 62377 total pagecache pages [ 384.594040][ T9516] 0 pages in swap cache [ 384.594044][ T9516] Free swap = 124996kB [ 384.594048][ T9516] Total swap = 124996kB [ 384.594053][ T9516] 2097051 pages RAM [ 384.594057][ T9516] 0 pages HighMem/MovableOnly [ 384.594061][ T9516] 430260 pages reserved [ 384.594065][ T9516] 0 pages cma reserved [ 385.510631][ T9527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.576772][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.5.605'. [ 385.653672][ T9535] kAFS: No cell specified [ 386.354047][ T30] audit: type=1400 audit(2000000278.891:1331): avc: denied { nlmsg_read } for pid=9511 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 386.999889][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.999920][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.999939][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.999957][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.877367][ T30] audit: type=1400 audit(2000000280.541:1332): avc: denied { connect } for pid=9556 comm="syz.0.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 387.877552][ T30] audit: type=1400 audit(2000000280.551:1333): avc: denied { write } for pid=9556 comm="syz.0.609" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 388.257795][ T9567] netlink: 'syz.3.607': attribute type 4 has an invalid length. [ 388.925650][ T30] audit: type=1400 audit(2000000281.811:1334): avc: denied { accept } for pid=9560 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 388.980526][ T30] audit: type=1400 audit(2000000281.861:1335): avc: denied { connect } for pid=9560 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 389.035764][ T9568] mkiss: ax0: crc mode is auto. [ 389.058658][ T9583] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bond, syncid = 3, id = 0 [ 389.131996][ T5919] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 389.374889][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 389.401661][ T5919] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 389.401710][ T5919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.401725][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 389.401740][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.401752][ T5919] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.401776][ T5919] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 389.401788][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.556754][ T9593] netlink: 20 bytes leftover after parsing attributes in process `syz.4.614'. [ 389.624647][ T5919] usb 1-1: usb_control_msg returned -32 [ 389.624674][ T5919] usbtmc 1-1:16.0: can't read capabilities [ 390.121148][ T30] audit: type=1326 audit(2000000283.001:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fff8ec29 code=0x7ffc0000 [ 390.170576][ T1162] Bluetooth: hci5: Frame reassembly failed (-84) [ 390.185824][ T30] audit: type=1326 audit(2000000283.031:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f59fff8ec29 code=0x7ffc0000 [ 390.212015][ T30] audit: type=1326 audit(2000000283.031:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fff8ec29 code=0x7ffc0000 [ 390.236080][ T30] audit: type=1326 audit(2000000283.031:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59fff8ec29 code=0x7ffc0000 [ 390.259525][ T30] audit: type=1326 audit(2000000283.031:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.2.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f59fff8ec29 code=0x7ffc0000 [ 390.472535][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 390.472645][ T9572] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 390.481349][ T9600] netlink: 'syz.0.611': attribute type 5 has an invalid length. [ 390.481387][ T9600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.611'. [ 391.156013][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.617'. [ 391.639707][ T92] usb 1-1: USB disconnect, device number 31 [ 391.907857][ T9619] : left allmulticast mode [ 391.912522][ T9619] : left promiscuous mode [ 391.917035][ T9619] bridge0: port 1() entered disabled state [ 391.926416][ T9619] bridge_slave_1: left allmulticast mode [ 391.932329][ T9619] bridge_slave_1: left promiscuous mode [ 391.937975][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.949646][ T9619] bond0: (slave bond_slave_0): Releasing backup interface [ 391.997627][ T9619] bond0: (slave bond_slave_1): Releasing backup interface [ 392.012782][ T9619] team0: Port device team_slave_0 removed [ 392.020706][ T9619] team0: Port device team_slave_1 removed [ 392.026871][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.034282][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.042270][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.049654][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.061785][ T9619] bond0: (slave wlan1): Releasing backup interface [ 392.252519][ T5848] Bluetooth: hci5: command 0x1003 tx timeout [ 392.259690][ T5861] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 392.843178][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 392.843193][ T30] audit: type=1400 audit(2000000285.731:1373): avc: denied { map } for pid=9633 comm="syz.4.622" path="socket:[20355]" dev="sockfs" ino=20355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 392.940507][ T9643] netlink: 32 bytes leftover after parsing attributes in process `syz.5.623'. [ 393.520075][ T30] audit: type=1400 audit(2000000285.731:1374): avc: denied { read accept } for pid=9633 comm="syz.4.622" path="socket:[20355]" dev="sockfs" ino=20355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 393.699302][ T9637] netlink: 'syz.4.622': attribute type 1 has an invalid length. [ 394.554146][ T30] audit: type=1400 audit(2000000287.411:1375): avc: denied { mounton } for pid=9638 comm="syz.2.624" path="/125/file1" dev="autofs" ino=21236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 394.772082][ T9664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.626'. [ 396.721593][ T30] audit: type=1400 audit(2000000289.601:1376): avc: denied { ioctl } for pid=9677 comm="syz.3.633" path="socket:[20388]" dev="sockfs" ino=20388 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 397.203250][ T30] audit: type=1400 audit(2000000290.051:1377): avc: denied { setopt } for pid=9680 comm="syz.5.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 397.252185][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 399.628979][ T9708] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 400.653029][ T9712] gretap1: entered promiscuous mode [ 400.673022][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 401.482976][ T9722] hugetlbfs: syz.3.639 (9722): Using mlock ulimits for SHM_HUGETLB is obsolete [ 401.493776][ T30] audit: type=1400 audit(2000000294.381:1378): avc: denied { read } for pid=9718 comm="syz.3.639" path="socket:[21481]" dev="sockfs" ino=21481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 401.532044][ T9712] bond2: (slave gretap1): making interface the new active one [ 401.540332][ T9712] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 401.553724][ T9720] netdevsim netdevsim3 ªªªªª»: renamed from netdevsim0 [ 401.853241][ T9739] tmpfs: Bad value for 'nr_blocks' [ 401.876706][ T9742] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 401.908530][ T30] audit: type=1400 audit(2000000294.791:1379): avc: denied { relabelto } for pid=9731 comm="syz.2.641" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 401.962153][ T30] audit: type=1400 audit(2000000294.841:1380): avc: denied { associate } for pid=9731 comm="syz.2.641" name="cgroup.procs" dev="cgroup" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 401.990640][ T9746] SELinux: Context system_u:object_r:hald_cache_t:s0 is not valid (left unmapped). [ 402.015600][ T30] audit: type=1400 audit(2000000294.901:1381): avc: denied { relabelto } for pid=9731 comm="syz.2.641" name="cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hald_cache_t:s0" [ 402.044384][ T30] audit: type=1400 audit(2000000294.901:1382): avc: denied { associate } for pid=9731 comm="syz.2.641" name="cgroup.procs" dev="cgroup" ino=62 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_cache_t:s0" [ 402.254283][ T30] audit: type=1400 audit(2000000294.981:1383): avc: denied { watch watch_reads } for pid=9733 comm="syz.4.642" path="/152" dev="tmpfs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 402.626719][ T9739] IPVS: Error connecting to the multicast addr [ 403.082845][ T30] audit: type=1400 audit(2000000295.971:1384): avc: denied { create } for pid=9751 comm="syz.3.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 403.148153][ T9747] netdevsim netdevsim4: Direct firmware load for . [ 403.148153][ T9747] failed with error -2 [ 403.243688][ T30] audit: type=1400 audit(2000000296.131:1385): avc: denied { firmware_load } for pid=9733 comm="syz.4.642" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 403.281497][ T9747] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 403.281497][ T9747] [ 403.379105][ T9758] Bluetooth: hci5: Frame reassembly failed (-84) [ 403.398194][ T6622] Bluetooth: hci5: Frame reassembly failed (-84) [ 404.188698][ T9776] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 404.251533][ T5919] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 404.360476][ T9776] macvlan2: entered promiscuous mode [ 404.365982][ T9776] macvlan2: entered allmulticast mode [ 404.375123][ T9776] bond3: entered promiscuous mode [ 404.388489][ T9776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 404.548447][ T9786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 405.259720][ T5919] usb 6-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 405.425080][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.435229][ T5861] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 405.597050][ T5919] usb 6-1: Product: syz [ 405.609377][ T5919] usb 6-1: Manufacturer: syz [ 406.049181][ T9776] bond3: left promiscuous mode [ 406.061638][ T5919] usb 6-1: SerialNumber: syz [ 406.085679][ T5919] usb 6-1: config 0 descriptor?? [ 406.093812][ T5919] ttusb_dec_send_command: command bulk message failed: error -22 [ 406.104309][ T5919] ttusb-dec 6-1:0.0: probe with driver ttusb-dec failed with error -22 [ 406.337779][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.377900][ T9786] bridge_slave_1: left allmulticast mode [ 406.379840][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.393174][ T9786] bridge_slave_1: left promiscuous mode [ 406.441478][ T9786] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.446936][ T5919] usb 6-1: USB disconnect, device number 20 [ 406.904945][ T9786] : left allmulticast mode [ 406.910882][ T9786] : left promiscuous mode [ 406.921318][ T9786] bridge0: port 1() entered disabled state [ 407.981530][ T6134] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 408.174374][ T6134] usb 6-1: Using ep0 maxpacket: 8 [ 408.208861][ T6134] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 408.259758][ T6134] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.336329][ T6134] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.388457][ T6134] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.440904][ T6134] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.513598][ T6134] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 408.532072][ T6134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.802055][ T6134] usb 6-1: usb_control_msg returned -32 [ 408.817871][ T6134] usbtmc 6-1:16.0: can't read capabilities [ 409.377445][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.657'. [ 409.389804][ T9847] netlink: 'syz.4.657': attribute type 5 has an invalid length. [ 409.399605][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.657'. [ 409.659752][ T9852] netlink: 68 bytes leftover after parsing attributes in process `syz.3.658'. [ 410.026223][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.653'. [ 410.032591][ T9820] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 410.035297][ T9821] netlink: 'syz.5.653': attribute type 5 has an invalid length. [ 410.052523][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.5.653'. [ 410.914207][ T30] audit: type=1400 audit(2000000303.801:1386): avc: denied { read } for pid=9856 comm="syz.2.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 410.971713][ T9543] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 411.164093][ T9543] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 411.177491][ T9543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.198111][ T9543] usb 4-1: Product: syz [ 411.216094][ T9543] usb 4-1: Manufacturer: syz [ 411.224392][ T9543] usb 4-1: SerialNumber: syz [ 411.229166][ T92] usb 6-1: USB disconnect, device number 21 [ 411.266292][ T9543] usb 4-1: config 0 descriptor?? [ 411.290853][ T9543] ttusb_dec_send_command: command bulk message failed: error -22 [ 411.303922][ T9543] ttusb-dec 4-1:0.0: probe with driver ttusb-dec failed with error -22 [ 411.484245][ T9854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.492957][ T9854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.512208][ T92] usb 4-1: USB disconnect, device number 20 [ 411.656683][ T9866] 9pnet_fd: Insufficient options for proto=fd [ 411.665655][ T9866] overlayfs: overlapping lowerdir path [ 412.048314][ T30] audit: type=1400 audit(2000000304.931:1387): avc: denied { read } for pid=9872 comm="syz.2.663" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 412.196039][ T30] audit: type=1400 audit(2000000304.931:1388): avc: denied { open } for pid=9872 comm="syz.2.663" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 412.555132][ T9881] netlink: 44 bytes leftover after parsing attributes in process `syz.3.664'. [ 413.380277][ T30] audit: type=1800 audit(2000000306.261:1389): pid=9896 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.666" name="bus" dev="ramfs" ino=22667 res=0 errno=0 [ 414.879466][ T9914] can0: slcan on ttyS3. [ 415.419598][ T9921] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20002 [ 416.289215][ T9914] can0 (unregistered): slcan off ttyS3. [ 416.440871][ T9930] netlink: 48 bytes leftover after parsing attributes in process `syz.0.671'. [ 416.874459][ T9939] netlink: 136 bytes leftover after parsing attributes in process `syz.5.675'. [ 416.891904][ T9939] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 417.021689][ T92] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 417.188070][ T92] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 417.205571][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.247705][ T92] usb 4-1: Product: syz [ 417.375879][ T92] usb 4-1: Manufacturer: syz [ 417.401623][ T92] usb 4-1: SerialNumber: syz [ 417.423669][ T92] usb 4-1: config 0 descriptor?? [ 417.458766][ T92] ttusb_dec_send_command: command bulk message failed: error -22 [ 417.485766][ T92] ttusb-dec 4-1:0.0: probe with driver ttusb-dec failed with error -22 [ 417.771652][ T9932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.781027][ T9932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.899356][ T92] usb 4-1: USB disconnect, device number 21 [ 418.264604][ T9960] bond1: option mode: unable to set because the bond device is up [ 418.877195][ T9967] netlink: 32 bytes leftover after parsing attributes in process `syz.5.680'. [ 419.668724][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.681'. [ 419.919150][ T30] audit: type=1400 audit(2000000312.801:1390): avc: denied { getopt } for pid=9972 comm="syz.5.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.071743][ T5919] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 420.329816][ T30] audit: type=1400 audit(2000000313.211:1391): avc: denied { ioctl } for pid=9980 comm="syz.0.684" path="socket:[21909]" dev="sockfs" ino=21909 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 420.330605][ T9982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.361948][ T9982] IPv6: NLM_F_CREATE should be set when creating new route [ 420.369257][ T9982] IPv6: NLM_F_CREATE should be set when creating new route [ 420.376580][ T9982] IPv6: NLM_F_CREATE should be set when creating new route [ 420.463028][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 420.494566][ T5919] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 420.506457][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 420.528594][ T5919] usb 3-1: Product: syz [ 420.537338][ T5919] usb 3-1: Manufacturer: syz [ 420.549148][ T5919] usb 3-1: SerialNumber: syz [ 420.665830][ T5919] usb 3-1: config 0 descriptor?? [ 420.860533][ T9988] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 420.901953][ T6077] Bluetooth: hci5: Frame reassembly failed (-84) [ 421.005739][ T9974] netlink: 'syz.2.683': attribute type 4 has an invalid length. [ 421.587880][ T30] audit: type=1400 audit(2000000314.471:1392): avc: denied { append } for pid=9999 comm="syz.5.688" name="file0" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 421.630232][ T30] audit: type=1400 audit(2000000314.501:1393): avc: denied { open } for pid=9999 comm="syz.5.688" path="/111/file0" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 421.799529][T10002] netlink: 'syz.5.688': attribute type 1 has an invalid length. [ 421.828367][T10002] veth3: entered promiscuous mode [ 422.597949][ T6134] usb 3-1: USB disconnect, device number 18 [ 422.881597][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 423.261647][ T30] audit: type=1400 audit(2000000316.071:1394): avc: denied { ioctl } for pid=10007 comm="syz.2.690" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 423.389861][T10012] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 423.451561][ T5919] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 423.733067][ T5919] usb 3-1: device descriptor read/64, error -71 [ 423.881618][ T9545] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 423.981557][ T5919] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 423.992925][T10018] 9pnet_fd: Insufficient options for proto=fd [ 424.001169][T10018] overlayfs: failed to clone lowerpath [ 424.035531][ T9545] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 424.052139][ T9545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.072827][ T9545] usb 1-1: Product: syz [ 424.083341][ T9545] usb 1-1: Manufacturer: syz [ 424.094358][ T9545] usb 1-1: SerialNumber: syz [ 424.116649][ T9545] usb 1-1: config 0 descriptor?? [ 424.131553][ T5919] usb 3-1: device descriptor read/64, error -71 [ 424.141113][ T9545] ttusb_dec_send_command: command bulk message failed: error -22 [ 424.159794][ T9545] ttusb-dec 1-1:0.0: probe with driver ttusb-dec failed with error -22 [ 424.252954][ T5919] usb usb3-port1: attempt power cycle [ 424.320508][ T30] audit: type=1400 audit(2000000317.201:1395): avc: denied { watch_mount } for pid=10021 comm="syz.3.693" path="/147" dev="tmpfs" ino=782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 424.350231][T10012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.360035][T10012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.372034][ T9545] usb 1-1: USB disconnect, device number 32 [ 424.651567][ T5919] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 424.657155][T10026] vxcan1 speed is unknown, defaulting to 1000 [ 424.703375][ T5919] usb 3-1: device descriptor read/8, error -71 [ 424.953556][ T5919] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 424.981936][ T5919] usb 3-1: device descriptor read/8, error -71 [ 425.101754][ T5919] usb usb3-port1: unable to enumerate USB device [ 425.217795][T10033] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.694'. [ 425.697403][T10047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10047 comm=syz.4.695 [ 426.573727][ T6094] Bluetooth: hci5: Frame reassembly failed (-84) [ 427.237849][T10062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.788019][T10074] F2FS-fs: Conflicting test_dummy_encryption options [ 428.226895][ T30] audit: type=1400 audit(2000000321.111:1396): avc: denied { read } for pid=10063 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 428.641551][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 428.648029][ T5861] Bluetooth: hci5: command 0x1003 tx timeout [ 429.793527][ T9545] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 430.161585][ T9545] usb 6-1: Using ep0 maxpacket: 16 [ 430.242061][ T92] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 430.268217][ T9545] usb 6-1: config 0 has no interfaces? [ 430.371541][ T9543] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 430.422414][ T92] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 430.442608][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.450613][ T92] usb 1-1: Product: syz [ 430.463787][ T92] usb 1-1: Manufacturer: syz [ 430.468563][ T92] usb 1-1: SerialNumber: syz [ 430.483825][ T92] usb 1-1: config 0 descriptor?? [ 430.494363][ T92] ttusb_dec_send_command: command bulk message failed: error -22 [ 430.507644][ T92] ttusb-dec 1-1:0.0: probe with driver ttusb-dec failed with error -22 [ 430.522107][ T9543] usb 3-1: Using ep0 maxpacket: 32 [ 430.531082][ T9543] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 430.542141][ T9543] usb 3-1: config 0 has no interface number 0 [ 430.548243][ T9543] usb 3-1: config 0 interface 230 has no altsetting 0 [ 430.564712][ T9543] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 430.582131][ T9543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.600339][ T9543] usb 3-1: Product: syz [ 430.610708][ T9543] usb 3-1: Manufacturer: syz [ 430.620730][ T9543] usb 3-1: SerialNumber: syz [ 430.648871][ T9543] usb 3-1: config 0 descriptor?? [ 430.703504][ T9543] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 430.723405][ T30] audit: type=1400 audit(2000000323.551:1397): avc: denied { bind } for pid=10097 comm="syz.4.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 430.767298][T10088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.775986][T10088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.785976][ T92] usb 1-1: USB disconnect, device number 33 [ 430.812502][ T9543] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 430.934983][ T9545] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 430.945063][ T9545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.966515][ T9545] usb 6-1: Product: syz [ 430.970714][ T9545] usb 6-1: Manufacturer: syz [ 430.987699][ T9545] usb 6-1: SerialNumber: syz [ 431.003180][ T9545] usb 6-1: config 0 descriptor?? [ 431.269333][T10083] tipc: Started in network mode [ 431.275454][T10083] tipc: Node identity 7f000001, cluster identity 4711 [ 431.290793][T10083] tipc: New replicast peer: 0.0.0.0 [ 431.310969][T10083] tipc: Enabled bearer , priority 10 [ 431.553029][ T92] usb 6-1: USB disconnect, device number 22 [ 431.703052][T10111] evm: overlay not supported [ 432.041558][ T92] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 432.206908][ T92] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.272231][ T92] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 432.391093][ T92] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.422838][ T6134] tipc: Node number set to 2130706433 [ 432.488650][ T92] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 432.534858][ T92] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 432.594133][ T92] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 432.637019][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.660412][T10112] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 432.685928][ T92] hub 6-1:1.0: bad descriptor, ignoring hub [ 432.714483][ T92] hub 6-1:1.0: probe with driver hub failed with error -5 [ 432.732526][ T92] cdc_wdm 6-1:1.0: skipping garbage [ 432.743990][ T92] cdc_wdm 6-1:1.0: skipping garbage [ 432.763340][ T92] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 432.779930][ T92] cdc_wdm 6-1:1.0: Unknown control protocol [ 432.981217][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.709'. [ 433.418003][ T9543] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 433.474029][ T9543] usb 3-1: USB disconnect, device number 23 [ 433.498758][ T9545] usb 6-1: USB disconnect, device number 23 [ 434.167142][T10138] vxcan1 speed is unknown, defaulting to 1000 [ 435.696790][T10150] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 435.767756][ T6081] Bluetooth: hci5: Frame reassembly failed (-84) [ 435.912307][ T30] audit: type=1400 audit(2000000328.801:1398): avc: denied { map } for pid=10154 comm="syz.5.718" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 436.048067][ T30] audit: type=1400 audit(2000000328.851:1399): avc: denied { execute } for pid=10154 comm="syz.5.718" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 436.333224][ T30] audit: type=1400 audit(2000000329.201:1400): avc: denied { read } for pid=10160 comm="syz.3.719" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 436.637468][ T30] audit: type=1400 audit(2000000329.201:1401): avc: denied { open } for pid=10160 comm="syz.3.719" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 436.661041][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.692029][ T30] audit: type=1400 audit(2000000329.211:1402): avc: denied { ioctl } for pid=10160 comm="syz.3.719" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 436.730382][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.912596][ T30] audit: type=1400 audit(2000000329.801:1403): avc: denied { read } for pid=10154 comm="syz.5.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 437.753862][ T5861] Bluetooth: hci5: command 0x1003 tx timeout [ 437.761123][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 438.330179][T10187] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 439.022442][ T30] audit: type=1400 audit(2000000331.901:1404): avc: denied { read } for pid=10183 comm="syz.0.723" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 439.045137][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.184126][ T30] audit: type=1400 audit(2000000331.901:1405): avc: denied { open } for pid=10183 comm="syz.0.723" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 439.264168][ T30] audit: type=1400 audit(2000000331.901:1406): avc: denied { ioctl } for pid=10183 comm="syz.0.723" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 439.773189][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.779607][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.010721][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.726'. [ 440.505293][T10207] netlink: 'syz.2.727': attribute type 11 has an invalid length. [ 440.571664][T10207] netlink: 448 bytes leftover after parsing attributes in process `syz.2.727'. [ 440.613105][T10208] mkiss: ax0: crc mode is auto. [ 441.159437][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 441.441633][ T92] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 441.676571][ T30] audit: type=1400 audit(2000000334.561:1407): avc: denied { write } for pid=10228 comm="syz.5.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 441.777765][T10232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.221477][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 442.238964][ T92] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 442.313811][ T92] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 442.444140][ T92] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 442.503972][ T92] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.581534][ T92] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.613324][ T92] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 442.679916][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.685736][T10238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.733'. [ 443.194122][ T92] usb 1-1: usb_control_msg returned -32 [ 443.212161][ T92] usbtmc 1-1:16.0: can't read capabilities [ 443.263647][T10243] block nbd5: Attempted send on invalid socket [ 443.270047][T10243] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 443.279650][ T30] audit: type=1400 audit(2000000336.141:1408): avc: denied { mounton } for pid=10237 comm="syz.5.734" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 443.577166][T10258] ptrace attach of "./syz-executor exec"[10259] was attempted by "./syz-executor exec"[10258] [ 443.599679][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 443.681645][ T30] audit: type=1400 audit(2000000336.211:1409): avc: denied { getopt } for pid=10249 comm="syz.4.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 443.733896][ T30] audit: type=1400 audit(2000000336.271:1410): avc: denied { ioctl } for pid=10251 comm="syz.3.737" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 444.108223][T10268] netlink: 36 bytes leftover after parsing attributes in process `syz.2.739'. [ 444.168862][T10268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.739'. [ 444.543137][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'. [ 444.552255][T10269] netlink: 'syz.0.731': attribute type 5 has an invalid length. [ 444.560019][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.731'. [ 444.569715][T10267] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 445.136272][T10243] block nbd5: Attempted send on invalid socket [ 445.142922][T10243] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 445.152336][T10243] Mount JFS Failure: -5 [ 445.377807][T10272] input: syz0 as /devices/virtual/input/input23 [ 445.780164][ T24] usb 1-1: USB disconnect, device number 34 [ 446.314530][T10286] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 447.271682][ T92] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 447.451583][ T92] usb 1-1: Using ep0 maxpacket: 32 [ 447.475733][ T92] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 447.484398][ T92] usb 1-1: config 0 has no interface number 0 [ 447.490473][ T92] usb 1-1: config 0 interface 184 has no altsetting 0 [ 447.530250][ T92] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 447.545315][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.554188][ T92] usb 1-1: Product: syz [ 447.558332][ T92] usb 1-1: Manufacturer: syz [ 447.571604][ T92] usb 1-1: SerialNumber: syz [ 447.712776][ T92] usb 1-1: config 0 descriptor?? [ 448.448848][T10303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.744'. [ 449.575079][T10313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.932596][T10307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.173437][ T92] smsc75xx v1.0.0 [ 450.177116][ T92] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 450.836103][ T92] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 450.847658][ T92] usb 1-1: USB disconnect, device number 35 [ 451.557861][ T30] audit: type=1400 audit(2000000344.091:1411): avc: denied { open } for pid=10340 comm="syz.3.754" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 453.022253][T10366] netlink: zone id is out of range [ 453.027836][T10366] netlink: zone id is out of range [ 453.044882][T10366] netlink: zone id is out of range [ 453.050371][T10366] netlink: zone id is out of range [ 453.141914][T10366] netlink: zone id is out of range [ 453.147066][T10366] netlink: zone id is out of range [ 453.154915][T10366] netlink: zone id is out of range [ 453.160877][T10366] netlink: zone id is out of range [ 453.171195][T10366] netlink: zone id is out of range [ 453.583651][T10366] netlink: zone id is out of range [ 454.606130][T10382] netlink: 32 bytes leftover after parsing attributes in process `syz.5.762'. [ 454.696153][T10384] netlink: 'syz.3.763': attribute type 10 has an invalid length. [ 454.808733][T10384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.763'. [ 454.819876][T10384] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.829568][T10384] bridge0: port 1(team0) entered blocking state [ 454.837456][T10384] bridge0: port 1(team0) entered disabled state [ 454.958146][ T30] audit: type=1400 audit(2000000347.801:1412): avc: denied { ioctl } for pid=10385 comm="syz.5.764" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24597 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 456.735863][T10412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.768'. [ 457.092279][T10415] geneve3: entered promiscuous mode [ 457.482458][ T30] audit: type=1400 audit(2000000350.351:1413): avc: denied { write } for pid=10414 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 457.507916][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 457.854085][T10427] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 457.962506][T10427] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 458.026556][T10428] mkiss: ax0: crc mode is auto. [ 458.489271][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 458.831658][ T9545] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 458.991638][ T9545] usb 1-1: Using ep0 maxpacket: 8 [ 459.016223][ T9545] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 459.028193][ T9545] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.039674][ T9545] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 459.077600][ T30] audit: type=1400 audit(2000000351.951:1414): avc: denied { write } for pid=10445 comm="syz.3.775" lport=52566 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 459.113985][ T9545] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 459.154705][ T9545] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.188325][ T9545] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 459.239536][ T9545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.505433][ T9545] usb 1-1: usb_control_msg returned -32 [ 459.517564][ T9545] usbtmc 1-1:16.0: can't read capabilities [ 460.446724][T10463] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 460.693922][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 460.743400][T10442] netlink: 'syz.0.773': attribute type 5 has an invalid length. [ 460.780190][T10442] netlink: 28 bytes leftover after parsing attributes in process `syz.0.773'. [ 461.011169][T10479] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 461.217161][T10482] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 461.321472][ T30] audit: type=1400 audit(2000000354.191:1415): avc: denied { mount } for pid=10468 comm="syz.2.778" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 461.382783][ T30] audit: type=1400 audit(2000000354.201:1416): avc: denied { mounton } for pid=10468 comm="syz.2.778" path="/154/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 461.413894][ T1162] Bluetooth: hci5: Frame reassembly failed (-84) [ 461.950019][ T92] usb 1-1: USB disconnect, device number 36 [ 462.461033][T10489] vxcan1 speed is unknown, defaulting to 1000 [ 463.271693][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 463.278110][ T5861] Bluetooth: hci5: command 0x1003 tx timeout [ 463.451880][ T30] audit: type=1400 audit(2000000356.331:1417): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 463.471878][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.147693][ T30] audit: type=1326 audit(2000000357.031:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10501 comm="syz.4.785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20d918ec29 code=0x0 [ 464.749342][T10510] CUSE: info not properly terminated [ 465.226162][T10524] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 465.325058][ T6077] Bluetooth: hci5: Frame reassembly failed (-84) [ 466.771573][ T5919] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 467.031898][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 467.285986][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 467.294796][ T30] audit: type=1400 audit(2000000360.161:1419): avc: denied { remount } for pid=10544 comm="syz.3.792" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 467.343517][ T30] audit: type=1400 audit(2000000360.171:1420): avc: denied { ioctl } for pid=10544 comm="syz.3.792" path="socket:[23888]" dev="sockfs" ino=23888 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 467.529388][ T5919] usb 1-1: config 0 has no interfaces? [ 468.215411][T10549] netlink: 'syz.2.793': attribute type 4 has an invalid length. [ 468.568601][ T5919] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 468.616973][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.695554][ T5919] usb 1-1: Product: syz [ 468.714089][ T5919] usb 1-1: Manufacturer: syz [ 468.880417][ T5919] usb 1-1: SerialNumber: syz [ 468.991752][ T92] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 469.009722][ T5919] usb 1-1: config 0 descriptor?? [ 469.139077][T10569] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 469.281592][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 469.293994][ T92] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 469.302477][ T92] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 469.344228][ T92] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 469.385107][ T92] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 469.434073][ T92] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.487488][ T5919] usb 1-1: USB disconnect, device number 37 [ 470.155981][ T92] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 470.182261][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.427771][T10586] netlink: 'syz.0.801': attribute type 4 has an invalid length. [ 470.653850][ T92] usb 4-1: usb_control_msg returned -32 [ 470.770591][ T92] usbtmc 4-1:16.0: can't read capabilities [ 471.642050][T10582] pim6reg: entered allmulticast mode [ 472.105843][T10601] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 472.135709][ T6622] Bluetooth: hci5: Frame reassembly failed (-84) [ 472.345565][ T9545] usb 4-1: USB disconnect, device number 22 [ 472.701492][T10610] netlink: 152 bytes leftover after parsing attributes in process `syz.3.806'. [ 472.711486][T10610] tipc: Started in network mode [ 472.717101][T10610] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 472.727711][T10610] tipc: Enabling of bearer rejected, failed to enable media [ 473.041145][T10612] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 473.721202][T10617] syz.0.809 (10617): /proc/10616/oom_adj is deprecated, please use /proc/10616/oom_score_adj instead. [ 474.151461][ T5848] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 475.856651][ T30] audit: type=1400 audit(2000000368.741:1421): avc: denied { write } for pid=10629 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 475.959405][T10637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 475.976731][T10635] bridge0: entered promiscuous mode [ 475.985166][T10635] macsec0: entered promiscuous mode [ 476.034943][T10638] netlink: 'syz.4.813': attribute type 12 has an invalid length. [ 476.093763][ T30] audit: type=1400 audit(2000000368.981:1422): avc: denied { getopt } for pid=10629 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 476.528114][T10644] block nbd5: Attempted send on invalid socket [ 476.592560][T10644] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 477.095537][ T30] audit: type=1400 audit(2000000369.961:1423): avc: denied { create } for pid=10646 comm="syz.2.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 477.167632][T10639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.521610][ T6134] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 477.684912][ T6134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 477.822033][ T6134] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 477.923060][ T6134] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 477.951275][ T6134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.971832][ T9545] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 478.053341][ T6134] usb 3-1: config 0 descriptor?? [ 478.093763][T10648] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 478.131633][ T9543] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 478.281585][ T9543] usb 1-1: Using ep0 maxpacket: 8 [ 478.296284][ T9543] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 478.328078][ T9543] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.349435][ T9545] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 478.378684][ T9543] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.431604][ T9545] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 478.445242][ T9543] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.456236][ T9545] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 478.481920][ T9543] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.495477][ T9545] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 478.521681][ T9545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.540178][ T9543] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.561364][ T9543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.620847][ T6134] hkems 0003:2006:0118.0003: item fetching failed at offset 5/7 [ 478.667729][ T6134] hkems 0003:2006:0118.0003: parse failed [ 478.680820][ T9545] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 478.834854][ T9543] usb 1-1: usb_control_msg returned -32 [ 478.850802][ T9543] usbtmc 1-1:16.0: can't read capabilities [ 478.850824][ T6134] hkems 0003:2006:0118.0003: probe with driver hkems failed with error -22 [ 478.995091][ T9545] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 479.102347][ T6134] usb 3-1: USB disconnect, device number 24 [ 479.367640][T10670] geneve3: entered promiscuous mode [ 479.738252][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 480.172832][T10674] netlink: 'syz.0.817': attribute type 5 has an invalid length. [ 480.182804][T10674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.817'. [ 480.364100][ T6134] usb 4-1: USB disconnect, device number 23 [ 481.583967][T10688] geneve3: entered promiscuous mode [ 481.609396][T10695] vxcan1 speed is unknown, defaulting to 1000 [ 481.846509][ T24] usb 1-1: USB disconnect, device number 38 [ 482.112967][T10681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.769131][ T30] audit: type=1400 audit(2000000376.641:1424): avc: denied { read } for pid=10717 comm="syz.2.829" path="socket:[25240]" dev="sockfs" ino=25240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 484.112046][ T30] audit: type=1400 audit(2000000376.991:1425): avc: denied { ioctl } for pid=10717 comm="syz.2.829" path="socket:[25234]" dev="sockfs" ino=25234 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 484.431658][ T5919] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 484.614395][ T30] audit: type=1400 audit(2000000377.501:1426): avc: denied { create } for pid=10724 comm="syz.3.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 484.695562][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 484.750408][T10744] mkiss: ax0: crc mode is auto. [ 484.837145][ T5919] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 484.846734][ T5919] usb 6-1: config 0 has no interface number 0 [ 484.869165][ T5919] usb 6-1: config 0 interface 230 has no altsetting 0 [ 485.073624][ T5919] usb 6-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 485.090864][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.162296][ T5919] usb 6-1: Product: syz [ 485.191471][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 485.233618][ T5919] usb 6-1: Manufacturer: syz [ 485.245525][ T5919] usb 6-1: SerialNumber: syz [ 485.294406][ T5919] usb 6-1: config 0 descriptor?? [ 485.319699][ T5919] ums-usbat 6-1:0.230: USB Mass Storage device detected [ 485.336859][ T5919] ums-usbat 6-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 485.475289][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 485.489204][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 485.500755][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 485.522105][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 485.531408][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.580409][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.822751][T10754] smc: removing ib device syz2 [ 486.247188][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.730600][T10754] ------------[ cut here ]------------ [ 486.736120][T10754] WARNING: CPU: 1 PID: 10754 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 486.746992][T10754] Modules linked in: [ 486.751261][T10754] CPU: 1 UID: 0 PID: 10754 Comm: syz.4.834 Not tainted syzkaller #0 PREEMPT(full) [ 486.760631][T10754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.770791][T10754] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 486.776324][T10754] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 c5 b9 fc f8 e8 c0 b9 fc f8 90 <0f> 0b 90 5b e9 b6 b9 fc f8 e8 c1 21 63 f9 eb da 66 66 2e 0f 1f 84 [ 486.796184][T10754] RSP: 0018:ffffc9000cc771c8 EFLAGS: 00010246 [ 486.802291][T10754] RAX: 0000000000080000 RBX: ffff888031d11358 RCX: ffffc90010b53000 [ 486.810276][T10754] RDX: 0000000000080000 RSI: ffffffff88bee3c0 RDI: ffff888031d113d8 [ 486.818296][T10754] RBP: ffffffff88bd4860 R08: 0000000000000005 R09: 0000000000000001 [ 486.826300][T10754] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888031d10698 [ 486.834297][T10754] R13: ffff888031d0ffe0 R14: ffff888031d0ffe0 R15: ffff888031d110b8 [ 486.842413][T10754] FS: 00007f20da05d6c0(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 486.851466][T10754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.858086][T10754] CR2: 000020000025f000 CR3: 0000000032223000 CR4: 00000000003526f0 [ 486.866100][T10754] Call Trace: [ 486.869378][T10754] [ 486.872351][T10754] rxe_dealloc+0x25/0xc0 [ 486.876623][T10754] ib_dealloc_device+0x49/0x230 [ 486.881509][T10754] __ib_unregister_device+0x396/0x480 [ 486.886887][T10754] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 486.892801][T10754] ib_unregister_device_and_put+0x5a/0x80 [ 486.898530][T10754] nldev_dellink+0x21f/0x320 [ 486.903140][T10754] ? __pfx_nldev_dellink+0x10/0x10 [ 486.908286][T10754] ? cap_capable+0xb3/0x250 [ 486.912826][T10754] ? bpf_lsm_capable+0x9/0x10 [ 486.917510][T10754] ? security_capable+0x7e/0x260 [ 486.922472][T10754] ? ns_capable+0xd7/0x110 [ 486.926896][T10754] ? __pfx_nldev_dellink+0x10/0x10 [ 486.932028][T10754] rdma_nl_rcv_msg+0x387/0x6e0 [ 486.936804][T10754] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 486.942119][T10754] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 486.948544][T10754] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 486.955511][T10754] ? netlink_deliver_tap+0x1ae/0xd30 [ 486.960826][T10754] ? selinux_netlink_send+0x578/0x830 [ 486.966254][T10754] ? is_vmalloc_addr+0x86/0xa0 [ 486.971046][T10754] netlink_unicast+0x5a7/0x870 [ 486.975847][T10754] ? __pfx_netlink_unicast+0x10/0x10 [ 486.981154][T10754] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 486.987181][T10754] netlink_sendmsg+0x8d1/0xdd0 [ 486.991994][T10754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.997292][T10754] ____sys_sendmsg+0xa95/0xc70 [ 487.002085][T10754] ? copy_msghdr_from_user+0x10a/0x160 [ 487.007561][T10754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.012868][T10754] ___sys_sendmsg+0x134/0x1d0 [ 487.017549][T10754] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.022780][T10754] __sys_sendmsg+0x16d/0x220 [ 487.027369][T10754] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.032553][T10754] ? __x64_sys_futex+0x1e0/0x4c0 [ 487.037504][T10754] do_syscall_64+0xcd/0x4e0 [ 487.042036][T10754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.047939][T10754] RIP: 0033:0x7f20d918ec29 [ 487.052362][T10754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.072048][T10754] RSP: 002b:00007f20da05d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.080471][T10754] RAX: ffffffffffffffda RBX: 00007f20d93d6180 RCX: 00007f20d918ec29 [ 487.088473][T10754] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 487.096469][T10754] RBP: 00007f20d9211e41 R08: 0000000000000000 R09: 0000000000000000 [ 487.104480][T10754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.112687][T10754] R13: 00007f20d93d6218 R14: 00007f20d93d6180 R15: 00007ffe2eafa398 [ 487.120679][T10754] [ 487.123714][T10754] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 487.130974][T10754] CPU: 1 UID: 0 PID: 10754 Comm: syz.4.834 Not tainted syzkaller #0 PREEMPT(full) [ 487.140225][T10754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.150260][T10754] Call Trace: [ 487.153515][T10754] [ 487.156430][T10754] dump_stack_lvl+0x3d/0x1f0 [ 487.160999][T10754] vpanic+0x6e8/0x7a0 [ 487.164965][T10754] ? __pfx_vpanic+0x10/0x10 [ 487.169449][T10754] ? rxe_pool_cleanup+0x41/0x60 [ 487.174273][T10754] panic+0xca/0xd0 [ 487.177966][T10754] ? __pfx_panic+0x10/0x10 [ 487.182373][T10754] check_panic_on_warn+0xab/0xb0 [ 487.187295][T10754] __warn+0xf6/0x3c0 [ 487.191194][T10754] ? rxe_pool_cleanup+0x41/0x60 [ 487.196020][T10754] report_bug+0x3c3/0x580 [ 487.200329][T10754] ? rxe_pool_cleanup+0x41/0x60 [ 487.205158][T10754] handle_bug+0x184/0x210 [ 487.209463][T10754] exc_invalid_op+0x17/0x50 [ 487.213940][T10754] asm_exc_invalid_op+0x1a/0x20 [ 487.218762][T10754] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 487.224197][T10754] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 c5 b9 fc f8 e8 c0 b9 fc f8 90 <0f> 0b 90 5b e9 b6 b9 fc f8 e8 c1 21 63 f9 eb da 66 66 2e 0f 1f 84 [ 487.243776][T10754] RSP: 0018:ffffc9000cc771c8 EFLAGS: 00010246 [ 487.249817][T10754] RAX: 0000000000080000 RBX: ffff888031d11358 RCX: ffffc90010b53000 [ 487.257758][T10754] RDX: 0000000000080000 RSI: ffffffff88bee3c0 RDI: ffff888031d113d8 [ 487.265700][T10754] RBP: ffffffff88bd4860 R08: 0000000000000005 R09: 0000000000000001 [ 487.273651][T10754] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888031d10698 [ 487.281593][T10754] R13: ffff888031d0ffe0 R14: ffff888031d0ffe0 R15: ffff888031d110b8 [ 487.289539][T10754] ? __pfx_rxe_dealloc+0x10/0x10 [ 487.294453][T10754] ? rxe_pool_cleanup+0x40/0x60 [ 487.299278][T10754] ? rxe_pool_cleanup+0x40/0x60 [ 487.304102][T10754] rxe_dealloc+0x25/0xc0 [ 487.308316][T10754] ib_dealloc_device+0x49/0x230 [ 487.313155][T10754] __ib_unregister_device+0x396/0x480 [ 487.318502][T10754] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 487.324385][T10754] ib_unregister_device_and_put+0x5a/0x80 [ 487.330080][T10754] nldev_dellink+0x21f/0x320 [ 487.334656][T10754] ? __pfx_nldev_dellink+0x10/0x10 [ 487.339773][T10754] ? cap_capable+0xb3/0x250 [ 487.344251][T10754] ? bpf_lsm_capable+0x9/0x10 [ 487.348906][T10754] ? security_capable+0x7e/0x260 [ 487.353820][T10754] ? ns_capable+0xd7/0x110 [ 487.358211][T10754] ? __pfx_nldev_dellink+0x10/0x10 [ 487.363297][T10754] rdma_nl_rcv_msg+0x387/0x6e0 [ 487.368041][T10754] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 487.373305][T10754] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 487.379693][T10754] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 487.386608][T10754] ? netlink_deliver_tap+0x1ae/0xd30 [ 487.391869][T10754] ? selinux_netlink_send+0x578/0x830 [ 487.397214][T10754] ? is_vmalloc_addr+0x86/0xa0 [ 487.401950][T10754] netlink_unicast+0x5a7/0x870 [ 487.406691][T10754] ? __pfx_netlink_unicast+0x10/0x10 [ 487.411949][T10754] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 487.417907][T10754] netlink_sendmsg+0x8d1/0xdd0 [ 487.422648][T10754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.427922][T10754] ____sys_sendmsg+0xa95/0xc70 [ 487.432666][T10754] ? copy_msghdr_from_user+0x10a/0x160 [ 487.438126][T10754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.443392][T10754] ___sys_sendmsg+0x134/0x1d0 [ 487.448129][T10754] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.453316][T10754] __sys_sendmsg+0x16d/0x220 [ 487.457881][T10754] ? __pfx___sys_sendmsg+0x10/0x10 [ 487.462965][T10754] ? __x64_sys_futex+0x1e0/0x4c0 [ 487.467881][T10754] do_syscall_64+0xcd/0x4e0 [ 487.472400][T10754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.478281][T10754] RIP: 0033:0x7f20d918ec29 [ 487.482682][T10754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.502280][T10754] RSP: 002b:00007f20da05d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.510669][T10754] RAX: ffffffffffffffda RBX: 00007f20d93d6180 RCX: 00007f20d918ec29 [ 487.518612][T10754] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 487.526555][T10754] RBP: 00007f20d9211e41 R08: 0000000000000000 R09: 0000000000000000 [ 487.534499][T10754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.542441][T10754] R13: 00007f20d93d6218 R14: 00007f20d93d6180 R15: 00007ffe2eafa398 [ 487.550392][T10754] [ 487.553594][T10754] Kernel Offset: disabled [ 487.557894][T10754] Rebooting in 86400 seconds..