last executing test programs: 6m14.76882657s ago: executing program 0 (id=4956): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999b0dbe7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xb}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) syz_fuse_handle_req(r1, &(0x7f0000007b40)="308f4f94771584351b85c5532a9cb3f13986e87863cfd608f17cb38bfda319b1b6d9db268133fddb02793b3a1b7181dc6313dc41ecafbf1ea3019af5ba74c41b3541d155925411d9cb3b4f2d7ef7c0c0a388f683aefdd9cc0c02cd972c6c47ce2751d7a1b6934222cb3096aabe72040ee4133e86c0217bded2f7f8579e7026eba71d2bd71cad8e39e9c27dae9d321037e38158ac3bc8efddd849a3ecd08d51a09e670f0e7fd2246c268f23192ff644711e285eb6a0651797189819bd1e7d53c12f1d3da1249901cb1f7eb2078555a4537658cb0ea50b7da2bfffd71e3e476fd61a341ae840b184e2f0010f3a306ea794392992c2dc2eabb74eff7c97831b1241ff7e31e37898bbdc99362c73da8d1f215434ca06420ea62fb997f8a67bb02f1139ac96e04bbe07628156f37d94777b3402e46189855ae041e716a0cd828533972db242ebbb1b6dc7dc39ddcc8d869a3bf4c341329cf806cb22d31953f5184f1f23d67381ea29b23ed37d2318bd92b525be93d275e09b9fb5856aab08d9cb87e858673025a4cfcf534cf2becca10e2334d1051dda98f9f63ab2093559ba2d6778d4f502bb51e5a73841fa436cef7fd217b3767cf9e09d01a6887a15f73d6296771119262b319d4e4291325461fff02678d8bc169a47820111c3ca3fdb5d2bd45d6629728e999374b312cb81bdb9d4c53b0cb2a442b987a968f78e3387796fc1016f67b8250fc8c98adeaac1f44da1d35faaa50b9329ec998f5e0ec2ba75f8c44ab8ffc944c0c6473f25c2f05ee289089317b06f2704d00af5ef3efde2fe9ff0933f14fad803e923d207e24a0d999bc5e34b1c1c292cd2a8278346cbf3c8f826cbcb4457b947212e2150e82743f0a90989a50b4ed751c131a3ba860921bcd7446bff9ab953a9de76a22fc0a5c6795ba7eafb35a91dd464ee7354e6e8784166295976a25aaf2eaad3c2750137b3507aee0a01cb79b0b92ab1b33b0e916fd8364dfa688b17328c23bfcdd61f24d36942707a8a4fa0e74cad7c3b3a898af2d225dbce9604933248d6bbebd34178dd0e6e63b8debed6ad5688704cfdb6b8514b0a7463a21cc02315def4d0f81aa7627ebde1e02acd1e598a265fe122f868e072a163037de847302d2ab8b80d10154810194b3ba3830e6e4f3d68063ffde12fa6515f23c83299afd889b3fbf6ff782e51a5342abcd1d6d707aea071d18479cd28abdcc4617d0094c1e7af425dafb9a580e71a7aff964b9ac8ed50e7b9498ea3f420ba43353ceb9a965824b3faad049d98370b465061243fae891f5eb9cf8e284cadf3d49c3e216438422bcaad32b275ffdba21e1cb8d4f7a83576f5968e552dcca09a11e1744c63d96b6884315e274f028e5c0c8d3b00f8ce2cd844388127fe9ef02ac9e2bb7544b61c00c82ef8552b01f55aadd3b3de2c2c3e106ef4099a320b76e637ade07a2792fdc0b1464022a7d11d2228d91f15a1c017847c4a0d12e5c51434f2fa50f94ff6d969f013765a67d0991a3cbf93828eb32e3c7c824dec7374e576b1651511a702c3f07ad2c0ba9a046b8d6cd56c74523682f1aa892986f29e13a7a49175f6e59fd0387f1b9279c76ffc0b87696d112a815a770d50206a2e9d4532d37ac9da0b600f2d75a9aaa7702cfcb4d2f4a463f06ba14d13f1f890033d89ca4a5b4b392828d25b274003dd27c311903ef1b8674d37e169af1078257b6d25a76d6374711c18d656c6ddbed246d6d629401d304c9d240b0f230b3a80e42646f95ba6468faad645cf0805de47a05a45db26ff8bd949a8a49055ae167196922b4fd0502e630dd6ff0186702bbdebadf981e7022691335144b1fcc0d8b0fade1f178bb3f052a2c480e55b9b6fe17b27368ebf429a3745fd7314a3799e692c8cac67b04053c5cb656e190fbdfb2afbe1d79d546f3bc268307210ee318b1205a579cf308995908a302b52eac5318c04af7ff3d172b0ce810cffb15b778472eb68d3ff886fb09d3e553912851e66687b48e881d55689382a48c8166c738ad94ec28c1f7c048d543c791e9c43136a26e2a871b3871c312240d6c9432cacbad105d3a0d5f2bcf24d2835e624c65fca1da66388a0a603ae0e3a0969bd100f6c61c766901a5f7d08cae2f648be0ad00fd7191b318d4abccb863e33f5a389d89306934e4d1a786420ef118bd46f3d87618b707234496b8825250b424cf49714c5598a8c480b625c4f8a6a9fbac9e25ae827b2883a2ba4c7b4e920cf9dc51edcc26d7f6c5200717bb7deee62fe3c439ccfca6b22e6593a631f7ff20975dd0e19582d3571c80e4b34ea625566f124562e5332e323c7a1a8509e3650a2b5a79df7d7165219e471ee226bffc55a75efc5d2d2eb4384820fbf1cf23f506d91b595d20ad9dc61be99e6ea68303aee3943e82c2d25deba50f9f5e979e08bbf6bc9266d9a5cc5f5501645fc1217c1110f495fbf25814102de273f5fcd1cce82acf474e7caf8baec955b1a6fdeba6e4937df67bab7dd8ec31a630f04e1f93684435caf02611214a2e57ce895f6f3af108e1de38db5bbcaa4df8c0c31cb6e26f3f5837fb5acddf99619a1addffa413ee29913d255e70b2f60b6882892a9ecaf76aeddd41cdacc4df88295d2eb565fbf659fa5cafc2463c8c54878fffc54008693f253eb590d665c9671b7a969c72d56f10bfb4d3ad644db2ff2b01172c51db49917ede52edf4e11023a525599a241fad18710430cd9533e88a8a3b3885ab1fd396f1969633bfe77efeb325013e2bda4bf87a17290fd06bbb3ff120922acd161acfe2774733f33ca578981828a790311b611558e58fa9f0b44e92288f5cb9324c0c26ac1e33210e914026797f0fd0b7207953112da4f4541a36d6ab2a3a80903375fa352f19306a01be396679c581d72542087701a2943bb86556c991ab736ca7954bbc99d5ebb8e6a7ad148fe7ef4a30d17bce34ad252408236c0a55cee344ba79fa9233fb7ae72c07b1505305d8ce2f834b9aee3f4f3e77f86cc529d729592b509287d5e03b8b215e0c0dd20ec668c5b022fda4de57ed890e0dd3fcf8fd370a2e6a210139361d0233a550c60fd30bc6f62f948cd5691d64b2ddf1a0a82c3109896a5ed057a59bf9089191f6b664913fb75b2b5392da6205e4926967092d4c71a9c95bacbbe327783c24a47f385023752d05556c7a6225692f931d121c1caa6c75dae4d656e4cb8f0b6d745f3f590ee9ab0883d93ce76956c24c1838a2f4e7903bc2a041db42ba7ff3c54541ad4e2f83c7b47d07f1672c0f014d87fe17de3dcde1e47f50a76ef390c9d9b69ab317948dac2b47aef1fa0bd6c92ba31151b4c774f018ca3ad428d3fd6dd503084165d7e82860763db1c45728c238a19e62a93102655e4bc10f60996cdfc6e62489021a521d2edb63319cd5d91a2ecf2a98e125a82df82e5872adf15f2328dbd3a10cdb509b6b8f8f81fc2c286ac62e8b64daca66b4d36152399a38a59e100cb70694228b03d60a21269421f07088815736ceddc054e610bc3a08a3c9215f3905e9de9c5d216ead0910f99616a33d4bd0d11399b4e3fb5843515b72591e44fcb7462bc9b2dd8a0bb26b8add560946a609fa5f2c95db31aec78924665819f75d56547d40d00a42fbb01236fdfa612467601eb358ef664efbb10b2e1c949729763f8e58f99ee33ac9fefa98234232e2590343f563a0b458497adff08b4bfd42aaa2e218e540c811467f2f28430ac408ff4d88e1a94dd26d8f8f7e1bc6055228b2772049ce830adc5fee653b28fec3a9588197f5b9afadc9c8a14eea738d863ebeb709d3120713ec2ccb7da6b614bb2d8eaab6e5b7455b3d9f8afa691823d9cb293454230a5db24fc1a091781231026339d3d05fcf731d9bbbfa5cb1b58ffc8e5a801daf948df3529aef142791b1d6f54c21f310d8bac7527fd63f2dfbd9cc03f34ba3ecda9fe478883dac7ec025370ff594d37735431d3c5a63580783d5e79b3d5c6e9b8ee3f0f69541a1fb2a4afa836e5683a0fefaa965ffa79349bf2a2f15a3afb0322885f4cbbb761320973c27a44b924c38b56f79d81120e3c6272eafb741986c52ef0eb93821866239574d98157b4da7c9a91113785311b1e99836d0195aac8ba86560f25f7580f69a1ad752ea26ca555e17a0678a2d075d58dbe2d87a441ba92c7355dae578ba9b5ac14cb92950107bd148122fee16f0f4519423e9ce25d0108ecdefb5c17b414f5191da6c8b699bdd95257fac0e00c1112ad4f1f7e887b2e5eab1dca1e8feed87328adfbecbb8e3614347b28621ab0d9d0576b4daa2c8fd3ede61742656d1f1c26b46669fea8f58267e439f6355dab1d7e5146e3533c6fc3906023919275d810789f8046e78f2741b4c6be3ca01b2df4a45c45b9a338948351ffe2059566f1091396062576ae674b359f71c815d0f1cd18579a581146b81ce05eb92e9758a8cbbb11c206555b14be788f8ba3057ffbaaad8916144e56bdfcae8a9b3640f387558afe4095b4779696fe497dbbffe0070bf133eb1f0d929b5134efd0aeb317927af709b0ed5218d88110cdd27ae146048bb26a6ce8f53cc422951221023765d4629375c582ce90baeb1b9dca05d3550e96d1556e4031f0289e5ac18304bfbfc75fc4a2998ab507a1fa89f9a5fa67a9a4dd80ab0011e6d72c2c6835a6b9ea2ed28a4431a31e2695d7fd2f613bca1b5d1dc6ada9f2031c92ed38b30cc05ef25067c29fa1616c16f17975c08792fc4d521aa32cd09e492c8f90023afda5f4664f0c706dbf79b40e6558c691ddac572c92cae3e9d132c665ab69a519df9eb85098abb8ba1baa0b576b93ef8f34908cf43e8d2843f8703cba2a22fd7667ce9b0d5a9a1a5d5138be4a34bef70b9e3531963b6cbbf07da131efee739ab887a8c976b7423a1464f56563c6b65edc8ae66d2fc526cedc6af4ac616c9e9daf00b865fcfaac28202743ed40aa1641bd272358886981f3fc17e3c6187859757172adeffc2c6578387fcb9de29d957e7fd4c8fba790349ced82cf212ef6c234c1bf565451f353598a957793a6e7dfe940e957a49b593e17a387703f008396e0ea0d5d98e1d07212dfcb4fbab9b54fc78a0a07803ffe62796feec1e0f59220d821dd52b18c3b2a8eccd9cc8a04bac6a536b625070e1628dcc8d90d24e19d3945ac911f11c54caff198503a316e5b2ed18a52d5d416fbb5290900fffe47c72f2350b3c62202cc4e06c7c33f57cbe16cd7c335a46fb63b4e3e77a20bdcf7deb810f7eda4ca9787458052f7a317e05739a93a2a4fbd9967855a91afbc07ab1ce297bd95b97ec5d890e1e09e704908752a172c3ba4bee5f7a459b1373b9244fea7c5cc585e644b0fbe0cf13cad973eaf0e58beee2dadd0033756ab239fd92f7defc96d4f837b133a0a2ca59e70223a0677d2019439389a567e06c3f67e6dcf6b0a74fc61eb8e0a70bbd28d69093ecfbb6eb27eb51230edf06743684d0b81aae253a9880d0fc73f065e261c097876e8978daad1c7d7ba5b3019ab39cdebb26230e72fdadc6f1036e1a06d0e6bf733b9b89b68a7e8743a6ee2125d9a8b5357c35c93e1de4ab1c8247dbd55cb6b6d16efc03cefabe2b013741d707ad7650d6be75be3a7d469290abec3abbcfef1561a424fa54aeda345d15d626b2f5184bd08c349fd5288d9e39f5645203f763cba13733f0c72cb4d22adbc5300d3da50db2b732a72a17efbd6b2187f1201abeaf686c703f6b364018af4a0b8cbaf89936d9d85b24ac7df66b7a464123d4bbaa189039fe6dccb5454bdb3403909e6969a4ad18ed8a427d3b9fa3532467e9f2e07e4bf17e6acc89c1fba74f78b63b7e9713022b62930e0242ba50f5c52699fc333ebed1e4061d37e5109b75774a24ba9ec2ba76daacb4f69281b29adaf89a440b060929a411a281832810b6975f944f47eaaf8b6509986760480550be0f5f128ea460d0d12231eebe5cbf0c787f72d438d4c62a80f995dcdfe933c4f9fab3c54a3f01126ae011a5dfa703820e7a073950b1537b77b9551f30cb50a1d0c53047f8cb62c64f11b87a55eadf99a0c6e2a40753a02daa2635c269170247a0a59c7971aa7a60ce00236d6226b8ded67be89a3b7c6ed658013eea108cc227ce5391da62caa4df4bf5c84f12e24510cea6dcffa77a9351f827d99610ed2838bd01be98507e35246b9f0d1627877df2dd7a030d6699a29bdbfac7821fa840683b69755f496086fd1c481eece51d8751394a815c2620c1b6b0d0ace2301cc1cf161a048ea190f65ade47dcde3a261b5802bb54d9abe1d30fda5b6168a04c08b7b254787adfebc7ab32502173b88356e4672245d3f336bf1ef61bcac2bfaac0bf626ad1437bc0434f935b96a24a5b8ee6c684be40a3f5552410ddddbf6cc0aa719c154aede8d3ecff053e33d3a674623ed2f69ee8fd2e37989f8d3fad25627d17658613a95ae8b29c317920f3ed6a5e541eb85312da5858e02f087d79f002c2a509823bc7bfad1093d0acb0092e6d92984e7148aa264356e97f112e55dd4cd7b962c29e40cb58b1c752bf549e683bb8ed68ba4f6396032577db95a6fcd382a905f3fd84c1accef612cb4721079abee24bf4e6621e861338e211b8c605586f63d8851df63b64c65ac0148d95e23e0b40c55fa4736e234ea9d3e520c5187ddd894fcfecae3547f7d3516a96d52364478b816dedd31f8de2072a3e4052742e09892c1af11e7912a218a3150343afd34b2047f99725600636371dfc584229240cf669df60c8b956ad1f0945c35f60d78d8741d1205482c8985f5208ad95a41bbbd5204e22192d8d6dff18cac16bedf9e47ef596e86a5c7e11133395c755f0dd213f484ec28d9d41db6ab3d030ae4d110384d11f00cb9c791318884d35bbf0d47f1f735d7ec931758919a5fb379b7430acd688705566a5946b766bed8881bdb57a8369930533c10e1063f377ff0319238c517f71ec97b03e1b954e240a2131845cd6a0af86c0c4e93af284d7da07d8e7ad80227f620dadb5f81852f7fe23a6cf56340dd71e3cd3dc68731562e236ec9ffbd056b9c2ea14deea83bf4c2218e4cba4bfc6fae34d1c8004df23724d3d4781b55ab266ac4d44a9d468d983b1f583cc951a3651fe25c6f0fc811565d9268c5f4f54f915343a74ab39ace954a72bfface0353996599b346e903391b23a114e2772a04c4294060c644c7cf52485942b98ca93d150682be61cb160a69f2c69a05c6c1805dd0d132182a70f8b81ade01b1dcb8520e659feb46066122db68109627546adf269fc67c66fad21a9232ad4c0e6bdc44c1e93fec19e4707a7d51e7c7f2803ce9211e6280e195700830bf578f31be6316b01bda4475d4eaf75fad4134faf16f51521e830e718401461a5f62fe515cf56e2f51da2c8f667cf6b124c8c8be28843acc82671d2d701d05ebb19df1a6f48f1d4543e9496d3d50d5ef67d29b393bdf0a4bd5d01c32fc8e6f0dc384285b6f58defc06cd7b20b04a47d6719a4238f0d6a69ead55c5905aad066362ae1a459d88f14d5c379726c8e9b177029ca80473871a3176969291675ca61d214ae4f47b09ebb3d610d18be8cef820868356776b9129d7875d8221c53cf5d0ee1559dad42c5f776a5b679dea1a0454ee10ec7a8950d56513aecc74ccfc81acb4c25252e4a66fc248329e5246eb5fc7a8f18deb555a36b2488e07ce2a18a9d7f3b0f5990675c1d64af8369e9840ad0c3ba428a0690c7407bdd4a2d5a75d6ecaba6c4e7bebe8a5293fb29a67021e61f99417a6081fc47d7486bb337347cc3bcf3940a320675f1e6b1fbf78fe34af5485dbe22f2a6c0c863b0ebfec2a27923215917aebe107a6e902b7e21eafe124dcecad4112a3337280d41de0a8dba13679c6b8ac07389c31b418827a938b188b043587d0781903a3f38e7cfe8486cf03de749991e9634f70f6c966475f92de5993caf0f5c3ff4a26305578aa5b6fd17567343fdebf20c80ff648b9e3cc92ead693526356da4dcf23beb2ba12a61a38b8b04ec7ad0bba7dddea3affc7f4b5770517a44ec8a5c97ce96b9802a8f8e319153da820ebab1994936f3c3406efd2e435829c9e8db5bc5a86d291a87c10600e91f9c7ea3c550558bb1adaa6a81ba836ca38d7da5194a2e6cb0f45efbb19953a1db093a7e02512e5638666b372d518e3c24a8cb60032235c51813dcda0a10d6e3ddf14dc6b13ee8d82bda2155335c0151ef1e056c675dd5059f80885c653a2b1283e3b4fab926e98a2a1d1af4a700e5798e79e8f816b30bdd7fd377f9fa803a81d76b5d378776ca820e83677c66bc2d6a4f3454734cb244259bbcb99827a5b214d66574e1951325828233622f4cb0cb9194bd8ce8217b0f76faea49e7f742640f039f5017d9c77d6c1711bea52396e04e930b3eb70b27f41980f61d191585b111d2338ef32bd20d3679d41a9d434e0b21235c42b776217aabe6bf69ab728b40fda0570b1f7688ae9b9fd3ded0f19fa7b12e5e7d8d7b7df562d212e88721ce8a5b877ed992ca37948558d57778e0d5f809ae4598534cb7b6c1b16cef5ba41ff318d993d3dac9a39981d27cb35043e394e1c491ab8050b7dfb02897a77b728dd1e84e9ac4da54160c6f68238ba1f2e56c01222d252f6b4b2331516288de3bdb8db926721de32a1d28fdb431df6f79edcb3fda2529703a2e3792f5bf6f664f1935409ba85c03215d2ca2c5c72adb7325c7ffd3a149860bc84a4d8fd4017cbcf6d4233e00485d6bbb4e1ac87301f320a8cb24426c1c67a96a01ac94fed196fd90872e25ec944d4d301ef386175a9302437b4a5e7142eb232074703bc15ec04430656194675a3ea982b26a10625da6649128ba32d69c78b4538ada76cb84f932a51b32c61ad95e49134bd416820f57d2894edbc5dc5b63ff61f62b3ee8f006f722675be420544304e600fdc584bd4e58d2534b32937caf369f4bf6bafd04746654dca48e434570e0a633915dc302292605fa7575bc4fde147282cd63b72f3d3b4697371a6c9b378089a16b97cca9b62fca17a251e1e221156fd23101811be97050d1a92117fbdabf1306636d1714a2b2406b246e9104b350f662bc334e239015ae384be398ac02bcf552646a9ad8a88da27052ad16f85f006788cdfe307d0c736b3a929f9f9393de73fc00300c7b38531afad6627a5fd0ff8165baa03faf8238c45851bfc362d7fe58b306a3ade0ab711fd1fa2f215f8bb9b909ad446a5a44e8d8903c5982ee664031bf91ec3560a88022e3be3df4c1d4764d3cccca239b14dd839b110f54cf8745fc986fff5976334502439ab836e7ca747f91e7ad3f202fd999d003a24db2f337d52aebda89cdf6141e05fb030bd0b0eee61915a4364a33f7a05181e44f5f1a15a907eb92eb2000033350357ca2bfd7ff375b62d877185dc612d2f14625ccbbc4aee1b4bdc4e15fdd1532963adc984c929ec32f0b048287308438a9bf237b58d96d65caefbef0267581bf6a7918b8175dd026b3d6f37904840b5ba6c4bb0a226c39554cffdd9fe6ea4e9b04c7b91fcdc21606e1cfaf62ba41886b967ebe7d813e2c342b71db1b22b7f0c43c0309497ea038a632eaa51aada24533000a677ebb46f7c3c210565d7aeda40ce29865fa97d051ee5490bdcc6e491751099ac2320f049530b2d414b6ad5858dde992423ff2a7ba7cc4315e19ca73aa63d8020275915d26e9a259fad594c0f25402da3ec66756b2af91b76f7300ab3f40cc15ec6a19c43aba2f97a38e1cbd368c275e4fb34e7c1bc436c482e217227a8f4465c0f5c4cdf03510f785c56120196e1594b2d4f34b10a5acb1b23947a4a9c9c0d9704d88f2c62020e20d3db89d2b09ae560f018fdb6c2ac9720eec3b6d0cb8c9c7144048910f4bbe7070a998deabbdbd98b6dc1f824e6a66ce0bb71037cbe7cc2cb393cee0c87963f8d442150abcacca378371ce8790e86769956b30c0e04ca7c4af0c066402ad10ddb35d984012a7d02702b67f12cfb5c1f28d52d0d618469c722bf9c90bcc521e510bf61f7933edb383faa331907a4fe0f283a6ef71b0ba9dacf52a2e4b6ac1106211f99ada45a48309519e2f4a56d43e1ca43fbe7d612ead95c8a516a916448bc7281803338eed8eb0d7b0d06700f7745332c86ba048579b7c2dc6f94b048bc3903ac637296605378b4d9b7a445fe7d24027a59f0af02d006347b61cc8660c80268fa85d65baa4ccccaa213c6f0bebd4673c312558febcededb5192738d347bda4920eff6ecd42357c86fc3f8ffc72143598ce6faba1acf3e35562a0ce73f3182bbf5b84257a522298c500265db3e774788b5b72a933566bfda2dc4b3bed6bc81669bbe0b2705ac5b08cb669e69ab6740456c7e1a3abb96c9b212512a8780cb59f82744d1f712d1e5591f9cbdf02be11bdc3b647a7e4da5c62017bd16dc495b1cc0da65ee035ecbd96f673da66e1adabb58ccfabd01d55beea781cd5270e18e4846a2f2d527a43b70380507568876ad5499386511a94988840f2e6c565a7b3db9909e010c48e31e9ddbc107eb3b7d8bd11aa0549e18d4e0749f0dee8913e0231dd25bc66915f02f74f29af0ccf67f7b3efa990538cb676baa926c3f567193b7387e548ee6be5161b2da1039532fd1a0c4096b93179ee11a806724bba3fb50d699a0b09fe8919c731b6c848adb17410b4da64f6f03def4b3b92e64df2fc8dd4c981a633f8ada2d1bc6b0f32b7a756a6edd7029528fd6b4a11da00c55769224936f4adef968d516952137740b75112dedab146a2bc09073d49d1e960da845876a6e60fd8b0f444af01dfd3c00372462c0f57273e774f3cddb16ca2fcd7dd13f28b6f13251fbe77ed7cb190f73fa4ecc00b71e73b0545a906c5e30d495c41ba95bbe14fb30f9508482c82e434873fb588a65f3ff951d17f1beeef07da5bd974d84adf1b34df8f96005768e810194f756c1ee60cd429c7b00c98cfe430581313f3ceebf7bcc3e27a3537926a072af66e9d8eb64050f936b3709238f4aa4e99bec0aa4716cdd2a77f259cf591ec900a17875d813faa04eea61a2a796cd51103cdf4473472b26caae2bc07e5b422ad0ee8523c05c2db9ce75a90cf6174366b8aff045b8fd601f3f63fa0b698c6305543eb468edfb30d9b482a554ca786181f2b543b0a8a1cdad8366b29d60ed21fce9e7bdcef32417281e45aa0acb4bc2f0be0de1e42691317e0e799f29e3e230ce3629397f6d236f4c8bb77e488ade6b39fa7b1925f9df6245a7662b75c57dcc9286effdc537f97875ae46f54ba2e0ec5924bc56754a4058ee987be3ca2d552d2414d77209dc79eb714ecd544facf85bd37275859e079153a36a41b7700192069a8df7df93d527258d7587b02863a892f7cc2aa4a26989661257768ad5e4e49635e06726bd2544c50bf6ff5867f9dc48a8dce0c5954734da63b63f1ad6954286994790b81e3f0c4d64f1321ad652ea9a989c63a5bda214ea147720d65ce6075096968a4fb54e239177be207e7a728e480600a5144d089d9a196a50f6c0c04f023d9834c09056f811d18c771a6bcbc4cc51c4c63455e95664a2034b6171bbbf763d65297bbe5550e3c055c21abcc9f038a760", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x4, {0x3, 0x4, 0x0, {0x2, 0x3, 0x6, 0x2, 0x9, 0x7, 0x2, 0xfffffffa, 0x3, 0x8000, 0xa7, 0x0, 0xffffffffffffffff, 0x9, 0x408}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = fanotify_init(0xf00, 0x40000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x124) fanotify_init(0x2, 0x1000) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r4, &(0x7f0000000300), 0x6) r5 = socket(0x840000000002, 0x3, 0xfe) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x0, 0x401eb94) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000000)={0xd59, 0x8, 0x1, 0xfffeffff}, 0x10) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0xffffffffffffff8e, 0x0) 6m14.586295901s ago: executing program 0 (id=4958): syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904"], 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 6m13.851496593s ago: executing program 0 (id=4963): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071101e0000ff7f0095000036fff6"], 0x0}, 0x94) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="00161c0000000000470000004000bec073d2735da8dc562571b66f5813f3fe9eb9dd96e5956b212404ad7ace30d9f892a58a33545c0515a16bce50b7d809b08cf32eb9bfe25bf6607bad90933b7e0a1c81793dda18f8258107cacecbc19234f501c1ae8fda96373aa5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000700)={0x20, 0xf, 0x28, "4dce5ecd87b54e8f9ebaf2f93c44c2e2bdab9c8c84b904fdc4d81baf43ec77a9bfbfc07caa9998b8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m13.102327947s ago: executing program 0 (id=4969): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) move_mount(0xffffffffffffff9c, 0x0, r1, 0x0, 0x177) (fail_nth: 1) 6m12.968633667s ago: executing program 0 (id=4970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r3 = socket$inet6(0x10, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000208004500004c0000000000069078ac1414bbac1414aa4e244e2261b6ee848bb94d53b15b5c2e5a58954f278c5e6a58dd16b440694d8f9ebe77f0c72989d971379d6868005bfd0fd34a2c74fffa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec000000907800001d120013567929f41fb2c8840200000000001d12adf059fd789278e2fb03dc15d356998a"], 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb70000000000000081000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d5e801e0b009000000000100005ae583de0dd7d8319f98af84fda542e718f9", 0x55}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000000000e2ffff00"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002801c001a8018000a8014000700fc0200"/56], 0x50}, 0x1, 0x2}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="fe027e3c23b59a5d772e9dd153ebd009c6fffa5f285dfa454ef68dbfa9190964031c31b0ce3483a1a6ef0c0fccb936501317c39903c0da4841e88755e47467279231a27037c5aedb5ffa8cb510f9cda3dffc3915b6ef669e1354147e7c812110e3661bfd6c1674663b6ae9a3b4e358bf636c67fbc280c844da5dc430842e6dc3b59f76f1c1a8eb842b20a1767d96d03582a693e929e8f7bb51a2a49877ddb44a6436c83a2a1e74ff173bcebca1b2a93bad4e78b9d562022053c65efec19e8fd70a48f78866d022f132b25c9d5819", 0xce}], 0x1, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[], 0xfdef) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000ff6011d1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000004000079104f000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) ftruncate(0xffffffffffffffff, 0x2000009) r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80}}}}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000280)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="40246b0000006b07f66334b8502fcf6db2a4c664695d11742a0de43ffd8b4dcd835ad056b0021ef13a0e50f192fb38c1b6d0ade1253ef2c404f8676ca6fcd5cf6b54ca57e176d24e1367de21f587b813cc000000000000007e988ae9332f3b994af8cff5bb057366feb9b10e0000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$dupfd(r0, 0x0, r0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 6m11.952796463s ago: executing program 0 (id=4973): syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904"], 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 5m56.514587688s ago: executing program 32 (id=4973): syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904"], 0x0) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 2m39.320828733s ago: executing program 4 (id=5698): bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000012008917329927016de835db0a00000000000000"], 0x26}}, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000024c0)=[{{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000000480)=[{&(0x7f0000000680)=""/70, 0x46}, {&(0x7f0000000400)=""/34, 0x22}], 0x2, &(0x7f0000000700)=""/76, 0x4c}, 0x400}, {{&(0x7f0000000780)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002700)=[{&(0x7f0000000800)=""/141, 0x8d}, {&(0x7f00000008c0)=""/108, 0x6c}, {&(0x7f0000000940)=""/222, 0xde}, {&(0x7f0000000a40)=""/182, 0xb6}, {&(0x7f0000000b00)=""/72, 0x48}, {&(0x7f00000005c0)=""/35, 0x23}], 0x6, &(0x7f0000000c00)=""/121, 0x79}, 0x80000000}, {{&(0x7f0000000c80)=@hci, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d00)=""/147, 0x93}, {&(0x7f0000000dc0)=""/151, 0x97}], 0x2}, 0xd5}, {{&(0x7f0000000ec0)=@generic, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f40)=""/54, 0x36}, {&(0x7f0000000f80)=""/87, 0x57}, {&(0x7f0000001000)=""/60, 0x3c}, {&(0x7f0000001040)=""/72, 0x48}], 0x4}}, {{&(0x7f0000001100)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001180)=""/120, 0x78}, {&(0x7f0000001300)=""/207, 0xcf}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x3, &(0x7f0000001240)=""/8, 0x8}, 0x80}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001280)=""/59, 0x3b}, {&(0x7f0000002400)=""/12, 0xc}], 0x2, &(0x7f0000002480)}, 0x5}], 0x6, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat(r2, &(0x7f000000c380)='./file0\x00', 0x20842, 0x40) (async) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000c9894b1be15900000000050000b32ff3e4eb9ea69b8bc845e96bb542758ba483b78ba152e7d43f97c968d0cc80926554f9231c6de91999091978bad183d6fdff08ef17e8c60e862c7a95e2fdb4e2c4ba1233a73e479cb720e3f82653bdbe12a724512511d46d14d3d18a47b95c88a42a290f7fa9e06405eddfd310bc58ae5490"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000280)="42cc", 0x2}], 0x1) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r9, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x4) 2m38.716872517s ago: executing program 4 (id=5700): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2m38.698391138s ago: executing program 4 (id=5701): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000240), 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "dc440c805a76a119"}, 0x38) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setuid(r5) kexec_load(0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/99, 0x63}], 0x1}, 0xd6}], 0x2, 0x10020, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xff, 'xfrm0\x00', 'tunl0\x00', {}, {}, 0x2e, 0x0, 0x20}, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc7, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x18c40, 0x0) r7 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="000100000000000000ccf9757a9597f1a82d0f0656953eea640568944f8c4a7c034b2944baea115e30602ff27c83cc28f5c9f2e66d265d7b53204d15f11db4147932fcbebb4ccf585cd7333609d333a94dd054131256721d20f9090e7e8f1b3513750175182749bd971164f42ed2b2f7331444eddb70e8f5e23aff9cd11b41a213284752c2316d79", @ANYRES8=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r6, @ANYBLOB="d8dd61c85f785773e3e167fdccea", @ANYRES16=r0, @ANYRESDEC=r7, @ANYRESOCT=r6], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f00000007c0), 0x0}, 0x20) 2m37.059438254s ago: executing program 4 (id=5708): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000001400)="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", 0x5c6, 0x6d91fb6102dc910c, 0x0, 0x1267bd6a23834406) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="53594e303030303030303030303030300a494741494e202743000000000000ee000000000000000000", @ANYRES8=0x0], 0x86) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d80), r2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xc7c, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getpeername$packet(r6, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000840)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000880)={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x28}, 0x100, 0x1, 0x8, 0x700, 0x4, 0x400200, r7}) pwrite64(r6, &(0x7f0000000080)='3', 0x1, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%ps \x00'}, 0x20) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, 0x1406, 0x800, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x1000c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x11, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x9d, &(0x7f0000000300)=""/157, 0x41000, 0x10, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x5, 0xd, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r6, r8], &(0x7f00000005c0)=[{0x1, 0x1, 0xb, 0x9}, {0x3, 0x5, 0x9, 0x6}, {0x3, 0x5, 0x7, 0x9}]}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="5b83783a5ca05c927f2da8f396108416e1b2e3fbd02786cc25fc5f5de4c2fad6cb00b12f9fb1bac8613ebc86d7932a8590833846dac9e21a3aed3427f9c2a673eb3c6400bbaa8717e976835229a1d46ecb423c9b2cd89f4e3b7fecbfe87dcfbf487cd7b0fee08e50f624a860dbb54951cca982899c8e4a422691af3ed58a0d5d67172d2eb17b"], 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010100124d5240e316e9f958002000000109021b00010000000009047800018fa68d0009058a"], 0x0) 2m33.904738967s ago: executing program 4 (id=5718): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000240), 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "dc440c805a76a119"}, 0x38) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setuid(r5) kexec_load(0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/99, 0x63}], 0x1}, 0xd6}], 0x2, 0x10020, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xff, 'xfrm0\x00', 'tunl0\x00', {}, {}, 0x2e, 0x0, 0x20}, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc7, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x18c40, 0x0) r7 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="000100000000000000ccf9757a9597f1a82d0f0656953eea640568944f8c4a7c034b2944baea115e30602ff27c83cc28f5c9f2e66d265d7b53204d15f11db4147932fcbebb4ccf585cd7333609d333a94dd054131256721d20f9090e7e8f1b3513750175182749bd971164f42ed2b2f7331444eddb70e8f5e23aff9cd11b41a213284752c2316d79", @ANYRES8=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r6, @ANYBLOB="d8dd61c85f785773e3e167fdccea", @ANYRES16=r0, @ANYRESDEC=r7, @ANYRESOCT=r6], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f00000007c0), 0x0}, 0x20) 2m31.892920919s ago: executing program 4 (id=5728): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4, 0xe7ffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r6 = socket$inet(0x2, 0x2000000000003, 0x2) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, 0x0, 0x0) 2m16.373045268s ago: executing program 33 (id=5728): r0 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4, 0xe7ffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r6 = socket$inet(0x2, 0x2000000000003, 0x2) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, 0x0, 0x0) 19.844470323s ago: executing program 3 (id=6039): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) pwritev2(r0, &(0x7f00000013c0)=[{&(0x7f0000000140)="e54b7319293a50751f14ce81f71246124fc946066d54f32d61f820abd9f8a392d844f0c489faf37367aabbd2824736da24dbc321f978453314fce63f7e8b6b0729a20af1c2e40d361977811cf3207c382d3eded22978d5", 0x57}, {0x0}, {&(0x7f0000000200)="93c8d6a7184772ce5b7414873cc0230f9a01f15c2aebe9e4ea479d1180e537c6f8a34dab79a6de340574", 0x2a}, {0x0}, {0x0}], 0x5, 0xa, 0xb, 0x0) lseek(r0, 0x5, 0x3) 16.134666723s ago: executing program 3 (id=6118): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x12}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open_tree(0xffffffffffffff9c, 0x0, 0x89901) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 14.950499123s ago: executing program 5 (id=6123): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x204000, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setpriority(0x0, 0x0, 0x2a14b58) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000340)=""/212, &(0x7f00000000c0)=""/95, &(0x7f00000001c0)=""/38, 0xeeee8000}) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) ioperm(0x0, 0x44, 0x7) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) 13.024270313s ago: executing program 2 (id=6126): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0) preadv(r3, &(0x7f0000000ac0)=[{&(0x7f0000000100)=""/128, 0x80}], 0x1, 0xe9ec, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') getcwd(&(0x7f0000000140)=""/115, 0x73) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$getflags(r5, 0x401) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(r5, 0x400454ce, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x242, 0x8) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB="1100000000000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB="2dc7bc3a61d5a1e79dd75d32a63350cdfa333417bc95a3f6c3d3cd178724560206c94ff0b4853b44983d63dc6475d742ef3e604f2a711751d2aa9d32e0955bb0d5a3cef951590ed433fa4f94031b6c8139c47eb2a10b544bc71183947eaf4b110609a7e72a6d6dc8014a4fa4d79bdd5a43a5c809a9dd30d75bc8110647fdf22d99bc8ca40ddff25f35e3bd4a90e41a54239475d764b62c13c300"/168, @ANYRES64=0x0], 0x11) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) 12.567910153s ago: executing program 5 (id=6128): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000240)={0x14, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) pwritev2(r0, &(0x7f00000013c0)=[{&(0x7f0000000140)="e54b7319293a50751f14ce81f71246124fc946066d54f32d61f820abd9f8a392d844f0c489faf37367aabbd2824736da24dbc321f978453314fce63f7e8b6b0729a20af1c2e40d361977811cf3207c382d3eded22978d5", 0x57}, {0x0}, {&(0x7f0000000200)="93c8d6a7184772ce5b7414873cc0230f9a01f15c2aebe9e4ea479d1180e537c6f8a34dab79a6de340574", 0x2a}, {0x0}, {0x0}], 0x5, 0xa, 0xb, 0x0) lseek(r0, 0x5, 0x3) 11.307421395s ago: executing program 2 (id=6129): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e0", 0x9}, {&(0x7f0000001700)}], 0x2, 0x0, 0x0, 0x10}, 0x0) 11.100175355s ago: executing program 3 (id=6131): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="11010000733336088dee44d493c7c21f72e909022d0101100000000904000003fe03016867d794354eb6f6af7b53c90b7ef0c7efffff0000000008aa1bb5e81c0d8ba554889d5b7ce468458f0ae2bc58c31fbb86ada96f0a604eda4b851ceac090a7ffffffffffffffff4b89d659e920c7a464c01853292b5741570d6ee94205af7e7167a2818185c0bf2f1dbd0e54b7007ff363ee7863a9f04267bad6bd7c96e29f56469cab3223906f28d1d8474d984239f788aec8e69793f124a041b682f007684a9b6cf355ac100ee57415739edbceaaf89c2001086b968a1971dd23b9f4"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x4004090) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$caif_stream(0x25, 0x1, 0x5) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x2018, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) 10.954117156s ago: executing program 2 (id=6133): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="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", 0x148) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x2) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0xe7, 0x0, {}, 0x9, 0x33}}) connect$bt_rfcomm(r2, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) r4 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r4, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x41, @string={0x41, 0x3, "bce13f99946ad581e57b858d761a4393766128b67718b2e5e84f9004a568782080fa2f06287990849537b47244ab6713abe21c7dd467e070a703caaab6ce08"}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r4, @ANYBLOB="f8b142769da71377312aa9451a3c36ae0f2d7d036617b2fa228ceb161251d16d6afe98aa40ccd027f6cd5bbdb7f0b16bb42f1458689fe9d2d2f44bcd458f5de6f046eeec90c5150d2babe8cc77029ce651c3e4378a122b8ec5460d80bc1be7c875654b0b04267568e799218f6cf1d07315c4a9f5d869651829d0e21e3939a4ffd01cecffb872cd4489c2bf04fb86", @ANYBLOB="80f300680e4f54dd2f7b495cd4cd9f0f1e938bfa55bf9383319a1d0ede9a1e3b163c280f2f5fea97e81acfbd545027c89488848b7ba59bdb3fd8a76efc8e1df2c83232901870d980b2d1e3deb86f196b53f2e5449358f545572179ba18b13bac816489252c6c418e756d15685d1b313241fe34f7158b0442cbe01257d7319c7b6710da2a7f75cfd7a32b847385ea8f5b47830068c415e8bff08aabfc3b41d8944a39202106994a8efff5ba584ef5c86e7a07686128a944", @ANYRES64=r0, @ANYRES16=r2, @ANYRESHEX=r4, @ANYRESHEX=r2, @ANYRES8=r0], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0}) 10.829052567s ago: executing program 1 (id=6134): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00061c0000005ad6723f09e2"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, 0x0, &(0x7f0000000080)) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 8.917738201s ago: executing program 6 (id=6135): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) fspick(0xffffffffffffff9c, &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xa}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) r5 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r5) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setitimer(0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 7.686469781s ago: executing program 1 (id=6136): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xc0, 0x3a, 0x4, 0x70bd28, 0x0, {0x1, 0x7c}, [@generic="00000c654c4ac65d97f2030e95f403d4c53fa9ee61be36bd043c159a17445835e0090afdca265df94824bdfa3fdc01a565052859ae3f51d017f8da5356cabc763731e61849bfb97a2cc6a6f48f316094d36d955e7d9a4c32569628e5eea9c38818c131516273da8cef762bacb483478aa17ab5f7943c846f1bc0af1f2f0347a93e45b07369d73d7ecdded43076d38ff4a3e92a1af2e122099d8604cf5cea317bbfa0f77512a30818e43a"]}, 0xc0}, 0x1, 0x0, 0x0, 0x4011}, 0xc010) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x4018480c, &(0x7f0000000080)={0x2, 0xffffffff, 0x10000}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="17000000fb00"], 0x931200) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100028bd7000fbdbdf251b0000000e0001657673696d0000000f00020003000000657673696d30000108000b0003000000080001027063690011000200303030303a302c303a31302e300000000008040b75090000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) 7.480768201s ago: executing program 2 (id=6137): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000f80)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="00061c0000005ad6723f09e2"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, 0x0, &(0x7f0000000080)) socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 7.314202131s ago: executing program 3 (id=6138): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a00fffe0900020073797a32000000000900010073797a310000000054000480500001800a00010071756f74610000004000028008000240000000000c0001"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_genetlink_get_family_id$batadv(0x0, r2) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(0xffffffffffffffff, &(0x7f0000000140)='./mnt\x00', 0x0, 0x0) socket(0x3, 0x1, 0x8) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516f}, &(0x7f0000000180)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 7.156047974s ago: executing program 5 (id=6139): r0 = socket(0x1e, 0x5, 0x0) socket(0x1d, 0x2, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 7.112395385s ago: executing program 6 (id=6140): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYBLOB="4b40655070f7c1e326bd97"], 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket(0xa, 0x80000, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x3e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000140)="41000200010001", 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9000a0006000500010802000600137d116e04a0ef879956193165d5dc06000000fd4b3d499aaa04"], 0xf) sendto$inet6(r4, 0x0, 0x0, 0x2000, 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r6, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, 0x0, 0x2d, 0x0, @void}, 0x10) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='ip6gre0\x00'}) 6.837241908s ago: executing program 1 (id=6141): socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x80010, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffff9}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) r2 = socket(0x2b, 0x80801, 0x1) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r4}}, 0x48) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) (async) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000ec0ffffff00000000000000000a20000000000a03000000000000000004010000000900010073797a300000000040000000140a01040000000000000000030000010900010073797a310000000016000800fda8d9e08b8a50ad82f8b63f213f3bfb439800000800034000000004200100000c0a01020000000000000000010000000900020073797a3200000000f4000380100000800c0004400000000000000004e00000800900090073797a30000000000c0005400000000000000006c4000b801c0001800b00010065787468647200000c0002800800014000000016100001800b0001e37370726f787900002c0001800b00010065787468647200001c0002800800054000000000f2000640000000040800014000000015140001800e000100696d6d656469617465000000140001800e000100627974656f726465720000000c0001800700010063740000280001800a0001006c696d6974000000180002800c0001400000000000007fff08000440000000000c00018008000100647570000900020073797a3200000000140000001000010000000000000000000000000a"], 0x1a8}}, 0x0) socket$alg(0x26, 0x5, 0x0) 5.147632378s ago: executing program 6 (id=6142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES16, @ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0xa) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x80}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) 5.102701536s ago: executing program 5 (id=6143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x8034, 0x2, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x7) landlock_restrict_self(r3, 0x0) 3.968887133s ago: executing program 6 (id=6144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, 0x0, 0x31f, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = userfaultfd(0x801) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000500)}, {0xfffffffffffffffc}], 0x3, &(0x7f0000000a40)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r4, r4, 0xffffffffffffffff]}}], 0xa0, 0x4000000}}], 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x2ce, 0x0, 0x4ac00000, 0x2}}, 0x101301) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 3.755580197s ago: executing program 5 (id=6145): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045f0003c0000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac1000face2434c6552c43453f3281c9958500"], 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='xprtrdma_prepsend_failed\x00', r2}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7c82}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfb1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @ldst={0x1, 0x2, 0x3, 0x0, 0xa, 0x20}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x2}, @alu={0x7, 0x0, 0x1, 0x2, 0x1, 0xffffffffffffffe0}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xef, &(0x7f0000000580)=""/239, 0x41000, 0x14, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000040)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x5, 0x2, 0xffffffff, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000180)=[r2, r3, r3, r3], &(0x7f0000000240)=[{0x3, 0x1, 0xa, 0x4}, {0x4, 0x4, 0x9, 0x4}, {0x1, 0x5, 0xd, 0x3}, {0x3, 0x1, 0xb, 0x1}, {0x0, 0x4, 0x2, 0x2}, {0x2, 0x4, 0xc}, {0x4, 0x2, 0x3, 0xa}], 0x10, 0xfffffff4}, 0x94) dup3(0xffffffffffffffff, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.579823254s ago: executing program 1 (id=6146): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="fac28d000090e9c3aee5dbe57493388f51e611ceb53a5c9866a207ace2b5957fe5ac95a01f7ceb22c68cb55a91489a9c06457941f270ea9982947c9f2bbe18232844eeab6796f3220606366b66adcdbdaa9d52c6bdc16d311e5da98997031d27dcad941eac2ccf44f3af8a19479bbaf8b670e53fcb75a7c4b9ba6a3027cbbaa9b9fa55ff178181b6d798bbcba0a9195802c8b4c0b6590bd04b22a0e8e7ab058ff877c48c419da077efcb78c2f9cb9cda2bfd0359ac3222b9078ad5365c69da29e4c712ba014525d404f85d79d56895b83421ab5670c478a40e7d3eb185136ca623490955eb0a9d6a8447315a2377d1d474c43c228c42f9ae7096c63b9b873c1cb5dd9059914ff4ffa17a05126910e50338080000000000000067474c83564a2b1fbbf11231008bbf11cc8cc6e4fcbda4b75a597b2018ca8c0f36378b62628d59a7", 0x141}], 0x1}}], 0x1, 0x80) 2.744665426s ago: executing program 3 (id=6147): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x3c, 0x107, 0xf0ffff, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.532550647s ago: executing program 3 (id=6148): socket$isdn_base(0x22, 0x3, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000040)={0xffff, 0x800000000007e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x475, 0x10100, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000240)='./file0\x00') ftruncate(0xffffffffffffffff, 0x2007ffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x20003f) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x9}, 0x10) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001a00010000000000000000001c", @ANYRES64=r4, @ANYRES64=r0, @ANYRES8], 0x30}}, 0x40048013) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000180)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f00000000c0)={@hyper}) 2.41693557s ago: executing program 1 (id=6149): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc03064ca, &(0x7f0000000300)={0x0, 0x0, 0xdc}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) r6 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.832665341s ago: executing program 6 (id=6150): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="b000000006000000", @ANYRES64=0x0, @ANYBLOB="0500000000000000000000000000000000000100000000000d00000000000000060000000800000003000000000000000100000000000000faffffffffffffffffffffff000000000800000000000000db00000000000000ff07000008000000000000000020000004000000", @ANYRES32=0xee01, @ANYBLOB="0300000007000000000000000400000000000000ffffffff00000000050000000000000040232f2e77000000"], 0xb0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x60, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0x2}]}]}, 0xa0}}, 0x4048890) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0xc) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x5, '\x00', 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f1f}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.49363388s ago: executing program 2 (id=6151): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x34303, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=""/141, 0x8d}, 0x207}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000005e40)=""/198, 0xc6}, {&(0x7f0000001700)=""/226, 0xe2}, {&(0x7f0000001800)=""/175, 0xaf}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f00000019c0)=""/170, 0xaa}, {&(0x7f0000001a80)=""/247, 0xf7}, {&(0x7f0000000440)=""/102, 0x66}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000001900)=""/135, 0x87}], 0xa, &(0x7f0000001b80)=""/92, 0x5c}, 0x3}, {{&(0x7f0000001c80)=@nfc, 0x80, &(0x7f0000002840)=[{&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000002780)=""/176, 0xb0}, {&(0x7f0000001c00)=""/80, 0x50}], 0x5}, 0x6}, {{&(0x7f0000005d00)=@generic, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001d40)=""/65, 0x41}, {&(0x7f0000005f40)=""/4100, 0x1004}, {&(0x7f0000001dc0)=""/95, 0x5f}, {&(0x7f0000001e40)=""/136, 0x88}, {&(0x7f0000001f00)=""/134, 0x86}], 0x5, &(0x7f0000002040)=""/122, 0x7a}, 0x1}, {{&(0x7f00000020c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002140)=""/220, 0xdc}, {&(0x7f0000003780)=""/4080, 0xff0}, {&(0x7f0000002240)=""/140, 0x8c}, {&(0x7f0000002300)=""/166, 0xa6}], 0x4}, 0xffffffff}, {{&(0x7f00000024c0)=@xdp, 0x80, &(0x7f0000005a40)=[{&(0x7f0000002540)=""/25, 0x19}, {&(0x7f0000002580)=""/201, 0xc9}, {&(0x7f0000002680)=""/90, 0x5a}, {&(0x7f0000004780)=""/4085, 0xff5}, {&(0x7f0000005780)=""/135, 0x87}, {&(0x7f0000005840)=""/241, 0xf1}, {&(0x7f0000005940)=""/82, 0x52}, {&(0x7f00000059c0)=""/90, 0x5a}], 0x8, &(0x7f0000005ac0)=""/175, 0xaf}, 0x8}], 0x6, 0x23, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.319137577s ago: executing program 1 (id=6152): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0xba, {0x9, 0x21, 0xfff, 0x9, 0x1, {0x22, 0xe7f}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x8, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x8, 0x6, 0xe}}]}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0xf1, 0x3, 0x7, 0xff, 0x4}, 0x117, &(0x7f00000001c0)={0x5, 0xf, 0x117, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0xf88, 0xf, 0x8, [0xc00f, 0xff3f17, 0xc0, 0x3fff]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xed, 0x10, 0x11, "4cd17fcf65c4ba2c6aaecf5cf7b8d022797d713eaabeff6577f91e027c1432529486d8535606b72b407c52980f7c999f5c901f4d7c18ba730583041033963abe9d361ca9b9f6bf29c021da2b2c13a81113d123c15d187a8bf0a619a99f2588bec0cf3199480541d58dc546ccd2a7634ba0e3bd2c05cdb1f703bede2b7cfdd5da60f9b977e7553d0649ffe1f6a1180a0fae14fe77839cd4996fe94bfe9865a094a4e11cb4d7ab591a6468cb8693be5cb3b35e13043bf6d78463ff4a7df203d738f646d623ede9332f6b0f2fd40bf77ed766b95bf06ac468fb4883ae1c3ca3b901a9d191108b2012ed3959"}]}, 0x9, [{0x59, &(0x7f0000000300)=@string={0x59, 0x3, "9dbcea50363c574ce11dfe3c271cf9e9cd3f10583c48d8704b522cc0c86d50055fbef9950d4666f0d6d166d0011fc24833283e965370b7f51d259b7638433b4a21cf8ef0d650617bca1b86cf79581f3534596cff408781"}}, {0xb6, &(0x7f0000000380)=@string={0xb6, 0x3, "2fbfa1ee55ebfbdbfce9fcec0423f119a3fbbea4ec8da9dd17e51eedeedff45800bdd3cb39c23d9216469f03bb6be75bd3e031fa2f298a974bf16996c026c2919cd5ec61904259cf9d56b65200629f784224fa24397b7a0a6299e35767ea0f68e3de0648e9a00ad4b9b5fb34148d49d25e5b9f348fe4243af1b9fa1ea0a070fffffe37440a06302eac3c3da1ca696bb5bd548adc1fbfdf119245a5da4103976691852b271468d30df3dfa3be43c9e61e9765d3d5"}}, {0x4, &(0x7f0000000140)=@string={0x4, 0x3, '1|'}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x419}}, {0xee, &(0x7f0000000480)=@string={0xee, 0x3, "db81a4fc74dc68bed53f0c7b38838e38d46f05cf27222d586bfed409e6316543e0229d71bd41792cff5f79eeb7bfc89de161d3ad89c926974e645bc62a9f05991e262bab3551fbf1a3f96ba83c132c00aafb4073e21aef8138246b378196f74394610857617085fd5c8df85d4df219b5dbf7051ccaa413ef01221970164ea3e92049c00b1243c1ed396ba3b0a61022ee5ad35a8efccffb9f87283703f42cbe8280bce0f05f2a243a9273b384c2c475ef6dbcccbc74da5f908a1eadbf5559ab773a61413ab8dc1442b87a0eae1235bc8ea205c71b2589a063cf0c4a6235a691f76a382cf6ae7061d4c1f41945"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xdd58664fc6e988dd}}, {0xcd, &(0x7f00000005c0)=@string={0xcd, 0x3, "3b35cdbe568dabaaf88fffdbd98240aca817f57744f98b24b1dec7437ced7f23f9a4618e41b54cc9931a58e75c3e29f88c52814af07aa6bb2499ecd56629946a88bcc472dde2de557bb3ee179e2afa6be724d4768054aff7df15f15b6f041b81a428b26b67bcad9cd22696b841a764b9ec565239432d80b5bf35d9e8d1c04c7f96207495d033a86fc2a8a5b148679794bf9abe7b7a39a64aa70fe861d142ab0c2eeb37682a449efcfc1ec956bd577a01f3edb82a23f5a7e1ba676097a1fedd4d0a199392308650fb87b282"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x27c624c01b27324d}}, {0x14, &(0x7f0000000700)=@string={0x14, 0x3, "dfb98482360e8552aad07902d7d35550fb0f"}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@delsa={0x3c, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {@in=@rand_addr=0x64010100, 0x4d5, 0x2}, [@srcaddr={0x14, 0xd, @in6=@empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0xf4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xe0, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0xffffffffffffff60, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x3ff, 0x0, 0x0, 0x7}, 0x3}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0xd6db, 0x4, 0x1, 0x9, 0xfa5}, 0x7}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x40000, 0x0, 0x51}}]}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x0, 0x1c, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x0, 0x3, 'gact\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x51, 0x4, 0x7, 0x1, 0x7f}}, @TCA_DEF_DATA={0x0, 0x3, 'ct\x00'}, @TCA_DEF_DATA={0x0, 0x3, '\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x76868730, 0xffff83c1, 0x8, 0x5, 0x10001}}]}, {0x0, 0x6, "4e1f891ec689aa1d3b5580d0652755ae768c005a0104fc01ff9af25a87b63c60821c1f7d56bdbbd901b380884b24310ca91b937880f6279a9e544137779e1707cb9b846a2949af50f1e95ac99327f1e8b1b6431029c3024f60ddd7e7268e6e3ae1b6ab7e3f208e3c65d08fc85506d41e37faeb53d9292ff8cb3c41aa43e82ecbc8c961975e216b0bb76fa41b0db8c03ad4a4f7cb2d291153ad19204e54b1e973d87a847a28a265233298285dca61f62dc15559fd11b6dbda131d4eddeb9722f0699d386340c8c62191bb15d79ff1dba006cd85a4e98fce1590d1f108d1350df258e82fea4aa360f852ffd0d1be74d76403547beb328efa"}, {}, {0x0, 0x8, {0x1, 0x2}}}}]}]}, 0xf4}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x76360f1, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x44800) 351.199015ms ago: executing program 5 (id=6153): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYBLOB="4b40655070f7c1e326bd97"], 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket(0xa, 0x80000, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x3e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000140)="41000200010001", 0x7) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c9000a0006000500010802000600137d116e04a0ef879956193165d5dc06000000fd4b3d499aaa04"], 0xf) sendto$inet6(r4, 0x0, 0x0, 0x2000, 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r6, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, 0x0, 0x2d, 0x0, @void}, 0x10) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='ip6gre0\x00'}) 347.587913ms ago: executing program 6 (id=6154): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3fc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x8014) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000101100fe8000000000000000020000000000bbfe8000000000000000000000000000aa00000e220010907802030000000000000ebfc112ef80617ccdc433fae934201ff0f6f6ceccfd33b7f683c5877b133d0e5aee1fe9850967276a5f1ccf7b189d4084879c3ad2c453f0ed339e7eb83322ef06"], 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}}) r8 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r8, 0xc10c5541, 0xfffffffffffffffe) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) sched_setscheduler(r9, 0x1, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd2d, 0x25dfdc00, {}, [@IEEE802154_ATTR_DEV_INDEX={0x0, 0x2, r10}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x81}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}]}, 0xffffffffffffffed}, 0x1, 0x0, 0x0, 0x48000}, 0x4040800) 0s ago: executing program 2 (id=6155): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0x6, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0, 0x24}}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='svcrdma_encode_wseg\x00', r5, 0x0, 0x1ff}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101001) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3b244ee2dbaaf201, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x4040850) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffffffffff0}, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r9 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00'}) kernel console output (not intermixed with test programs): ilter_socket permissive=1 [ 1397.713780][ T30] audit: type=1400 audit(2000000630.611:16619): avc: denied { write } for pid=27522 comm="syz.1.5715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1397.761310][ T30] audit: type=1400 audit(2000000630.611:16620): avc: denied { write } for pid=27522 comm="syz.1.5715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1398.068715][ T30] audit: type=1400 audit(2000000631.011:16621): avc: denied { read write } for pid=24705 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1398.257471][ T30] audit: type=1400 audit(2000000631.041:16622): avc: denied { read write open } for pid=24705 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1398.761867][ T30] audit: type=1400 audit(2000000631.041:16623): avc: denied { ioctl } for pid=24705 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1398.851952][ T30] audit: type=1400 audit(2000000631.051:16624): avc: denied { create } for pid=27527 comm="syz.3.5716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1398.885844][T27532] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1399.597193][T27555] ptrace attach of "./syz-executor exec"[16836] was attempted by "./syz-executor exec"[27555] [ 1402.577481][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 1402.577498][ T30] audit: type=1400 audit(2000000635.521:16797): avc: denied { execmem } for pid=27593 comm="syz.3.5734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1402.623845][ T30] audit: type=1400 audit(2000000635.571:16798): avc: denied { read write } for pid=24705 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1402.695677][ T30] audit: type=1400 audit(2000000635.571:16799): avc: denied { read write open } for pid=24705 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1402.772522][ T30] audit: type=1400 audit(2000000635.591:16800): avc: denied { ioctl } for pid=24705 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1403.271291][ T30] audit: type=1400 audit(2000000635.811:16801): avc: denied { bpf } for pid=27593 comm="syz.3.5734" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1403.334864][ T30] audit: type=1400 audit(2000000635.821:16802): avc: denied { execute } for pid=27593 comm="syz.3.5734" dev="tmpfs" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1403.397512][ T30] audit: type=1400 audit(2000000635.831:16803): avc: denied { execute_no_trans } for pid=27593 comm="syz.3.5734" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1403.486197][ T30] audit: type=1400 audit(2000000636.241:16804): avc: denied { read write } for pid=27595 comm="syz.5.5735" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1403.510481][ T30] audit: type=1400 audit(2000000636.241:16805): avc: denied { read write open } for pid=27595 comm="syz.5.5735" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1403.667253][ T30] audit: type=1400 audit(2000000636.241:16806): avc: denied { read write } for pid=27595 comm="syz.5.5735" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1404.867178][T27616] fuse: Unknown parameter '18446744073709551615' [ 1404.934902][T27616] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1406.960841][T27648] random: crng reseeded on system resumption [ 1407.945336][ T30] kauditd_printk_skb: 213 callbacks suppressed [ 1407.945360][ T30] audit: type=1400 audit(2000000640.501:17020): avc: denied { bpf } for pid=27653 comm="syz.2.5748" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1408.010190][ T30] audit: type=1400 audit(2000000640.511:17021): avc: denied { execute } for pid=27653 comm="syz.2.5748" dev="tmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1408.036518][ T30] audit: type=1400 audit(2000000640.521:17022): avc: denied { execute_no_trans } for pid=27653 comm="syz.2.5748" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1408.076783][ T30] audit: type=1400 audit(2000000640.891:17023): avc: denied { prog_load } for pid=27656 comm="syz.3.5749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1408.180573][ T30] audit: type=1400 audit(2000000640.891:17024): avc: denied { bpf } for pid=27656 comm="syz.3.5749" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1408.201463][ T30] audit: type=1400 audit(2000000640.891:17025): avc: denied { perfmon } for pid=27656 comm="syz.3.5749" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1408.260226][ T30] audit: type=1400 audit(2000000640.891:17026): avc: denied { perfmon } for pid=27656 comm="syz.3.5749" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1408.340269][ T30] audit: type=1400 audit(2000000640.901:17027): avc: denied { perfmon } for pid=27656 comm="syz.3.5749" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1408.370845][ T30] audit: type=1400 audit(2000000640.901:17028): avc: denied { perfmon } for pid=27656 comm="syz.3.5749" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1408.403094][ T30] audit: type=1400 audit(2000000640.901:17029): avc: denied { perfmon } for pid=27656 comm="syz.3.5749" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1411.482072][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1411.703538][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.314491][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1412.333122][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1412.348411][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.424818][ T10] usb 6-1: config 0 descriptor?? [ 1412.957525][ T30] kauditd_printk_skb: 354 callbacks suppressed [ 1412.957542][ T30] audit: type=1400 audit(2000000645.901:17384): avc: denied { sys_module } for pid=27708 comm="syz.3.5762" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1413.031610][ T30] audit: type=1400 audit(2000000645.901:17385): avc: denied { module_request } for pid=27708 comm="syz.3.5762" kmod="batadv0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1413.178702][ T30] audit: type=1400 audit(2000000645.941:17386): avc: denied { map_create } for pid=27711 comm="syz.2.5763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1413.288387][ T30] audit: type=1400 audit(2000000645.951:17387): avc: denied { prog_load } for pid=27711 comm="syz.2.5763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1413.466293][ T30] audit: type=1400 audit(2000000645.951:17388): avc: denied { bpf } for pid=27711 comm="syz.2.5763" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1413.536036][ T30] audit: type=1400 audit(2000000645.961:17389): avc: denied { perfmon } for pid=27711 comm="syz.2.5763" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1414.067309][ T30] audit: type=1400 audit(2000000645.961:17390): avc: denied { perfmon } for pid=27711 comm="syz.2.5763" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1414.141341][ T30] audit: type=1400 audit(2000000645.971:17391): avc: denied { perfmon } for pid=27711 comm="syz.2.5763" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1414.184730][ T30] audit: type=1400 audit(2000000645.971:17392): avc: denied { perfmon } for pid=27711 comm="syz.2.5763" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1414.256890][ T30] audit: type=1400 audit(2000000645.971:17393): avc: denied { bpf } for pid=27711 comm="syz.2.5763" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1414.781875][ T5890] usb 6-1: USB disconnect, device number 24 [ 1415.133337][T27731] fuse: Bad value for 'fd' [ 1415.714542][T27730] fuse: Bad value for 'fd' [ 1416.608313][T27741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5770'. [ 1416.708775][T27741] libceph: resolve '0..' (ret=-3): failed [ 1416.753893][T27745] syzkaller1: entered promiscuous mode [ 1416.759527][T27745] syzkaller1: entered allmulticast mode [ 1417.189452][T16838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1417.204103][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1417.212241][T16838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1417.222672][T16838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1417.230646][T16838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1417.240814][T16838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1417.400090][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1417.416317][ T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1417.520297][ T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1417.629641][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1417.657133][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1417.692460][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1417.724443][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1417.788772][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1417.820112][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.919535][ T10] usb 6-1: config 0 descriptor?? [ 1418.055807][T27763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1418.064884][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 1418.064904][ T30] audit: type=1400 audit(2000000651.001:17548): avc: denied { prog_load } for pid=27760 comm="syz.3.5777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1418.140117][ T30] audit: type=1400 audit(2000000651.001:17549): avc: denied { bpf } for pid=27760 comm="syz.3.5777" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1418.143942][T27763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1418.190274][ T30] audit: type=1400 audit(2000000651.061:17550): avc: denied { create } for pid=27762 comm="syz.2.5778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1418.230201][T27763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1418.250645][T27763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1418.259736][ T10] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1418.271818][ T30] audit: type=1400 audit(2000000651.091:17551): avc: denied { create } for pid=27760 comm="syz.3.5777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1418.302235][ T30] audit: type=1400 audit(2000000651.091:17552): avc: denied { write } for pid=27760 comm="syz.3.5777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1418.323409][ T30] audit: type=1400 audit(2000000651.091:17553): avc: denied { write } for pid=27760 comm="syz.3.5777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1418.344952][ T30] audit: type=1400 audit(2000000651.131:17554): avc: denied { ioctl } for pid=27742 comm="syz.5.5768" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1418.406762][ T30] audit: type=1400 audit(2000000651.131:17555): avc: denied { ioctl } for pid=27742 comm="syz.5.5768" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1418.587428][ T30] audit: type=1400 audit(2000000651.321:17556): avc: denied { module_request } for pid=27760 comm="syz.3.5777" kmod="nft-expr-2-l" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1418.652125][ T10] usb 6-1: USB disconnect, device number 25 [ 1418.676209][ T10] usblp0: removed [ 1418.690499][ T30] audit: type=1400 audit(2000000651.521:17557): avc: denied { read write } for pid=27742 comm="syz.5.5768" name="lp0" dev="devtmpfs" ino=3334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1418.857811][T27763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1418.866795][T27763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1418.887389][T27763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1419.319736][T16838] Bluetooth: hci5: command tx timeout [ 1420.293091][T27763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1420.302275][T27763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5777'. [ 1420.376112][T27748] chnl_net:caif_netlink_parms(): no params data found [ 1420.780217][T27788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1420.858141][T27748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.939812][T27748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.948852][T27748] bridge_slave_0: entered allmulticast mode [ 1420.970338][T27748] bridge_slave_0: entered promiscuous mode [ 1420.996315][T27748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.016467][T27748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.027324][T27748] bridge_slave_1: entered allmulticast mode [ 1421.037252][T27748] bridge_slave_1: entered promiscuous mode [ 1421.126724][T27748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.149157][T27748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.202720][T27748] team0: Port device team_slave_0 added [ 1421.217642][T27748] team0: Port device team_slave_1 added [ 1421.274599][T27748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.282304][T27748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.310915][T27748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.329322][T27748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.338337][T27748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.378304][T27748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.392285][T16838] Bluetooth: hci5: command tx timeout [ 1421.684884][T27748] hsr_slave_0: entered promiscuous mode [ 1421.704331][T27748] hsr_slave_1: entered promiscuous mode [ 1421.711073][T27748] debugfs: 'hsr0' already exists in 'hsr' [ 1421.716868][T27748] Cannot create hsr debugfs directory [ 1422.032897][T27805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1422.600383][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.606958][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.081461][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 1423.081478][ T30] audit: type=1400 audit(2000000656.031:17702): avc: denied { create } for pid=27818 comm="syz.1.5789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1423.105309][T27748] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1423.131664][T27748] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1423.138940][ T30] audit: type=1400 audit(2000000656.031:17703): avc: denied { create } for pid=27748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1423.169542][T27748] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1423.181700][ T30] audit: type=1400 audit(2000000656.031:17704): avc: denied { write } for pid=27748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1423.212970][T27748] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1423.229923][ T30] audit: type=1400 audit(2000000656.031:17705): avc: denied { read } for pid=27748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1423.259463][ T30] audit: type=1400 audit(2000000656.031:17706): avc: denied { read } for pid=27748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1423.280083][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.293884][ T30] audit: type=1400 audit(2000000656.031:17707): avc: denied { write } for pid=27748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1423.314585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.370557][ T30] audit: type=1400 audit(2000000656.031:17708): avc: denied { read } for pid=27748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1423.419290][ T30] audit: type=1400 audit(2000000656.061:17709): avc: denied { write } for pid=27818 comm="syz.1.5789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1423.465337][ T30] audit: type=1400 audit(2000000656.171:17710): avc: denied { create } for pid=27748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1423.470712][T16838] Bluetooth: hci5: command tx timeout [ 1423.530761][ T30] audit: type=1400 audit(2000000656.171:17711): avc: denied { write } for pid=27748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1423.624689][T27748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1423.773218][T27748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1424.195110][T25674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.202261][T25674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1424.267280][T27832] __nla_validate_parse: 1 callbacks suppressed [ 1424.267300][T27832] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5792'. [ 1424.284410][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.291562][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1424.317446][T27832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5792'. [ 1425.690034][T16838] Bluetooth: hci5: command tx timeout [ 1427.057768][T27748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.562317][T27868] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5798'. [ 1427.640125][ T973] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1427.802758][ T973] usb 6-1: Using ep0 maxpacket: 8 [ 1427.841228][ T973] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1427.866641][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.928329][ T973] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1427.967032][ T973] pvrusb2: ********** [ 1428.024955][ T973] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1428.076286][ T973] pvrusb2: Important functionality might not be entirely working. [ 1428.106747][ T973] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1428.125805][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 1428.125819][ T30] audit: type=1400 audit(2000000661.071:17863): avc: denied { sys_module } for pid=27748 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1428.152936][ T973] pvrusb2: ********** [ 1428.159857][ T30] audit: type=1400 audit(2000000661.101:17864): avc: denied { module_request } for pid=27748 comm="syz-executor" kmod="netdevsim6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1428.275290][ T30] audit: type=1400 audit(2000000661.211:17865): avc: denied { ioctl } for pid=27862 comm="syz.5.5797" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1428.301476][ T2322] pvrusb2: Invalid write control endpoint [ 1428.341177][ T30] audit: type=1400 audit(2000000661.221:17866): avc: denied { ioctl } for pid=27862 comm="syz.5.5797" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1428.457059][ T30] audit: type=1400 audit(2000000661.391:17867): avc: denied { create } for pid=27880 comm="syz.1.5800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1428.586255][ T30] audit: type=1400 audit(2000000661.441:17868): avc: denied { create } for pid=27880 comm="syz.1.5800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1428.646949][ T30] audit: type=1400 audit(2000000661.441:17869): avc: denied { getopt } for pid=27880 comm="syz.1.5800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1428.730427][T27865] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 1428.814170][ T30] audit: type=1400 audit(2000000661.441:17870): avc: denied { create } for pid=27880 comm="syz.1.5800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1429.013206][ T30] audit: type=1400 audit(2000000661.441:17871): avc: denied { allowed } for pid=27880 comm="syz.1.5800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1429.078875][ T30] audit: type=1400 audit(2000000661.441:17872): avc: denied { create } for pid=27880 comm="syz.1.5800" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1429.135484][ T2322] pvrusb2: Invalid write control endpoint [ 1429.185847][T27891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5801'. [ 1429.201088][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1429.228635][T27748] veth0_vlan: entered promiscuous mode [ 1429.234431][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1429.250834][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1429.279028][ T2322] pvrusb2: Device being rendered inoperable [ 1429.298064][T27748] veth1_vlan: entered promiscuous mode [ 1429.308818][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1429.383675][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1429.535689][ T2322] pvrusb2: Attached sub-driver cx25840 [ 1429.545523][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1429.592409][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1429.679130][T27748] veth0_macvtap: entered promiscuous mode [ 1429.714987][T27748] veth1_macvtap: entered promiscuous mode [ 1429.914722][T27893] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5803'. [ 1429.940187][T27893] xt_socket: unknown flags 0xd0 [ 1429.944146][T27748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.000945][T27748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1430.092707][T18570] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.101560][T18570] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.111734][T18570] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.124562][T18570] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.256110][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.278253][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.325421][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.333835][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.880496][ T5954] usb 6-1: USB disconnect, device number 26 [ 1431.955090][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029561c00: rx timeout, send abort [ 1432.367425][T27919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5809'. [ 1432.463377][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029561c00: abort rx timeout. Force session deactivation [ 1433.185849][ T30] kauditd_printk_skb: 191 callbacks suppressed [ 1433.185868][ T30] audit: type=1400 audit(2000000665.671:18064): avc: denied { ioctl } for pid=27923 comm="syz.5.5810" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1433.490034][ T30] audit: type=1400 audit(2000000666.221:18065): avc: denied { ioctl } for pid=27923 comm="syz.5.5810" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1433.515309][ T30] audit: type=1400 audit(2000000666.221:18066): avc: denied { ioctl } for pid=27923 comm="syz.5.5810" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1433.591451][ T30] audit: type=1400 audit(2000000666.331:18067): avc: denied { create } for pid=27926 comm="syz.1.5811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1433.623832][ T5890] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1433.860116][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 1433.891867][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.905862][ T30] audit: type=1400 audit(2000000666.331:18068): avc: denied { create } for pid=27926 comm="syz.1.5811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1433.950667][ T5890] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1433.994016][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.010654][ T30] audit: type=1400 audit(2000000666.331:18069): avc: denied { create } for pid=27926 comm="syz.1.5811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1434.055928][ T30] audit: type=1400 audit(2000000666.331:18070): avc: denied { execmem } for pid=27926 comm="syz.1.5811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1434.318509][ T5890] usb 6-1: config 0 descriptor?? [ 1434.333299][ T5890] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1434.373490][ T30] audit: type=1400 audit(2000000666.421:18071): avc: denied { ioctl } for pid=27923 comm="syz.5.5810" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1434.622348][ T30] audit: type=1400 audit(2000000666.491:18072): avc: denied { ioctl } for pid=27923 comm="syz.5.5810" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1434.750515][ T30] audit: type=1400 audit(2000000666.511:18073): avc: denied { read write } for pid=27748 comm="syz-executor" name="loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1435.151786][ T5890] gspca_spca501: reg write: error -110 [ 1435.161897][ T5890] spca501 6-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1435.181476][ T5890] spca501 6-1:0.0: probe with driver spca501 failed with error -22 [ 1435.270891][T16774] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1435.540610][T16774] usb 7-1: device descriptor read/64, error -71 [ 1435.780065][T16774] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1435.872703][T27948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5815'. [ 1435.911773][T16774] usb 7-1: device descriptor read/64, error -71 [ 1436.021120][T16774] usb usb7-port1: attempt power cycle [ 1436.370205][T16774] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1436.391849][T16774] usb 7-1: device descriptor read/8, error -71 [ 1436.706602][T16774] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1437.390428][T16774] usb 7-1: device not accepting address 5, error -71 [ 1437.421292][T16774] usb usb7-port1: unable to enumerate USB device [ 1437.514419][ T5954] usb 6-1: USB disconnect, device number 27 [ 1438.020480][T27972] netlink: 124 bytes leftover after parsing attributes in process `syz.6.5821'. [ 1438.122838][T27973] netlink: 184 bytes leftover after parsing attributes in process `syz.5.5820'. [ 1438.142193][T27974] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5819'. [ 1438.180349][T27973] xt_socket: unknown flags 0xd0 [ 1438.250004][ T30] kauditd_printk_skb: 244 callbacks suppressed [ 1438.250021][ T30] audit: type=1400 audit(2000000671.181:18318): avc: denied { create } for pid=27966 comm="syz.2.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1438.309900][ T30] audit: type=1400 audit(2000000671.181:18319): avc: denied { create } for pid=27966 comm="syz.2.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1438.431493][T27974] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1438.441077][T27975] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1438.447613][T27975] audit: audit_lost=238 audit_rate_limit=0 audit_backlog_limit=64 [ 1438.463923][T27974] audit: audit_lost=239 audit_rate_limit=0 audit_backlog_limit=64 [ 1438.474262][ T30] audit: type=1400 audit(2000000671.181:18320): avc: denied { write } for pid=27966 comm="syz.2.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1438.511865][T27974] audit: backlog limit exceeded [ 1438.519871][T27974] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1438.526724][T27974] audit: audit_lost=240 audit_rate_limit=0 audit_backlog_limit=64 [ 1438.881118][T27984] overlayfs: missing 'lowerdir' [ 1438.970268][ T5954] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1438.996197][T27987] overlayfs: failed to clone lowerpath [ 1439.116503][T27987] overlayfs: failed to clone upperpath [ 1439.158707][ T5954] usb 6-1: config 4 has an invalid interface number: 88 but max is 1 [ 1439.179236][ T5954] usb 6-1: config 4 has an invalid interface number: 29 but max is 1 [ 1439.208944][ T5954] usb 6-1: config 4 has no interface number 0 [ 1439.220608][ T5954] usb 6-1: config 4 has no interface number 1 [ 1439.343040][ T5954] usb 6-1: config 4 interface 88 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 1439.372322][ T5954] usb 6-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1439.390210][ T5954] usb 6-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 1439.403756][ T5954] usb 6-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1439.419638][ T5954] usb 6-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1439.520633][ T5954] usb 6-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 255, setting to 64 [ 1439.532610][ T5954] usb 6-1: config 4 interface 88 has no altsetting 0 [ 1439.539421][ T5954] usb 6-1: config 4 interface 29 has no altsetting 0 [ 1439.704047][T27997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5825'. [ 1439.713238][T27997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5825'. [ 1440.032130][ T5954] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 1440.099281][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.113362][ T5954] usb 6-1: Product: syz [ 1440.117541][ T5954] usb 6-1: Manufacturer: syz [ 1440.123756][ T5954] usb 6-1: SerialNumber: syz [ 1440.172577][T27975] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1440.487716][ T5954] chaoskey 6-1:4.29: Unable to register with hwrng [ 1440.805090][ T5954] usb 6-1: USB disconnect, device number 28 [ 1442.901703][ T5954] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1443.592553][ T30] kauditd_printk_skb: 429 callbacks suppressed [ 1443.592573][ T30] audit: type=1400 audit(2000000676.151:18559): avc: denied { create } for pid=28031 comm="syz.2.5837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1443.657523][ T5954] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1443.666282][ T30] audit: type=1400 audit(2000000676.151:18560): avc: denied { write } for pid=28031 comm="syz.2.5837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1443.666328][ T30] audit: type=1400 audit(2000000676.161:18561): avc: denied { nlmsg_write } for pid=28031 comm="syz.2.5837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1443.666366][ T30] audit: type=1400 audit(2000000676.171:18562): avc: denied { map_create } for pid=28031 comm="syz.2.5837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1443.666403][ T30] audit: type=1400 audit(2000000676.181:18563): avc: denied { create } for pid=28031 comm="syz.2.5837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1443.666439][ T30] audit: type=1400 audit(2000000676.181:18564): avc: denied { write } for pid=28031 comm="syz.2.5837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1443.666477][ T30] audit: type=1400 audit(2000000676.191:18565): avc: denied { read } for pid=28031 comm="syz.2.5837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1443.666511][ T30] audit: type=1400 audit(2000000676.191:18566): avc: denied { read } for pid=28031 comm="syz.2.5837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1444.165520][ T5954] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1444.165570][ T30] audit: type=1400 audit(2000000676.581:18567): avc: denied { ioctl } for pid=28020 comm="syz.5.5833" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1444.270257][ T30] audit: type=1400 audit(2000000676.581:18568): avc: denied { ioctl } for pid=28020 comm="syz.5.5833" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1444.507831][ T5954] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1444.757786][ T5954] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 1444.783378][ T5954] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1444.801278][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1444.813286][ T5954] usb 6-1: Product: syz [ 1444.902127][ T5954] usb 6-1: Manufacturer: syz [ 1444.955624][T28023] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1445.048346][ T5954] cdc_wdm 6-1:1.0: skipping garbage [ 1445.060062][ T5954] cdc_wdm 6-1:1.0: skipping garbage [ 1445.080087][ T5954] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1445.112710][ T5954] cdc_wdm 6-1:1.0: Unknown control protocol [ 1445.318868][ T973] usb 6-1: USB disconnect, device number 29 [ 1448.739818][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 1448.739838][ T30] audit: type=1400 audit(2000000681.521:18723): avc: denied { allowed } for pid=28086 comm="syz.6.5851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1448.818270][ T30] audit: type=1400 audit(2000000681.521:18724): avc: denied { create } for pid=28086 comm="syz.6.5851" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1448.911771][T28101] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5853'. [ 1448.965072][T28101] xt_socket: unknown flags 0xd0 [ 1448.970219][ T30] audit: type=1400 audit(2000000681.521:18725): avc: denied { map } for pid=28086 comm="syz.6.5851" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1448.994916][ T30] audit: type=1400 audit(2000000681.531:18726): avc: denied { read write } for pid=28086 comm="syz.6.5851" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1449.025203][ T30] audit: type=1400 audit(2000000681.531:18727): avc: denied { map } for pid=28086 comm="syz.6.5851" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1449.061908][ T30] audit: type=1400 audit(2000000681.541:18728): avc: denied { read write } for pid=28086 comm="syz.6.5851" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85880 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1449.092646][ T30] audit: type=1400 audit(2000000681.581:18729): avc: denied { allowed } for pid=28086 comm="syz.6.5851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1449.217673][ T30] audit: type=1400 audit(2000000681.591:18730): avc: denied { create } for pid=28086 comm="syz.6.5851" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1449.313566][ T30] audit: type=1400 audit(2000000681.591:18731): avc: denied { map } for pid=28086 comm="syz.6.5851" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1449.380197][ T30] audit: type=1400 audit(2000000681.591:18732): avc: denied { read write } for pid=28086 comm="syz.6.5851" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=85881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1449.620218][T16774] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1449.716451][T28109] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1449.725641][T28109] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1449.735683][T28109] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1449.960302][T16774] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.970753][T16774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1449.982586][T16774] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1449.992447][T16774] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1450.006475][T16774] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1450.019315][T16774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.053952][T16774] usb 6-1: config 0 descriptor?? [ 1450.086376][T16774] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1450.695826][T16774] spca561 6-1:0.0: probe with driver spca561 failed with error -22 [ 1451.406462][T16774] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1451.420443][T16774] usb 6-1: MIDIStreaming interface descriptor not found [ 1452.868738][T28144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5861'. [ 1453.756852][T27898] usb 6-1: USB disconnect, device number 30 [ 1453.847011][ T30] kauditd_printk_skb: 211 callbacks suppressed [ 1453.847026][ T30] audit: type=1400 audit(2000000686.791:18944): avc: denied { read write } for pid=24705 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1453.966884][ T30] audit: type=1400 audit(2000000686.841:18945): avc: denied { read write open } for pid=24705 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1454.092984][ T30] audit: type=1400 audit(2000000686.841:18946): avc: denied { ioctl } for pid=24705 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1454.246032][ T30] audit: type=1400 audit(2000000686.891:18947): avc: denied { create } for pid=28151 comm="syz.2.5865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1454.269482][ T30] audit: type=1400 audit(2000000687.011:18948): avc: denied { read } for pid=28153 comm="syz.5.5866" name="card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1454.305528][ T30] audit: type=1400 audit(2000000687.021:18949): avc: denied { read open } for pid=28153 comm="syz.5.5866" path="/dev/dri/card1" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1454.355757][ T30] audit: type=1400 audit(2000000687.071:18950): avc: denied { ioctl } for pid=28153 comm="syz.5.5866" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1454.429043][ T30] audit: type=1400 audit(2000000687.101:18951): avc: denied { ioctl } for pid=28153 comm="syz.5.5866" path="/dev/dri/card1" dev="devtmpfs" ino=627 ioctlcmd=0x6419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1454.463697][T28157] netlink: 184 bytes leftover after parsing attributes in process `syz.5.5867'. [ 1454.473975][T28157] xt_socket: unknown flags 0xd0 [ 1454.488502][ T30] audit: type=1400 audit(2000000687.111:18952): avc: denied { read } for pid=28153 comm="syz.5.5866" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1454.514796][ T30] audit: type=1400 audit(2000000687.111:18953): avc: denied { read open } for pid=28153 comm="syz.5.5866" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1454.960435][ T5954] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1455.159596][ T5954] usb 6-1: config 4 has an invalid interface number: 88 but max is 1 [ 1455.197845][ T5954] usb 6-1: config 4 has an invalid interface number: 29 but max is 1 [ 1455.220449][ T5954] usb 6-1: config 4 has no interface number 0 [ 1455.233926][ T5954] usb 6-1: config 4 has no interface number 1 [ 1455.248498][ T5954] usb 6-1: config 4 interface 88 altsetting 119 has an invalid descriptor for endpoint zero, skipping [ 1455.290084][ T5954] usb 6-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1455.430135][ T5954] usb 6-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 1455.462509][ T5954] usb 6-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1455.515294][ T5954] usb 6-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1455.532307][ T5954] usb 6-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 255, setting to 64 [ 1455.545047][ T5954] usb 6-1: config 4 interface 88 has no altsetting 0 [ 1455.552496][ T5954] usb 6-1: config 4 interface 29 has no altsetting 0 [ 1455.610439][ T5954] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 1456.011466][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.020222][ T5954] usb 6-1: Product: syz [ 1456.024468][ T5954] usb 6-1: Manufacturer: syz [ 1456.029156][ T5954] usb 6-1: SerialNumber: syz [ 1456.096758][T28157] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1457.198039][ T5954] chaoskey 6-1:4.29: Unable to register with hwrng [ 1457.234484][ T5954] usb 6-1: USB disconnect, device number 31 [ 1457.967983][T28188] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5875'. [ 1457.978861][T28188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5875'. [ 1457.988154][T28188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5875'. [ 1458.003521][T25675] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1458.044557][T25675] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1458.081549][T25675] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1458.106671][T25675] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1458.886535][ T30] kauditd_printk_skb: 245 callbacks suppressed [ 1458.886551][ T30] audit: type=1400 audit(2000000691.831:19199): avc: denied { read write } for pid=28208 comm="syz.5.5882" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1458.925973][ T30] audit: type=1400 audit(2000000691.871:19200): avc: denied { read write open } for pid=28208 comm="syz.5.5882" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1458.971163][ T30] audit: type=1400 audit(2000000691.871:19201): avc: denied { ioctl } for pid=28208 comm="syz.5.5882" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1459.088290][ T30] audit: type=1400 audit(2000000691.881:19202): avc: denied { prog_load } for pid=28208 comm="syz.5.5882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1459.109228][ T30] audit: type=1400 audit(2000000691.881:19203): avc: denied { bpf } for pid=28208 comm="syz.5.5882" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1459.131371][ T30] audit: type=1400 audit(2000000691.881:19204): avc: denied { perfmon } for pid=28208 comm="syz.5.5882" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1459.627207][ T30] audit: type=1400 audit(2000000691.881:19205): avc: denied { perfmon } for pid=28208 comm="syz.5.5882" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1459.653774][ T30] audit: type=1400 audit(2000000691.881:19206): avc: denied { perfmon } for pid=28208 comm="syz.5.5882" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1459.747374][ T30] audit: type=1400 audit(2000000691.891:19207): avc: denied { perfmon } for pid=28208 comm="syz.5.5882" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1459.812832][ T30] audit: type=1400 audit(2000000691.891:19208): avc: denied { perfmon } for pid=28208 comm="syz.5.5882" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1462.481742][T28240] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5890'. [ 1462.529346][T28240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=28240 comm=syz.6.5890 [ 1462.571892][T28240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=28240 comm=syz.6.5890 [ 1463.105675][T16774] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1463.270105][T16774] usb 6-1: Using ep0 maxpacket: 32 [ 1463.290095][T16774] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1463.412632][T16774] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1463.423197][T16774] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1463.435313][T16774] usb 6-1: Product: syz [ 1463.439502][T16774] usb 6-1: Manufacturer: syz [ 1463.463144][T16774] usb 6-1: SerialNumber: syz [ 1463.479678][T16774] usb 6-1: config 0 descriptor?? [ 1463.494604][T28248] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1463.947820][T16774] usb 6-1: USB disconnect, device number 32 [ 1463.952354][ T30] kauditd_printk_skb: 213 callbacks suppressed [ 1463.952371][ T30] audit: type=1400 audit(2000000696.891:19422): avc: denied { module_request } for pid=28260 comm="syz.2.5898" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1464.163607][ T30] audit: type=1400 audit(2000000697.111:19423): avc: denied { sys_module } for pid=28254 comm="syz.1.5896" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1464.228167][ T30] audit: type=1400 audit(2000000697.131:19424): avc: denied { module_request } for pid=28254 comm="syz.1.5896" kmod="syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1464.301632][ T30] audit: type=1400 audit(2000000697.241:19425): avc: denied { sys_module } for pid=28260 comm="syz.2.5898" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1464.374738][ T30] audit: type=1400 audit(2000000697.241:19426): avc: denied { module_request } for pid=28260 comm="syz.2.5898" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1465.024917][ T30] audit: type=1400 audit(2000000697.291:19427): avc: denied { allowed } for pid=28267 comm="syz.3.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1465.044479][ T30] audit: type=1400 audit(2000000697.291:19428): avc: denied { create } for pid=28267 comm="syz.3.5900" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1465.113550][ T30] audit: type=1400 audit(2000000697.301:19429): avc: denied { prog_load } for pid=28267 comm="syz.3.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1465.177750][ T30] audit: type=1400 audit(2000000697.301:19430): avc: denied { bpf } for pid=28267 comm="syz.3.5900" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1465.294318][ T30] audit: type=1400 audit(2000000697.301:19431): avc: denied { perfmon } for pid=28267 comm="syz.3.5900" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1465.413663][T28281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5901'. [ 1466.757012][T16774] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 1466.793406][T28309] netlink: 'syz.2.5914': attribute type 10 has an invalid length. [ 1466.964158][T16774] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1466.990492][T16774] usb 6-1: config 0 has no interface number 0 [ 1467.006802][T16774] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1467.041409][T16774] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1467.060740][T16774] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1467.215746][T16774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.246053][T16774] usb 6-1: config 0 descriptor?? [ 1467.282524][T28301] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1467.752963][T16774] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1468.548501][T28327] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5911'. [ 1468.956761][ T30] kauditd_printk_skb: 330 callbacks suppressed [ 1468.956777][ T30] audit: type=1400 audit(2000000701.901:19762): avc: denied { read } for pid=28296 comm="syz.5.5911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1469.198111][ T30] audit: type=1400 audit(2000000701.901:19763): avc: denied { read } for pid=28296 comm="syz.5.5911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1469.268045][ T30] audit: type=1400 audit(2000000701.911:19764): avc: denied { read } for pid=28296 comm="syz.5.5911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1469.530864][T28353] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1469.537392][T28353] audit: audit_lost=304 audit_rate_limit=0 audit_backlog_limit=64 [ 1469.545278][T28353] audit: backlog limit exceeded [ 1469.551375][T28353] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1469.557961][T28353] audit: audit_lost=305 audit_rate_limit=0 audit_backlog_limit=64 [ 1469.565835][T28353] audit: backlog limit exceeded [ 1469.571827][T28353] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1470.873640][ T5890] usb 6-1: USB disconnect, device number 33 [ 1470.998943][T28368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1473.010404][T16774] libceph: connect (1)[c::]:6789 error -101 [ 1473.027718][T16774] libceph: mon0 (1)[c::]:6789 connect error [ 1473.715753][T16774] libceph: connect (1)[c::]:6789 error -101 [ 1473.724399][T16774] libceph: mon0 (1)[c::]:6789 connect error [ 1473.859662][T28399] ceph: No mds server is up or the cluster is laggy [ 1474.351095][ T30] kauditd_printk_skb: 259 callbacks suppressed [ 1474.351112][ T30] audit: type=1400 audit(2000000707.301:19986): avc: denied { read write } for pid=28410 comm="syz.5.5945" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1474.387034][ T30] audit: type=1400 audit(2000000707.301:19987): avc: denied { read write open } for pid=28410 comm="syz.5.5945" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1474.525303][T28412] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1474.538328][ T30] audit: type=1400 audit(2000000707.371:19988): avc: denied { prog_load } for pid=28413 comm="syz.1.5947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1474.601784][ T30] audit: type=1400 audit(2000000707.371:19989): avc: denied { bpf } for pid=28413 comm="syz.1.5947" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1474.626900][ T30] audit: type=1400 audit(2000000707.371:19990): avc: denied { execmem } for pid=28413 comm="syz.1.5947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1474.683629][ T30] audit: type=1400 audit(2000000707.461:19991): avc: denied { prog_load } for pid=28416 comm="syz.2.5946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1474.768628][ T30] audit: type=1400 audit(2000000707.461:19992): avc: denied { bpf } for pid=28416 comm="syz.2.5946" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1474.895178][ T30] audit: type=1400 audit(2000000707.471:19993): avc: denied { perfmon } for pid=28416 comm="syz.2.5946" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1474.918320][ T30] audit: type=1400 audit(2000000707.471:19994): avc: denied { perfmon } for pid=28416 comm="syz.2.5946" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1474.941295][ T30] audit: type=1400 audit(2000000707.471:19995): avc: denied { perfmon } for pid=28416 comm="syz.2.5946" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1478.927133][ T5825] Bluetooth: hci4: Malformed LE Event: 0x1b [ 1479.070094][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 1479.076224][T16838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1479.387112][ T30] kauditd_printk_skb: 285 callbacks suppressed [ 1479.387128][ T30] audit: type=1400 audit(2000000712.331:20281): avc: denied { unlink } for pid=18133 comm="syz-executor" name="file5" dev="tmpfs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1479.501603][ T30] audit: type=1400 audit(2000000712.371:20282): avc: denied { ioctl } for pid=28492 comm="syz.5.5968" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1479.560434][ T973] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1479.578189][ T30] audit: type=1400 audit(2000000712.381:20283): avc: denied { create } for pid=28494 comm="syz.2.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1479.621155][ T30] audit: type=1400 audit(2000000712.391:20284): avc: denied { create } for pid=28494 comm="syz.2.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1479.691211][ T30] audit: type=1400 audit(2000000712.391:20285): avc: denied { write } for pid=28494 comm="syz.2.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1479.760023][ T973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.780228][ T973] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1479.806101][ T30] audit: type=1400 audit(2000000712.401:20286): avc: denied { read } for pid=28494 comm="syz.2.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1479.834529][ T973] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1479.856994][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.876943][ T30] audit: type=1400 audit(2000000712.401:20287): avc: denied { read } for pid=28494 comm="syz.2.5969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1479.985128][T28502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1480.390672][ T973] usb 6-1: config 0 descriptor?? [ 1480.395823][ T30] audit: type=1400 audit(2000000712.431:20288): avc: denied { unlink } for pid=18133 comm="syz-executor" name="file0" dev="tmpfs" ino=3078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1480.422834][ T30] audit: type=1400 audit(2000000712.451:20289): avc: denied { ioctl } for pid=28492 comm="syz.5.5968" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1480.530481][ T30] audit: type=1400 audit(2000000712.451:20290): avc: denied { ioctl } for pid=28494 comm="syz.2.5969" path="socket:[87512]" dev="sockfs" ino=87512 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1480.600908][ T5825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1480.621917][ T5825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1480.623130][T28506] netlink: 'syz.3.5973': attribute type 5 has an invalid length. [ 1480.630995][ T5825] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1480.638487][T28507] netlink: 'syz.3.5973': attribute type 5 has an invalid length. [ 1480.646707][ T5825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1480.671541][ T5825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1480.826396][T18570] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1480.967505][T18570] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1481.095724][T18570] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1481.466440][T18570] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 1482.753844][ T5825] Bluetooth: hci6: command tx timeout [ 1482.770094][T18570] bridge_slave_1: left allmulticast mode [ 1482.775766][T18570] bridge_slave_1: left promiscuous mode [ 1482.783784][T18570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.902363][T18570] bridge_slave_0: left allmulticast mode [ 1482.915946][T18570] bridge_slave_0: left promiscuous mode [ 1482.952229][T18570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.070645][T27897] usb 6-1: USB disconnect, device number 34 [ 1484.032693][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.039282][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.473294][ T30] kauditd_printk_skb: 193 callbacks suppressed [ 1484.473309][ T30] audit: type=1400 audit(2000000717.421:20484): avc: denied { read write } for pid=24705 comm="syz-executor" name="loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1484.546213][ T30] audit: type=1400 audit(2000000717.461:20485): avc: denied { read write open } for pid=24705 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1484.554477][T18570] dvmrp0 (unregistering): left allmulticast mode [ 1484.595112][ T30] audit: type=1400 audit(2000000717.461:20486): avc: denied { ioctl } for pid=24705 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1484.648150][ T30] audit: type=1400 audit(2000000717.491:20487): avc: denied { read write } for pid=27748 comm="syz-executor" name="loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1484.764993][ T30] audit: type=1400 audit(2000000717.491:20488): avc: denied { read write open } for pid=27748 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1484.896654][ T30] audit: type=1400 audit(2000000717.491:20489): avc: denied { ioctl } for pid=27748 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1484.899788][ T5825] Bluetooth: hci6: command tx timeout [ 1484.940408][ T30] audit: type=1400 audit(2000000717.591:20490): avc: denied { read } for pid=28562 comm="syz.5.5981" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1485.421470][ T30] audit: type=1400 audit(2000000717.591:20491): avc: denied { read open } for pid=28562 comm="syz.5.5981" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1485.452033][T28571] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1485.469133][ T30] audit: type=1400 audit(2000000717.671:20492): avc: denied { create } for pid=28562 comm="syz.5.5981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1485.494199][ T30] audit: type=1400 audit(2000000717.691:20493): avc: denied { create } for pid=28562 comm="syz.5.5981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1485.708050][T28573] fuse: Bad value for 'fd' [ 1485.797302][T18570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1485.818240][T18570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1485.830690][T18570] bond0 (unregistering): Released all slaves [ 1485.854955][T18570] bond1 (unregistering): Released all slaves [ 1485.886629][T18570] bond2 (unregistering): Released all slaves [ 1486.111923][T18570] IPVS: stopping backup sync thread 22277 ... [ 1486.990148][ T5825] Bluetooth: hci6: command tx timeout [ 1486.992880][T28504] chnl_net:caif_netlink_parms(): no params data found [ 1488.651537][T18570] hsr_slave_0: left promiscuous mode [ 1488.657464][T18570] hsr_slave_1: left promiscuous mode [ 1489.070519][ T5825] Bluetooth: hci6: command tx timeout [ 1489.161054][T18570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.239550][T18570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.359203][T18570] batman_adv: batadv0: Interface deactivated: dummy0 [ 1489.390565][T18570] batman_adv: batadv0: Removing interface: dummy0 [ 1489.480645][ T30] kauditd_printk_skb: 333 callbacks suppressed [ 1489.480664][ T30] audit: type=1400 audit(2000000722.421:20827): avc: denied { bpf } for pid=28611 comm="syz.6.5991" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1489.628367][ T30] audit: type=1400 audit(2000000722.421:20828): avc: denied { perfmon } for pid=28611 comm="syz.6.5991" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1489.773491][ T30] audit: type=1400 audit(2000000722.421:20829): avc: denied { bpf } for pid=28611 comm="syz.6.5991" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1489.840658][ T30] audit: type=1400 audit(2000000722.421:20830): avc: denied { perfmon } for pid=28611 comm="syz.6.5991" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1489.997620][ T30] audit: type=1400 audit(2000000722.421:20831): avc: denied { bpf } for pid=28611 comm="syz.6.5991" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1490.126230][ T30] audit: type=1400 audit(2000000722.421:20832): avc: denied { perfmon } for pid=28611 comm="syz.6.5991" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1490.251264][ T30] audit: type=1400 audit(2000000722.421:20833): avc: denied { bpf } for pid=28611 comm="syz.6.5991" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1490.380544][ T30] audit: type=1400 audit(2000000722.421:20834): avc: denied { prog_run } for pid=28611 comm="syz.6.5991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1490.422859][ T30] audit: type=1400 audit(2000000722.471:20835): avc: denied { search } for pid=28616 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1490.530035][ T30] audit: type=1400 audit(2000000722.471:20836): avc: denied { search } for pid=28616 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1491.230462][T28627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5993'. [ 1491.533106][T28632] hub 9-0:1.0: USB hub found [ 1491.539957][T28632] hub 9-0:1.0: 1 port detected [ 1491.793310][T28633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1491.886620][T28632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1492.578638][T28504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.586083][T28504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.594820][T28504] bridge_slave_0: entered allmulticast mode [ 1492.613202][T28504] bridge_slave_0: entered promiscuous mode [ 1492.694974][T28504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.737233][T28504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.756284][T28504] bridge_slave_1: entered allmulticast mode [ 1492.779071][T28504] bridge_slave_1: entered promiscuous mode [ 1493.281408][T28651] fuse: Bad value for 'fd' [ 1493.316851][T28504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1493.358114][T28504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.483899][T28504] team0: Port device team_slave_0 added [ 1493.500640][T18570] IPVS: stop unused estimator thread 0... [ 1493.504795][T28504] team0: Port device team_slave_1 added [ 1493.551726][T28655] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5999'. [ 1493.945353][T28655] veth0_macvtap: left promiscuous mode [ 1494.058553][T28504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1494.078923][T28504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.159337][T28504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1494.186992][T28504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1494.194689][T28504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.259718][T28504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1494.433045][T28504] hsr_slave_0: entered promiscuous mode [ 1494.460411][T28504] hsr_slave_1: entered promiscuous mode [ 1494.486166][T28504] debugfs: 'hsr0' already exists in 'hsr' [ 1494.495566][ T30] kauditd_printk_skb: 437 callbacks suppressed [ 1494.495578][ T30] audit: type=1400 audit(2000000727.441:21274): avc: denied { write } for pid=28659 comm="syz.3.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1494.538679][T28504] Cannot create hsr debugfs directory [ 1494.612695][ T30] audit: type=1400 audit(2000000727.481:21275): avc: denied { write } for pid=28659 comm="syz.3.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1494.641502][T28665] ptrace attach of "./syz-executor exec"[24705] was attempted by "./syz-executor exec"[28665] [ 1494.825018][ T30] audit: type=1400 audit(2000000727.481:21276): avc: denied { write } for pid=28659 comm="syz.3.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1494.854547][ T30] audit: type=1400 audit(2000000727.501:21277): avc: denied { write } for pid=28659 comm="syz.3.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1495.330087][ T30] audit: type=1400 audit(2000000727.521:21278): avc: denied { write } for pid=28659 comm="syz.3.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1495.417603][ T30] audit: type=1400 audit(2000000727.521:21279): avc: denied { write } for pid=28659 comm="syz.3.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1495.520867][ T30] audit: type=1400 audit(2000000727.531:21280): avc: denied { write } for pid=28659 comm="syz.3.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1495.614930][ T30] audit: type=1400 audit(2000000727.541:21281): avc: denied { write } for pid=28659 comm="syz.3.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1495.701404][ T30] audit: type=1400 audit(2000000727.551:21282): avc: denied { write } for pid=28659 comm="syz.3.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1495.756046][ T30] audit: type=1400 audit(2000000727.581:21283): avc: denied { kexec_image_load } for pid=28662 comm="syz.5.6000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1495.804364][T28682] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6005'. [ 1496.648217][T28700] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6008'. [ 1496.847669][T28705] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6008'. [ 1497.426765][T28504] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1497.625972][T28504] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1497.665493][T28504] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1497.729350][T28504] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1498.261396][T28727] bridge4: entered promiscuous mode [ 1498.613787][T28504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.788753][T28504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.850324][T25674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.857511][T25674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.791996][ T30] kauditd_printk_skb: 257 callbacks suppressed [ 1499.792009][ T30] audit: type=1400 audit(2000000732.101:21541): avc: denied { name_bind } for pid=28739 comm="syz.3.6019" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1499.930013][ T30] audit: type=1400 audit(2000000732.111:21542): avc: denied { node_bind } for pid=28739 comm="syz.3.6019" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1499.941244][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.959747][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.007366][T28748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6020'. [ 1500.037070][ T30] audit: type=1400 audit(2000000732.211:21543): avc: denied { execmem } for pid=28739 comm="syz.3.6019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1500.140096][ T30] audit: type=1400 audit(2000000732.781:21544): avc: denied { create } for pid=28743 comm="syz.1.6020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1500.609267][ T30] audit: type=1400 audit(2000000732.781:21545): avc: denied { create } for pid=28743 comm="syz.1.6020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1500.685971][ T30] audit: type=1400 audit(2000000732.781:21546): avc: denied { module_request } for pid=28743 comm="syz.1.6020" kmod="net-pf-10-proto-59-type-4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1500.910290][ T30] audit: type=1400 audit(2000000732.861:21547): avc: denied { create } for pid=28743 comm="syz.1.6020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1500.970162][ T30] audit: type=1400 audit(2000000732.861:21548): avc: denied { search } for pid=28740 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1501.090572][T28764] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1501.100109][ T30] audit: type=1400 audit(2000000732.881:21549): avc: denied { create } for pid=28743 comm="syz.1.6020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1502.264086][T28782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6025'. [ 1502.929444][T28504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1502.963224][T28788] bridge2: entered promiscuous mode [ 1503.245806][T28504] veth0_vlan: entered promiscuous mode [ 1503.357793][T28504] veth1_vlan: entered promiscuous mode [ 1503.809213][T28504] veth0_macvtap: entered promiscuous mode [ 1503.839130][T28504] veth1_macvtap: entered promiscuous mode [ 1503.976355][T28504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1504.159094][T28504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1504.339250][T25674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.382075][T25674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.428435][T25674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.688672][T25674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.814009][ T30] kauditd_printk_skb: 411 callbacks suppressed [ 1504.814027][ T30] audit: type=1400 audit(2000000737.761:21896): avc: denied { connect } for pid=28809 comm="syz.1.6033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1504.889983][ T30] audit: type=1400 audit(2000000737.761:21897): avc: denied { create } for pid=28809 comm="syz.1.6033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1505.090297][ T30] audit: type=1400 audit(2000000737.801:21898): avc: denied { create } for pid=28809 comm="syz.1.6033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1505.112404][ T30] audit: type=1400 audit(2000000737.801:21899): avc: denied { create } for pid=28809 comm="syz.1.6033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1505.134875][ T30] audit: type=1400 audit(2000000737.801:21900): avc: denied { ioctl } for pid=28809 comm="syz.1.6033" path="socket:[89180]" dev="sockfs" ino=89180 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1505.528717][T28825] kAFS: unparsable volume name [ 1505.555322][ T30] audit: type=1400 audit(2000000737.801:21901): avc: denied { module_request } for pid=28809 comm="syz.1.6033" kmod="netdev-wlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1505.648525][T18570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.694688][T18570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1505.740056][ T30] audit: type=1400 audit(2000000737.821:21902): avc: denied { read write } for pid=27748 comm="syz-executor" name="loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1505.877390][ T30] audit: type=1400 audit(2000000737.821:21903): avc: denied { read write open } for pid=27748 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1505.975437][T28504] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1505.985976][T28829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1506.031008][T18570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.074476][T18570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.490194][T16774] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1507.056689][T16774] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1507.076283][T16774] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1507.103387][T16774] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1507.132596][T16774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.381868][T28834] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1507.394467][T16774] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1507.522349][T28847] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1507.531873][T28847] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1507.542168][T28847] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5972'. [ 1508.464326][T16838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1508.479782][T16838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1508.488828][T16838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1508.496749][T16838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1508.525492][T16838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1509.177752][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.012647][ T30] kauditd_printk_skb: 464 callbacks suppressed [ 1510.012665][ T30] audit: type=1400 audit(2000000742.421:22346): avc: denied { create } for pid=28865 comm="syz.1.6042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1510.162656][ T30] audit: type=1400 audit(2000000742.431:22347): avc: denied { write } for pid=28865 comm="syz.1.6042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1510.197249][T28864] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1510.200671][ T30] audit: type=1400 audit(2000000742.441:22348): avc: denied { read } for pid=28865 comm="syz.1.6042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1510.216526][T28504] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1510.251277][ T30] audit: type=1400 audit(2000000742.901:22349): avc: denied { search } for pid=28864 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1510.274673][T28864] audit: audit_lost=349 audit_rate_limit=0 audit_backlog_limit=64 [ 1510.278031][ T30] audit: type=1400 audit(2000000742.901:22350): avc: denied { search } for pid=28864 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1510.289958][T28504] audit: audit_lost=350 audit_rate_limit=0 audit_backlog_limit=64 [ 1510.306504][ T30] audit: type=1400 audit(2000000742.901:22351): avc: denied { search } for pid=28864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1510.342525][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.591525][T16838] Bluetooth: hci2: command tx timeout [ 1510.610018][T23589] usb 6-1: USB disconnect, device number 35 [ 1510.739213][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.904108][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.559006][T28887] tipc: Enabled bearer , priority 0 [ 1511.589413][T28888] syzkaller0: entered promiscuous mode [ 1511.600216][T28888] syzkaller0: entered allmulticast mode [ 1511.915012][T28885] tipc: Resetting bearer [ 1511.971313][T28885] tipc: Disabling bearer [ 1512.023600][ T36] bridge_slave_1: left allmulticast mode [ 1512.029276][ T36] bridge_slave_1: left promiscuous mode [ 1512.045339][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.085786][ T36] bridge_slave_0: left allmulticast mode [ 1512.102336][ T36] bridge_slave_0: left promiscuous mode [ 1512.110377][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.753672][T16838] Bluetooth: hci2: command tx timeout [ 1513.130238][T28816] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 1513.435532][T28816] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1513.450024][T28816] usb 6-1: config 0 has no interface number 0 [ 1513.466802][T28816] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1513.484285][T28816] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1513.570171][T28816] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1513.598689][T28816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.675925][T28816] usb 6-1: config 0 descriptor?? [ 1513.715676][T28913] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1513.768085][T28816] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1513.939646][ T36] team0: Port device geneve1 removed [ 1514.304225][T28931] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6053'. [ 1514.833498][T16838] Bluetooth: hci2: command tx timeout [ 1515.311327][ T30] kauditd_printk_skb: 426 callbacks suppressed [ 1515.311343][ T30] audit: type=1400 audit(2000000748.261:22732): avc: denied { prog_load } for pid=28937 comm="syz.1.6060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1515.337183][ T30] audit: type=1400 audit(2000000748.281:22733): avc: denied { bpf } for pid=28937 comm="syz.1.6060" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1515.358056][ T30] audit: type=1400 audit(2000000748.281:22734): avc: denied { perfmon } for pid=28937 comm="syz.1.6060" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1515.457347][ T30] audit: type=1400 audit(2000000748.281:22735): avc: denied { perfmon } for pid=28937 comm="syz.1.6060" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1515.627418][T28943] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1515.639995][ T30] audit: type=1400 audit(2000000748.281:22736): avc: denied { perfmon } for pid=28937 comm="syz.1.6060" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1515.989681][ T30] audit: type=1400 audit(2000000748.281:22737): avc: denied { perfmon } for pid=28937 comm="syz.1.6060" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1515.993457][T28945] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1516.019293][T28943] audit: audit_lost=366 audit_rate_limit=0 audit_backlog_limit=64 [ 1516.034289][T28504] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1516.374026][T16774] usb 6-1: USB disconnect, device number 36 [ 1516.910190][T16838] Bluetooth: hci2: command tx timeout [ 1517.130441][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.163244][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.184402][ T36] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1517.564177][ T36] bond0 (unregistering): Released all slaves [ 1517.706750][T28857] chnl_net:caif_netlink_parms(): no params data found [ 1517.795353][ T36] tipc: Disabling bearer [ 1517.806126][ T36] tipc: Disabling bearer [ 1517.829155][ T36] tipc: Left network mode [ 1518.009319][T28973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6066'. [ 1518.155332][T28973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6066'. [ 1518.433014][T28857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.455670][T28857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.500233][T28857] bridge_slave_0: entered allmulticast mode [ 1518.507643][T16838] Bluetooth: hci1: unexpected event 0x14 length: 20 > 6 [ 1518.521811][T28857] bridge_slave_0: entered promiscuous mode [ 1518.705140][T28857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.741027][T28857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.798908][T28857] bridge_slave_1: entered allmulticast mode [ 1518.936536][T28857] bridge_slave_1: entered promiscuous mode [ 1519.882626][T28857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1519.946961][T28857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1519.969998][T23588] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1520.134465][T23588] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1520.161617][T23588] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1520.196603][T23588] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1520.227105][T23588] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1520.250886][T23588] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1520.269526][T23588] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1520.297677][T28857] team0: Port device team_slave_0 added [ 1520.315476][T23588] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1520.324791][ T30] kauditd_printk_skb: 722 callbacks suppressed [ 1520.324807][ T30] audit: type=1400 audit(2000000753.271:23361): avc: denied { ioctl } for pid=29001 comm="syz.6.6073" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1520.362096][T23588] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1520.373821][ T36] hsr_slave_0: left promiscuous mode [ 1520.374013][T23588] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1520.400839][ T30] audit: type=1400 audit(2000000753.271:23362): avc: denied { ioctl } for pid=28998 comm="syz.5.6072" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1520.426774][ T36] hsr_slave_1: left promiscuous mode [ 1520.436674][T23588] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1520.470194][T23588] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1520.479142][T23588] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1520.493755][ T36] veth1_macvtap: left promiscuous mode [ 1520.499473][ T36] veth0_macvtap: left promiscuous mode [ 1520.515358][ T30] audit: type=1400 audit(2000000753.311:23363): avc: denied { ioctl } for pid=28998 comm="syz.5.6072" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1520.539990][ T36] veth1_vlan: left promiscuous mode [ 1520.548114][ T36] veth0_vlan: left promiscuous mode [ 1520.550426][T23588] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1520.555274][ T30] audit: type=1400 audit(2000000753.311:23364): avc: denied { ioctl } for pid=28998 comm="syz.5.6072" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1520.592220][T23588] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1520.593371][ T30] audit: type=1400 audit(2000000753.321:23365): avc: denied { ioctl } for pid=28998 comm="syz.5.6072" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1520.611860][T23588] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1520.627635][ C0] vkms_vblank_simulate: vblank timer overrun [ 1520.628804][ T30] audit: type=1400 audit(2000000753.411:23366): avc: denied { ioctl } for pid=28998 comm="syz.5.6072" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1520.672757][T29009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6074'. [ 1520.700278][T23588] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1520.726797][T23588] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1520.745738][ T30] audit: type=1400 audit(2000000753.411:23367): avc: denied { ioctl } for pid=28998 comm="syz.5.6072" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1520.815707][ T30] audit: type=1400 audit(2000000753.411:23368): avc: denied { ioctl } for pid=28998 comm="syz.5.6072" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1520.879215][T23588] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1520.886594][ T30] audit: type=1400 audit(2000000753.441:23369): avc: denied { ioctl } for pid=28998 comm="syz.5.6072" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1520.910023][T23588] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1520.915134][ C0] vkms_vblank_simulate: vblank timer overrun [ 1520.934106][T23588] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1520.962908][T23588] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1520.971127][ T30] audit: type=1400 audit(2000000753.511:23370): avc: denied { prog_load } for pid=29005 comm="syz.1.6074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1520.990226][T23588] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1521.006138][T23588] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1521.399956][T23588] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1521.411061][T23588] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1521.443009][T23588] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1521.467224][T23588] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1521.480151][T23588] usb 6-1: Product: syz [ 1521.484990][T23588] usb 6-1: Manufacturer: syz [ 1521.489828][T23588] usb 6-1: SerialNumber: syz [ 1521.515395][T23588] usb 6-1: config 0 descriptor?? [ 1521.540866][T23588] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1521.794819][ T973] usb 6-1: USB disconnect, device number 37 [ 1521.806950][ T973] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1521.863706][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1521.958263][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1523.003282][ T36] lo (unregistering): left allmulticast mode [ 1523.025892][T28857] team0: Port device team_slave_1 added [ 1523.061716][T16774] syz2: Port: 1 Link DOWN [ 1523.197834][T28857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.239260][T28857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.265494][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.381617][T28857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.502379][T28857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1523.509457][T28857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1523.536372][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.575520][T28857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1523.966448][ T36] IPVS: stop unused estimator thread 0... [ 1524.017190][T28857] hsr_slave_0: entered promiscuous mode [ 1524.058209][T28857] hsr_slave_1: entered promiscuous mode [ 1524.065814][T28857] debugfs: 'hsr0' already exists in 'hsr' [ 1524.138242][T28857] Cannot create hsr debugfs directory [ 1525.276742][T29050] bridge0: entered promiscuous mode [ 1525.330615][ T30] kauditd_printk_skb: 320 callbacks suppressed [ 1525.330632][ T30] audit: type=1400 audit(2000000758.261:23690): avc: denied { search } for pid=29036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1525.364240][ C1] vkms_vblank_simulate: vblank timer overrun [ 1525.644822][ T30] audit: type=1400 audit(2000000758.281:23692): avc: denied { read open } for pid=29036 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1525.672314][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.108626][ T30] audit: type=1400 audit(2000000758.281:23693): avc: denied { getattr } for pid=29036 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1526.134391][ C1] vkms_vblank_simulate: vblank timer overrun [ 1526.208520][T29062] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1526.230580][ T30] audit: type=1400 audit(2000000758.291:23694): avc: denied { search } for pid=29036 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1526.238689][T29062] audit: audit_lost=400 audit_rate_limit=0 audit_backlog_limit=64 [ 1526.322587][T29056] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1526.344881][ T30] audit: type=1400 audit(2000000758.291:23695): avc: denied { search } for pid=29036 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1526.379450][T29056] audit: audit_lost=401 audit_rate_limit=0 audit_backlog_limit=64 [ 1526.390006][T29056] audit: backlog limit exceeded [ 1526.690997][T28857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1526.822071][T28857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1527.065035][T28857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1527.119808][T28857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1527.576386][T29085] netlink: 'syz.1.6089': attribute type 1 has an invalid length. [ 1527.591636][T29085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6089'. [ 1527.993352][T28857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.217795][T28857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.239129][T28531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.246351][T28531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.271929][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.279343][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1529.095955][T29109] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6096'. [ 1529.105047][T29109] openvswitch: netlink: Message has 12 unknown bytes. [ 1529.901736][T29101] futex_wake_op: syz.2.6094 tries to shift op by -1; fix this program [ 1529.966872][T28857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.066874][T29126] tipc: Enabling of bearer rejected, failed to enable media [ 1530.320844][T28857] veth0_vlan: entered promiscuous mode [ 1530.374430][T28857] veth1_vlan: entered promiscuous mode [ 1530.391554][ T30] kauditd_printk_skb: 447 callbacks suppressed [ 1530.391571][ T30] audit: type=1400 audit(2000000763.341:24049): avc: denied { ioctl } for pid=29130 comm="syz.5.6103" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1530.460596][ T5890] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1530.471020][ T30] audit: type=1400 audit(2000000763.421:24050): avc: denied { ioctl } for pid=29130 comm="syz.5.6103" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1530.496942][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.524022][T28857] veth0_macvtap: entered promiscuous mode [ 1530.541674][ T30] audit: type=1400 audit(2000000763.421:24051): avc: denied { ioctl } for pid=29130 comm="syz.5.6103" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1530.567006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.577340][T28857] veth1_macvtap: entered promiscuous mode [ 1530.609353][ T30] audit: type=1400 audit(2000000763.421:24052): avc: denied { ioctl } for pid=29130 comm="syz.5.6103" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1530.634521][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.647970][T28857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.658841][ T30] audit: type=1400 audit(2000000763.431:24053): avc: denied { read write } for pid=28504 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1530.684460][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.691041][ T30] audit: type=1400 audit(2000000763.431:24054): avc: denied { read write open } for pid=28504 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1530.718624][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.733951][T28857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.759523][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.774094][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.786151][ T30] audit: type=1400 audit(2000000763.441:24055): avc: denied { ioctl } for pid=28504 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1530.813530][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.820999][ T30] audit: type=1400 audit(2000000763.531:24056): avc: denied { ioctl } for pid=29130 comm="syz.5.6103" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1530.846938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1530.850178][T16774] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 1530.854287][ T5890] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1530.872954][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.926641][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.938441][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.950652][ T5890] usb 6-1: Product: syz [ 1530.955228][ T5890] usb 6-1: Manufacturer: syz [ 1530.961060][ T5890] usb 6-1: SerialNumber: syz [ 1530.968567][ T30] audit: type=1400 audit(2000000763.541:24057): avc: denied { create } for pid=29134 comm="syz.2.6105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1531.010619][ T5890] usb 6-1: config 0 descriptor?? [ 1531.016563][ T30] audit: type=1400 audit(2000000763.541:24058): avc: denied { setopt } for pid=29134 comm="syz.2.6105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1531.126324][T16774] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1531.155206][T16774] usb 3-1: config 0 has no interface number 0 [ 1531.170209][T16774] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1531.196899][T29140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6106'. [ 1531.332329][T16774] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1531.467407][T29142] o2cb: This node has not been configured. [ 1531.473745][T29142] o2cb: Cluster check failed. Fix errors before retrying. [ 1531.481357][T29142] (syz.1.6106,29142,0):user_dlm_register:674 ERROR: status = -22 [ 1531.489138][T29142] (syz.1.6106,29142,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 1531.840444][ T5890] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1531.867947][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.879739][T16774] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1531.898172][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.906329][T16774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.927361][T16774] usb 3-1: config 0 descriptor?? [ 1531.992519][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.001319][T29135] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1532.011091][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.090298][T16774] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1532.669255][T29153] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6105'. [ 1532.789980][T27897] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1533.235645][T27897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.280078][T27897] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1533.368547][T27897] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1533.448710][T27897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.497109][ T5890] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1533.507738][T27897] usb 4-1: config 0 descriptor?? [ 1533.532828][ T5890] usb 6-1: USB disconnect, device number 38 [ 1534.548059][ T5890] usb 3-1: USB disconnect, device number 14 [ 1535.436964][T29177] Bluetooth: MGMT ver 1.23 [ 1535.705791][ T30] kauditd_printk_skb: 360 callbacks suppressed [ 1535.705812][ T30] audit: type=1400 audit(2000000768.261:24419): avc: denied { read } for pid=29168 comm="syz.2.6114" dev="nsfs" ino=4026533693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1535.901988][ T30] audit: type=1400 audit(2000000768.261:24420): avc: denied { read open } for pid=29168 comm="syz.2.6114" path="net:[4026533693]" dev="nsfs" ino=4026533693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1536.014092][T28816] usb 4-1: USB disconnect, device number 30 [ 1536.360239][ T30] audit: type=1400 audit(2000000768.271:24421): avc: denied { create } for pid=29168 comm="syz.2.6114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1536.403088][ T30] audit: type=1400 audit(2000000768.351:24422): avc: denied { bind } for pid=29168 comm="syz.2.6114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1536.493163][ T30] audit: type=1400 audit(2000000768.381:24423): avc: denied { write } for pid=29168 comm="syz.2.6114" path="socket:[92206]" dev="sockfs" ino=92206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1536.578896][ T30] audit: type=1400 audit(2000000768.381:24424): avc: denied { write } for pid=29168 comm="syz.2.6114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1536.762552][ T30] audit: type=1400 audit(2000000768.421:24425): avc: denied { write } for pid=29168 comm="syz.2.6114" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1536.880623][ T30] audit: type=1400 audit(2000000768.451:24426): avc: denied { read } for pid=29168 comm="syz.2.6114" dev="nsfs" ino=4026533693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1537.019977][ T30] audit: type=1400 audit(2000000768.461:24427): avc: denied { read open } for pid=29168 comm="syz.2.6114" path="net:[4026533693]" dev="nsfs" ino=4026533693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1537.078670][T29196] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6119'. [ 1537.250003][ T30] audit: type=1400 audit(2000000768.471:24428): avc: denied { create } for pid=29168 comm="syz.2.6114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1537.790477][T16838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1537.798248][T16838] Bluetooth: hci2: command 0x0401 tx timeout [ 1540.720904][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 1540.720922][ T30] audit: type=1400 audit(2000000773.671:24578): avc: denied { ioctl } for pid=29231 comm="syz.5.6128" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1540.780001][T16774] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1540.780807][ T30] audit: type=1400 audit(2000000773.701:24579): avc: denied { prog_load } for pid=29222 comm="syz.2.6126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1540.825522][ T30] audit: type=1400 audit(2000000773.701:24580): avc: denied { bpf } for pid=29222 comm="syz.2.6126" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1540.846868][ T30] audit: type=1400 audit(2000000773.711:24581): avc: denied { read write } for pid=29222 comm="syz.2.6126" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1540.873452][ T30] audit: type=1400 audit(2000000773.711:24582): avc: denied { read write open } for pid=29222 comm="syz.2.6126" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1540.900566][ T30] audit: type=1400 audit(2000000773.751:24583): avc: denied { ioctl } for pid=29231 comm="syz.5.6128" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1540.928639][ T30] audit: type=1400 audit(2000000773.761:24584): avc: denied { ioctl } for pid=29231 comm="syz.5.6128" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1541.008004][T16774] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1541.050034][ T30] audit: type=1400 audit(2000000773.761:24585): avc: denied { ioctl } for pid=29231 comm="syz.5.6128" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1541.100101][T16774] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1541.109131][T16774] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1541.155238][T16774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.180039][ T30] audit: type=1400 audit(2000000773.781:24586): avc: denied { read write } for pid=28504 comm="syz-executor" name="loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1541.183548][T16774] usb 6-1: config 0 descriptor?? [ 1541.324306][ T30] audit: type=1400 audit(2000000773.781:24587): avc: denied { read write open } for pid=28504 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1541.480074][T28816] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1542.090141][T28816] usb 4-1: Using ep0 maxpacket: 8 [ 1542.098614][T28816] usb 4-1: too many configurations: 233, using maximum allowed: 8 [ 1542.137175][T28816] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1542.146229][T28816] usb 4-1: config 16 has an invalid descriptor of length 103, skipping remainder of the config [ 1542.157883][T28816] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1542.187177][T28816] usb 4-1: config index 1 descriptor too short (expected 301, got 45) [ 1542.190099][T27897] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1542.197656][T28816] usb 4-1: config 16 has an invalid descriptor of length 103, skipping remainder of the config [ 1542.218130][T28816] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1542.240339][T28816] usb 4-1: config index 2 descriptor too short (expected 301, got 45) [ 1542.249640][T28816] usb 4-1: config 16 has an invalid descriptor of length 103, skipping remainder of the config [ 1542.261770][T28816] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1542.287786][T28816] usb 4-1: config index 3 descriptor too short (expected 301, got 45) [ 1542.300833][T28816] usb 4-1: config 16 has an invalid descriptor of length 103, skipping remainder of the config [ 1542.320843][T28816] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1542.345783][T28816] usb 4-1: config index 4 descriptor too short (expected 301, got 45) [ 1542.350276][T27897] usb 3-1: Using ep0 maxpacket: 32 [ 1542.360226][T28816] usb 4-1: config 16 has an invalid descriptor of length 103, skipping remainder of the config [ 1542.368846][T27897] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 1542.371185][T28816] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1542.380763][T27897] usb 3-1: config 4 has no interface number 0 [ 1542.417510][T27897] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1542.423687][T28816] usb 4-1: config index 5 descriptor too short (expected 301, got 45) [ 1542.436405][T27897] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.440994][T16838] Bluetooth: hci5: command 0x0406 tx timeout [ 1542.448620][T27897] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1542.454537][T28816] usb 4-1: config 16 has an invalid descriptor of length 103, skipping remainder of the config [ 1542.496370][T28816] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1542.990507][T28816] usb 4-1: config index 6 descriptor too short (expected 301, got 45) [ 1543.072776][T27897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.073839][T28816] usb 4-1: config 16 has an invalid descriptor of length 103, skipping remainder of the config [ 1543.124494][T28816] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1543.164730][T27897] hub 3-1:4.128: USB hub found [ 1543.177376][T28816] usb 4-1: config index 7 descriptor too short (expected 301, got 45) [ 1543.226044][T28816] usb 4-1: config 16 has an invalid descriptor of length 103, skipping remainder of the config [ 1543.260576][T28816] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1543.323012][T28816] usb 4-1: New USB device found, idVendor=ee8d, idProduct=d444, bcdDevice=c7.93 [ 1543.337466][T28816] usb 4-1: New USB device strings: Mfr=194, Product=31, SerialNumber=114 [ 1543.353832][T28816] usb 4-1: Product: syz [ 1543.412864][T29245] netlink: 'syz.2.6133': attribute type 29 has an invalid length. [ 1543.422099][T29245] netlink: 'syz.2.6133': attribute type 3 has an invalid length. [ 1543.431576][T29245] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6133'. [ 1543.442574][T28816] usb 4-1: Manufacturer: syz [ 1543.606784][T28816] usb 4-1: SerialNumber: syz [ 1543.669840][T29265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.678763][T29265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1544.022422][T27897] hub 3-1:4.128: config failed, can't read hub descriptor (err -22) [ 1544.065296][T27897] usb 3-1: USB disconnect, device number 15 [ 1544.172515][T29269] vxcan1: entered allmulticast mode [ 1544.244897][T28816] usbtmc 4-1:16.0: bulk endpoints not found [ 1544.273338][T28816] usb 4-1: USB disconnect, device number 31 [ 1544.399622][T29263] random: crng reseeded on system resumption [ 1544.579700][T29272] overlayfs: failed to clone upperpath [ 1544.950999][T28816] usb 6-1: USB disconnect, device number 39 [ 1545.141207][T29284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6138'. [ 1545.156863][T29284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6138'. [ 1545.249970][T27897] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1545.502444][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.509549][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.527269][T27897] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1545.539948][T27897] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1545.920118][ T30] kauditd_printk_skb: 269 callbacks suppressed [ 1545.920151][ T30] audit: type=1400 audit(2000000778.611:24857): avc: denied { read } for pid=29283 comm="syz.6.6140" dev="nsfs" ino=4026533365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1545.976954][T27897] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1545.994737][T29288] random: crng reseeded on system resumption [ 1546.175192][ T30] audit: type=1400 audit(2000000778.611:24858): avc: denied { read open } for pid=29283 comm="syz.6.6140" path="net:[4026533365]" dev="nsfs" ino=4026533365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1546.210901][ T30] audit: type=1400 audit(2000000778.621:24859): avc: denied { create } for pid=29283 comm="syz.6.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1546.231827][ T30] audit: type=1400 audit(2000000778.641:24860): avc: denied { bind } for pid=29283 comm="syz.6.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1546.275820][T27897] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1546.282181][ T30] audit: type=1400 audit(2000000778.661:24861): avc: denied { write } for pid=29283 comm="syz.6.6140" path="socket:[92454]" dev="sockfs" ino=92454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1546.312378][T27897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.322118][T27897] usb 3-1: Product: syz [ 1546.326392][T27897] usb 3-1: Manufacturer: syz [ 1546.332237][T27897] usb 3-1: SerialNumber: syz [ 1546.342419][T27897] usb 3-1: config 0 descriptor?? [ 1546.351606][T29278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1546.522121][T29278] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1546.600707][T27897] usb 3-1: ucan: probing device on interface #0 [ 1546.740019][ T30] audit: type=1400 audit(2000000778.661:24862): avc: denied { write } for pid=29283 comm="syz.6.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1546.826941][ T30] audit: type=1400 audit(2000000778.671:24863): avc: denied { write } for pid=29283 comm="syz.6.6140" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1547.010097][ T30] audit: type=1400 audit(2000000778.691:24864): avc: denied { read } for pid=29283 comm="syz.6.6140" dev="nsfs" ino=4026533365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1547.104121][ T30] audit: type=1400 audit(2000000778.701:24865): avc: denied { read open } for pid=29283 comm="syz.6.6140" path="net:[4026533365]" dev="nsfs" ino=4026533365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1547.172946][ T30] audit: type=1400 audit(2000000778.711:24866): avc: denied { create } for pid=29283 comm="syz.6.6140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1547.470076][T27897] ucan 3-1:0.0 can0: registered device [ 1548.028554][T16838] Bluetooth: hci2: command 0x0401 tx timeout [ 1548.034775][ T5825] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1548.511413][T27897] ucan 3-1:0.0 can0: firmware string: unknown [ 1550.609356][T28816] usb 3-1: USB disconnect, device number 16 [ 1551.000121][ T30] kauditd_printk_skb: 283 callbacks suppressed [ 1551.000144][ T30] audit: type=1400 audit(2000000783.871:25150): avc: denied { execmem } for pid=29337 comm="syz.6.6150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1551.240160][T29344] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1551.247327][T29344] audit: audit_lost=439 audit_rate_limit=0 audit_backlog_limit=64 [ 1551.255453][T29344] audit: backlog limit exceeded [ 1551.289998][T29344] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1551.296639][T29344] audit: audit_lost=440 audit_rate_limit=0 audit_backlog_limit=64 [ 1551.304609][T29344] audit: backlog limit exceeded [ 1551.319260][T29344] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1551.326167][T29344] audit: audit_lost=441 audit_rate_limit=0 audit_backlog_limit=64 [ 1551.334950][T29344] audit: backlog limit exceeded [ 1552.420751][T29357] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6152'. [ 1552.429820][T29357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6152'. [ 1552.440041][T29357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6152'. [ 1552.513484][ T31] INFO: task syz.4.5728:27571 blocked for more than 143 seconds. [ 1552.780078][ T31] Not tainted syzkaller #0 [ 1552.791429][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1552.915023][ T31] task:syz.4.5728 state:D stack:28792 pid:27571 tgid:27564 ppid:16836 task_flags:0x400040 flags:0x00080002 [ 1553.006087][ T31] Call Trace: [ 1553.044081][ T31] [ 1553.061964][ T31] __schedule+0x1190/0x5de0 [ 1553.152161][ T31] ? __pfx___schedule+0x10/0x10 [ 1553.199243][ T31] ? find_held_lock+0x2b/0x80 [ 1553.276637][ T31] ? schedule+0x2d7/0x3a0 [ 1553.320575][ T31] schedule+0xe7/0x3a0 [ 1553.490872][ T31] futex_hash_allocate+0xe7e/0x10d0 [ 1553.515629][ T31] ? __pfx_futex_hash_allocate+0x10/0x10 [ 1553.549182][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1553.594018][ T31] ? cap_task_prctl+0x2af/0xa80 [ 1553.619221][ T31] ? static_key_count+0x5a/0x70 [ 1553.632789][ T31] futex_hash_prctl+0x1cd/0x390 [ 1553.643137][ T31] __do_sys_prctl+0x164f/0x2250 [ 1553.675913][T29329] base_sock_release(ffff88805c46d080) sk=ffff888022ed7000 [ 1553.689896][ T31] ? __pfx___do_sys_prctl+0x10/0x10 [ 1553.695183][ T31] do_syscall_64+0xcd/0x4e0 [ 1553.699735][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.796433][ T31] RIP: 0033:0x7ff706f8eec9 [ 1553.809959][ T31] RSP: 002b:00007ff7051d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1553.841613][ T31] RAX: ffffffffffffffda RBX: 00007ff7071e6180 RCX: 00007ff706f8eec9 [ 1553.871221][ T31] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1553.894608][ T31] RBP: 00007ff707011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1553.933208][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.019911][ T31] R13: 00007ff7071e6218 R14: 00007ff7071e6180 R15: 00007fffa8e06428 [ 1554.027984][ T31] [ 1554.041927][ T31] [ 1554.041927][ T31] Showing all locks held in the system: [ 1554.062288][ T31] 3 locks held by kworker/u8:0/12: [ 1554.067430][ T31] #0: ffff88801b069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1554.139999][ T31] #1: ffff8880b8624088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 1554.170632][ T31] #2: ffff8880b8625b18 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6b8/0xd30 [ 1554.198249][ T31] 1 lock held by khungtaskd/31: [ 1554.213003][ T31] #0: ffffffff8e1c4120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1554.258927][ T31] 2 locks held by kworker/u8:2/36: [ 1554.273786][ T31] #0: ffff88801b069148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1554.300267][ T31] #1: ffffc90000ac7d10 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1554.316883][ T31] 2 locks held by getty/5584: [ 1554.322567][ T31] #0: ffff88814d83a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1554.333139][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1554.345597][ T31] 3 locks held by kworker/u9:3/5825: [ 1554.360946][ T31] #0: ffff888034823148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1554.374706][ T31] #1: ffffc900041bfd10 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1554.390524][ T31] #2: ffff888039078dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 1554.402341][ T31] 1 lock held by syz-executor/28857: [ 1554.408397][ T31] #0: ffffffff8e1cf6b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1554.419265][ T31] 3 locks held by dhcpcd-run-hook/29333: [ 1554.472662][ T31] [ 1554.478314][ T31] ============================================= [ 1554.478314][ T31] [ 1554.500131][ T31] NMI backtrace for cpu 0 [ 1554.500150][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1554.500170][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1554.500180][ T31] Call Trace: [ 1554.500186][ T31] [ 1554.500194][ T31] dump_stack_lvl+0x116/0x1f0 [ 1554.500230][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1554.500249][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1554.500274][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1554.500292][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1554.500314][ T31] watchdog+0xf3f/0x1170 [ 1554.500343][ T31] ? rcu_is_watching+0x12/0xc0 [ 1554.500368][ T31] ? __pfx_watchdog+0x10/0x10 [ 1554.500390][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1554.500416][ T31] ? __kthread_parkme+0x19e/0x250 [ 1554.500434][ T31] ? __pfx_watchdog+0x10/0x10 [ 1554.500458][ T31] kthread+0x3c2/0x780 [ 1554.500479][ T31] ? __pfx_kthread+0x10/0x10 [ 1554.500499][ T31] ? rcu_is_watching+0x12/0xc0 [ 1554.500524][ T31] ? __pfx_kthread+0x10/0x10 [ 1554.500545][ T31] ret_from_fork+0x56a/0x730 [ 1554.500563][ T31] ? __pfx_kthread+0x10/0x10 [ 1554.500582][ T31] ret_from_fork_asm+0x1a/0x30 [ 1554.500612][ T31] [ 1554.500619][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1554.629482][ C1] NMI backtrace for cpu 1 [ 1554.629500][ C1] CPU: 1 UID: 0 PID: 29371 Comm: syz.2.6155 Not tainted syzkaller #0 PREEMPT(full) [ 1554.629523][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1554.629532][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x70 [ 1554.629558][ C1] Code: 48 89 df 5b e9 0d 03 5d 00 be 03 00 00 00 5b e9 b2 2d e5 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 34 24 65 48 8b 15 58 7a be 11 65 8b 05 69 7a be 11 a9 00 01 [ 1554.629572][ C1] RSP: 0018:ffffc9000b3af738 EFLAGS: 00000083 [ 1554.629585][ C1] RAX: dffffc0000000000 RBX: ffff888065b2a140 RCX: ffffc90014691000 [ 1554.629594][ C1] RDX: 1ffff11007db1efd RSI: ffffffff89292ca9 RDI: 0000000000000005 [ 1554.629603][ C1] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 1554.629612][ C1] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff88803ed8f7e8 [ 1554.629626][ C1] R13: ffff8880580ecc80 R14: ffffc9000b3af8d8 R15: ffffc9000b3af8f8 [ 1554.629636][ C1] FS: 00007fd9e67ea6c0(0000) GS:ffff888124f85000(0000) knlGS:0000000000000000 [ 1554.629651][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1554.629660][ C1] CR2: 000055b846a67300 CR3: 000000006421a000 CR4: 00000000003526f0 [ 1554.629670][ C1] Call Trace: [ 1554.629676][ C1] [ 1554.629681][ C1] __skb_try_recv_from_queue+0x25d/0x7f0 [ 1554.629703][ C1] __skb_try_recv_datagram+0x163/0x4f0 [ 1554.629721][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 1554.629737][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 1554.629757][ C1] __unix_dgram_recvmsg+0x1bc/0xc30 [ 1554.629774][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1554.629790][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1554.629811][ C1] ? iovec_from_user+0xbb/0x140 [ 1554.629827][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 1554.629841][ C1] ____sys_recvmsg+0x5f9/0x6b0 [ 1554.629861][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1554.629877][ C1] ? kfree+0x252/0x6d0 [ 1554.629900][ C1] ___sys_recvmsg+0x114/0x1a0 [ 1554.629921][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1554.629945][ C1] ? __pfx___might_resched+0x10/0x10 [ 1554.629966][ C1] do_recvmmsg+0x2fe/0x750 [ 1554.629986][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1554.630005][ C1] ? lock_acquire+0x179/0x350 [ 1554.630021][ C1] ? do_futex+0x122/0x350 [ 1554.630040][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 1554.630055][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 1554.630076][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1554.630098][ C1] do_syscall_64+0xcd/0x4e0 [ 1554.630118][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.630133][ C1] RIP: 0033:0x7fd9e598eec9 [ 1554.630145][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1554.630158][ C1] RSP: 002b:00007fd9e67ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1554.630171][ C1] RAX: ffffffffffffffda RBX: 00007fd9e5be6090 RCX: 00007fd9e598eec9 [ 1554.630181][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1554.630189][ C1] RBP: 00007fd9e5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1554.630198][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1554.630206][ C1] R13: 00007fd9e5be6128 R14: 00007fd9e5be6090 R15: 00007fffd6a7fcb8 [ 1554.630221][ C1] [ 1554.702748][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1554.702767][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1554.702787][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1554.702796][ T31] Call Trace: [ 1554.702802][ T31] [ 1554.702809][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1554.702838][ T31] vpanic+0x640/0x6f0 [ 1554.702857][ T31] panic+0xca/0xd0 [ 1554.702872][ T31] ? __pfx_panic+0x10/0x10 [ 1554.702889][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1554.702915][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1554.702936][ T31] ? watchdog+0xe48/0x1170 [ 1554.702958][ T31] ? watchdog+0xe3b/0x1170 [ 1554.702979][ T31] watchdog+0xe59/0x1170 [ 1554.703004][ T31] ? rcu_is_watching+0x12/0xc0 [ 1554.703027][ T31] ? __pfx_watchdog+0x10/0x10 [ 1554.703047][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1554.703071][ T31] ? __kthread_parkme+0x19e/0x250 [ 1554.703088][ T31] ? __pfx_watchdog+0x10/0x10 [ 1554.703108][ T31] kthread+0x3c2/0x780 [ 1554.703134][ T31] ? __pfx_kthread+0x10/0x10 [ 1554.703153][ T31] ? rcu_is_watching+0x12/0xc0 [ 1554.703175][ T31] ? __pfx_kthread+0x10/0x10 [ 1554.703194][ T31] ret_from_fork+0x56a/0x730 [ 1554.703211][ T31] ? __pfx_kthread+0x10/0x10 [ 1554.703229][ T31] ret_from_fork_asm+0x1a/0x30 [ 1554.703259][ T31] [ 1555.092137][ T31] Kernel Offset: disabled [ 1555.096545][ T31] Rebooting in 86400 seconds..