last executing test programs: 2m48.106246055s ago: executing program 2 (id=1074): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getgroups(0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r3}) setpriority(0x2, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r4 = fsopen(&(0x7f0000000240)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) write$proc_mixer(r0, 0x0, 0x0) 2m46.043050242s ago: executing program 2 (id=1077): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = fsopen(&(0x7f0000000380)='ocfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x9c7c, 0x2, 0x4}, &(0x7f0000000200), &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r8 = dup2(r7, r7) write$tun(r8, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r3], 0x46) recvmmsg(r8, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 2m42.166161241s ago: executing program 2 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x25, &(0x7f0000000080), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = getpgrp(0x0) sched_getparam(r6, 0x0) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r9, r8], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r10, 0xc01464a6, &(0x7f0000000180)={r11}) syz_pidfd_open(r6, 0x0) 2m39.209022299s ago: executing program 2 (id=1088): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x204000, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setpriority(0x0, 0x0, 0x2a14b58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x63}, 0x28) futex(&(0x7f000000cffc), 0x80000000000b, 0x2, 0x0, &(0x7f0000048000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4810) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000001000/0x400000)=nil) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f0000000080), 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 2m36.788903458s ago: executing program 2 (id=1094): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1, 0xfffffffe, 0x2) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7b, 0x0, 0x0) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = semget$private(0x0, 0x4000000009, 0x208) semop(r8, &(0x7f0000000140)=[{0x0, 0x7, 0x1800}, {0x3, 0x400, 0x1000}], 0x2) connect$netrom(r7, &(0x7f00000000c0)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) unshare(0x62040200) 2m33.904841397s ago: executing program 2 (id=1099): pipe2(0x0, 0xb1dc326431916e94) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r3]) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500"], 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) sync() sync() syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000040)={0x0, 0x0, 0x0, @lost_msgs}) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000000)='rootfs\x00', 0x0, 0x0) 2m18.799873337s ago: executing program 32 (id=1099): pipe2(0x0, 0xb1dc326431916e94) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r3]) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500"], 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) sync() sync() syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, &(0x7f0000000040)={0x0, 0x0, 0x0, @lost_msgs}) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000000)='rootfs\x00', 0x0, 0x0) 1m37.224870263s ago: executing program 4 (id=1172): openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) sendmsg$inet(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000c885) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x1, {0x0, 0x3, 0x0, {0x0, 0xffffffff, 0x177, 0x1a6, 0x7f, 0x7, 0x7, 0x3, 0x8, 0xc000, 0x2, 0x0, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r4, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m30.589219481s ago: executing program 4 (id=1177): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x4) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x912b, 0x9, 0x8a4, 0x2, 0x402, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x9, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x8001, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x6, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x1, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x9, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40004, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x5, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7e, 0x2, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0x9a2, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="9115463ecc79", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote}}}}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m21.665186581s ago: executing program 4 (id=1188): eventfd(0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) close(r5) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04073e2002"], 0x7) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x1c8}}, 0x8000) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x48480}, 0x48000) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01062abd7000ffdbdf250600000006000b"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) 1m20.425613202s ago: executing program 4 (id=1190): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x5fc, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5d0, 0x2, [@TCA_U32_SEL={0x394, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x4, 0x0, 0x6, 0x8}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x5c4, 0xa, 0x6, 0xc}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x3, 0xd, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x6}, {0x7fff, 0x0, 0x3, 0x101}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x21, 0x600000, 0xffff, 0x54}, {0xff, 0x81, 0xd4, 0x6}, {0x3, 0x2, 0x3fa4f833, 0x46a}, {0x1, 0x6, 0xff, 0x3ff}, {0x5, 0x9, 0x1, 0x3}, {0x7, 0x1, 0x401, 0x9}, {0x8, 0x100, 0x7, 0x3}, {0x7, 0x9819, 0x6, 0x6}, {0x3, 0xc, 0x5, 0x6}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x0, 0x1, 0x4, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x4, 0xffff, 0x6, 0x2}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x5, 0x400}, {0x10, 0x0, 0x6, 0x3}, {0xb, 0x5, 0x5, 0x5}, {0x0, 0x9, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0x7fffffff, 0x51, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0xdc, 0x1ff, 0x101, 0x5}, {0x0, 0x7f, 0x60d4, 0x3}, {0x6, 0x8, 0xc, 0x8}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x224, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x4009, 0x7, 0x40, 0x7d}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x9, 0x10, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x10001, 0x7, 0xc841, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x6, 0x0, 0x8, 0x7}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x7, 0x7ff, 0x5, 0xc7}, {0x6, 0x8, 0x2, 0x1}, {0xaa4, 0x406, 0x2, 0x127c}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x10, 0xb, 0x2, 0x9}, {0x3, 0x7, 0x200, 0x1}, {0x4, 0x5d14, 0x7f, 0x72}, {0x7, 0x2, 0x7, 0x7}, {0x5, 0x7fff, 0x3, 0x438}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0xfffffffc, 0x9, 0x40, 0x7}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x5fc}}, 0x24040084) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) landlock_create_ruleset(&(0x7f0000000040)={0x2021, 0x1, 0x1}, 0x18, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f0000002180)=""/4101, 0x1005, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x6, 0x86b}}) 1m13.820697331s ago: executing program 4 (id=1196): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x3c, &(0x7f00000000c0), 0x1, 0x0, 0x4d, 0x40044}}], 0x30, 0x4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000003940)={@local, @local, 0x0}, &(0x7f0000003980)=0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000580)="2493624e243d2d363339e6704c6f1ea0463ac482b3c16278b74ce144e4a6f88c8dedb9b6bac0e348a1e5e2e9bce001a9e0166df5a11932de4b53dafb82823a0d1740e831e62f4897fea949db51fd212fa8466b4e7726db259889b10d37b3cfc444588131992099cf93d07bf3c1b8f944aeaf79f17cf647790a9e8186cb64b05d5094504797bddfe215c11fd5164c3cce9518105acb72f01a58a17a944d2d9c3965f59a82b757bb5d7e", 0xa9}, {&(0x7f00000006c0)="563554932b040a0f8e5386587e7f1972091f7ac352f0dfcc81156f2340c5f59518b6d8b8b2bf4512bc51f43cc94c41bf77de7c2467243771a9051258cd7d43ba33a80f655edd52714274785b90b749dd1edebaa68c27f7eb718bf67cdd9f97c2ce054418430f3080899db587f6beca676523f0faf3b5dcde45ac2bcc79fbc59efeef9de89ae0aab3e61ebc7e6353eab8b21c7f597ca5bb815abe7502482039f0f9d4a74c33b58a6f443c91c2880b1cc7aad46770cbcdbd24ba3c87f5c8c0869959d0629416e6c9f3e9", 0xc9}, {&(0x7f00000002c0)="15fd55005754292c6cb32f9c49199c567c0ebf6012a6062f57da88c1060fe6b3365dc9ee", 0x24}, {&(0x7f00000007c0)="78c2e04fb0ebbc92ddcf199eae2c6b4400b09df2e3b4ad8ba4fb5e03690f0563e5eb8d613d37a8c27c26779b1c2329cb2a3d667e8273b2c5e52ff3968e2885e1ab502d505aa06ffa6888881f1a77629fdf86a670e9fdd8a21b7541b8bb1f8eca5794f5f9d2e7369e48c135c07957e3ed594b9381b593da61f352f997766d12fc0e523abe176bbeb2273796933d7058f7cb455a2499784b2685bfaf167ff53b81b79477c848d4585fe934bce47a43da1dda3d9ab16fa6ed21c427854d6f2332ba1898a2d32bb67e0014764a6d957ff6b6ab5571c54ab2a8f63db088a4ce3a3eb24c", 0xe1}, {&(0x7f00000008c0)="73d3ffac4bc62e2f334caa2f24afefed3cb38902cd3cab57565ebcf0e28055fbb76a4c7b352b5d39ee871fd3eeaf76b014f4433ec377efb26e42fce637c16896379163267d21f1a57c73ad86eab14f3ebe8eccf90a14e4577e32e449a04189a34c188cc220b0a1e3b0e6c90076f97dca89bf95097c20e0437d9831b7f59f008ea3806b8751bcf00a0ef07322f55b9e0587256e8e1cc8daa7c998d2a63f4a2b5f02ca03fea1b9488eb02d46caafcd984d7b6860fa7c7478550b1bec7d5eef7ccbcd9f8aa3f4020369492805a1df95e6e90bbc4db3f0a07e990359fd81a901348623fb9d69ff63be", 0xe7}, {&(0x7f00000009c0)="674bfe28c9225cc86b06f6d340b1d3b870f0aa6032500af7dd7470397527a2bdd8264d2cfaaace91907d0f9eb0e6e250cc03abca6a7047fb298c4aee769c502a060923970bc53ff3fc0f03414825e3c3ef909fbc6d9a6a517b380683fd890c3fa490fc1e8b5c7f75e7883c7b77f2fdd19dd9f29d", 0x74}, {&(0x7f0000000a40)="d82a227519d3446a253813a17bca4aa95cfe3ff97e799079d3c841c356482db5455173d896bf8f6fe8dc32679291e342500c1083b0bf59191453590d83bddc3c30e7ebb59464f7cbf364fce3a6c8aed3b590e82d9550d6b6350ff11bdc1df2edea62c983049493cd6dbacc04056065c9a542a51935bbbe88d8f25c35d58eb8d1415b95742561f7", 0x87}, {&(0x7f0000000b00)="57cd3c83e919fd5d90bcf8fb35b62e71759d38e6e08e1b7b933e8d667e212cb03b360484ccc8561d62341f4ff51ddd3f90bac5f5427f26f179b2cb832a2abd6ea740467bda17", 0x46}, {&(0x7f0000000b80)="b4d03be5bf83e51ea2c66b367bbdf410854dafdda4d97a9ae61182b74c1248b9e88f27cbc34af1f0e1f306fe307f22324e6babaa3ea700c289e28a1d9f11daf85f217029a227151a94f67681b5f6d7346b56b7681899a7b7f139075d22f98315eac8492dd16cce14f4d029c875a6778a3274563cccc79a3d0a5cc27b6b0829f20099ece229af3c043e6c4915c65f78b098ce7801bd803685eb98a7a7b183f4dee96447112bff24b06b049303e6342d9462093fcaaefcfae7b8d4db16de40d0775e4fcd2a8fc28c86a1f89c85b31dfbfe4a0487ab63fcf8204335856149ee16f708b7e371990eaa0f2bb2d0526c53", 0xee}, {&(0x7f0000000c80)="3789991d227f1f25a1af00ffccdae11a30658684273f17a974cc9ed5b49e1b527218575a26cee4466ce8c8ffe7c4ebe3c6fe829515ca24fb19618dae2a87b8f25eb7ca899c713f1ddb9ed48fc0fd32d1fe528dfb0baaac8cf353d218c99d25e6d5bdc154a9", 0x65}], 0xa, &(0x7f0000003d40)=ANY=[@ANYBLOB="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"], 0x98}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f40)}, {0x0}, {&(0x7f0000001040)="65f97183b95bbbde2f59557db4f9d2517ddddef2f461db70f727e852cdb3121dead56155df63dbaea48a815b60bea6a31ea55109c40e7a15a2121e0e3fe8e6d71e3855a55227a726363fcb9d2ab983c44b0cb04979d08b3cb1119d83b95e0e0d1e2593617c713d4fb0a5bab81dc23820b1f85575617d3c512aae572ef890acff1def236fbe4580a77fb6c2b0100755408688fbb2c7e6", 0x96}], 0x3, &(0x7f0000001180)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x48b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}}, {{&(0x7f00000011c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000003640)=[{&(0x7f0000001200)="7301f6ddec0dff4bf2f9a77ee1", 0xd}, {&(0x7f0000001240)="9c7fe4f213d5867c7ee0c9a7657462ac3be711feee98de83e66cc3abd8687d8bac60ec5508c2c52a3adada7eb992e83fc916db421d936d1f030b9a320a086a09cc92ca00", 0x44}, {&(0x7f00000012c0)="13ea744d8076dcdd06283454784d2568d107b948782397d587bea543d6630065576dddffe1", 0x25}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="6fe083c9aa6a730f8ce79270ab59d03f8cbf3717ed1d39a0a78437df09864dfad56b5acf7d437d7d2bc759ff3e3e04bd6e0c3d248ca0f29ab3ea74bd5ece1873b16af2dbac33fcee00b82ebfa7089d861f88cf21bb99ca0fc3f2a3d79d1145921e8bdf805571ce8cd0869703cccd72bdef48a24ad6e15e5835c1e9718eb680432de4bc5de638230bf781b8a65f29d0fdc9a3884aa689d4592b2dd3ee", 0x9c}, {&(0x7f00000033c0)="e5b8185e8ab6d653fcf0e6fe1bac04ef08afff80d169340ec11ef93b20e35dc898b36277585ce8b05b92ee104b97ec13c5660d9c2a299a3c412e7ae7a15ba7e8ca462ce7443c95998eeb50fcc8002ef93ab748df22edf25e18cbf90ba787f4f090f81c429339f5fc492beeb130fba63722c37d0b9b8620195f3287074194cd8cc3d8131440a6a4bc1c6b96478fb969364c0253dff804e491de8e89ceea7a340c148ca1b8082b166ca32f5f61523aba9073c09ef4e476ea8c5feb2fd3edcefbc88bdc0816d1e32f2d51dc84eb615a1e29a9496e4f2f6dc36f963e8bf815533225d37212788a46a14c0c5567ea", 0xec}, {&(0x7f00000034c0)="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", 0xfd}, {&(0x7f00000035c0)="ef94e0af37052b393b00f7c9244834df701379c507b8ec5ca0fb5a64e8f889895c9f146a9975866ceef1dc8934c2274a54db8615cc8d75a6c4eab5da3280183a5761274b88edd2072dd12a19ce61758d0a73e567360d33", 0x57}], 0x9, &(0x7f0000003700)=[@ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x85, 0x3, 0x7, [{@remote, 0x31ae0471}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0xd}, {@broadcast, 0x100}, {@remote, 0x8}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x71}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x88}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000037c0)="a5d11a7e5fdfeebe67492da04dbf344dd26213685e53c6a8aa393c6c1da21c5e1df41a52f49b41b105c8cf232c82056b606c7c3699b8", 0x36}, {&(0x7f0000003800)}, {&(0x7f00000038c0)="ff91e2b19df1ea1647ecb24858b7e38e48d1eadc7b3f7e6a60c0aa0f297d050c64548493e1e1", 0x26}], 0x3, &(0x7f00000039c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x50}}, {{&(0x7f0000003a40)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003bc0)=[{&(0x7f0000003a80)="428735378b5ac9192cf5de7cbac2292bf21bdebb4cc42d7d0d1fefd584e9890d59c6a6751a0df7699d92030acbad97552fa75f4bc82e2a9a768994ddd9bdd236f94f094187a2b824917e9a9a00e444dda1d2", 0x52}, {&(0x7f0000003b00)="a60008ca1f0b4c5c5db474cfea16a1a7a90df35f2985830dcc278091214e228303fabfd3a5a6ff6ba06284b3b2b5eebbee3607b075e15ea4176b402ae0879daa82e04a0d04f4c5d3d1662fa9cf3de193e121343c9df277f2b633df5a5436acaf9868912dcba33c7c89cc7bfb590c4cd1865cd9bb8262739ffab88fd361842aff5f1cf55d88ca1a52b7ee3a25e18f24af640701e5932c05771b50f1ab04f9003b234b6036920e498c7b427b", 0xab}], 0x2}}], 0x5, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, r5}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000010001"], 0x50) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r6, 0x8910, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, 0x0) 1m10.448278621s ago: executing program 4 (id=1197): unshare(0x62040200) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x2, 0xa69, 0x6}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000100)='./file0\x00') 55.244965621s ago: executing program 33 (id=1197): unshare(0x62040200) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x2, 0xa69, 0x6}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000100)='./file0\x00') 50.928009255s ago: executing program 0 (id=1213): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000240)="8c836d065148dbc6aeb1a68333367bbadf49743133856bf4650cfe19b15be0e68613cc501bd8ce56b2eb8b80a32a472cc94c9b92b71c4ccf1ca2ed934c9b91ebc2ca4c9e4f750ec863840a79f7956f102be7cdf2bd40704ca9a043995dc984d3", 0x60}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0xf000000) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0xfffdffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000180)='4\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 47.17618269s ago: executing program 0 (id=1216): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x21c) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000240)={{&(0x7f00002a5000/0x4000)=nil, 0x4000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb0e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='bcache_btree_insert_key\x00', r6, 0x0, 0x8001}, 0x18) madvise(&(0x7f0000b25000/0x3000)=nil, 0x3000, 0x15) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb013, 0x5, 0x8, 0x2, 0x88d7, 0x8f, 0x1003, 0x8810, 0x1002, 0x6, 0x1, 0x3, 0xc, 0x0, 0xaf, 0x1, 0x8, 0x3, 0x9, 0xc, 0x1, 0x3, 0x7, 0xfffffff8, 0x1, 0x1, 0x6, 0xc, 0x8, 0x400002, 0x2]}) mount(&(0x7f00000002c0)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000300)='gfs2\x00', 0x3000080, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xbbb71000) r7 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r7, 0x6a, 0x4, 0x1, 0x27) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x1, 0x700, 0x9, 0x4dc, {{0x35, 0x4, 0x3, 0x4, 0xd4, 0x67, 0x0, 0xc, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0x80, 0x0, 0x3, [0x101, 0x3, 0x1]}, @timestamp_prespec={0x44, 0x54, 0xc1, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x7}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@private=0xa010101, 0x3}, {@broadcast, 0x1}, {@private=0xa010101, 0xfffffffe}, {@private=0xa010100, 0x10}, {@loopback, 0xfffffffb}, {@rand_addr=0x64010101, 0x800}, {@multicast2, 0x1}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x1b, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x8}]}, @cipso={0x86, 0x4a, 0x3, [{0x6, 0x6, "4d70f8c1"}, {0x7, 0x8, "8ebffefd7e1b"}, {0x6, 0x9, "16ebf2481ff71e"}, {0x1, 0x8, "0631a2eb159f"}, {0x7, 0x11, "8d392c68aa90c0938bea1128252ac2"}, {0x0, 0x3, "8c"}, {0x1, 0x11, "9831555f06ef540ab1ae23fcb60e61"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000440)={'erspan0\x00', r10, 0x1, 0x0, 0x7, 0x4, {{0x25, 0x4, 0x2, 0x3d, 0x94, 0x66, 0x0, 0x8, 0x2f, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x7d}, @generic={0x88, 0x2}, @timestamp={0x44, 0x4, 0xf2, 0x0, 0x3}, @end, @lsrr={0x83, 0x1b, 0x57, [@dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty]}, @cipso={0x86, 0x59, 0x3, [{0x7, 0x11, "c6e42a42023ace3bc10ab1482f4555"}, {0x2, 0xf, "88a5653380326b54e6db34f035"}, {0x6, 0x12, "b704003c5ce49c85c2b322313063f16a"}, {0x6, 0x12, "6afdd206890d4fb6d20000f7cf0e7c3e"}, {0x7, 0x4, "d15b"}, {0x0, 0xb, "046450572d48ec27bf"}]}]}}}}}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 44.713726439s ago: executing program 0 (id=1218): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$inet6(0xa, 0x3, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r4}, 0x38) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') getdents(r7, &(0x7f0000000380)=""/200, 0x1d) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x541b, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r9) 44.466519301s ago: executing program 5 (id=1219): socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x2, 0x1, 0x101, 0x7, 0xffffffffffffffff}) prlimit64(r0, 0xb, &(0x7f0000000140)={0x8, 0x6}, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x4c03, 0x0) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r8 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r7, r8}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00030000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 42.705398109s ago: executing program 5 (id=1220): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket(0xa, 0x801, 0x0) getsockopt(r4, 0x1, 0x8, 0x0, &(0x7f0000001ffc)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x1b, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8d69cdbd9d470f56c7ae4218d32c5d7fe44d5f0272890f24383fe450fb26ea7dcefadfa5e48e3bcf5693d"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/rt_acct\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYRES8=0x0]) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x88}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0xfffd}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r8, &(0x7f0000002180)=""/4101, 0x1005, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 41.147722842s ago: executing program 1 (id=1222): socket$nl_generic(0x10, 0x3, 0x10) socket$isdn(0x22, 0x3, 0x2) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2e2b487516a791b521c82fa2d9579914181fd7bf99f039e78c2ffc81a79f19da7b3eadedebfc91ff9d302cb866ba846fedf2ec92667911996a3cbdad149edd5f75349498d35e7accaf4edfb6db7774c04a", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000300), 0x4) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021040000", @ANYRES32=0x0], 0x50) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000200)={@remote, @local, @rand_addr=0x64010101}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x8, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r6}, 0x18) r7 = openat$rtc(0xffffff9c, &(0x7f0000000100), 0xa000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0x7005, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b00000000007dba4f03b768794fbd64b5dd028dc5994a316bbd4504563e7b483455d780ac1f8af834a792280c535cc0a25009770b060281f2a54d458c9b4400fa58569cd4d9fb6509d5c6be2c1acc7d9daa87c5f08acd0300000000000000dd42aa15a503ad3e862b8abfd3f039bbf2e6f84fab21b5a016ca3fee70d7558279e994d941a122a3c5a1b85c5b8a73c7540ca9109aadc592472c584855750a90fff4255201c72322e6bdcf1f1f23c1009c4ac7c639e61ebf5bfe64422869381d150e7b360692a7872662c451264b59bec1c26ff11d86d2f1402f55ba49d7f85a066a5aa31d4a18a473f55f472a3bcbccfce3"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 35.909695318s ago: executing program 1 (id=1224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000000c0)={r1}) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x2, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0xfffffffffffffffd, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0xd2c, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) r7 = socket(0x10, 0x803, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x1b4, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xfff3}, {0x0, 0x3}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x180, 0x2, [@TCA_MATCHALL_ACT={0x17c, 0x2, [@m_gact={0x178, 0x16, 0x0, 0x0, {{0x9}, {0xb8, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x3, 0x2, 0x9, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1e7e, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x8d9, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x57f0, 0xffffffffffffffff, 0x2, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x81d7, 0x8, 0x7, 0x0, 0x19}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x2, 0x10000006, 0x81, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x24b8, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x9, 0x20000000, 0xd, 0xfff}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffeffff, 0x7fff, 0x0, 0x42a, 0x1}}]}, {0x97, 0x6, "44753bf3797902c6d453257312b7cf1e01cd3783e7f28860c0f02dc20a4223203b95d3f8bf07ed0da77adae297c048ea0773fe2035e85a599624ae5603a1534996a8a8f861996a6d0e118b874664071534fe6d5f58348c357ab754c5e188934c3528fe55fbe9913ad7b78eddb6aae2fd78f225dfe0029e5b0b9a6c29c3e3cb5dab56c787ca42224ce109d9f5fe425c449da1c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x10}, 0x4) 34.770281953s ago: executing program 0 (id=1225): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x1040) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r4, &(0x7f0000000100)="240000001a005f0214f9f407000904001f000000fe020002000000000800040001000000", 0x24) sendto$inet(r1, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) shmat(0xffffffffffffffff, &(0x7f0000708000/0x1000)=nil, 0x6000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x31) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="06010000246837f7", 0x8}], 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) 32.222814115s ago: executing program 5 (id=1226): creat(&(0x7f0000000040)='./bus\x00', 0x24) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r3]) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={r6}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1c}}, 0x20000086) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x18, 0xf, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000001500)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 31.031639302s ago: executing program 5 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000002c0)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200001000ff0700"/38, @ANYRES32=r1], 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x5411, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="400c11000000243500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000440)={0x2fe, 0x35140000, 0x0, 0x6, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x22}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) ioctl$TIOCGPGRP(r6, 0x5437, 0x0) 29.006943256s ago: executing program 1 (id=1229): socket$inet(0x2, 0x5, 0x1) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$user(&(0x7f00000002c0), 0x0, &(0x7f0000000280), 0x0, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x400, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$link(0x8, r6, r6) keyctl$link(0x8, 0x0, r6) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x101, @local, 0x7f}}, 0x0, 0x0, 0xe2, 0x1, 0x13, 0x4, 0xfd}, 0x9c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/18, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c0000200060008"], 0x40}}, 0x0) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) syz_usb_connect(0x4, 0x595, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x0) 28.952333571s ago: executing program 0 (id=1230): socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x2, 0x1, 0x101, 0x7, 0xffffffffffffffff}) prlimit64(r0, 0xb, &(0x7f0000000140)={0x8, 0x6}, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 27.933554526s ago: executing program 0 (id=1231): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x26) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x501403) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000075c000/0x3000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r5) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r2, 0x0, &(0x7f00007da000/0x3000)=nil, 0x3000, 0xffffffffffbffffd}) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x11}}) syz_open_dev$char_usb(0xc, 0xb4, 0x4) syz_usb_disconnect(r8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 27.396596426s ago: executing program 5 (id=1232): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) creat(&(0x7f0000000580)='./bus\x00', 0x0) fanotify_init(0xf00, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$evdev(&(0x7f0000001500), 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) socket(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0xec25, 0x0, 0x1, 0x40000331, 0x0, r4}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x1a91, 0x9482, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 23.395268347s ago: executing program 5 (id=1233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FITHAW(r1, 0xc0045878) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x680800, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r6 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x40000014}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_clone3(&(0x7f00000004c0)={0x11010280, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x36}, &(0x7f0000001100)=""/4096, 0x1000, &(0x7f00000003c0)=""/199, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/partitions\x00', 0x0, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000600)={r8, r9, 0xffffffffffffffff}, 0xc) r10 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r10, 0x6b, 0x3, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) close(r2) readv(r0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 23.226031148s ago: executing program 3 (id=1234): r0 = syz_open_dev$ndb(&(0x7f0000000440), 0x0, 0x101200) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000480)={0x1}) 21.988011301s ago: executing program 1 (id=1235): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x6, 0x8, 0x400, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c69c1acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r3}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x4e97, 0x4c1, 0x27, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r6, 0x400, 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r8 = syz_open_pts(r7, 0x0) r9 = dup(r8) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r8, 0x540b, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r10 = syz_open_pts(r0, 0x0) r11 = dup3(r10, r0, 0x0) read$FUSE(r11, &(0x7f0000003f80)={0x2020}, 0x2020) 21.987287987s ago: executing program 3 (id=1236): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xb, 0x224000) read$usbmon(r0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="cdbc5ec809101d90adfae37b979408b87a5e78800a0f6b00548969c0081c478e48a049a5ca70b7c17554422743aba5d343733dd0866966acf7f7b206d9005c0c46ca73e22996b6f59993fcdafe0559a41c0eb334a60a52fffc22682828bfb13ff039b020c4ad995d770f9fdd9fab589f309b44d5e97dd2461f52c00b249ef4ebdb665fac147b9ee54c7bdc342d0cda47161bbc31f90d2c95bb7870dfaee3cc0c41dc29550021b142fd7c16d7b80a95f50088", 0xb2}, {&(0x7f00000001c0)="3720916e3104b2ccb0d1aeb825e490d9807c8bc7ac21d08f686ed806002f3af71c9759887cd52790", 0x28}], 0x2, &(0x7f00000003c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x99fd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x30}, 0x40000c1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) 20.893835079s ago: executing program 3 (id=1237): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f209b747822a71ddcfbfe3256db532d9be7c7ba14b065982dbc69cdcc21bcf5cd715a71925339e98db7cbd0e046a6891ceb602b01628c64e1f562934eae6269e"], 0x68) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req={0x4, 0xffffffff, 0x1000, 0x5}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0xe, &(0x7f0000001480)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac14", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x6af, 0xa2c65) write$snddsp(r8, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000040)) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 15.654274174s ago: executing program 1 (id=1238): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 15.468654866s ago: executing program 3 (id=1239): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x74f, 0x103800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000300)={0x0, 0x0, {0xfffffffe, 0x9b, 0x300e, 0x0, 0x7, 0xa, 0x0, 0x5}}) 15.017288921s ago: executing program 3 (id=1240): socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x2, 0x1, 0x101, 0x7, 0xffffffffffffffff}) prlimit64(r0, 0xb, &(0x7f0000000140)={0x8, 0x6}, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 14.577483998s ago: executing program 3 (id=1241): r0 = socket(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) sigaltstack(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x80000001, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, &(0x7f0000000040)) close(r3) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='\x00', 0xb9) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x1) rmdir(&(0x7f0000000040)='./bus\x00') write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r6) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="fba700000dbe02d960d4a429f20b00000000000004000000"], 0x14}}, 0x0) 13.105101139s ago: executing program 34 (id=1231): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x26) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x501403) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f000075c000/0x3000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r5) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r2, 0x0, &(0x7f00007da000/0x3000)=nil, 0x3000, 0xffffffffffbffffd}) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x11}}) syz_open_dev$char_usb(0xc, 0xb4, 0x4) syz_usb_disconnect(r8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 12.403979892s ago: executing program 1 (id=1243): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x50c400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2, 0x2fa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400000000fcdbdf", @ANYRES32=0x0, @ANYBLOB="2b03000000000000240012800b00010067656e65766500001400028005000800ff000000058d0a000100"], 0x44}}, 0x0) r6 = io_uring_setup(0x2f00, &(0x7f000000c480)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r7 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r6}) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r6], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 8.523855376s ago: executing program 35 (id=1233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FITHAW(r1, 0xc0045878) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x680800, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r6 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x40000014}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_clone3(&(0x7f00000004c0)={0x11010280, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x36}, &(0x7f0000001100)=""/4096, 0x1000, &(0x7f00000003c0)=""/199, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6}, 0x58) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/partitions\x00', 0x0, 0x0) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000600)={r8, r9, 0xffffffffffffffff}, 0xc) r10 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r10, 0x6b, 0x3, &(0x7f0000000840), &(0x7f0000000880)=0x4) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) close(r2) readv(r0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 0s ago: executing program 36 (id=1241): r0 = socket(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) sigaltstack(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x80000001, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, &(0x7f0000000040)) close(r3) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='\x00', 0xb9) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x1) rmdir(&(0x7f0000000040)='./bus\x00') write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r6) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="fba700000dbe02d960d4a429f20b00000000000004000000"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): e=1 [ 191.907581][ T942] usb 3-1: Using ep0 maxpacket: 32 [ 191.964163][ T30] audit: type=1400 audit(1757850522.173:438): avc: denied { write } for pid=7816 comm="syz.1.505" laddr=fe80::8890:cff:fe4f:ee28 lport=1 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 192.038903][ T942] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 192.091387][ T30] audit: type=1400 audit(1757850522.173:439): avc: denied { read } for pid=7816 comm="syz.1.505" laddr=fe80::8890:cff:fe4f:ee28 lport=1 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 192.096945][ T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.116133][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.199005][ T5908] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 192.210713][ T30] audit: type=1400 audit(1757850522.373:440): avc: denied { read } for pid=7821 comm="syz.1.507" path="socket:[15659]" dev="sockfs" ino=15659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 192.310855][ T942] usb 3-1: Product: syz [ 192.329578][ T942] usb 3-1: Manufacturer: syz [ 192.334115][ T1928] IPVS: starting estimator thread 0... [ 192.334661][ T7828] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 192.355698][ T942] usb 3-1: SerialNumber: syz [ 192.375478][ T942] usb 3-1: config 0 descriptor?? [ 192.375954][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 192.402739][ T5908] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.404526][ T942] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 192.411273][ T5908] usb 2-1: config 0 has no interface number 0 [ 192.439675][ T7830] IPVS: using max 44 ests per chain, 105600 per kthread [ 192.459337][ T5908] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 192.475829][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.483905][ T5908] usb 2-1: Product: syz [ 192.489423][ T5908] usb 2-1: Manufacturer: syz [ 192.494087][ T5908] usb 2-1: SerialNumber: syz [ 192.514706][ T5908] usb 2-1: config 0 descriptor?? [ 192.552059][ T5908] quatech2 2-1:0.1: Quatech 2nd gen USB to Serial Driver converter detected [ 192.732205][ T30] audit: type=1400 audit(1757850523.243:441): avc: denied { mount } for pid=7841 comm="syz.0.517" name="/" dev="autofs" ino=15692 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 192.789065][ T5908] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 192.809379][ T30] audit: type=1400 audit(1757850523.313:442): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 192.831531][ T5908] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 192.957902][ T7851] kvm: kvm [7850]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x200000000680 [ 193.067696][ T5890] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 193.204750][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 193.217338][ T5908] usb 2-1: USB disconnect, device number 14 [ 193.256471][ T942] gspca_stk1135: reg_w 0x5 err -71 [ 193.256637][ T5908] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 193.276709][ T5890] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 193.286087][ T942] gspca_stk1135: serial bus timeout: status=0x00 [ 193.293759][ T942] gspca_stk1135: Sensor write failed [ 193.296554][ T5908] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 193.299775][ T5890] usb 4-1: config 8 has no interface number 0 [ 193.314584][ T5908] quatech2 2-1:0.1: device disconnected [ 193.317488][ T942] gspca_stk1135: serial bus timeout: status=0x00 [ 193.353344][ T942] gspca_stk1135: Sensor write failed [ 193.366030][ T5890] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 193.379428][ T942] gspca_stk1135: serial bus timeout: status=0x00 [ 193.385798][ T942] gspca_stk1135: Sensor read failed [ 193.391058][ T5890] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8B has invalid maxpacket 1023, setting to 64 [ 193.402865][ T942] gspca_stk1135: serial bus timeout: status=0x00 [ 193.409395][ T942] gspca_stk1135: Sensor read failed [ 193.414670][ T5890] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 193.425407][ T942] gspca_stk1135: Detected sensor type unknown (0x0) [ 193.432139][ T5890] usb 4-1: config 8 interface 177 has no altsetting 0 [ 193.439941][ T942] gspca_stk1135: serial bus timeout: status=0x00 [ 193.446425][ T5890] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 193.456117][ T942] gspca_stk1135: Sensor read failed [ 193.461512][ T942] gspca_stk1135: serial bus timeout: status=0x00 [ 193.469517][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.490984][ T942] gspca_stk1135: Sensor read failed [ 193.500756][ T942] gspca_stk1135: serial bus timeout: status=0x00 [ 193.508629][ T942] gspca_stk1135: Sensor write failed [ 193.514037][ T942] gspca_stk1135: serial bus timeout: status=0x00 [ 193.514197][ T7847] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 193.520453][ T942] gspca_stk1135: Sensor write failed [ 193.551290][ T942] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 193.594824][ T942] usb 3-1: USB disconnect, device number 13 [ 193.768982][ T5890] usb 4-1: string descriptor 0 read error: -71 [ 193.783031][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.789036][ T5890] ir_toy 4-1:8.177: required endpoints not found [ 193.789713][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.835291][ T5890] usb 4-1: USB disconnect, device number 14 [ 194.125750][ T5908] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 194.285727][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 194.296325][ T5908] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 194.310489][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.332812][ T5908] usb 2-1: Product: syz [ 194.339936][ T5908] usb 2-1: Manufacturer: syz [ 194.345934][ T5908] usb 2-1: SerialNumber: syz [ 194.352944][ T5908] usb 2-1: config 0 descriptor?? [ 194.359806][ T5908] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 194.760749][ T5908] usb 2-1: clie_3_5_startup: get interface number bad return length: 0 [ 194.771976][ T5908] visor 2-1:0.0: probe with driver visor failed with error -5 [ 194.785771][ T5901] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 194.945711][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 194.953238][ T5901] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 194.961741][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.964129][ T5890] usb 2-1: USB disconnect, device number 15 [ 195.002397][ T5901] usb 4-1: config 0 has no interface number 0 [ 195.010953][ T5901] usb 4-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 195.021891][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.062198][ T5901] usb 4-1: config 0 descriptor?? [ 195.097095][ T5901] usb 4-1: Found UVC 0.00 device (0bd3:05f4) [ 195.105785][ T5901] usb 4-1: No valid video chain found. [ 195.257526][ T30] audit: type=1400 audit(1757850525.773:443): avc: denied { connect } for pid=7892 comm="syz.0.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 195.276897][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.300297][ T5958] usb 4-1: USB disconnect, device number 15 [ 195.405779][ T5901] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 195.537538][ T7901] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 195.545429][ T7901] netlink: 172 bytes leftover after parsing attributes in process `syz.1.541'. [ 195.557768][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 195.563553][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 195.575253][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 195.588274][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.604392][ T5901] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 195.616352][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.624694][ T5901] usb 3-1: Product: syz [ 195.629188][ T5901] usb 3-1: Manufacturer: syz [ 195.634045][ T5901] usb 3-1: SerialNumber: syz [ 195.645264][ T5901] usb 3-1: config 0 descriptor?? [ 195.652291][ T5901] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 195.661563][ T5901] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 195.855844][ T5958] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 196.089681][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.194324][ T5958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.205539][ T5958] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 196.220574][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.232801][ T5958] usb 1-1: config 0 descriptor?? [ 196.233127][ T30] audit: type=1400 audit(1757850526.743:444): avc: denied { ioctl } for pid=7910 comm="syz.3.545" path="uts:[4026532795]" dev="nsfs" ino=4026532795 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 196.262305][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.393707][ T5901] em28xx 3-1:0.0: chip ID is em2874 [ 196.454218][ T5958] usbhid 1-1:0.0: can't add hid device: -71 [ 196.464924][ T5958] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 196.475457][ T5958] usb 1-1: USB disconnect, device number 12 [ 196.596754][ T5901] usb 3-1: USB disconnect, device number 14 [ 196.603164][ T5901] em28xx 3-1:0.0: Disconnecting em28xx [ 196.611462][ T5901] em28xx 3-1:0.0: Freeing device [ 196.795986][ T5890] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 196.955696][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 196.962030][ T5890] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.970805][ T5890] usb 2-1: config 0 has no interface number 0 [ 196.980147][ T5890] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.991965][ T5890] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 197.001067][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.011841][ T5890] usb 2-1: config 0 descriptor?? [ 197.039713][ T5890] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 197.080770][ T7929] netlink: 'syz.4.553': attribute type 8 has an invalid length. [ 197.151212][ T7933] netlink: zone id is out of range [ 197.169313][ T7933] netlink: zone id is out of range [ 197.176001][ T7933] netlink: zone id is out of range [ 197.181144][ T7933] netlink: del zone limit has 4 unknown bytes [ 197.190213][ T7933] openvswitch: netlink: Flow key attr not present in new flow. [ 197.362295][ T7944] netlink: 172 bytes leftover after parsing attributes in process `syz.2.560'. [ 197.371304][ T7944] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 197.403684][ T30] audit: type=1400 audit(1757850527.913:445): avc: denied { relabelfrom } for pid=7941 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 197.441930][ T30] audit: type=1400 audit(1757850527.913:446): avc: denied { relabelto } for pid=7941 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 197.715746][ T5890] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 197.845785][ T5908] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 197.865705][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 197.872102][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.882538][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 197.891704][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.901923][ T5890] usb 3-1: config 0 descriptor?? [ 197.913070][ T5890] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 197.939291][ T7965] veth3: entered promiscuous mode [ 197.944410][ T7965] veth3: entered allmulticast mode [ 198.016076][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 198.027342][ T5908] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 198.037939][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.052135][ T5908] usb 4-1: config 0 descriptor?? [ 198.343198][ T24] usb 2-1: USB disconnect, device number 16 [ 198.343284][ T7962] iowarrior 2-1:0.1: Error -19 while submitting URB [ 198.356062][ T5908] as10x_usb: device has been detected [ 198.366093][ T5908] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 198.395125][ T5908] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 198.470516][ T5908] as10x_usb: error during firmware upload part1 [ 198.473169][ T30] audit: type=1400 audit(1757850528.983:447): avc: denied { firmware_load } for pid=5908 comm="kworker/0:4" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 198.482971][ T5908] Registered device nBox DVB-T Dongle [ 198.521078][ T5908] usb 4-1: USB disconnect, device number 16 [ 198.523577][ T30] audit: type=1400 audit(1757850529.033:448): avc: denied { listen } for pid=7974 comm="syz.0.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.569399][ T5908] Unregistered device nBox DVB-T Dongle [ 198.570579][ T5908] as10x_usb: device has been disconnected [ 198.957184][ T30] audit: type=1326 audit(1757850529.473:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 199.048003][ T30] audit: type=1326 audit(1757850529.493:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 199.076746][ T30] audit: type=1326 audit(1757850529.493:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7980 comm="syz.1.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 199.192152][ T5890] gspca_vc032x: reg_w err -71 [ 199.208048][ T5890] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 199.308305][ T5890] usb 3-1: USB disconnect, device number 15 [ 199.774511][ T5901] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 200.032211][ T5901] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 200.055153][ T5901] usb 1-1: config 0 interface 0 has no altsetting 0 [ 200.071700][ T5901] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 200.086936][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 200.115734][ T5901] usb 1-1: Product: syz [ 200.119907][ T5901] usb 1-1: Manufacturer: syz [ 200.124491][ T5901] usb 1-1: SerialNumber: syz [ 200.216549][ T5901] usb 1-1: config 0 descriptor?? [ 200.239524][ T5901] usb 1-1: selecting invalid altsetting 0 [ 200.840522][ T5901] usb 1-1: USB disconnect, device number 13 [ 200.983303][ T30] audit: type=1400 audit(1757850531.493:452): avc: denied { read write } for pid=8032 comm="syz.1.587" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 200.990106][ T8035] netlink: 'syz.3.588': attribute type 21 has an invalid length. [ 201.021249][ T30] audit: type=1400 audit(1757850531.493:453): avc: denied { open } for pid=8032 comm="syz.1.587" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 201.022587][ T8033] loop6: detected capacity change from 0 to 524288000 [ 201.070483][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 201.123419][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.133696][ T54] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.139421][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.143508][ T8035] netlink: 'syz.3.588': attribute type 21 has an invalid length. [ 201.160416][ T54] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.161692][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.180862][ T54] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.196013][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 201.213034][ T6162] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.228788][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.237105][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.255955][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.268313][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.276602][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.287308][ T5858] ldm_validate_partition_table(): Disk read failed. [ 201.293964][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.302205][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.310549][ T5858] Dev loop6: unable to read RDB block 0 [ 201.317049][ T5858] loop6: unable to read partition table [ 201.340088][ T8033] ldm_validate_partition_table(): Disk read failed. [ 201.348060][ T8033] Dev loop6: unable to read RDB block 0 [ 201.354092][ T8033] loop6: unable to read partition table [ 201.365935][ T8033] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 201.609314][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 202.248254][ T5890] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 202.295696][ T30] audit: type=1400 audit(1757850532.803:454): avc: denied { bind } for pid=8075 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.415773][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 202.432567][ T5890] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 202.475417][ T5890] usb 1-1: config 0 has no interface number 0 [ 202.486216][ T5890] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 202.530930][ T5890] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 202.556373][ T5890] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 202.577732][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.587861][ T5890] usb 1-1: Product: syz [ 202.596296][ T5890] usb 1-1: Manufacturer: syz [ 202.621114][ T5890] usb 1-1: SerialNumber: syz [ 202.636161][ T5890] usb 1-1: config 0 descriptor?? [ 202.644372][ T8061] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.652529][ T8061] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.669627][ T5890] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.868507][ T5908] usb 1-1: USB disconnect, device number 14 [ 203.227268][ T30] audit: type=1400 audit(1757850533.723:455): avc: denied { mounton } for pid=8097 comm="syz.2.608" path="/proc/379/task" dev="proc" ino=16187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 203.777792][ T30] audit: type=1400 audit(1757850534.283:456): avc: denied { read } for pid=8114 comm="syz.3.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.898531][ T8122] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.918977][ T8119] lo speed is unknown, defaulting to 1000 [ 203.926436][ T8119] lo speed is unknown, defaulting to 1000 [ 204.226966][ T8133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.333235][ T30] audit: type=1400 audit(1757850534.843:457): avc: denied { ioctl } for pid=8140 comm="syz.2.627" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.395388][ T30] audit: type=1400 audit(1757850534.843:458): avc: denied { map } for pid=8140 comm="syz.2.627" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 204.677251][ T5908] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 204.848132][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 204.866024][ T5967] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 204.877222][ T5908] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 204.901234][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.924183][ T5908] usb 2-1: config 0 descriptor?? [ 205.035750][ T5967] usb 3-1: Using ep0 maxpacket: 32 [ 205.042280][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.055477][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.065849][ T5967] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 205.074997][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.085978][ T5967] usb 3-1: config 0 descriptor?? [ 205.094406][ T5967] hub 3-1:0.0: USB hub found [ 205.147942][ T5908] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 205.167355][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.182434][ T5908] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 205.190038][ T5908] usb 2-1: media controller created [ 205.213673][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.298379][ T5967] hub 3-1:0.0: 1 port detected [ 205.371684][ T8184] loop3: detected capacity change from 0 to 1 [ 205.381902][ T8184] Dev loop3: unable to read RDB block 1 [ 205.387598][ T8184] loop3: unable to read partition table [ 205.393456][ T8184] loop3: partition table beyond EOD, truncated [ 205.401281][ T8184] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 205.499007][ T5958] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 205.656063][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 205.665440][ T5958] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 205.678787][ T8196] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.687583][ T5958] usb 4-1: config 0 has no interface number 0 [ 205.697082][ T5958] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 205.714138][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.737975][ T5958] usb 4-1: Product: syz [ 205.742141][ T5958] usb 4-1: Manufacturer: syz [ 205.750493][ T5958] usb 4-1: SerialNumber: syz [ 205.768605][ T5958] usb 4-1: config 0 descriptor?? [ 205.788578][ T5958] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 205.918627][ T5967] hub 3-1:0.0: activate --> -90 [ 205.981772][ T5958] usb 4-1: USB disconnect, device number 17 [ 206.019129][ T8207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 206.123411][ T5967] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 206.140545][ T5967] usb 3-1: Failed to suspend device, error -71 [ 206.151687][ T24] usb 3-1: USB disconnect, device number 16 [ 206.196485][ T5908] stb0899_attach: Driver disabled by Kconfig [ 206.203279][ T5908] az6027: no front-end attached [ 206.203279][ T5908] [ 206.210666][ T5908] az6027: usb out operation failed. (-71) [ 206.216544][ T5908] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 206.224601][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 206.237990][ T5908] dvb-usb: schedule remote query interval to 400 msecs. [ 206.245612][ T5908] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 206.262332][ T5908] usb 2-1: USB disconnect, device number 17 [ 206.286061][ T5908] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 207.036442][ T5967] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 207.309059][ T5967] usb 1-1: Using ep0 maxpacket: 16 [ 207.321922][ T5967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.333028][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.355094][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.374900][ T5967] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 207.396397][ T5967] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.411577][ T5967] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 207.423757][ T5967] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 207.433274][ T5967] usb 1-1: Manufacturer: syz [ 207.439475][ T5967] usb 1-1: config 0 descriptor?? [ 207.535786][ T5958] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 207.685715][ T5967] rc_core: IR keymap rc-hauppauge not found [ 207.700470][ T5967] Registered IR keymap rc-empty [ 207.705416][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.715890][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 207.727816][ T5958] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.737891][ T5958] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 207.738534][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.747809][ T5958] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 207.767844][ T5958] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 207.778773][ T5967] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 207.779695][ T5958] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.806197][ T5958] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.810961][ T5967] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 207.815337][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.830903][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.844926][ T5890] IPVS: starting estimator thread 0... [ 207.856655][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.886951][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.915784][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.935858][ T8252] IPVS: using max 42 ests per chain, 100800 per kthread [ 207.942905][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.965756][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.974855][ T59] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 207.999344][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.026519][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.054632][ T5958] usb 4-1: GET_CAPABILITIES returned 0 [ 208.062131][ T5958] usbtmc 4-1:16.0: can't read capabilities [ 208.066725][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.097757][ T5967] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.117131][ T5967] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 208.127798][ T5967] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 208.141807][ T5967] usb 1-1: USB disconnect, device number 15 [ 208.179316][ T5855] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 208.193424][ T8262] ocfs2: Unknown parameter 'grpquot^' [ 208.262799][ T5890] usb 4-1: USB disconnect, device number 18 [ 208.435747][ T5958] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 208.589872][ T5958] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 208.599075][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.607152][ T5958] usb 3-1: Product: syz [ 208.611419][ T5958] usb 3-1: Manufacturer: syz [ 208.616015][ T5958] usb 3-1: SerialNumber: syz [ 208.629000][ T5958] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 208.669098][ T5890] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 209.496289][ T5855] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 209.505083][ T5908] usb 3-1: USB disconnect, device number 17 [ 209.696619][ T5890] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 209.799498][ T5890] ath9k_htc: Failed to initialize the device [ 209.824306][ T5908] usb 3-1: ath9k_htc: USB layer deinitialized [ 209.935386][ T30] audit: type=1400 audit(1757850540.443:459): avc: denied { read } for pid=8281 comm="syz.1.681" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 209.958382][ T30] audit: type=1400 audit(1757850540.443:460): avc: denied { open } for pid=8281 comm="syz.1.681" path="/139/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 209.982290][ T30] audit: type=1400 audit(1757850540.463:461): avc: denied { ioctl } for pid=8281 comm="syz.1.681" path="/139/file0/file0" dev="fuse" ino=64 ioctlcmd=0x542e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 210.166996][ T942] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 210.325754][ T942] usb 4-1: Using ep0 maxpacket: 8 [ 210.339191][ T942] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 210.354238][ T942] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 210.371051][ T942] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.384105][ T942] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.414731][ T942] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.433971][ T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.675355][ T942] usb 4-1: GET_CAPABILITIES returned 0 [ 211.695152][ T942] usbtmc 4-1:16.0: can't read capabilities [ 211.707198][ T8311] input: syz1 as /devices/virtual/input/input18 [ 212.019157][ T5890] usb 4-1: USB disconnect, device number 19 [ 212.408132][ T30] audit: type=1400 audit(1757850542.903:462): avc: denied { append } for pid=8316 comm="syz.2.695" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 212.975833][ T5890] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 213.135921][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 213.143470][ T5890] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 213.151827][ T5890] usb 1-1: config 0 has no interface number 0 [ 213.158115][ T5890] usb 1-1: config 0 interface 89 has no altsetting 0 [ 213.169510][ T5890] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 213.194252][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.204915][ T5890] usb 1-1: Product: syz [ 213.209156][ T5890] usb 1-1: Manufacturer: syz [ 213.213781][ T5890] usb 1-1: SerialNumber: syz [ 213.234100][ T5890] usb 1-1: config 0 descriptor?? [ 213.239292][ T30] audit: type=1400 audit(1757850543.753:463): avc: denied { append } for pid=8347 comm="syz.2.705" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 213.268983][ T5890] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 213.278580][ T5890] em28xx 1-1:0.89: Video interface 89 found: bulk [ 213.628299][ T55] block nbd0: Possible stuck request ffff888026f671c0: control (read@0,1024B). Runtime 30 seconds [ 213.639744][ T55] block nbd0: Possible stuck request ffff888026f67380: control (read@1024,1024B). Runtime 30 seconds [ 213.650658][ T55] block nbd0: Possible stuck request ffff888026f67540: control (read@2048,1024B). Runtime 30 seconds [ 213.872332][ T5890] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 214.165843][ T5908] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 214.338117][ T5908] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 214.347132][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.358888][ T5908] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 214.370067][ T5908] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 214.378407][ T5908] usb 2-1: Manufacturer: syz [ 214.388696][ T5908] usb 2-1: config 0 descriptor?? [ 214.457676][ T5908] rc_core: IR keymap rc-hauppauge not found [ 214.463751][ T5908] Registered IR keymap rc-empty [ 214.470229][ T5908] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 214.491522][ T5908] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 214.502327][ T5890] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 214.502393][ T5890] em28xx 1-1:0.89: board has no eeprom [ 214.595797][ T5890] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 214.619394][ T5890] em28xx 1-1:0.89: analog set to bulk mode. [ 214.649519][ T942] em28xx 1-1:0.89: Registering V4L2 extension [ 214.679890][ T5890] usb 1-1: USB disconnect, device number 16 [ 214.760545][ T5890] em28xx 1-1:0.89: Disconnecting em28xx [ 214.838397][ T942] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 214.854681][ T942] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 214.872073][ T942] em28xx 1-1:0.89: No AC97 audio processor [ 214.893904][ T942] usb 1-1: Decoder not found [ 214.911599][ T942] em28xx 1-1:0.89: failed to create media graph [ 214.925745][ T942] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 214.960871][ T942] em28xx 1-1:0.89: Registering snapshot button... [ 214.987794][ T942] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input20 [ 215.020883][ T942] em28xx 1-1:0.89: Remote control support is not available for this card. [ 215.030297][ T5890] em28xx 1-1:0.89: Closing input extension [ 215.038337][ T5890] em28xx 1-1:0.89: Deregistering snapshot button [ 215.276071][ T5908] usb 2-1: USB disconnect, device number 18 [ 215.328235][ T5890] em28xx 1-1:0.89: Freeing device [ 215.638105][ T30] audit: type=1400 audit(1757850546.153:464): avc: denied { write } for pid=8381 comm="syz.2.715" path="socket:[19481]" dev="sockfs" ino=19481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 216.528892][ T30] audit: type=1400 audit(1757850547.043:465): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 216.626914][ T30] audit: type=1400 audit(1757850547.083:466): avc: denied { ioctl } for pid=8425 comm="syz.2.728" path="/146/file0" dev="9p" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 216.676139][ T8434] overlayfs: metacopy with no lower data found - abort lookup (/file7) [ 216.699506][ T30] audit: type=1800 audit(1757850547.103:467): pid=8427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.728" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 216.816694][ T5890] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 216.858795][ T8436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.978259][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 217.000150][ T5890] usb 2-1: config 0 has no interfaces? [ 217.019663][ T5890] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 217.037818][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.268163][ T5901] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 217.289967][ T5890] usb 2-1: config 0 descriptor?? [ 217.445701][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 217.452192][ T5901] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 217.461562][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.482959][ T5901] usb 4-1: config 0 descriptor?? [ 217.492421][ T5901] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 217.580830][ T5967] usb 2-1: USB disconnect, device number 19 [ 217.763297][ T8469] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 218.584710][ T5901] gspca_nw80x: reg_w err -71 [ 218.613221][ T5901] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 218.786844][ T5901] usb 4-1: USB disconnect, device number 20 [ 218.887147][ T30] audit: type=1400 audit(1757850549.393:468): avc: denied { module_request } for pid=8484 comm="syz.1.749" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 219.184154][ T8495] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 219.464959][ T8506] netlink: 36 bytes leftover after parsing attributes in process `syz.3.753'. [ 220.461148][ T8528] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.595980][ T5890] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 220.756040][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 220.906264][ T5890] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 220.929175][ T5890] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 220.944620][ T5890] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.956023][ T5890] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 220.965157][ T5890] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 220.982901][ T30] audit: type=1400 audit(1757850551.493:469): avc: denied { create } for pid=8540 comm="syz.4.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 221.006266][ T5890] usb 1-1: Product: syz [ 221.010430][ T5890] usb 1-1: Manufacturer: syz [ 221.019654][ T5890] usb 1-1: SerialNumber: syz [ 221.027439][ T5890] usb 1-1: config 0 descriptor?? [ 221.032666][ T30] audit: type=1400 audit(1757850551.493:470): avc: denied { sys_admin } for pid=8540 comm="syz.4.767" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 221.054746][ T8541] VFS: Mount too revealing [ 221.266884][ T30] audit: type=1400 audit(1757850551.773:471): avc: denied { write } for pid=8545 comm="syz.1.769" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 221.330314][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.770'. [ 221.346121][ T30] audit: type=1400 audit(1757850551.773:472): avc: denied { block_suspend } for pid=8545 comm="syz.1.769" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 221.367307][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.516205][ T5890] gs_usb 1-1:0.0: Configuring for 176 interfaces [ 221.522602][ T5890] gs_usb 1-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 221.536496][ T5901] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 221.548128][ T5890] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22 [ 221.568886][ T30] audit: type=1400 audit(1757850552.073:473): avc: denied { read write } for pid=8561 comm="syz.1.774" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 221.649087][ T30] audit: type=1400 audit(1757850552.073:474): avc: denied { open } for pid=8561 comm="syz.1.774" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 221.729580][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 221.737823][ T5901] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 221.746057][ T5901] usb 4-1: config 0 has no interface number 0 [ 221.757930][ T5901] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 221.785981][ T5901] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 221.809356][ T5901] usb 4-1: config 0 interface 41 has no altsetting 0 [ 221.825391][ T5901] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 221.834750][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.845557][ T5901] usb 4-1: Product: syz [ 221.896332][ T5901] usb 4-1: Manufacturer: syz [ 221.910514][ T5901] usb 4-1: SerialNumber: syz [ 221.926949][ T5901] usb 4-1: config 0 descriptor?? [ 221.936395][ T8552] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 221.943822][ T8552] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 222.050919][ T30] audit: type=1400 audit(1757850552.563:475): avc: denied { execmem } for pid=8566 comm="syz.4.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 222.593692][ T8552] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 222.649254][ T8552] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 222.929870][ T30] audit: type=1804 audit(1757850553.443:476): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.778" name="/newroot/160/file0" dev="fuse" ino=1 res=1 errno=0 [ 223.167546][ T30] audit: type=1400 audit(1757850553.683:477): avc: denied { create } for pid=8579 comm="syz.1.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 223.260728][ T5901] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 223.378328][ T5890] usb 1-1: USB disconnect, device number 17 [ 224.209726][ T5908] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 224.232248][ T30] audit: type=1400 audit(1757850554.743:478): avc: denied { bind } for pid=8601 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 224.410704][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.435781][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 224.460231][ T5908] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.490936][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.534685][ T5908] usb 2-1: config 0 descriptor?? [ 224.732865][ T5901] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 224.752430][ T5901] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 224.766878][ T5901] usb 4-1: USB disconnect, device number 21 [ 224.828216][ T5908] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 225.025892][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 225.033207][ T5908] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.042394][ T5908] usb 3-1: config 3 has an invalid interface number: 24 but max is 2 [ 225.051246][ T5908] usb 3-1: config 3 has an invalid descriptor of length 255, skipping remainder of the config [ 225.145827][ T5908] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 225.154979][ T5908] usb 3-1: config 3 has no interface number 0 [ 225.168843][ T5908] usb 3-1: New USB device found, idVendor=22b8, idProduct=4244, bcdDevice=9d.e8 [ 225.178762][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.457273][ T5908] usb 3-1: Product: syz [ 225.461626][ T5908] usb 3-1: Manufacturer: syz [ 225.466862][ T5908] usb 3-1: SerialNumber: syz [ 225.719227][ T5908] usb 3-1: USB disconnect, device number 18 [ 226.064078][ T8640] netlink: 28 bytes leftover after parsing attributes in process `syz.4.799'. [ 226.101261][ T5908] usb 2-1: USB disconnect, device number 20 [ 226.182398][ T8646] binder_alloc: 8642: binder_alloc_buf size 13336 failed, no address space [ 226.193473][ T8646] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 226.929291][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 226.929308][ T30] audit: type=1400 audit(1757850557.443:482): avc: denied { getattr } for pid=8653 comm="syz.1.803" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 226.929432][ T8654] overlayfs: statfs failed on './file0' [ 227.204590][ T8665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.805'. [ 227.241799][ T30] audit: type=1400 audit(1757850557.743:483): avc: denied { create } for pid=8662 comm="syz.1.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.333181][ T30] audit: type=1400 audit(1757850557.833:484): avc: denied { connect } for pid=8662 comm="syz.1.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 227.886159][ T8672] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.808'. [ 229.540959][ T30] audit: type=1400 audit(1757850560.053:485): avc: denied { read write } for pid=8697 comm="syz.4.814" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.613307][ T30] audit: type=1400 audit(1757850560.053:486): avc: denied { open } for pid=8697 comm="syz.4.814" path="/141/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 230.958613][ T30] audit: type=1400 audit(1757850561.473:487): avc: denied { bind } for pid=8720 comm="syz.1.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 231.604587][ T8734] binder: 8733:8734 ioctl 4018620d 0 returned -22 [ 231.621854][ T8734] binder: 8733:8734 ioctl c0306201 200000000180 returned -14 [ 231.665917][ T5890] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 231.807270][ T30] audit: type=1400 audit(1757850562.323:488): avc: denied { execute } for pid=8739 comm="syz.0.828" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 232.146835][ T5890] usb 2-1: Using ep0 maxpacket: 8 [ 232.158806][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 232.168206][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.176453][ T5890] usb 2-1: Product: syz [ 232.180686][ T5890] usb 2-1: Manufacturer: syz [ 232.185365][ T5890] usb 2-1: SerialNumber: syz [ 232.637106][ T5890] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 232.710596][ T30] audit: type=1326 audit(1757850563.223:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0617f8eba9 code=0x7ffc0000 [ 232.794416][ T30] audit: type=1326 audit(1757850563.223:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0617f8eba9 code=0x7ffc0000 [ 232.931862][ T30] audit: type=1326 audit(1757850563.243:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0617f8eba9 code=0x7ffc0000 [ 232.965440][ T30] audit: type=1326 audit(1757850563.243:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0617f8eba9 code=0x7ffc0000 [ 232.994441][ T30] audit: type=1326 audit(1757850563.243:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0617f8eba9 code=0x7ffc0000 [ 233.030518][ T30] audit: type=1326 audit(1757850563.253:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f0617f8eba9 code=0x7ffc0000 [ 233.154770][ T30] audit: type=1326 audit(1757850563.253:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0617f8eba9 code=0x7ffc0000 [ 233.179604][ T30] audit: type=1326 audit(1757850563.253:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0617f8eba9 code=0x7ffc0000 [ 233.204171][ T30] audit: type=1326 audit(1757850563.253:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0617f8eba9 code=0x7ffc0000 [ 233.235289][ T30] audit: type=1326 audit(1757850563.253:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8748 comm="syz.4.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0617f8eba9 code=0x7ffc0000 [ 234.256651][ T5901] usb 2-1: USB disconnect, device number 21 [ 234.264957][ T5901] usblp0: removed [ 234.455285][ T8766] syzkaller0: entered promiscuous mode [ 234.471638][ T8766] syzkaller0: entered allmulticast mode [ 238.271917][ T8816] netlink: 'syz.4.843': attribute type 4 has an invalid length. [ 238.335899][ T8817] netlink: 'syz.4.843': attribute type 4 has an invalid length. [ 238.393731][ T8818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=8818 comm=syz.4.843 [ 239.040228][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 240.146488][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 240.330179][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 240.364115][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.394326][ T10] usb 4-1: Product: syz [ 240.502738][ T10] usb 4-1: Manufacturer: syz [ 240.516454][ T10] usb 4-1: SerialNumber: syz [ 240.592622][ T10] usb 4-1: config 0 descriptor?? [ 240.784490][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 240.784507][ T30] audit: type=1400 audit(1757850571.293:516): avc: denied { setattr } for pid=8843 comm="syz.0.854" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 240.832125][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 240.840935][ T30] audit: type=1400 audit(1757850571.343:517): avc: denied { mounton } for pid=8843 comm="syz.0.854" path="/187/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 241.509119][ T8855] gfs2: not a GFS2 filesystem [ 242.193778][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 242.235791][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 242.253946][ T30] audit: type=1400 audit(1757850572.763:518): avc: denied { bind } for pid=8860 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.307450][ T8863] tipc: Started in network mode [ 242.321674][ T8863] tipc: Node identity 3665423d823a, cluster identity 4711 [ 242.330439][ T8863] tipc: Enabled bearer , priority 0 [ 242.364544][ T8866] tipc: Started in network mode [ 242.375782][ T8866] tipc: Node identity dafe626fc118, cluster identity 4711 [ 242.392964][ T8866] tipc: Enabled bearer , priority 0 [ 242.427948][ T8866] syzkaller0: entered promiscuous mode [ 242.443718][ T8866] syzkaller0: entered allmulticast mode [ 242.463407][ T8863] syzkaller0: entered promiscuous mode [ 242.472821][ T8863] syzkaller0: entered allmulticast mode [ 242.502285][ T8866] tipc: Resetting bearer [ 242.511517][ T8863] tipc: Resetting bearer [ 242.520022][ T8864] tipc: Resetting bearer [ 242.533294][ T8864] tipc: Disabling bearer [ 242.690135][ T8862] tipc: Resetting bearer [ 242.732985][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 242.890896][ T10] usb 4-1: USB disconnect, device number 22 [ 242.910827][ T8862] tipc: Disabling bearer [ 243.603209][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.865'. [ 243.978034][ T55] block nbd0: Possible stuck request ffff888026f671c0: control (read@0,1024B). Runtime 60 seconds [ 243.989953][ T55] block nbd0: Possible stuck request ffff888026f67380: control (read@1024,1024B). Runtime 60 seconds [ 244.000926][ T55] block nbd0: Possible stuck request ffff888026f67540: control (read@2048,1024B). Runtime 60 seconds [ 245.925969][ T8912] hub 9-0:1.0: USB hub found [ 245.932900][ T8912] hub 9-0:1.0: 1 port detected [ 246.386167][ T8914] netlink: 80 bytes leftover after parsing attributes in process `syz.0.873'. [ 246.395506][ T8914] netlink: 80 bytes leftover after parsing attributes in process `syz.0.873'. [ 247.257929][ T8920] netlink: 'syz.2.874': attribute type 4 has an invalid length. [ 247.283036][ T8920] netlink: 'syz.2.874': attribute type 4 has an invalid length. [ 247.302635][ T8920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=8920 comm=syz.2.874 [ 250.795343][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 252.727247][ T30] audit: type=1400 audit(1757850583.233:519): avc: denied { ioctl } for pid=8967 comm="syz.4.887" path="socket:[21956]" dev="sockfs" ino=21956 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.029164][ T10] IPVS: starting estimator thread 0... [ 253.365778][ T8983] IPVS: using max 77 ests per chain, 184800 per kthread [ 254.663350][ T9004] netlink: 'syz.1.890': attribute type 4 has an invalid length. [ 254.722881][ T9005] netlink: 'syz.1.890': attribute type 4 has an invalid length. [ 254.781354][ T9006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=9006 comm=syz.1.890 [ 255.227090][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.233457][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.776512][ T8972] geneve2: entered promiscuous mode [ 255.798340][ T10] lo speed is unknown, defaulting to 1000 [ 255.841447][ T5890] lo speed is unknown, defaulting to 1000 [ 256.656179][ T5171] Bluetooth: hci4: command 0x0405 tx timeout [ 259.279260][ T9059] input: syz1 as /devices/virtual/input/input24 [ 260.298672][ T9065] kvm: kvm [9061]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x200000000 [ 261.804101][ T9087] tipc: Enabled bearer , priority 0 [ 261.813575][ T9087] syzkaller0: entered promiscuous mode [ 261.993862][ T9087] syzkaller0: entered allmulticast mode [ 262.866677][ T9087] tipc: Resetting bearer [ 262.897703][ T9086] tipc: Resetting bearer [ 263.080945][ T5890] tipc: Node number set to 468083311 [ 263.088352][ T30] audit: type=1400 audit(1757850593.563:520): avc: denied { bind } for pid=9103 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 263.115971][ T30] audit: type=1400 audit(1757850593.563:521): avc: denied { listen } for pid=9103 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 263.151209][ T30] audit: type=1400 audit(1757850593.563:522): avc: denied { read } for pid=9103 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 263.636873][ T9086] tipc: Disabling bearer [ 263.898969][ T9116] tc_dump_action: action bad kind [ 264.802816][ T30] audit: type=1400 audit(1757850595.313:523): avc: denied { watch_mount } for pid=9117 comm="syz.0.924" path="/203" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 265.028695][ T30] audit: type=1400 audit(1757850595.423:524): avc: denied { write } for pid=9117 comm="syz.0.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.170905][ T30] audit: type=1400 audit(1757850595.423:525): avc: denied { nlmsg_write } for pid=9117 comm="syz.0.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.683611][ T9129] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 265.690435][ T9129] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 265.700028][ T9129] vhci_hcd vhci_hcd.0: Device attached [ 265.777635][ T9130] vhci_hcd: connection closed [ 266.632759][ T6164] vhci_hcd: stop threads [ 266.722869][ T6164] vhci_hcd: release socket [ 266.745748][ T24] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 266.859264][ T6164] vhci_hcd: disconnect device [ 268.704876][ T30] audit: type=1400 audit(1757850599.203:526): avc: denied { name_connect } for pid=9141 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 272.254508][ T24] vhci_hcd: vhci_device speed not set [ 272.335903][ T5171] Bluetooth: hci4: command 0x0405 tx timeout [ 272.851347][ T9187] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 273.230187][ T30] audit: type=1400 audit(1757850603.743:527): avc: denied { bind } for pid=9182 comm="syz.4.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 273.776893][ T30] audit: type=1400 audit(1757850603.763:528): avc: denied { name_bind } for pid=9182 comm="syz.4.940" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 273.799127][ T30] audit: type=1400 audit(1757850603.763:529): avc: denied { node_bind } for pid=9182 comm="syz.4.940" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 274.425972][ T55] block nbd0: Possible stuck request ffff888026f671c0: control (read@0,1024B). Runtime 90 seconds [ 274.436714][ T55] block nbd0: Possible stuck request ffff888026f67380: control (read@1024,1024B). Runtime 90 seconds [ 274.447947][ T55] block nbd0: Possible stuck request ffff888026f67540: control (read@2048,1024B). Runtime 90 seconds [ 274.659906][ T30] audit: type=1400 audit(1757850605.173:530): avc: denied { mount } for pid=9196 comm="syz.3.944" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 276.967669][ T9228] block device autoloading is deprecated and will be removed. [ 277.004533][ T30] audit: type=1400 audit(1757850607.063:531): avc: denied { connect } for pid=9221 comm="syz.3.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.102229][ T30] audit: type=1400 audit(1757850607.123:532): avc: denied { bind } for pid=9221 comm="syz.3.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 277.701069][ T9244] lo speed is unknown, defaulting to 1000 [ 277.727129][ T9244] lo speed is unknown, defaulting to 1000 [ 277.784550][ T9246] syzkaller1: entered promiscuous mode [ 277.794101][ T9246] syzkaller1: entered allmulticast mode [ 278.678432][ T9257] binder: 9255:9257 ioctl c018620c 200000000240 returned -1 [ 283.231176][ T9278] syz.2.959 (9278): drop_caches: 2 [ 283.236820][ T9278] syz.2.959 (9278): drop_caches: 2 [ 285.638695][ T9293] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 285.648159][ T9293] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 285.658114][ T9293] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 285.671396][ T9293] syz.3.963 (9293) used greatest stack depth: 19960 bytes left [ 285.773758][ T30] audit: type=1800 audit(1757850616.153:533): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.3.963" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 285.869034][ T30] audit: type=1400 audit(1757850616.153:534): avc: denied { firmware_load } for pid=9289 comm="syz.3.963" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 285.915942][ T30] audit: type=1400 audit(1757850616.173:535): avc: denied { firmware_load } for pid=9289 comm="syz.3.963" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 288.113827][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 288.124032][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 288.133012][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 288.142147][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 288.621371][ T30] audit: type=1400 audit(1757850619.133:536): avc: denied { getopt } for pid=9326 comm="syz.0.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 288.945809][ T30] audit: type=1400 audit(1757850619.453:537): avc: denied { read } for pid=9332 comm="syz.4.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 289.358292][ T30] audit: type=1400 audit(1757850619.863:538): avc: denied { read } for pid=9314 comm="syz.1.969" lport=43944 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 289.399473][ T30] audit: type=1400 audit(1757850619.913:539): avc: denied { setopt } for pid=9314 comm="syz.1.969" lport=43944 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 289.452941][ T30] audit: type=1400 audit(1757850619.953:540): avc: denied { bind } for pid=9314 comm="syz.1.969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 292.249011][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.981'. [ 293.327564][ T9384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 293.693639][ T9384] team1: entered promiscuous mode [ 293.699198][ T9384] team1: entered allmulticast mode [ 294.068421][ T9396] netlink: 80 bytes leftover after parsing attributes in process `syz.1.986'. [ 294.094108][ T30] audit: type=1400 audit(1757850624.603:541): avc: denied { setattr } for pid=9387 comm="syz.1.986" name="dmmidi2" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 295.576136][ T9389] SELinux: failed to load policy [ 295.633665][ T9403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.643750][ T9403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 295.655569][ T9403] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 297.625719][ T5855] Bluetooth: hci2: command 0x0c1a tx timeout [ 297.695925][ T5855] Bluetooth: hci4: command 0x0405 tx timeout [ 297.705721][ T5855] Bluetooth: hci3: command 0x0c1a tx timeout [ 297.802806][ T9431] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 297.888612][ T9432] IPVS: stopping backup sync thread 9431 ... [ 298.354894][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 299.230154][ T30] audit: type=1400 audit(1757850629.743:542): avc: denied { append } for pid=9449 comm="syz.4.1003" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 300.020711][ T9463] tipc: Can't bind to reserved service type 0 [ 300.947837][ T5171] Bluetooth: hci4: command 0x0405 tx timeout [ 303.948199][ T9487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.232603][ T9487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.408734][ T9507] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 304.415257][ T9507] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 304.516651][ T55] block nbd0: Possible stuck request ffff888026f671c0: control (read@0,1024B). Runtime 120 seconds [ 304.529235][ T55] block nbd0: Possible stuck request ffff888026f67380: control (read@1024,1024B). Runtime 120 seconds [ 304.542484][ T55] block nbd0: Possible stuck request ffff888026f67540: control (read@2048,1024B). Runtime 120 seconds [ 304.583046][ T9507] vhci_hcd vhci_hcd.0: Device attached [ 304.723711][ T9511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.808095][ T9507] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.837767][ T9507] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.876034][ T5933] vhci_hcd: vhci_device speed not set [ 304.893579][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 304.900212][ T9507] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.205587][ T9507] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.233281][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 305.236054][ T9507] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(18) [ 305.245778][ T9507] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 305.276592][ T9513] ceph: No mds server is up or the cluster is laggy [ 305.305798][ T5933] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 305.334970][ T9511] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.374838][ T9507] vhci_hcd vhci_hcd.0: Device attached [ 305.588934][ T9527] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 305.608766][ T9523] vhci_hcd: connection closed [ 305.610625][ T59] vhci_hcd: stop threads [ 305.620946][ T59] vhci_hcd: release socket [ 305.627747][ T59] vhci_hcd: disconnect device [ 305.632525][ T9508] vhci_hcd: connection reset by peer [ 305.650754][ T59] vhci_hcd: stop threads [ 305.661256][ T59] vhci_hcd: release socket [ 305.815683][ T59] vhci_hcd: disconnect device [ 305.960514][ T9532] sp0: Synchronizing with TNC [ 306.577264][ T9529] [U] [ 307.182250][ T30] audit: type=1400 audit(1757850637.693:543): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 308.109337][ T9553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9553 comm=syz.1.1023 [ 309.592007][ T9551] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 309.599878][ T9551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1025'. [ 309.648129][ T9559] syz_tun: entered allmulticast mode [ 309.777764][ T30] audit: type=1400 audit(1757850640.283:544): avc: denied { remount } for pid=9547 comm="syz.2.1025" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 309.872978][ T5855] Bluetooth: hci4: connection err: -111 [ 310.485718][ T5933] vhci_hcd: vhci_device speed not set [ 312.295676][ T30] audit: type=1400 audit(1757850642.803:545): avc: denied { create } for pid=9581 comm="syz.3.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 312.457777][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1033'. [ 312.519531][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1034'. [ 313.301858][ T9571] lo speed is unknown, defaulting to 1000 [ 316.362779][ T30] audit: type=1400 audit(1757850646.797:546): avc: denied { mounton } for pid=9606 comm="syz.2.1037" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 316.452979][ T9610] new mount options do not match the existing superblock, will be ignored [ 316.660964][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.677219][ T9571] lo speed is unknown, defaulting to 1000 [ 316.688432][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.698095][ T9609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 317.895963][ T30] audit: type=1400 audit(1757850648.397:547): avc: denied { write } for pid=9626 comm="syz.4.1042" lport=46770 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 319.133517][ T30] audit: type=1400 audit(1757850649.197:548): avc: denied { read write } for pid=9634 comm="syz.2.1044" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 319.241239][ T9643] binder: 9642:9643 ioctl c0306201 0 returned -14 [ 319.277941][ T9643] binder: 9642:9643 ioctl c0306201 0 returned -14 [ 319.424381][ T30] audit: type=1400 audit(1757850649.197:549): avc: denied { open } for pid=9634 comm="syz.2.1044" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 320.026226][ T30] audit: type=1400 audit(1757850649.207:550): avc: denied { ioctl } for pid=9634 comm="syz.2.1044" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 320.335762][ T30] audit: type=1400 audit(1757850649.777:551): avc: denied { execute } for pid=9642 comm="syz.4.1046" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 321.242087][ T942] IPVS: starting estimator thread 0... [ 321.301210][ T30] audit: type=1400 audit(1757850651.707:552): avc: denied { mount } for pid=9660 comm="syz.2.1051" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 321.415704][ T9667] IPVS: using max 73 ests per chain, 175200 per kthread [ 321.494689][ T9671] program syz.1.1052 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.355034][ T9681] fuse: Unknown parameter '000000000016344938100x0000000000000008' [ 324.779047][ T30] audit: type=1400 audit(1757850655.287:553): avc: denied { getopt } for pid=9702 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 325.069045][ T30] audit: type=1400 audit(1757850655.507:554): avc: denied { read } for pid=9702 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 325.944175][ T30] audit: type=1400 audit(1757850656.407:555): avc: denied { listen } for pid=9719 comm="syz.0.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 326.021119][ T30] audit: type=1400 audit(1757850656.407:556): avc: denied { accept } for pid=9719 comm="syz.0.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 327.215540][ T9731] lo speed is unknown, defaulting to 1000 [ 327.477621][ T9731] lo speed is unknown, defaulting to 1000 [ 327.544928][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 327.553880][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 327.562889][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 327.571797][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 327.580734][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 327.589734][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 327.640651][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 327.650218][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 327.659567][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 327.668856][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 328.429302][ T9743] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 328.444884][ T9743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.134681][ T9755] binder_alloc: 9750: binder_alloc_buf, no vma [ 333.371119][ T30] audit: type=1400 audit(1757850663.847:557): avc: denied { mount } for pid=9785 comm="syz.1.1079" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 333.753636][ T30] audit: type=1400 audit(1757850664.257:558): avc: denied { ioctl } for pid=9781 comm="syz.3.1078" path="socket:[25624]" dev="sockfs" ino=25624 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.410249][ T30] audit: type=1326 audit(1757850664.907:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0617f8eba9 code=0x7ffc0000 [ 334.502363][ T30] audit: type=1326 audit(1757850664.907:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.4.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0617f8eba9 code=0x7ffc0000 [ 334.566609][ T9802] comedi comedi3: rti800: I/O port conflict (0x4f27,16) [ 334.580002][ T55] block nbd0: Possible stuck request ffff888026f671c0: control (read@0,1024B). Runtime 150 seconds [ 334.622055][ T55] block nbd0: Possible stuck request ffff888026f67380: control (read@1024,1024B). Runtime 150 seconds [ 334.796870][ T55] block nbd0: Possible stuck request ffff888026f67540: control (read@2048,1024B). Runtime 150 seconds [ 335.351306][ T9805] No source specified [ 335.363423][ T9805] __nla_validate_parse: 43 callbacks suppressed [ 335.363442][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1082'. [ 340.610100][ T9838] nfs: Unknown parameter '' [ 341.102216][ T30] audit: type=1400 audit(1757850671.097:561): avc: denied { write } for pid=9835 comm="syz.1.1090" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 341.316885][ T30] audit: type=1400 audit(1757850671.807:562): avc: denied { write } for pid=9839 comm="syz.3.1091" name="file0" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 341.653266][ T30] audit: type=1400 audit(1757850671.817:563): avc: denied { ioctl } for pid=9839 comm="syz.3.1091" path="/219/file0" dev="tmpfs" ino=1148 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 342.258127][ T30] audit: type=1400 audit(1757850672.757:564): avc: denied { read } for pid=9843 comm="syz.1.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 342.303952][ T30] audit: type=1400 audit(1757850672.807:565): avc: denied { create } for pid=9850 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 342.542156][ T9855] lo speed is unknown, defaulting to 1000 [ 342.549097][ T9855] lo speed is unknown, defaulting to 1000 [ 343.291552][ T30] audit: type=1400 audit(1757850673.037:566): avc: denied { write } for pid=9850 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 344.077439][ T9856] tty tty26: ldisc open failed (-12), clearing slot 25 [ 344.552280][ T24] libceph: connect (1)[c::]:6789 error -101 [ 344.883990][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 345.013426][ T9865] ceph: No mds server is up or the cluster is laggy [ 345.244584][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 345.255375][ T9877] 8021q: VLANs not supported on ip6gre0 [ 346.311877][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1102'. [ 346.503499][ T30] audit: type=1400 audit(1757850677.007:567): avc: denied { append } for pid=9878 comm="syz.3.1100" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 346.756196][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 346.804648][ T30] audit: type=1800 audit(1757850677.307:568): pid=9879 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1100" name="/" dev="9p" ino=2 res=0 errno=0 [ 346.905677][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 346.914441][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.926580][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 346.994890][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 347.135542][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.264244][ T24] usb 3-1: config 0 descriptor?? [ 347.274688][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 347.926032][ T9890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.314129][ T30] audit: type=1400 audit(1757850680.817:569): avc: denied { getopt } for pid=9920 comm="syz.3.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 354.068727][ T9952] kvm_intel: kvm [9950]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 354.174281][ T9952] kvm_intel: kvm [9950]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 354.272532][ T9952] kvm_intel: kvm [9950]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 354.336654][ T9952] kvm_intel: kvm [9950]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 354.408490][ T9952] kvm_intel: kvm [9950]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 354.497244][ T9952] kvm_intel: kvm [9950]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 354.506476][ T9952] kvm_intel: kvm [9950]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 354.515570][ T9952] kvm_intel: kvm [9950]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 354.524732][ T9952] kvm_intel: kvm [9950]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 354.533852][ T9952] kvm_intel: kvm [9950]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 354.756096][ T30] audit: type=1400 audit(1757850685.207:570): avc: denied { write } for pid=9958 comm="syz.1.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 355.742919][ T30] audit: type=1326 audit(1757850686.247:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 355.766229][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.954875][ T9967] pim6reg: entered allmulticast mode [ 356.037760][ T30] audit: type=1326 audit(1757850686.277:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 356.111922][ T9967] pim6reg: left allmulticast mode [ 356.183340][ T30] audit: type=1326 audit(1757850686.307:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 356.353674][ T30] audit: type=1326 audit(1757850686.307:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 356.781231][ T30] audit: type=1326 audit(1757850686.307:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 356.907224][ T30] audit: type=1326 audit(1757850686.347:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb01618d510 code=0x7ffc0000 [ 356.930537][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.165672][ T30] audit: type=1326 audit(1757850686.347:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 357.272199][ T30] audit: type=1326 audit(1757850686.347:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 357.380442][ T30] audit: type=1326 audit(1757850686.347:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9961 comm="syz.3.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 358.457816][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1123'. [ 359.310668][ T9983] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 359.332422][ T9983] block device autoloading is deprecated and will be removed. [ 359.965759][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 359.974638][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 359.993859][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 359.993872][ T30] audit: type=1400 audit(1757850690.497:602): avc: denied { ioctl } for pid=9976 comm="syz.1.1122" path="/221/file0/file0" dev="fuse" ino=64 ioctlcmd=0x933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 360.637721][ T30] audit: type=1326 audit(1757850691.147:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="syz.1.1128" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01adb8eba9 code=0x0 [ 360.803553][ T9992] syz.0.1126 (9992) used greatest stack depth: 19752 bytes left [ 361.326643][ T9998] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.332816][ T9998] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 361.429235][ T9998] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.435167][ T9998] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 361.487432][ T9998] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 361.576070][ T9998] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 361.726357][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.737765][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.756257][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.785818][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.825834][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.868433][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.904708][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.916129][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.945786][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.970802][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.175805][ T30] audit: type=1400 audit(1757850692.507:604): avc: denied { mounton } for pid=10005 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 362.533281][T10005] lo speed is unknown, defaulting to 1000 [ 362.657083][T10005] lo speed is unknown, defaulting to 1000 [ 363.479077][T10010] netlink: 'syz.0.1130': attribute type 15 has an invalid length. [ 363.486949][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1130'. [ 363.498989][T10010] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 363.506748][T10010] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1130'. [ 364.017021][ T50] Bluetooth: hci5: command tx timeout [ 364.793181][ T55] block nbd0: Possible stuck request ffff888026f671c0: control (read@0,1024B). Runtime 180 seconds [ 364.816898][ T55] block nbd0: Possible stuck request ffff888026f67380: control (read@1024,1024B). Runtime 180 seconds [ 364.827928][ T55] block nbd0: Possible stuck request ffff888026f67540: control (read@2048,1024B). Runtime 180 seconds [ 366.135692][ T50] Bluetooth: hci5: command tx timeout [ 366.676870][T10020] overlayfs: missing 'lowerdir' [ 366.749047][ T30] audit: type=1326 audit(1757850697.257:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 366.823676][ T30] audit: type=1326 audit(1757850697.257:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 367.065154][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 367.662063][ T30] audit: type=1326 audit(1757850697.257:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 367.767202][T10030] netlink: 'syz.4.1133': attribute type 10 has an invalid length. [ 367.890794][T10035] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.953279][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 368.128125][ T30] audit: type=1326 audit(1757850697.257:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 368.213890][ T50] Bluetooth: hci5: command tx timeout [ 368.280543][ T30] audit: type=1326 audit(1757850697.257:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 368.315914][T10005] chnl_net:caif_netlink_parms(): no params data found [ 368.692371][ T30] audit: type=1326 audit(1757850697.287:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 369.128872][ T30] audit: type=1326 audit(1757851465.292:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 369.244899][T10047] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1138'. [ 369.942056][ T30] audit: type=1326 audit(1757851465.292:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 370.168927][ T50] Bluetooth: hci5: command tx timeout [ 370.570248][ T30] audit: type=1326 audit(1757851465.292:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 370.806736][T10005] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.813846][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.832269][T10053] overlayfs: failed to resolve './file1': -2 [ 370.965832][T10053] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1139'. [ 371.041218][ T30] audit: type=1326 audit(1757851465.292:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10019 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01adb8eba9 code=0x7ffc0000 [ 371.048035][T10005] bridge_slave_0: entered allmulticast mode [ 371.389915][T10005] bridge_slave_0: entered promiscuous mode [ 371.567588][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.586099][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.676243][T10060] TCP: TCP_TX_DELAY enabled [ 371.690691][T10005] bridge_slave_1: entered allmulticast mode [ 371.815854][T10005] bridge_slave_1: entered promiscuous mode [ 372.273701][T10005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.485040][T10005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.834324][T10005] team0: Port device team_slave_0 added [ 373.923820][T10005] team0: Port device team_slave_1 added [ 374.638942][T10005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.767251][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.167736][T10005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.209211][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 375.209225][ T30] audit: type=1400 audit(1757851474.143:622): avc: denied { getattr } for pid=10065 comm="syz.1.1142" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 375.262049][T10005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.348070][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.690992][T10005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.951861][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'. [ 377.334903][T10005] hsr_slave_0: entered promiscuous mode [ 377.549252][T10005] hsr_slave_1: entered promiscuous mode [ 377.555355][T10005] debugfs: 'hsr0' already exists in 'hsr' [ 377.586965][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.593268][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.635138][ T30] audit: type=1400 audit(1757851476.683:623): avc: denied { ioctl } for pid=10081 comm="syz.4.1146" path="socket:[26153]" dev="sockfs" ino=26153 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 378.043713][T10005] Cannot create hsr debugfs directory [ 378.382853][T10086] overlayfs: failed lookup in lower (newroot/233, name='bus', err=-40): overlapping layers [ 381.084507][T10094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.096428][T10094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.819960][T10110] misc userio: No port type given on /dev/userio [ 383.121784][T10106] infiniband syz2: set active [ 383.126468][T10106] infiniband syz2: added syz_tun [ 383.131985][T10106] syz2: rxe_create_cq: returned err = -12 [ 383.137735][T10106] infiniband syz2: Couldn't create ib_mad CQ [ 383.144934][T10106] infiniband syz2: Couldn't open port 1 [ 383.161023][T10106] RDS/IB: syz2: added [ 383.165048][T10106] smc: adding ib device syz2 with port count 1 [ 383.171243][T10106] smc: ib device syz2 port 1 has pnetid [ 383.608063][T10005] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 383.947064][T10005] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.928134][T10005] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 385.710953][T10005] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 385.918788][T10124] trusted_key: encrypted_key: insufficient parameters specified [ 385.929086][T10124] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 385.940244][T10124] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 386.551938][T10122] block nbd1: shutting down sockets [ 387.732663][T10005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.811979][T10005] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.962751][ T6162] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.969948][ T6162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.260539][ T6162] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.268894][ T6162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.082621][ T942] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 390.301714][ T30] audit: type=1400 audit(1757851489.965:624): avc: denied { write } for pid=10157 comm="syz.0.1162" name="usbmon1" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 390.335505][ T942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.454187][ T942] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 390.463250][ T942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.578598][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 390.656259][ T942] usb 4-1: config 0 descriptor?? [ 390.767847][T10005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.873460][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 391.022112][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 391.177855][ T10] usb 1-1: config 0 has no interface number 0 [ 391.310825][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 391.435056][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.443087][ T10] usb 1-1: Product: syz [ 391.596885][ T10] usb 1-1: Manufacturer: syz [ 391.601512][ T10] usb 1-1: SerialNumber: syz [ 391.835725][ T10] usb 1-1: config 0 descriptor?? [ 391.917442][ T10] smsc95xx v2.0.0 [ 392.046460][ T942] usbhid 4-1:0.0: can't add hid device: -71 [ 392.052704][ T942] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 392.192974][ T942] usb 4-1: USB disconnect, device number 23 [ 392.207136][T10155] netlink: 'syz.4.1161': attribute type 4 has an invalid length. [ 392.371591][T10170] netlink: 'syz.4.1161': attribute type 4 has an invalid length. [ 392.656496][T10174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=10174 comm=syz.4.1161 [ 392.811875][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 392.960074][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 393.082825][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 393.281883][T10005] veth0_vlan: entered promiscuous mode [ 393.308590][T10176] netlink: 'syz.3.1164': attribute type 10 has an invalid length. [ 393.317513][T10176] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.321093][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 393.328409][T10176] bond0: (slave team0): Enslaving as an active interface with an up link [ 393.542242][ T10] usb 1-1: USB disconnect, device number 18 [ 393.584527][T10005] veth1_vlan: entered promiscuous mode [ 394.029517][ T55] block nbd0: Possible stuck request ffff888026f671c0: control (read@0,1024B). Runtime 210 seconds [ 394.040930][ T55] block nbd0: Possible stuck request ffff888026f67380: control (read@1024,1024B). Runtime 210 seconds [ 394.052656][ T55] block nbd0: Possible stuck request ffff888026f67540: control (read@2048,1024B). Runtime 210 seconds [ 394.149997][T10181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1165'. [ 394.167232][T10181] openvswitch: netlink: Flow key attr not present in new flow. [ 394.436587][T10005] veth0_macvtap: entered promiscuous mode [ 394.544213][T10005] veth1_macvtap: entered promiscuous mode [ 394.794752][T10005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.949436][T10005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.671277][ T54] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.125395][ T6155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.623912][ T6155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.806061][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.426403][ T6155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.434234][ T6155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.844028][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.882146][T10196] net veth1_virt_wifi : renamed from virt_wifi0 [ 397.973844][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.549792][ T30] audit: type=1400 audit(1757851498.595:625): avc: denied { mounton } for pid=10005 comm="syz-executor" path="/root/syzkaller.eS2EnD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 398.959444][ T30] audit: type=1400 audit(1757851498.952:626): avc: denied { mount } for pid=10005 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 399.051306][T10196] bridge0: port 4(batadv0) entered blocking state [ 399.230121][T10196] bridge0: port 4(batadv0) entered disabled state [ 399.311978][T10196] batadv0: entered allmulticast mode [ 399.321323][ T30] audit: type=1400 audit(1757851498.952:627): avc: denied { mounton } for pid=10005 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 399.842646][T10196] batadv0: entered promiscuous mode [ 400.008172][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 400.017647][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 402.591275][T10225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 402.598990][T10225] IPv6: NLM_F_CREATE should be set when creating new route [ 402.606251][T10225] IPv6: NLM_F_CREATE should be set when creating new route [ 402.613481][T10225] IPv6: NLM_F_CREATE should be set when creating new route [ 403.104567][T10227] netlink: 'syz.1.1182': attribute type 21 has an invalid length. [ 403.152613][T10227] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1182'. [ 403.152636][T10228] netlink: 'syz.1.1182': attribute type 21 has an invalid length. [ 403.170267][T10228] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1182'. [ 406.557219][T10237] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 406.565293][ T30] audit: type=1400 audit(1757851507.037:628): avc: denied { mount } for pid=10233 comm="syz.3.1175" name="/" dev="pstore" ino=4317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 406.894344][T10240] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1176'. [ 407.036845][ T30] audit: type=1400 audit(1757851507.551:629): avc: denied { mount } for pid=10239 comm="syz.5.1176" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 407.702932][ T30] audit: type=1400 audit(1757851508.023:630): avc: denied { mounton } for pid=10239 comm="syz.5.1176" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 407.724417][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.630910][ T30] audit: type=1400 audit(1757851509.231:631): avc: denied { unmount } for pid=10005 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 408.869619][ T30] audit: type=1400 audit(1757851509.315:632): avc: denied { unmount } for pid=10005 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 410.333640][T10262] overlayfs: failed to resolve './file1': -2 [ 411.391257][T10258] lo speed is unknown, defaulting to 1000 [ 411.695456][T10258] lo speed is unknown, defaulting to 1000 [ 415.182124][T10274] 9pnet_fd: Insufficient options for proto=fd [ 415.198467][T10274] lo speed is unknown, defaulting to 1000 [ 415.204951][T10274] lo speed is unknown, defaulting to 1000 [ 415.393276][T10279] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=10279 comm=syz.0.1184 [ 418.367603][T10299] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1189'. [ 418.746163][T10300] bridge_slave_0: left allmulticast mode [ 418.752019][T10300] bridge_slave_0: left promiscuous mode [ 418.767815][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.552662][T10300] bridge_slave_1: left allmulticast mode [ 419.612539][T10300] bridge_slave_1: left promiscuous mode [ 419.741805][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.258569][T10300] bond0: (slave bond_slave_0): Releasing backup interface [ 420.408701][T10300] bond0: (slave bond_slave_1): Releasing backup interface [ 420.968110][T10300] team0: Port device team_slave_0 removed [ 421.053533][T10300] team0: Port device team_slave_1 removed [ 421.163690][T10300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.276496][T10300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.506519][T10300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.561430][T10300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.918121][T10302] team0: Mode changed to "loadbalance" [ 422.676129][ T55] block nbd0: Possible stuck request ffff888026f671c0: control (read@0,1024B). Runtime 240 seconds [ 422.686937][ T55] block nbd0: Possible stuck request ffff888026f67380: control (read@1024,1024B). Runtime 240 seconds [ 422.700191][ T55] block nbd0: Possible stuck request ffff888026f67540: control (read@2048,1024B). Runtime 240 seconds [ 423.771992][T10319] mkiss: ax0: crc mode is auto. [ 424.251183][ T30] audit: type=1400 audit(1757851525.579:633): avc: denied { wake_alarm } for pid=10323 comm="syz.0.1195" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 424.726909][ T30] audit: type=1400 audit(1757851526.052:634): avc: denied { ioctl } for pid=10323 comm="syz.0.1195" path="socket:[27976]" dev="sockfs" ino=27976 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 425.094964][ T30] audit: type=1400 audit(1757851526.052:635): avc: denied { accept } for pid=10323 comm="syz.0.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 426.095905][ T5855] Bluetooth: hci5: command 0x0405 tx timeout [ 427.200582][T10330] sp0: Synchronizing with TNC [ 427.296363][T10335] [U] [ 428.905546][ T30] audit: type=1400 audit(1757851530.514:636): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 429.039477][T10340] lo speed is unknown, defaulting to 1000 [ 429.340154][T10342] can0: slcan on ttyS3. [ 429.348100][T10342] loop7: detected capacity change from 0 to 7 [ 429.847936][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 429.857144][ C1] buffer_io_error: 23 callbacks suppressed [ 429.857159][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 429.876064][T10340] lo speed is unknown, defaulting to 1000 [ 429.935609][T10344] Invalid logical block size (6) [ 429.946191][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 429.955354][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 429.963455][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 429.972831][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 429.980942][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 429.990041][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 429.999655][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 430.008797][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 430.019195][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 430.028318][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 430.036470][T10339] can0 (unregistered): slcan off ttyS3. [ 430.042928][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 430.052136][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 430.060018][T10342] ldm_validate_partition_table(): Disk read failed. [ 430.087835][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 430.097001][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 430.105590][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 430.114715][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 430.124476][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 430.133612][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 430.141594][T10342] Dev loop7: unable to read RDB block 0 [ 430.150489][T10342] loop7: unable to read partition table [ 430.156323][T10342] loop7: partition table beyond EOD, truncated [ 430.162517][T10342] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 434.618195][T10367] syz.3.1202 (10367): drop_caches: 2 [ 435.631186][T10367] syz.3.1202 (10367): drop_caches: 2 [ 435.833370][T10361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1201'. [ 436.107348][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 436.113649][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.283090][T10361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1201'. [ 436.929153][T10371] fuse: Bad value for 'rootmode' [ 437.507228][ T30] audit: type=1400 audit(1757851539.531:637): avc: denied { ioctl } for pid=10369 comm="syz.5.1204" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 437.678736][T10370] net veth1_virt_wifi : renamed from virt_wifi0 [ 438.355029][ T30] audit: type=1400 audit(1757851540.392:638): avc: denied { ioctl } for pid=10383 comm="syz.5.1205" path="socket:[28304]" dev="sockfs" ino=28304 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 439.413222][T10378] bridge0: port 1(batadv0) entered blocking state [ 439.471065][T10378] bridge0: port 1(batadv0) entered disabled state [ 439.577339][T10378] batadv0: entered allmulticast mode [ 440.463309][T10378] batadv0: entered promiscuous mode [ 440.488878][ T6169] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 440.498320][ T6169] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 440.604930][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 442.102974][T10393] batadv0: left allmulticast mode [ 442.127302][T10393] batadv0: left promiscuous mode [ 442.132415][T10393] bridge0: port 4(batadv0) entered disabled state [ 442.222490][ T30] audit: type=1326 audit(1757851544.486:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3958eba9 code=0x7ffc0000 [ 442.604187][T10393] dummy0: left allmulticast mode [ 442.641547][ T30] audit: type=1326 audit(1757851544.486:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3958eba9 code=0x7ffc0000 [ 442.689283][T10393] bridge0: port 3(dummy0) entered disabled state [ 442.890279][T10393] bridge_slave_1: left allmulticast mode [ 442.955642][T10393] bridge_slave_1: left promiscuous mode [ 442.961312][T10393] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.974957][ T30] audit: type=1326 audit(1757851544.528:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7feb3958eba9 code=0x7ffc0000 [ 443.119665][ T30] audit: type=1326 audit(1757851544.528:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3958eba9 code=0x7ffc0000 [ 443.623137][T10393] bridge_slave_0: left allmulticast mode [ 443.628776][T10393] bridge_slave_0: left promiscuous mode [ 443.758606][T10393] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.862093][ T30] audit: type=1326 audit(1757851544.581:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3958eba9 code=0x7ffc0000 [ 444.046067][ T942] IPVS: starting estimator thread 0... [ 444.146406][ T30] audit: type=1326 audit(1757851544.675:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7feb3958eba9 code=0x7ffc0000 [ 444.187466][T10405] IPVS: using max 44 ests per chain, 105600 per kthread [ 444.454431][ T30] audit: type=1326 audit(1757851544.675:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3958eba9 code=0x7ffc0000 [ 444.805331][ T30] audit: type=1326 audit(1757851544.675:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3958eba9 code=0x7ffc0000 [ 445.244731][T10411] Invalid logical block size (511) [ 445.252784][ T30] audit: type=1326 audit(1757851544.675:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb3958eba9 code=0x7ffc0000 [ 445.899431][ T30] audit: type=1326 audit(1757851544.675:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3958eba9 code=0x7ffc0000 [ 446.042249][ T5908] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 446.283998][ T30] audit: type=1326 audit(1757851544.675:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb3958eba9 code=0x7ffc0000 [ 446.338003][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 446.394671][ T5908] usb 6-1: too many configurations: 188, using maximum allowed: 8 [ 446.823796][ T5908] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.074195][ T5855] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 447.093823][ T5855] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 447.102316][ T5855] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 447.112963][ T5855] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 447.124137][ T5855] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 447.258012][T10421] lo speed is unknown, defaulting to 1000 [ 447.323907][ T5908] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.519607][T10421] lo speed is unknown, defaulting to 1000 [ 449.112206][ T5855] Bluetooth: hci6: command tx timeout [ 449.557590][T10340] syz_tun (unregistering): left allmulticast mode [ 450.964051][ T6169] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.090665][ T5855] Bluetooth: hci6: command tx timeout [ 451.322661][ T55] block nbd0: Possible stuck request ffff888026f671c0: control (read@0,1024B). Runtime 270 seconds [ 451.333486][ T55] block nbd0: Possible stuck request ffff888026f67380: control (read@1024,1024B). Runtime 270 seconds [ 451.344470][ T55] block nbd0: Possible stuck request ffff888026f67540: control (read@2048,1024B). Runtime 270 seconds [ 451.812771][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 451.812786][ T30] audit: type=1326 audit(1757851554.564:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 451.956542][T10427] pim6reg: entered allmulticast mode [ 452.021664][ T5908] usb 6-1: unable to read config index 2 descriptor/all [ 452.081510][ T5908] usb 6-1: can't read configurations, error -71 [ 452.303873][ T30] audit: type=1326 audit(1757851554.564:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 452.372752][T10433] syz.0.1216 (10433): drop_caches: 2 [ 452.450108][T10433] syz.0.1216 (10433): drop_caches: 2 [ 452.634139][ T30] audit: type=1326 audit(1757851554.564:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 453.056463][T10435] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 453.063668][T10435] overlayfs: failed to set xattr on upper [ 453.069360][T10435] overlayfs: ...falling back to redirect_dir=nofollow. [ 453.076254][T10435] overlayfs: ...falling back to index=off. [ 453.082086][T10435] overlayfs: ...falling back to uuid=null. [ 453.139278][ T5855] Bluetooth: hci6: command tx timeout [ 453.178070][T10438] /dev/sg0: Can't lookup blockdev [ 453.621722][ T30] audit: type=1326 audit(1757851554.564:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 453.645487][ T30] audit: type=1326 audit(1757851554.564:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 453.670309][ T30] audit: type=1326 audit(1757851554.564:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 453.693967][ T30] audit: type=1326 audit(1757851554.564:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 453.729307][ T6169] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.167567][ T30] audit: type=1326 audit(1757851554.564:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 454.263159][T10426] pim6reg: left allmulticast mode [ 454.511056][ T30] audit: type=1326 audit(1757851554.564:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 454.834377][ T30] audit: type=1326 audit(1757851554.564:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10426 comm="syz.3.1214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01618eba9 code=0x7ffc0000 [ 454.996321][ T942] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 455.076957][ T5855] Bluetooth: hci6: command tx timeout [ 455.368355][ T942] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 455.425176][ T942] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 456.207552][ T942] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 456.228077][ T6169] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.291731][ T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.445639][T10446] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 456.475734][ T942] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 458.011002][T10462] fuse: Unknown parameter '.+Hu!/W׿9/{>0' [ 458.086189][T10461] geneve2: entered promiscuous mode [ 459.489587][T10472] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 460.116117][T10421] chnl_net:caif_netlink_parms(): no params data found [ 463.956509][ T48] usb 1-1: USB disconnect, device number 19 [ 466.454567][T10506] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 466.476662][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 467.304523][T10509] tmpfs: Unknown parameter '0x0000000000000005' [ 468.389458][ T5855] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 468.584511][T10516] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1227'. [ 469.133908][ T6169] bond0 (unregistering): Released all slaves [ 469.360965][ T48] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 469.639822][ T48] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 469.732429][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.842958][ T48] usb 6-1: config 0 descriptor?? [ 470.560933][T10515] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1228'. [ 470.664273][ T48] usb 6-1: Cannot set autoneg [ 470.833004][ T48] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 471.000279][ T48] usb 6-1: USB disconnect, device number 4 [ 471.086755][T10421] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.093884][T10421] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.264819][T10421] bridge_slave_0: entered allmulticast mode [ 471.373603][T10421] bridge_slave_0: entered promiscuous mode [ 472.268736][T10421] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.400803][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.462244][T10421] bridge_slave_1: entered allmulticast mode [ 472.558612][T10421] bridge_slave_1: entered promiscuous mode [ 474.061214][T10421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.415916][T10421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.520967][T10549] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.143193][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 477.812057][T10566] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 478.793546][T10577] block nbd3: Attempted send on invalid socket [ 479.000484][T10577] blk_print_req_error: 5 callbacks suppressed [ 479.000519][T10577] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 479.049958][T10577] block nbd3: Attempted send on invalid socket [ 479.056158][T10577] I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 479.065734][T10577] Mount JFS Failure: -5 [ 479.984130][ T55] block nbd0: Possible stuck request ffff888026f671c0: control (read@0,1024B). Runtime 300 seconds [ 479.994925][ T55] block nbd0: Possible stuck request ffff888026f67380: control (read@1024,1024B). Runtime 300 seconds [ 480.005955][ T55] block nbd0: Possible stuck request ffff888026f67540: control (read@2048,1024B). Runtime 300 seconds [ 481.107113][ T6169] hsr_slave_0: left promiscuous mode [ 481.191848][ T10] usb 1-1: device descriptor read/64, error -110 [ 481.220430][ T6169] hsr_slave_1: left promiscuous mode [ 481.563118][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 481.610853][ T6169] veth1_macvtap: left promiscuous mode [ 481.706424][ T6169] veth0_macvtap: left promiscuous mode [ 481.764951][ T6169] veth1_vlan: left promiscuous mode [ 481.770381][ T6169] veth0_vlan: left promiscuous mode [ 481.820608][ T10] usb 1-1: device descriptor read/64, error -32 [ 481.925454][ T10] usb usb1-port1: attempt power cycle [ 481.953930][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 482.306481][ T10] raw-gadget.0 gadget.0: failed to queue resume event [ 482.458659][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 482.563804][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 482.583590][ T10] usb 1-1: device descriptor read/8, error -32 [ 482.696942][ T10] raw-gadget.0 gadget.0: failed to queue suspend event [ 482.772851][ T10] raw-gadget.0 gadget.0: failed to queue reset event [ 482.915972][ T10] raw-gadget.0 gadget.0: failed to queue resume event [ 483.030441][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 483.192413][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 483.230297][ T10] usb 1-1: device descriptor read/8, error -32 [ 483.336458][ T10] raw-gadget.0 gadget.0: failed to queue suspend event [ 483.401824][ T10] usb usb1-port1: unable to enumerate USB device [ 483.643940][ T942] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 483.948569][ T942] usb 2-1: Using ep0 maxpacket: 8 [ 484.012347][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 484.119744][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 484.242103][ T942] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 484.335034][ T942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 484.466824][ T942] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 484.577287][ T942] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 484.681373][ T942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.812454][ T942] usb 2-1: config 0 descriptor?? [ 484.877432][T10580] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 487.336678][T10595] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1243'. [ 494.618155][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.624496][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.090666][ T31] INFO: task syz.2.1099:9873 blocked for more than 144 seconds. [ 500.098316][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 500.252513][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.261198][ T31] task:syz.2.1099 state:D stack:25592 pid:9873 tgid:9871 ppid:5846 task_flags:0x400140 flags:0x00004004 [ 500.538887][ T31] Call Trace: [ 500.542200][ T31] [ 500.605219][ T31] __schedule+0x1190/0x5de0 [ 500.609772][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 500.721054][ T31] ? __pfx___schedule+0x10/0x10 [ 500.725953][ T31] ? find_held_lock+0x2b/0x80 [ 500.804949][ T31] ? schedule+0x2d7/0x3a0 [ 500.809324][ T31] ? sync_bdevs+0xfd/0x360 [ 500.813732][ T31] schedule+0xe7/0x3a0 [ 500.976615][ T31] schedule_preempt_disabled+0x13/0x30 [ 500.982113][ T31] __mutex_lock+0x81b/0x1060 [ 501.071581][ T31] ? sync_bdevs+0xfd/0x360 [ 501.076033][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 501.081064][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 501.215012][ T31] ? iput+0xd3/0x880 [ 501.218951][ T31] ? sync_bdevs+0xfd/0x360 [ 501.223359][ T31] sync_bdevs+0xfd/0x360 [ 501.361110][ T31] ksys_sync+0xb2/0x150 [ 501.365301][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 501.481278][ T31] ? rcu_is_watching+0x12/0xc0 [ 501.486083][ T31] ? do_syscall_64+0x91/0x4e0 [ 501.586124][ T31] __do_sys_sync+0xe/0x20 [ 501.590490][ T31] do_syscall_64+0xcd/0x4e0 [ 501.595001][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.747994][ T31] RIP: 0033:0x7fd1bed8eba9 [ 501.752446][ T31] RSP: 002b:00007fd1bfbb8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 501.900410][ T31] RAX: ffffffffffffffda RBX: 00007fd1befd5fa0 RCX: 00007fd1bed8eba9 [ 501.908414][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 502.014720][ T31] RBP: 00007fd1befd5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 502.022720][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.114555][ T31] R13: 00007fd1befd6038 R14: 00007fd1befd5fa0 R15: 00007ffd75e05438 [ 502.186078][ T31] [ 502.217070][ T31] INFO: task syz.2.1099:9874 blocked for more than 146 seconds. [ 502.295952][ T31] Not tainted syzkaller #0 [ 502.332836][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.427712][ T31] task:syz.2.1099 state:D stack:29112 pid:9874 tgid:9871 ppid:5846 task_flags:0x400040 flags:0x00004004 [ 502.548161][ T31] Call Trace: [ 502.551469][ T31] [ 502.554395][ T31] __schedule+0x1190/0x5de0 [ 502.662615][ T31] ? __pfx___schedule+0x10/0x10 [ 502.667507][ T31] ? find_held_lock+0x2b/0x80 [ 502.757926][ T31] ? schedule+0x2d7/0x3a0 [ 502.762297][ T31] ? sync_bdevs+0xfd/0x360 [ 502.824417][ T31] schedule+0xe7/0x3a0 [ 502.828521][ T31] schedule_preempt_disabled+0x13/0x30 [ 502.932478][ T31] __mutex_lock+0x81b/0x1060 [ 502.937109][ T31] ? sync_bdevs+0xfd/0x360 [ 503.018259][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 503.023330][ T31] ? _atomic_dec_and_lock+0xa2/0x120 [ 503.108243][ T31] ? iput+0xd3/0x880 [ 503.162773][ T31] ? sync_bdevs+0xfd/0x360 [ 503.167224][ T31] sync_bdevs+0xfd/0x360 [ 503.253271][ T31] ksys_sync+0xb2/0x150 [ 503.257560][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 503.329352][ T31] ? rcu_is_watching+0x12/0xc0 [ 503.334148][ T31] ? do_syscall_64+0x91/0x4e0 [ 503.428024][ T31] __do_sys_sync+0xe/0x20 [ 503.432392][ T31] do_syscall_64+0xcd/0x4e0 [ 503.513471][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.519401][ T31] RIP: 0033:0x7fd1bed8eba9 [ 503.615204][ T31] RSP: 002b:00007fd1bfb97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 503.623647][ T31] RAX: ffffffffffffffda RBX: 00007fd1befd6090 RCX: 00007fd1bed8eba9 [ 503.771303][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 503.853159][ T31] RBP: 00007fd1befd6090 R08: 0000000000000000 R09: 0000000000000000 [ 503.861157][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.999279][ T31] R13: 00007fd1befd6128 R14: 00007fd1befd6090 R15: 00007ffd75e05438 [ 504.081906][ T31] [ 504.104504][ T31] [ 504.104504][ T31] Showing all locks held in the system: [ 504.233970][ T31] 1 lock held by khungtaskd/31: [ 504.282488][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 504.386972][ T31] 2 locks held by kworker/u8:3/54: [ 504.392108][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 504.529463][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 504.538215][ T31] 6 locks held by kworker/1:2/942: [ 504.663266][ T31] #0: ffff8881436f3d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 504.777148][ T31] #1: ffffc90003bc7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 504.891463][ T31] #2: ffff888029deb198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 504.900390][ T31] #3: ffff88802b749198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 505.063083][ T31] #4: ffff88802a9d8160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 505.139113][ T31] #5: ffffffff908223e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 505.262960][ T31] 1 lock held by udevd/5220: [ 505.267570][ T31] 2 locks held by dhcpcd/5515: [ 505.272315][ T31] #0: ffff88805cc2a6d8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 505.472489][ T31] #1: ffffffff90384fc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x18f/0x1f0 [ 505.481407][ T31] 2 locks held by getty/5610: [ 505.624910][ T31] #0: ffff88814cc710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 505.710695][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 505.815527][ T31] 1 lock held by udevd/5848: [ 505.820137][ T31] #0: ffff888141b86358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 505.958340][ T31] 3 locks held by udevd/5856: [ 505.963036][ T31] 1 lock held by udevd/5863: [ 505.967623][ T31] 3 locks held by kworker/0:6/5933: [ 506.110745][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 506.215487][ T31] #1: ffffc90003dffd10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 506.339354][ T31] #2: ffffffff908223e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 506.472844][ T31] 3 locks held by kworker/u8:10/6155: [ 506.478240][ T31] #0: ffff888022ecf948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 506.617680][ T31] #1: ffffc90005767d10 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 506.767841][ T31] #2: ffffffff90384fc8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xcf/0x640 [ 506.873214][ T31] 3 locks held by kworker/u8:13/6162: [ 506.878609][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 507.015663][ T31] #1: ffffc90005837d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 507.129990][ T31] #2: ffffffff90384fc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 507.139086][ T31] 5 locks held by kworker/u8:16/6169: [ 507.263330][ T31] #0: ffff88801c6f4148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 507.358569][ T31] #1: ffffc90005887d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 507.453679][ T31] #2: ffffffff9036ecd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 507.463037][ T31] #3: ffffffff90384fc8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0 [ 507.628544][ T31] #4: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 507.730082][ T31] 1 lock held by udevd/6333: [ 507.734692][ T31] 1 lock held by udevd/6349: [ 507.739266][ T31] 4 locks held by udevd/6361: [ 507.872956][ T31] 1 lock held by syz.2.1099/9873: [ 507.878008][ T31] #0: ffff888141b86358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 508.017061][ T31] 1 lock held by syz.2.1099/9874: [ 508.022104][ T31] #0: ffff888141b86358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 508.149214][ T31] 1 lock held by syz-executor/10421: [ 508.154523][ T31] #0: ffffffff90384fc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 508.282665][ T31] 2 locks held by syz.0.1231/10539: [ 508.287889][ T31] #0: ffffffff908223e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x166/0x580 [ 508.435072][ T31] #1: ffffffff90384fc8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_rfkill_set_block+0x29/0x50 [ 508.539909][ T31] 1 lock held by syz.5.1233/10556: [ 508.545042][ T31] #0: ffffffff90384fc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 508.635297][ T55] block nbd0: Possible stuck request ffff888026f671c0: control (read@0,1024B). Runtime 330 seconds [ 508.646084][ T55] block nbd0: Possible stuck request ffff888026f67380: control (read@1024,1024B). Runtime 330 seconds [ 508.657088][ T55] block nbd0: Possible stuck request ffff888026f67540: control (read@2048,1024B). Runtime 330 seconds [ 508.671386][ T31] 1 lock held by syz.5.1233/10557: [ 508.768417][ T31] #0: ffffffff90384fc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 508.777519][ T31] 1 lock held by syz.3.1241/10589: [ 508.949350][ T31] #0: ffffffff90384fc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 508.958798][ T31] 1 lock held by syz.1.1243/10595: [ 509.082819][ T31] #0: ffffffff90384fc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 509.091916][ T31] 2 locks held by syz-executor/10598: [ 509.238084][ T31] #0: ffff888066f12118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 509.321054][ T31] #1: ffffffff908223e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 509.406611][ T31] 2 locks held by syz-executor/10600: [ 509.411999][ T31] #0: ffff888066f12918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 509.551094][ T31] #1: ffffffff908223e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 509.654582][ T31] [ 509.656931][ T31] ============================================= [ 509.656931][ T31] [ 509.797185][ T31] NMI backtrace for cpu 1 [ 509.797204][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 509.797224][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 509.797235][ T31] Call Trace: [ 509.797240][ T31] [ 509.797247][ T31] dump_stack_lvl+0x116/0x1f0 [ 509.797273][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 509.797288][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 509.797309][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 509.797337][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 509.797357][ T31] watchdog+0xf0e/0x1260 [ 509.797381][ T31] ? __pfx_watchdog+0x10/0x10 [ 509.797395][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 509.797417][ T31] ? __kthread_parkme+0x19e/0x250 [ 509.797443][ T31] ? __pfx_watchdog+0x10/0x10 [ 509.797462][ T31] kthread+0x3c2/0x780 [ 509.797479][ T31] ? __pfx_kthread+0x10/0x10 [ 509.797498][ T31] ? rcu_is_watching+0x12/0xc0 [ 509.797519][ T31] ? __pfx_kthread+0x10/0x10 [ 509.797538][ T31] ret_from_fork+0x56a/0x730 [ 509.797553][ T31] ? __pfx_kthread+0x10/0x10 [ 509.797570][ T31] ret_from_fork_asm+0x1a/0x30 [ 509.797602][ T31] [ 509.797608][ T31] Sending NMI from CPU 1 to CPUs 0: [ 509.918672][ C0] NMI backtrace for cpu 0 [ 509.918686][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 509.918701][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 509.918710][ C0] Workqueue: events_unbound toggle_allocation_gate [ 509.918729][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 509.918749][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 5b 5f 94 f5 cc [ 509.918761][ C0] RSP: 0018:ffffc900001278f0 EFLAGS: 00000093 [ 509.918771][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff815e929b [ 509.918779][ C0] RDX: ffff88801e2a8000 RSI: 0000000000000000 RDI: 0000000000000005 [ 509.918787][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 509.918795][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff8e762f80 [ 509.918802][ C0] R13: ffff88801b870000 R14: 0000000000000001 R15: 8000000000000063 [ 509.918810][ C0] FS: 0000000000000000(0000) GS:ffff8881246b4000(0000) knlGS:0000000000000000 [ 509.918823][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.918832][ C0] CR2: 000055a794d16b40 CR3: 000000001b86a000 CR4: 00000000003526f0 [ 509.918840][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 509.918847][ C0] DR3: 00000000000032e7 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 509.918855][ C0] Call Trace: [ 509.918860][ C0] [ 509.918864][ C0] switch_ldt+0xab/0x1c0 [ 509.918879][ C0] use_temporary_mm+0x8c/0x150 [ 509.918897][ C0] ? kmem_cache_alloc_bulk_noprof+0x175/0xbc0 [ 509.918910][ C0] __text_poke+0x3ac/0xb70 [ 509.918924][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 509.918940][ C0] ? __pfx___text_poke+0x10/0x10 [ 509.918953][ C0] ? kmem_cache_alloc_bulk_noprof+0x175/0xbc0 [ 509.918973][ C0] smp_text_poke_batch_finish+0x4f1/0xdb0 [ 509.918992][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 509.919010][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 509.919031][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 509.919047][ C0] jump_label_update+0x376/0x550 [ 509.919067][ C0] static_key_disable_cpuslocked+0x158/0x1c0 [ 509.919086][ C0] static_key_disable+0x1a/0x20 [ 509.919103][ C0] toggle_allocation_gate+0x145/0x280