last executing test programs: 10m2.412699687s ago: executing program 0 (id=1823): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d05, &(0x7f0000000900)) 10m2.316975911s ago: executing program 0 (id=1827): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x2, 0x12, r0, 0x8000000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000000)) 10m2.199338456s ago: executing program 0 (id=1829): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x101) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 10m2.119241643s ago: executing program 0 (id=1830): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 10m2.026228764s ago: executing program 0 (id=1833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 10m1.093831414s ago: executing program 0 (id=1845): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r1}, 0xc) 10m0.84782501s ago: executing program 32 (id=1845): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r1}, 0xc) 9m13.972980207s ago: executing program 5 (id=2455): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9m13.871661687s ago: executing program 5 (id=2456): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x8, 0x9, 0x9, 0x1}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 9m13.831976406s ago: executing program 5 (id=2457): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 9m13.67925904s ago: executing program 5 (id=2458): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xee) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xe7}}}}}}, 0x0) 9m13.647837608s ago: executing program 5 (id=2459): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="35fc3a12f45d48e3120ec76bfe8d5ba7449af3c59c81f374329851daf843e48e30428c737ad0d7b957d1ab7dba23ca87748421", 0x33) 9m13.605667676s ago: executing program 5 (id=2460): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m58.336308137s ago: executing program 33 (id=2460): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m13.832560354s ago: executing program 3 (id=4375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000082, 0x0, 0x8007f}]}) 6m13.552569579s ago: executing program 3 (id=4379): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6m13.437632059s ago: executing program 3 (id=4381): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xaa3a6000) prctl$PR_GET_DUMPABLE(0x3) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 6m13.15386409s ago: executing program 3 (id=4389): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x121c040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000280)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 6m13.092019754s ago: executing program 3 (id=4391): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 6m12.310583453s ago: executing program 3 (id=4404): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001180)=ANY=[@ANYRES32=0x0, @ANYBLOB="090008000102"], 0x18) 6m12.134526034s ago: executing program 34 (id=4404): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001180)=ANY=[@ANYRES32=0x0, @ANYBLOB="090008000102"], 0x18) 4m24.095269758s ago: executing program 1 (id=5488): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r1, 0x200004) write$usbip_server(r1, &(0x7f0000002bc0)=ANY=[], 0x30) sendfile(r0, r1, 0x0, 0x80001d00c0d1) 4m23.022587678s ago: executing program 1 (id=5504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)=@vmx={0x0, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000700)=@vmx={0x0, 0x0, 0x2080, {0xffffffffffffffff, 0xffffffffffffffff}}) 4m22.747163495s ago: executing program 1 (id=5512): setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0) setitimer(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f00000001c0)=@pppol2tp, 0x80, 0x0, 0x0, &(0x7f0000000d80)=""/135, 0x87}, 0x9}, {{&(0x7f0000000e40)=@caif, 0x80, &(0x7f0000002780)=[{&(0x7f0000000ec0)=""/74, 0x4a}, {&(0x7f0000000f40)=""/93, 0x5d}, {&(0x7f0000000fc0)=""/231, 0xe7}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/219, 0xdb}], 0x5, &(0x7f0000002800)=""/251, 0xfb}, 0x6}], 0x2, 0x40, &(0x7f0000002980)={0x0, 0x3938700}) r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) 4m22.576137345s ago: executing program 1 (id=5515): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 4m22.452197399s ago: executing program 1 (id=5518): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='n', 0x1}], 0x1, 0x3) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) 4m10.768949952s ago: executing program 1 (id=5628): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x4, "650000006e0000000100", 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) close_range(r0, 0xffffffffffffffff, 0x0) 4m10.454205473s ago: executing program 35 (id=5628): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000300)={0x4, "650000006e0000000100", 0xffffffffffffffff}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) close_range(r0, 0xffffffffffffffff, 0x0) 23.965037055s ago: executing program 4 (id=7790): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 23.578854066s ago: executing program 4 (id=7792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffee, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sendmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)="c2", 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) 23.514945025s ago: executing program 4 (id=7794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000440)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) 22.594329778s ago: executing program 4 (id=7805): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) close(r0) 22.347018898s ago: executing program 4 (id=7809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x48040) 20.943123973s ago: executing program 4 (id=7818): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x6, 0xd4, 0x8, 0x63, 0x200002000001, 0xf2f, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xc], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000001000/0x2000)=nil}) 20.649665684s ago: executing program 36 (id=7818): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x6, 0xd4, 0x8, 0x63, 0x200002000001, 0xf2f, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xc], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000001000/0x2000)=nil}) 4.735615262s ago: executing program 6 (id=7930): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001f4ff00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000780)=r4}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002e00), &(0x7f0000002e80), 0x10001, r5}, 0x38) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.135304763s ago: executing program 6 (id=7934): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x2, 0xffffffff80000202, 0x0, 0xfffd, 0x605, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x109081, 0x34) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x700}) 4.119624709s ago: executing program 2 (id=7936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 3.689180865s ago: executing program 2 (id=7940): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r2, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 3.636994058s ago: executing program 9 (id=7941): r0 = socket$inet(0xa, 0x2, 0x7) connect$inet(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) listen(r0, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}}) 3.629812106s ago: executing program 8 (id=7943): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r2, &(0x7f0000000400)=[{&(0x7f0000001200)=""/4093, 0xffd}, {&(0x7f0000003200)=""/4099, 0x1003}], 0x2, 0x0, 0x0, 0x1) 3.368470964s ago: executing program 9 (id=7946): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x1, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0x8ea1, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0x8001, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0x4, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x9441, 0x9, 0x1, 0x8001, 0x6, 0xb0a, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7ff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x4, 0xf, 0x5, 0x0, 0x981, 0x6, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x1000, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x4, 0xfffff801, 0x1, 0x1, 0x8, 0x68, 0x200, 0x7], [0x3e25818a, 0x4d, 0xffff, 0x9a1, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0xfffffff8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8006, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7c, 0x3, 0x8, 0x3, 0x101, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x4], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0xe5, 0x8a5, 0x1bb4, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x32, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) 3.135616254s ago: executing program 9 (id=7947): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) 2.946500351s ago: executing program 2 (id=7948): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xfdb, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendto$inet(r0, &(0x7f00000002c0)="ab", 0xfffffffffffffdd8, 0x4008825, 0x0, 0x0) 2.931512286s ago: executing program 9 (id=7949): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @fda={0x66646185, 0x5, 0x0, 0x23}, @fda={0x66646185, 0x9, 0x1, 0x25}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}, 0x1040}], 0x0, 0x0, 0x0}) 2.729468594s ago: executing program 9 (id=7950): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000014c0)) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000300)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001240)={0x34, &(0x7f0000001040)={0x20, 0x5, 0x2, "a515"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10054, 0x0, 0x0) 2.549633593s ago: executing program 8 (id=7952): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 2.494049765s ago: executing program 7 (id=7953): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x3, 0x0, 0x4000000000804, 0xfffffffd, 0x6, {0x2, 0x8000000000000000, 0x8, 0x100000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x200c, 0xa000, 0xe44, r2, r3, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9ff5010018"], &(0x7f0000000340)=""/142, 0x1a, 0x8e, 0x1}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 2.14354465s ago: executing program 2 (id=7954): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) fsmount(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2.058428825s ago: executing program 8 (id=7955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'hsr0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 2.04940828s ago: executing program 7 (id=7956): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK, @TCA_FLOWER_KEY_SCTP_DST_MASK, @TCA_FLOWER_KEY_IP_TTL_MASK={0x0, 0x4c, 0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE_MASK, @TCA_FLOWER_KEY_ARP_THA={0x0, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @TCA_FLOWER_KEY_CT_ZONE={0x0, 0x5d, 0x4}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x0, 0x5c, 0x7f}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x0, 0xf, [0xffffff00, 0xffffff00, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0xf1}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0xf, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.856853336s ago: executing program 8 (id=7957): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400a1150120000010200010902200001010080320904000002000000000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/1-1/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='auto', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/1-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0', 0x1) nanosleep(&(0x7f0000000300)={0x1}, 0x0) write(r0, &(0x7f0000000300)='on', 0x2) 1.80247602s ago: executing program 7 (id=7958): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x255}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x10002, 0x27e}, &(0x7f0000001240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x988a, 0x5420, 0x0, 0x10000003, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5240, 0x20, 0x0, 0x146}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd15, 0x10, 0x1, 0x263}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0x1, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x0, 0x5, 0x0, 0x0}}, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r9, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x7, 0x0, &(0x7f0000000340)=0x37}) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x19, 0x2000004, 0x80010, r8, 0x20000000) ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000040)) 1.590374404s ago: executing program 7 (id=7959): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000a00)=""/87, &(0x7f0000000d00)=""/65, 0x4000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000005c0)=0x200000000) 1.529879733s ago: executing program 7 (id=7960): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x4b9, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), 0x0, 0x0) 1.139550291s ago: executing program 2 (id=7961): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x5e}, 0x1, 0x0, 0x0, 0x20044051}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x38a4, 0x2000000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) 853.749444ms ago: executing program 6 (id=7962): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='stacktrace\n', 0xb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000800)={0x1, 0x0, [{0x400000b0}]}) 488.151201ms ago: executing program 7 (id=7963): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) unshare(0x26020480) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x287, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 454.688311ms ago: executing program 6 (id=7964): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 346.064146ms ago: executing program 9 (id=7965): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) bind$alg(r0, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x41015500, &(0x7f00000000c0)=0x18) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 217.600407ms ago: executing program 8 (id=7966): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r2) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x40) close(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 145.207386ms ago: executing program 6 (id=7967): socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 114.692868ms ago: executing program 2 (id=7968): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x2, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 95.010715ms ago: executing program 8 (id=7969): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x7, 0x1, 0xfffe}) utimensat(r0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=7970): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtclass={0x484, 0x28, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {0x4, 0xc}, {0xc, 0x1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xf7}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_cbq={{0x8}, {0x428, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x2, 0x8000, 0x0, 0x2, 0xfffffffb}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x3, 0xffff}, 0x6, 0x33247944}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xcc, 0x5, 0x10001, 0x78, 0x8, 0x80000001, 0x4, 0x3, 0x8000, 0x9, 0x0, 0x8, 0xffffffff, 0xae04, 0x41, 0x2, 0x2, 0x8, 0xffff0001, 0x81, 0x8, 0xe, 0x5, 0x5, 0x200, 0x8, 0xff, 0x9, 0x8, 0x5, 0x1, 0x81, 0x685f, 0xb0, 0x8, 0x101, 0x7, 0x1, 0x2154, 0x8, 0x2, 0xffff1905, 0x401, 0xebbe, 0xc, 0x7fffffff, 0x6, 0x8, 0x3, 0x2, 0x6, 0x3, 0x0, 0x10000, 0x401, 0x7ff, 0xf, 0xa000, 0x5, 0x4, 0x200, 0xd, 0x2, 0x5c, 0x63, 0x28649b59, 0x3, 0x6, 0x0, 0x9, 0x6, 0xfffffffb, 0x9, 0x7, 0xffffff1d, 0x8001, 0x7, 0x1, 0x2, 0xfffffffa, 0xa62e, 0x7, 0x9, 0xfffff58f, 0x8, 0x3, 0x9, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x23, 0x6, 0x1, 0x1, 0x100, 0xfffffbff, 0x4, 0x800, 0x7, 0xae36, 0x0, 0x3, 0x1, 0x8, 0x13fb95b7, 0xe816, 0xfffffffe, 0x7, 0x3, 0x6d82, 0x0, 0x19, 0xffffff4f, 0x7, 0x0, 0x1000, 0x0, 0x6, 0x10001, 0x80, 0x101, 0x80, 0x7, 0x0, 0x10001, 0x7, 0x5, 0xc, 0x12000, 0x486, 0x0, 0xffffffff, 0x6, 0x2, 0x80, 0x4, 0x8001, 0xffffff15, 0x6, 0x7, 0x6, 0x0, 0x5, 0x2, 0x10000, 0x2, 0x0, 0x9, 0x682, 0x8000, 0x4, 0x5, 0xd62e, 0x200, 0x4, 0x5, 0x0, 0x85, 0x3, 0x8, 0x6, 0x6, 0x101, 0x10001, 0xfffffff7, 0x53, 0x7fffffff, 0xff, 0x9, 0x9, 0x8, 0x8, 0x8c, 0x9, 0xe0, 0x4, 0x3, 0x4, 0x100, 0xd, 0x80, 0x0, 0xffffff93, 0x7, 0x9, 0xf616, 0x3, 0x5, 0x0, 0x7, 0x5, 0x2, 0x10, 0x6, 0x4, 0x4, 0x5, 0x1, 0x400, 0x7ff, 0x6, 0x8, 0x2, 0x7, 0xff8, 0x4, 0x8, 0x3, 0xff, 0x3, 0x1, 0x639f, 0x9, 0x3f, 0x3, 0xd148, 0xf0, 0x834, 0x9, 0x92a, 0x1, 0x8000, 0x9, 0x4, 0x3, 0x1, 0x10, 0x7ff, 0xdd, 0x5, 0x9, 0xffff, 0xfea, 0x5, 0x9, 0x12, 0x2, 0x8, 0x7, 0x1, 0x9, 0xff, 0x6, 0x7fffffff, 0x9, 0x5, 0x9, 0x6, 0x7, 0xfffff9e5, 0x3, 0x6, 0x2]}]}}]}, 0x484}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) kernel console output (not intermixed with test programs): 673.088773][ T30] audit: type=1400 audit(1785437015.428:1304): avc: denied { write } for pid=5613 comm="syz-executor" name="1391" dev="tmpfs" ino=7282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 673.145124][T23782] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 673.192112][T23782] overlayfs: failed to set xattr on upper [ 673.229398][T23792] xt_hashlimit: size too large, truncated to 1048576 [ 673.236262][T23782] overlayfs: ...falling back to redirect_dir=nofollow. [ 673.259404][ T30] audit: type=1400 audit(1785437015.428:1305): avc: denied { write } for pid=5613 comm="syz-executor" name="1391" dev="tmpfs" ino=7282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 673.292789][T23782] overlayfs: ...falling back to index=off. [ 673.336819][T23782] overlayfs: ...falling back to uuid=null. [ 673.377705][T23782] overlayfs: ...falling back to xino=off. [ 673.407867][T23782] overlayfs: maximum fs stacking depth exceeded [ 673.429501][ T30] audit: type=1400 audit(1785437015.428:1306): avc: denied { write } for pid=5613 comm="syz-executor" name="1391" dev="tmpfs" ino=7282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 673.456145][T23805] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6724'. [ 673.598169][ T30] audit: type=1400 audit(1785437015.428:1307): avc: denied { rmdir } for pid=5613 comm="syz-executor" name="1391" dev="tmpfs" ino=7282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 673.767620][ T30] audit: type=1400 audit(1785437015.758:1308): avc: denied { mounton } for pid=23777 comm="syz.4.6713" path="/bus" dev="hugetlbfs" ino=99512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 674.992450][T21138] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 675.156981][T21138] usb 9-1: Using ep0 maxpacket: 8 [ 675.177540][T21138] usb 9-1: unable to get BOS descriptor or descriptor too short [ 675.213993][T21138] usb 9-1: no configurations [ 675.230846][T21138] usb 9-1: can't read configurations, error -22 [ 675.705907][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6753'. [ 675.824492][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6753'. [ 676.081031][T23893] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6758'. [ 676.498790][T23912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.611034][T23915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6762'. [ 676.793746][T21138] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 676.977166][T21138] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.024866][T23928] binder: 23926:23928 ioctl 4018620d 0 returned -22 [ 677.038957][T21138] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.089265][T21138] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 677.125425][T23931] fuse: fd is not a fuse device [ 677.155344][T21138] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.232752][T21138] usb 9-1: config 0 descriptor?? [ 677.338623][T23941] binder: 23939:23941 ioctl c0306201 200000000640 returned -22 [ 677.571482][ T30] audit: type=1400 audit(1785437020.458:1309): avc: denied { sys_nice } for pid=23947 comm="syz.4.6778" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 677.707400][T21138] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 677.747915][T21138] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 677.781854][T21138] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 677.824327][T21138] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 677.860909][T21138] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 677.897481][T21138] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 677.929506][T21138] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 678.011995][T21138] cp2112 0003:10C4:EA90.0058: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 678.136191][T21138] cp2112 0003:10C4:EA90.0058: Part Number: 0x00 Device Version: 0x00 [ 678.381872][T23963] netlink: 'syz.7.6783': attribute type 1 has an invalid length. [ 678.448901][T23963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 678.516921][T23970] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 678.562461][T11332] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 678.606455][T23963] netlink: 'syz.7.6783': attribute type 10 has an invalid length. [ 678.636719][T23963] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6783'. [ 678.664983][T23975] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 678.677236][T23974] IPVS: stopping backup sync thread 23975 ... [ 678.685028][T23963] dummy0: entered promiscuous mode [ 678.695226][T21138] cp2112 0003:10C4:EA90.0058: error reading lock byte: -71 [ 678.736749][T21138] usb 9-1: USB disconnect, device number 12 [ 678.762494][T14034] bond3: (slave dummy0): link status up again after 0 ms [ 678.787266][T14034] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 678.836871][T14034] bond3: (slave dummy0): link status up again after 0 ms [ 678.896428][T14034] bond3: (slave dummy0): link status up again after 0 ms [ 678.922664][T14034] bond3: (slave dummy0): link status up again after 0 ms [ 678.958554][T14034] bond3: (slave dummy0): link status up again after 0 ms [ 678.982459][T11334] bond3: (slave dummy0): link status up again after 0 ms [ 679.002491][T11334] bond3: (slave dummy0): link status up again after 0 ms [ 679.022940][T11332] bond3: (slave dummy0): link status up again after 0 ms [ 679.147789][T23963] bond3: (slave dummy0): Removing an active aggregator [ 679.164046][T23963] bond3: (slave dummy0): Releasing backup interface [ 679.546820][T23986] netlink: 'syz.8.6791': attribute type 5 has an invalid length. [ 680.069631][T24007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6799'. [ 680.215180][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.223712][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 681.391052][T24055] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6815'. [ 681.473620][ T30] audit: type=1400 audit(1785437024.358:1310): avc: denied { write } for pid=24019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.788636][ T30] audit: type=1400 audit(1785437024.678:1311): avc: denied { write } for pid=24065 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 681.962440][T16046] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 682.801327][ T30] audit: type=1400 audit(1785437025.688:1312): avc: denied { write } for pid=24082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.008339][ T30] audit: type=1400 audit(1785437025.898:1313): avc: denied { write } for pid=24107 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 683.342782][T21138] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 683.535558][T21138] usb 7-1: Using ep0 maxpacket: 32 [ 683.587024][T21138] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 683.636491][T21138] usb 7-1: config 0 has no interface number 0 [ 683.669915][T21138] usb 7-1: config 0 interface 184 has no altsetting 0 [ 683.718131][T21138] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 683.780207][T21138] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.827226][T21138] usb 7-1: Product: syz [ 683.848996][T21138] usb 7-1: Manufacturer: syz [ 683.880662][T21138] usb 7-1: SerialNumber: syz [ 683.914202][T21138] usb 7-1: config 0 descriptor?? [ 684.192552][T16046] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 684.407684][T16046] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 684.444503][T16046] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.499121][T16046] usb 5-1: config 0 has no interfaces? [ 684.525078][T16046] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 684.564701][T16046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.599780][T16046] usb 5-1: config 0 descriptor?? [ 684.606916][T21138] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 684.657898][T21138] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 684.690270][T24156] overlayfs: failed to clone upperpath [ 684.892949][T16046] usb 5-1: USB disconnect, device number 85 [ 685.328675][T24178] fuse: fd is not a fuse device [ 685.340501][ T9949] rpcbind: server 127.0.0.1 not responding, timed out [ 685.472662][ T5719] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 685.518156][T21138] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 685.535135][T24187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6868'. [ 685.547480][T24182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.568326][T21138] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 685.583364][T24182] dummy0: left promiscuous mode [ 685.611272][T21138] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 685.621594][T24182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.669340][ T5719] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.684977][T21138] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 685.721003][ T5719] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 685.749105][T24182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.757885][T21138] usb 7-1: USB disconnect, device number 55 [ 685.778259][ T5719] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.808665][T24182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.830111][ T5719] usb 9-1: config 0 descriptor?? [ 685.848909][T24182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 685.923381][T24182] veth1_macvtap: left promiscuous mode [ 685.936665][T24182] veth0_macvtap: left promiscuous mode [ 685.943609][T24182] veth0_macvtap: entered promiscuous mode [ 685.950481][T24182] veth1_macvtap: entered promiscuous mode [ 685.960719][T24182] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 685.969642][T24182] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 685.982994][T24182] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 686.003844][T24182] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 686.065169][T24182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.087635][ T5719] usbhid 9-1:0.0: can't add hid device: -71 [ 686.107455][ T5719] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 686.135628][T24182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 686.150764][ T5719] usb 9-1: USB disconnect, device number 13 [ 686.175501][T24182] erspan0: entered promiscuous mode [ 686.204679][T24182] gretap0: entered promiscuous mode [ 686.250700][ T9949] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.257823][ T9949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.339071][ T9949] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.346204][ T9949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.472281][ T30] audit: type=1800 audit(1785437029.358:1314): pid=24210 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.6867" name="p_chmask" dev="configfs" ino=101046 res=0 errno=0 [ 686.514262][T11332] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.545915][T11332] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.583010][T11332] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.615372][T11332] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.661433][T11332] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.670295][ T5719] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 686.723479][T11332] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.737763][T24217] fuse: fd is not a fuse device [ 686.762242][T11332] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 686.807076][T11332] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.854497][ T5719] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.895381][ T5719] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 686.947067][ T5719] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.997323][ T5719] usb 9-1: config 0 descriptor?? [ 687.006647][ T30] audit: type=1400 audit(1785437029.898:1315): avc: denied { bind } for pid=24229 comm="syz.7.6878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 687.124496][ T30] audit: type=1400 audit(1785437029.928:1316): avc: denied { read } for pid=24229 comm="syz.7.6878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 687.480891][ T30] audit: type=1400 audit(1785437030.368:1317): avc: denied { read } for pid=24245 comm="syz.6.6882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 687.806454][T24254] netlink: 'syz.6.6886': attribute type 11 has an invalid length. [ 687.873539][ T5719] aiptek 9-1:0.0: Aiptek using 400 ms programming speed [ 687.939698][ T5719] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input91 [ 688.215158][T24264] fuse: fd is not a fuse device [ 688.579903][ C0] aiptek 9-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 688.588107][ T5719] usb 9-1: USB disconnect, device number 14 [ 688.746021][T24279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.053229][T24287] fuse: fd is not a fuse device [ 689.278094][ T30] audit: type=1400 audit(1785437032.168:1318): avc: denied { module_load } for pid=24291 comm="syz.8.6902" path="/sys/kernel/address_bits" dev="sysfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 689.514969][T24304] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.522238][T24304] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.768659][T24313] fuse: fd is not a fuse device [ 691.805071][T24304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.864353][T19335] Bluetooth: hci0: command 0x0406 tx timeout [ 692.902053][T24304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.197764][T24326] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 693.285606][T11334] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.334260][T24331] overlayfs: failed to clone upperpath [ 693.349033][T11334] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.405210][T11334] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.459498][T11334] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.523685][T11334] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.581469][T11334] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.715499][T11334] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.778297][T11334] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.886620][T24354] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6926'. [ 694.148037][ T9949] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 694.486308][T19335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 694.504554][T19335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 694.518556][T19335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 694.526408][T19335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 694.533989][T19335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 694.616132][ T9949] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 694.671916][T21138] libceph: connect (1)[c::]:6789 error -99 [ 694.716473][T21138] libceph: mon0 (1)[c::]:6789 connect error [ 694.770319][T24367] ceph: No mds server is up or the cluster is laggy [ 694.945704][ T9949] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 695.033184][T21138] libceph: connect (1)[c::]:6789 error -99 [ 695.064350][T21138] libceph: mon0 (1)[c::]:6789 connect error [ 695.326052][T24379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.396750][T24379] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.522544][T24384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6933'. [ 695.535347][T24379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.861251][T24379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.875121][T24390] overlayfs: invalid redirect ((null)) [ 695.948158][T24379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.043141][T24379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 696.084134][T24379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 696.134634][T24379] veth1_vlan: left promiscuous mode [ 696.148667][T24379] veth0_vlan: left promiscuous mode [ 696.162392][T24379] veth0_vlan: entered promiscuous mode [ 696.178550][T24379] veth1_vlan: entered promiscuous mode [ 696.198638][T24379] veth1_macvtap: left promiscuous mode [ 696.217734][T24379] veth0_macvtap: left promiscuous mode [ 696.231841][T24379] veth0_macvtap: entered promiscuous mode [ 696.247891][T24379] veth1_macvtap: entered promiscuous mode [ 696.268649][T24379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 696.286317][T24379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 696.308815][T24379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 696.330625][T24379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 696.352345][T24379] veth0_to_team: entered promiscuous mode [ 696.395605][ T9960] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.402733][ T9960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.473812][ T9960] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.480918][ T9960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.609435][T14031] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.620017][T19335] Bluetooth: hci1: command tx timeout [ 696.656954][T14031] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.747681][ T9949] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 696.836777][T14031] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.898295][T14031] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.959536][T14031] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.009012][T14031] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.088046][T14031] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.147858][T14031] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.157925][T24413] fuse: fd is not a fuse device [ 697.709203][T11334] netdevsim netdevsim4 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.745229][ T30] audit: type=1400 audit(1785437040.638:1319): avc: denied { write } for pid=24429 comm="syz.6.6948" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 697.779454][T24430] io-wq is not configured for unbound workers [ 697.923759][T14031] netdevsim netdevsim4 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.140684][T11334] netdevsim netdevsim4 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.183157][ T5833] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 698.369046][ T5833] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 698.380905][T14894] netdevsim netdevsim4 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 698.421715][ T5833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.483446][ T5833] usb 9-1: Product: syz [ 698.508486][ T5833] usb 9-1: Manufacturer: syz [ 698.532313][ T9949] bridge_slave_1: left allmulticast mode [ 698.554091][ T5833] usb 9-1: SerialNumber: syz [ 698.584293][ T9949] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.610031][ T5833] usb 9-1: config 0 descriptor?? [ 698.639851][ T5833] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 698.680293][ T9949] bridge_slave_0: left allmulticast mode [ 698.692740][T19335] Bluetooth: hci1: command tx timeout [ 698.729009][ T9949] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.754313][T24464] netlink: 'syz.7.6957': attribute type 1 has an invalid length. [ 699.059325][ T30] audit: type=1400 audit(1785437041.948:1320): avc: denied { write } for pid=24447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.277688][ T30] audit: type=1400 audit(1785437042.168:1321): avc: denied { write } for pid=24476 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 699.363142][ T9949] team0: Port device geneve2 removed [ 699.436158][ T9949] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 699.502316][ T9949] bond2 (unregistering): (slave bridge3): Releasing active interface [ 699.559589][ T9949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.589876][ T9949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.622347][ T9949] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 699.657636][ T9949] veth0_to_bond: left promiscuous mode [ 699.674938][ T9949] bond0 (unregistering): Released all slaves [ 699.695493][ T9949] bond1 (unregistering): Released all slaves [ 699.722310][ T9949] bond2 (unregistering): Released all slaves [ 699.754292][T24464] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 699.761703][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 699.872176][ T9949] : left promiscuous mode [ 700.269861][ T5833] gspca_stk1135: reg_w 0x200 err -71 [ 700.301095][ T5833] gspca_stk1135: serial bus timeout: status=0x00 [ 700.344933][ T5833] gspca_stk1135: Sensor write failed [ 700.365685][ T5833] gspca_stk1135: serial bus timeout: status=0x00 [ 700.415541][ T5833] gspca_stk1135: Sensor write failed [ 700.426829][ T5833] gspca_stk1135: serial bus timeout: status=0x00 [ 700.436635][T24495] fuse: fd is not a fuse device [ 700.471129][ T5833] gspca_stk1135: Sensor read failed [ 700.515568][ T5833] gspca_stk1135: serial bus timeout: status=0x00 [ 700.571077][ T5833] gspca_stk1135: Sensor read failed [ 700.589539][ T9949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.602956][ T5833] gspca_stk1135: Detected sensor type unknown (0x0) [ 700.635866][ T5833] gspca_stk1135: serial bus timeout: status=0x00 [ 700.688067][ T5833] gspca_stk1135: Sensor read failed [ 700.727314][ T5833] gspca_stk1135: serial bus timeout: status=0x00 [ 700.774535][T19335] Bluetooth: hci1: command tx timeout [ 700.781555][T24511] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6968'. [ 700.792251][ T5833] gspca_stk1135: Sensor read failed [ 700.817995][ T5833] gspca_stk1135: serial bus timeout: status=0x00 [ 700.855651][ T5833] gspca_stk1135: Sensor write failed [ 700.895875][ T5833] gspca_stk1135: serial bus timeout: status=0x00 [ 700.925718][ T5833] gspca_stk1135: Sensor write failed [ 700.948718][ T5833] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 701.001789][ T5833] usb 9-1: USB disconnect, device number 15 [ 701.058392][ T30] audit: type=1400 audit(1785437043.938:1322): avc: denied { write } for pid=24492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.109954][T24523] overlayfs: failed to clone upperpath [ 701.207345][ T30] audit: type=1400 audit(1785437044.098:1323): avc: denied { write } for pid=24524 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 701.244864][ T9949] team0 (unregistering): Port device team_slave_1 removed [ 701.290032][ T9949] team0 (unregistering): Port device team_slave_0 removed [ 701.348332][ T30] audit: type=1400 audit(1785437044.238:1324): avc: denied { bind } for pid=24528 comm="syz.2.6973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 701.368387][ T5833] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 701.478528][T24362] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.486379][T24362] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.506234][T24362] bridge_slave_0: entered allmulticast mode [ 701.514016][T24362] bridge_slave_0: entered promiscuous mode [ 701.530967][T24511] bond4: entered promiscuous mode [ 701.536182][ T5833] usb 9-1: Using ep0 maxpacket: 32 [ 701.542228][T24511] 8021q: adding VLAN 0 to HW filter on device bond4 [ 701.549227][ T5833] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 701.558736][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.583083][ T5833] usb 9-1: config 0 descriptor?? [ 701.598882][T24514] bond4: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 701.623465][T24514] bond4: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 701.635019][T24514] bond4: (slave ipvlan0): Error -95 calling set_mac_address [ 701.650566][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14 [ 701.682805][T24362] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.701639][T24362] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.731114][T24362] bridge_slave_1: entered allmulticast mode [ 701.746071][T24362] bridge_slave_1: entered promiscuous mode [ 701.919655][T24362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.934688][T24536] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 701.954565][ T5833] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 701.981722][T24362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.009323][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 702.108947][ T5833] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 702.147353][T24516] xt_hashlimit: size too large, truncated to 1048576 [ 702.186607][ T5833] usb 9-1: media controller created [ 702.279891][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 702.310132][T24546] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 702.380417][T24362] team0: Port device team_slave_0 added [ 702.500006][T24362] team0: Port device team_slave_1 added [ 702.605882][T24559] overlayfs: failed to clone lowerpath [ 702.651964][T24362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.672083][T24559] overlayfs: failed to clone lowerpath [ 702.710903][T24362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.814636][ T5833] az6027: usb out operation failed. (-71) [ 702.846993][ T5833] az6027: usb out operation failed. (-71) [ 702.855288][T19335] Bluetooth: hci1: command tx timeout [ 702.894190][ T5833] stb0899_attach: Driver disabled by Kconfig [ 702.919329][T24362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.939321][ T5833] az6027: no front-end attached [ 702.939321][ T5833] [ 702.984376][ T5833] az6027: usb out operation failed. (-71) [ 703.015595][ T30] audit: type=1400 audit(1785437045.908:1325): avc: denied { write } for pid=24538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.048585][ T5833] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 703.058302][T24572] overlayfs: failed to clone upperpath [ 703.069235][T24362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.100434][T24572] overlayfs: failed to clone lowerpath [ 703.109589][T24362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.136691][ T5833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input92 [ 703.180779][ T5833] dvb-usb: schedule remote query interval to 400 msecs. [ 703.221702][ T5833] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 703.240172][T24362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.272208][ T30] audit: type=1400 audit(1785437046.158:1326): avc: denied { write } for pid=24575 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.304093][ T5833] usb 9-1: USB disconnect, device number 16 [ 703.438659][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15 [ 703.449174][ T5833] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 703.565122][T24362] hsr_slave_0: entered promiscuous mode [ 703.589339][T24362] hsr_slave_1: entered promiscuous mode [ 703.605822][T24362] debugfs: 'hsr0' already exists in 'hsr' [ 703.612039][T24362] Cannot create hsr debugfs directory [ 703.920965][T24597] fuse: fd is not a fuse device [ 704.035294][ T5833] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 704.205998][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 704.227929][ T5833] usb 7-1: unable to get BOS descriptor or descriptor too short [ 704.236101][ T188] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 704.264759][ T5833] usb 7-1: config 65 has an invalid interface number: 60 but max is 0 [ 704.286764][T24362] netdevsim netdevsim4 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.308005][ T5833] usb 7-1: config 65 has no interface number 0 [ 704.320287][ T30] audit: type=1400 audit(1785437047.198:1327): avc: denied { write } for pid=24589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.360110][ T5833] usb 7-1: config 65 interface 60 has no altsetting 0 [ 704.410982][ T5833] usb 7-1: string descriptor 0 read error: -22 [ 704.437522][ T5833] usb 7-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=48.d3 [ 704.462007][ T188] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 704.498500][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.508445][ T188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.531815][ T30] audit: type=1400 audit(1785437047.418:1328): avc: denied { write } for pid=24615 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.589614][ T5833] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 704.787628][ T188] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 704.978001][ T5833] snd-usb-audio 7-1:65.60: probe with driver snd-usb-audio failed with error -2 [ 705.046627][ T5833] usb 7-1: USB disconnect, device number 56 [ 705.101734][T24362] netdevsim netdevsim4 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.396407][T24362] netdevsim netdevsim4 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.447062][ T30] audit: type=1400 audit(1785437048.338:1329): avc: denied { write } for pid=24622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.596531][T24362] netdevsim netdevsim4 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.630290][ T30] audit: type=1400 audit(1785437048.518:1330): avc: denied { write } for pid=24644 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.404007][ T30] audit: type=1400 audit(1785437050.288:1331): avc: denied { write } for pid=24653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.682132][ T30] audit: type=1400 audit(1785437050.568:1332): avc: denied { write } for pid=24688 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.710758][T24362] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 707.766382][T24362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 707.801308][T24362] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 707.868348][T24362] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 707.919209][T24362] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 708.004965][T24362] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 708.039648][T24362] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 708.138088][T24362] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 708.213261][T24715] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7010'. [ 708.329013][T24715] netlink: 'syz.7.7010': attribute type 1 has an invalid length. [ 708.514718][ T30] audit: type=1400 audit(1785437051.408:1333): avc: denied { write } for pid=24697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.539552][T24362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.623882][T24362] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.666365][T24662] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.673482][T24662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.732903][ T30] audit: type=1400 audit(1785437051.628:1334): avc: denied { write } for pid=24731 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 708.829395][T24678] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.836547][T24678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.437642][ T30] audit: type=1400 audit(1785437052.328:1335): avc: denied { ioctl } for pid=24744 comm="syz.7.7015" path="socket:[103642]" dev="sockfs" ino=103642 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 709.477165][T24746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7015'. [ 709.544554][T24746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.790361][ T30] audit: type=1400 audit(1785437052.678:1336): avc: denied { write } for pid=24733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.188931][ T30] audit: type=1400 audit(1785437053.078:1337): avc: denied { write } for pid=24762 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 710.379010][ T5719] usb 9-1: USB disconnect, device number 17 [ 710.520985][T24362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.580297][T24775] netlink: 'syz.8.7020': attribute type 4 has an invalid length. [ 710.874027][T24789] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7024'. [ 711.001350][ T30] audit: type=1326 audit(1785437053.888:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24788 comm="syz.8.7024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00f9e019 code=0x7ffc0000 [ 711.205907][ T30] audit: type=1326 audit(1785437053.888:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24788 comm="syz.8.7024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00f9e019 code=0x7ffc0000 [ 711.393699][ T30] audit: type=1326 audit(1785437053.888:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24788 comm="syz.8.7024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00f9e019 code=0x7ffc0000 [ 711.466771][T24804] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.474054][T24804] bridge0: port 1(1¾x9ÿ) entered disabled state [ 711.576216][ T30] audit: type=1326 audit(1785437053.888:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24788 comm="syz.8.7024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00f9e019 code=0x7ffc0000 [ 711.738645][ T30] audit: type=1326 audit(1785437053.928:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24788 comm="syz.8.7024" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbd00f9e019 code=0x7ffc0000 [ 711.769063][T24804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.811611][T24804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.975754][T24816] netlink: 'syz.7.7029': attribute type 2 has an invalid length. [ 711.998084][T11336] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.020469][T11336] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.072193][T11336] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.126959][T11336] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.184896][T11336] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.231558][T11336] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.275985][T24362] veth0_vlan: entered promiscuous mode [ 712.297998][T11336] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.334789][T11336] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.369679][T24362] veth1_vlan: entered promiscuous mode [ 712.480411][T24362] veth0_macvtap: entered promiscuous mode [ 712.565620][T24362] veth1_macvtap: entered promiscuous mode [ 712.594394][T24829] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7035'. [ 712.625513][T24362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.664941][T24829] netlink: 'syz.6.7035': attribute type 8 has an invalid length. [ 712.673782][T24362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.704179][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.736624][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.772995][ T5833] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 712.785216][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.829430][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.942467][ T5833] usb 9-1: Using ep0 maxpacket: 32 [ 712.977789][ T5833] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 713.038205][ T5833] usb 9-1: config 0 has no interface number 0 [ 713.081475][T24659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.104060][ T5833] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 713.147420][T24659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.180826][ T5833] usb 9-1: config 0 interface 89 has no altsetting 0 [ 713.249799][ T5833] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 713.320061][ T5833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.340755][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.372211][ T5833] usb 9-1: Product: syz [ 713.386475][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.407552][ T5833] usb 9-1: Manufacturer: syz [ 713.430814][ T5833] usb 9-1: SerialNumber: syz [ 713.461400][ T5833] usb 9-1: config 0 descriptor?? [ 713.485294][ T5833] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 713.526974][ T5833] em28xx 9-1:0.89: Video interface 89 found: [ 714.058462][T24854] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7043'. [ 714.088169][ T5833] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 714.504169][T24867] fuse: fd is not a fuse device [ 714.708492][ T5833] em28xx 9-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 714.741796][T24873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7051'. [ 714.754286][ T5833] em28xx 9-1:0.89: board has no eeprom [ 714.833825][ T5833] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 714.854193][ T5833] em28xx 9-1:0.89: analog set to bulk mode. [ 714.878191][ T188] em28xx 9-1:0.89: Registering V4L2 extension [ 714.899790][ T5833] usb 9-1: USB disconnect, device number 18 [ 714.950797][ T5833] em28xx 9-1:0.89: Disconnecting em28xx [ 715.013744][ T188] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 715.098869][ T188] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 715.127453][ T188] em28xx 9-1:0.89: No AC97 audio processor [ 715.153528][ T188] usb 9-1: Decoder not found [ 715.168069][ T188] em28xx 9-1:0.89: failed to create media graph [ 715.207154][ T188] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 715.349913][ T188] em28xx 9-1:0.89: Registering snapshot button... [ 715.511864][ T188] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input93 [ 715.770917][ T188] em28xx 9-1:0.89: Remote control support is not available for this card. [ 715.792356][ T5833] em28xx 9-1:0.89: Closing input extension [ 715.817242][ T5833] em28xx 9-1:0.89: Deregistering snapshot button [ 715.877275][T24905] fuse: fd is not a fuse device [ 716.085716][T24912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7066'. [ 716.115404][ T5833] em28xx 9-1:0.89: Freeing device [ 716.159013][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7066'. [ 717.007576][T24930] Cannot find add_set index 0 as target [ 717.707679][T24947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7078'. [ 721.019240][T25024] overlayfs: failed to clone upperpath [ 721.246197][T25028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7107'. [ 721.317032][T25031] netlink: 'syz.4.7109': attribute type 4 has an invalid length. [ 721.520805][T25036] fuse: fd is not a fuse device [ 721.729361][T25047] netlink: 'syz.7.7113': attribute type 1 has an invalid length. [ 721.845402][T25051] bond5 (unregistering): Released all slaves [ 722.009406][T25053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7115'. [ 722.061476][T25053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7115'. [ 722.696962][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 722.696974][ T30] audit: type=1400 audit(1785437065.588:1352): avc: denied { bind } for pid=25073 comm="syz.2.7126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 723.471716][T25099] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 723.523665][T25099] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 723.589250][T25099] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 724.048345][T25113] VFS: Lookup of 'file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' in fuse fuse would have caused loop [ 725.188795][ T30] audit: type=1400 audit(1785437068.078:1353): avc: denied { connect } for pid=25130 comm="syz.2.7149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 726.283660][T25158] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7159'. [ 726.398713][T25158] 8021q: adding VLAN 0 to HW filter on device bond7 [ 726.581575][T25160] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 726.690142][T25161] bond7 (unregistering): (slave gretap2): Releasing backup interface [ 726.745896][T25161] bond7 (unregistering): Released all slaves [ 727.711601][ T30] audit: type=1400 audit(1785437070.598:1354): avc: denied { bind } for pid=25189 comm="syz.4.7169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 727.817114][ T30] audit: type=1400 audit(1785437070.628:1355): avc: denied { setopt } for pid=25189 comm="syz.4.7169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 727.903559][T21138] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 728.084194][T21138] usb 9-1: Using ep0 maxpacket: 32 [ 728.110926][T21138] usb 9-1: unable to get BOS descriptor or descriptor too short [ 728.147737][T21138] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 728.179142][T21138] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 728.220205][T21138] usb 9-1: config 14 has no interface number 0 [ 728.257920][T21138] usb 9-1: config 14 has no interface number 1 [ 728.293303][T21138] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 728.344019][ C0] Unknown status report in ack skb [ 728.389129][T21138] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 728.489521][T21138] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 728.594301][T21138] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 728.678162][T21138] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 728.776937][T21138] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.837965][T21138] usb 9-1: config 14 interface 57 has no altsetting 0 [ 728.864493][T21138] usb 9-1: config 14 interface 228 has no altsetting 0 [ 728.878370][T25203] sd 0:0:1:0: PR command failed: 1026 [ 728.887098][ T30] audit: type=1400 audit(1785437071.768:1356): avc: denied { read } for pid=25202 comm="syz.4.7174" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 728.922313][T25203] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 728.940405][T21138] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 728.954544][T25203] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 728.970282][T21138] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.005487][ T30] audit: type=1400 audit(1785437071.768:1357): avc: denied { open } for pid=25202 comm="syz.4.7174" path="/22/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 729.036644][T21138] usb 9-1: Product: syz [ 729.061078][T21138] usb 9-1: Manufacturer: syz [ 729.080348][T21138] usb 9-1: SerialNumber: syz [ 729.141532][ T30] audit: type=1400 audit(1785437071.768:1358): avc: denied { ioctl } for pid=25202 comm="syz.4.7174" path="/22/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70ce scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 729.190572][T25212] fuse: fd is not a fuse device [ 729.512747][T21138] legousbtower 9-1:14.57: interrupt endpoints not found [ 729.922222][T21138] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 729.972998][T21138] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 730.067291][T25231] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7186'. [ 730.803907][T25241] bridge0: left promiscuous mode [ 730.828111][T25241] macsec0: left promiscuous mode [ 730.841532][ T5733] usb 9-1: USB disconnect, device number 19 [ 730.859580][T25241] geneve5: left promiscuous mode [ 730.881960][ T5733] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 730.906430][ T9949] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.962278][ T9949] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.013576][ T9949] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 38339 - 0 [ 731.060696][ T9949] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.122184][ T9949] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.189578][ T9949] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 38339 - 0 [ 731.243157][ T9949] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.312053][ T9949] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.361157][ T9949] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 38339 - 0 [ 731.407976][ T9949] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.459598][ T9949] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.509835][ T9949] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 38339 - 0 [ 731.699885][T25276] cgroup: Unknown subsys name 'cpuset' [ 731.865115][T25285] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7204'. [ 732.273354][T21138] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 732.444482][T21138] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 732.453640][T21138] usb 5-1: config 0 has no interface number 0 [ 732.459799][T21138] usb 5-1: config 0 interface 41 has no altsetting 0 [ 732.469506][T21138] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 732.479131][T21138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.488429][T21138] usb 5-1: Product: syz [ 732.493313][T21138] usb 5-1: Manufacturer: syz [ 732.498003][T21138] usb 5-1: SerialNumber: syz [ 732.505437][T21138] usb 5-1: config 0 descriptor?? [ 732.821385][T25314] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7216'. [ 733.328072][T21138] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 733.892963][T25335] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7235'. [ 733.940344][T25335] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7235'. [ 734.382922][T21138] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 734.425895][T21138] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 734.474161][T21138] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 734.546846][T21138] usb 5-1: USB disconnect, device number 86 [ 734.553027][T25361] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7238'. [ 735.120101][T25382] bridge1: entered promiscuous mode [ 735.305795][ T30] audit: type=1400 audit(1785437078.198:1359): avc: denied { append } for pid=25385 comm="syz.4.7250" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 735.536661][T25390] bond0: (slave bond_slave_0): Releasing backup interface [ 735.659257][T25390] bond0: (slave bond_slave_1): Releasing backup interface [ 735.715953][T25390] team0: Port device team_slave_0 removed [ 735.764798][T25390] team0: Port device team_slave_1 removed [ 735.810859][T25390] bond2: (slave geneve2): Releasing active interface [ 735.867723][T25390] bond3: (slave geneve3): Releasing active interface [ 735.909733][T25390] bond8: (slave geneve4): Releasing active interface [ 736.112568][T21138] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 736.290721][ T30] audit: type=1400 audit(1785437079.178:1360): avc: denied { read write } for pid=25402 comm="syz.4.7256" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 736.328212][T21138] usb 9-1: Using ep0 maxpacket: 32 [ 736.359302][T21138] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 736.402419][T21138] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 736.428778][ T30] audit: type=1400 audit(1785437079.178:1361): avc: denied { open } for pid=25402 comm="syz.4.7256" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 736.478031][T21138] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.537933][T21138] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 736.625099][T21138] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 736.642185][T25408] fuse: fd is not a fuse device [ 736.647355][ T30] audit: type=1400 audit(1785437079.528:1362): avc: denied { mounton } for pid=25407 comm="syz.2.7258" path="/1524/file0" dev="tmpfs" ino=7983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 736.694287][T21138] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.742821][T21138] usb 9-1: Product: syz [ 736.777597][T21138] usb 9-1: Manufacturer: syz [ 736.801399][T21138] usb 9-1: SerialNumber: syz [ 736.847579][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 736.942138][T21138] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input94 [ 737.134788][T21138] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 737.170297][T21138] (id 0x00) [ 737.272542][T21138] rc_core: IR keymap rc-imon-pad not found [ 737.313694][T21138] Registered IR keymap rc-empty [ 737.329210][T21138] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 737.375787][T21138] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 737.433412][T21138] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 737.527403][T21138] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input95 [ 737.568723][T21138] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:20> initialized [ 737.859155][T25425] fuse: fd is not a fuse device [ 737.922743][T21138] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 738.103765][T21138] usb 5-1: Using ep0 maxpacket: 32 [ 738.127629][T21138] usb 5-1: unable to get BOS descriptor or descriptor too short [ 738.150610][T21138] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 738.175804][T21138] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 738.203579][T21138] usb 5-1: config 14 has no interface number 0 [ 738.228779][T21138] usb 5-1: config 14 has no interface number 1 [ 738.250223][T21138] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 738.289394][T21138] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 738.333151][T21138] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 738.374036][T21138] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 738.414665][T21138] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 738.457429][T21138] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 738.505199][T21138] usb 5-1: config 14 interface 57 has no altsetting 0 [ 738.528159][T21138] usb 5-1: config 14 interface 228 has no altsetting 0 [ 738.554740][T21138] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 738.572709][T21138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.591743][T25450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7274'. [ 738.607296][T21138] usb 5-1: Product: syz [ 738.618612][T21138] usb 5-1: Manufacturer: syz [ 738.635818][T21138] usb 5-1: SerialNumber: syz [ 738.997118][T25461] CIFS: Attempting to mount //127.0.0.1/share [ 739.060432][T21138] legousbtower 5-1:14.57: interrupt endpoints not found [ 739.315496][T25429] imon:send_packet: task interrupted [ 739.338643][T25429] imon:send_packet: packet tx failed (-512) [ 739.370819][T25429] imon:vfd_write: send packet #1 failed [ 739.461748][T21138] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 739.476563][ T5733] usb 9-1: USB disconnect, device number 20 [ 739.556386][T21138] legousbtower 5-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 739.847671][T25461] CIFS: VFS: Error connecting to socket. Aborting operation. [ 739.874355][T25461] CIFS: VFS: cifs_mount failed w/return code = -4 [ 740.063704][T25475] fuse: fd is not a fuse device [ 740.658879][ T30] audit: type=1400 audit(1785437083.548:1363): avc: denied { write } for pid=25478 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.824056][ T30] audit: type=1400 audit(1785437083.718:1364): avc: denied { write } for pid=25497 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.246687][ T5733] usb 5-1: USB disconnect, device number 87 [ 741.328154][ T5733] legousbtower 5-1:14.228: LEGO USB Tower #-159 now disconnected [ 741.654803][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 741.667378][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 741.806215][ T30] audit: type=1400 audit(1785437084.698:1365): avc: denied { write } for pid=25501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.087820][ T30] audit: type=1400 audit(1785437084.978:1366): avc: denied { write } for pid=25530 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.434191][ T30] audit: type=1800 audit(1785437085.328:1367): pid=25513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.7292" name="bus" dev="ramfs" ino=108088 res=0 errno=0 [ 743.044839][ T30] audit: type=1400 audit(1785437085.938:1368): avc: denied { append } for pid=25566 comm="syz.8.7311" name="uprobe_events" dev="tracefs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 743.128107][T25569] bridge_slave_0: left allmulticast mode [ 743.163788][T25569] bridge_slave_0: left promiscuous mode [ 743.175902][T25572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7314'. [ 743.199350][T25569] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.210846][T25572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7314'. [ 743.230664][T25569] bridge_slave_1: left allmulticast mode [ 743.247139][T25575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7313'. [ 743.260322][T25569] bridge_slave_1: left promiscuous mode [ 743.282033][T25569] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.335369][T25569] bond0: (slave bond_slave_0): Releasing backup interface [ 743.367996][T25569] bond0: (slave bond_slave_1): Releasing backup interface [ 743.408285][T25569] team0: Port device team_slave_0 removed [ 743.439414][T25569] team0: Port device team_slave_1 removed [ 743.460800][T25569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.488907][T25569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.511657][T25585] fuse: fd is not a fuse device [ 743.520884][T25569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.542911][T25569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.582191][T25569] net_ratelimit: 8 callbacks suppressed [ 743.582203][T25569] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 743.709350][T25574] team0: Mode changed to "loadbalance" [ 743.835116][T25575] syz_tun (unregistering): left allmulticast mode [ 743.863459][T25575] syz_tun (unregistering): left promiscuous mode [ 743.896429][T25575] bridge0: port 3(syz_tun) entered disabled state [ 744.862459][ T5733] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 745.036683][ T5733] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 745.087437][ T5733] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.131035][ T5733] usb 7-1: config 0 descriptor?? [ 745.167916][ T5733] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 745.694434][T25622] fuse: fd is not a fuse device [ 745.987371][ T5733] usb 7-1: USB disconnect, device number 57 [ 746.025244][ T5833] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 746.114644][T25635] overlayfs: failed to clone upperpath [ 746.224562][ T5833] usb 9-1: Using ep0 maxpacket: 32 [ 746.239982][ T5833] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 746.270488][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.304476][ T5833] usb 9-1: config 0 descriptor?? [ 746.325119][ T5833] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 746.396867][T25642] Bluetooth: MGMT ver 1.23 [ 746.534709][ T5833] gspca_vc032x: reg_r err -71 [ 746.543176][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.548548][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.558918][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.569593][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.589618][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.606585][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.619673][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.631514][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.652002][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.666317][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.679385][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.689338][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.700650][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.711766][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.724509][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.746409][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.757784][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.772115][ T5833] gspca_vc032x: I2c Bus Busy Wait 00 [ 746.780124][ T5833] gspca_vc032x: Unknown sensor... [ 746.789509][ T5833] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 746.822197][ T5833] usb 9-1: USB disconnect, device number 21 [ 746.873819][T25653] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7346'. [ 746.900387][T25655] overlayfs: failed to clone upperpath [ 747.066988][T25662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.235647][T25669] fuse: fd is not a fuse device [ 747.362740][ T30] audit: type=1400 audit(1785437090.258:1369): avc: denied { ioctl } for pid=25674 comm="syz.8.7356" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 748.322611][ T5833] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 748.506129][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 748.534353][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.592580][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.654376][ T5833] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 748.714460][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.739547][ T9948] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 748.774750][ T5833] usb 5-1: config 0 descriptor?? [ 748.784703][ T9948] netdevsim netdevsim6 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 748.837949][ T9948] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 748.874209][ T9948] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 748.908668][ T9948] netdevsim netdevsim6 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 748.950752][ T9948] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 749.019251][ T9948] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 749.061136][ T9948] netdevsim netdevsim6 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 749.091591][T25732] fuse: fd is not a fuse device [ 749.108799][ T9948] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 749.198651][ T9948] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 749.221652][ T5833] ft260 0003:0403:6030.0059: unknown main item tag 0x0 [ 749.240739][ T9948] netdevsim netdevsim6 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 749.261369][ T5833] ft260 0003:0403:6030.0059: unknown main item tag 0x0 [ 749.288886][ T9948] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 749.421006][ T5833] ft260 0003:0403:6030.0059: chip code: 0000 0000 [ 749.637440][ T5833] ft260 0003:0403:6030.0059: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 749.845447][ T5833] ft260 0003:0403:6030.0059: failed to retrieve status: -32, no wakeup [ 750.119601][ T5833] usb 5-1: USB disconnect, device number 88 [ 750.403324][T21138] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 750.610776][T21138] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 750.701531][T21138] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 750.827366][T21138] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 750.920315][T21138] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.978902][T21138] usb 7-1: Product: syz [ 751.008848][T21138] usb 7-1: Manufacturer: syz [ 751.042712][T21138] usb 7-1: SerialNumber: syz [ 751.087113][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7396'. [ 751.135892][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7396'. [ 751.151509][ T30] audit: type=1400 audit(1785437094.038:1370): avc: denied { setopt } for pid=25785 comm="syz.7.7398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 751.276629][T25762] trusted_key: encrypted_key: hex blob is missing [ 751.362672][ T5733] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 751.440729][T21138] usb 7-1: Can't get UAC3 power state for id 10 [ 751.508328][T21138] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 751.532452][ T5733] usb 5-1: Using ep0 maxpacket: 8 [ 751.542713][ T5833] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 751.557508][ T5733] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 751.576634][T21138] usb 7-1: applying playback min mute quirk [ 751.591694][ T5733] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 751.606154][T21138] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 751.630914][T21138] usb 7-1: applying playback min mute quirk [ 751.641214][ T5733] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 751.665757][T21138] usb 7-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 751.687510][ T5733] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 751.708806][T21138] usb 7-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 751.721660][ T5733] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.743350][ T5833] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.761104][T25800] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 751.782257][ T5833] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 751.791899][ T5733] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 751.827016][ T5833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.839181][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.861128][T21138] usb 7-1: USB disconnect, device number 58 [ 751.895847][ T5833] usb 9-1: config 0 descriptor?? [ 751.970979][ T5833] pwc: Askey VC010 type 2 USB webcam detected. [ 752.069914][T24327] udevd[24327]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 752.112897][T25806] fuse: fd is not a fuse device [ 752.125973][ T5733] usb 5-1: GET_CAPABILITIES returned 0 [ 752.168108][ T5733] usbtmc 5-1:16.0: can't read capabilities [ 752.343416][T21138] usb 5-1: USB disconnect, device number 89 [ 752.349798][T25819] overlayfs: failed to clone upperpath [ 752.380551][ T5833] pwc: recv_control_msg error -32 req 02 val 2b00 [ 752.406277][ T5833] pwc: recv_control_msg error -32 req 02 val 2700 [ 752.437312][ T5833] pwc: recv_control_msg error -32 req 02 val 2c00 [ 752.458302][ T5833] pwc: recv_control_msg error -32 req 04 val 1000 [ 752.486587][ T5833] pwc: recv_control_msg error -32 req 04 val 1300 [ 752.509728][ T5833] pwc: recv_control_msg error -32 req 04 val 1400 [ 752.740229][ T5833] pwc: recv_control_msg error -71 req 02 val 2100 [ 752.765219][ T5833] pwc: recv_control_msg error -71 req 04 val 1500 [ 752.792314][ T5833] pwc: recv_control_msg error -71 req 02 val 2500 [ 752.813431][ T5833] pwc: recv_control_msg error -71 req 02 val 2400 [ 752.820861][ T5833] pwc: recv_control_msg error -71 req 02 val 2600 [ 752.833713][ T5833] pwc: recv_control_msg error -71 req 02 val 2900 [ 752.845100][T25837] kvm: pic: level sensitive irq not supported [ 752.847433][ T5833] pwc: recv_control_msg error -71 req 02 val 2800 [ 752.888825][ T5833] pwc: recv_control_msg error -71 req 04 val 1100 [ 752.919199][ T5833] pwc: recv_control_msg error -71 req 04 val 1200 [ 752.985418][ T5833] pwc: Registered as video103. [ 752.992072][T25845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7415'. [ 753.013871][ T5833] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input96 [ 753.045600][T25845] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7415'. [ 753.100263][ T5833] usb 9-1: USB disconnect, device number 22 [ 753.157169][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7416'. [ 753.366708][T25849] 8021q: adding VLAN 0 to HW filter on device bond9 [ 753.437896][T25858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7420'. [ 753.475586][T25853] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 753.493960][T25862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7420'. [ 753.527633][ T9949] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.576649][ T9949] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.630247][ T9949] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.714726][T24663] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 753.781440][T25876] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7427'. [ 753.896031][T25876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 753.975111][T25883] macvlan3: entered promiscuous mode [ 754.000145][T25883] macvlan3: entered allmulticast mode [ 754.026808][T25890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7429'. [ 754.040720][T25883] bond1: (slave macvlan3): Opening slave failed [ 754.077937][T25890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7429'. [ 754.665622][T25921] fuse: fd is not a fuse device [ 754.753146][T21138] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 754.915879][T25929] bridge_slave_0: left allmulticast mode [ 754.936035][T21138] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 754.950782][T25929] bridge_slave_0: left promiscuous mode [ 754.983051][T25929] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.001626][T21138] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.053670][T21138] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.071310][T25929] bridge_slave_1: left allmulticast mode [ 755.114888][T25929] bridge_slave_1: left promiscuous mode [ 755.132091][T21138] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 755.160252][T25929] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.217323][T21138] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 755.263118][T25929] bond0: (slave bond_slave_0): Releasing backup interface [ 755.283971][T21138] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 755.336202][T25929] bond0: (slave bond_slave_1): Releasing backup interface [ 755.347076][T21138] usb 7-1: Manufacturer: syz [ 755.366948][T21138] usb 7-1: config 0 descriptor?? [ 755.391332][T25929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.446670][T25929] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 755.635155][T25955] macvtap0: entered promiscuous mode [ 755.656801][T25955] vlan0: entered promiscuous mode [ 755.674945][T25955] 0ªî{X¹¦: entered promiscuous mode [ 755.708359][T25955] team0: Device macvtap0 failed to register rx_handler [ 755.740079][T25955] vlan0: left promiscuous mode [ 755.757725][T25955] 0ªî{X¹¦: left promiscuous mode [ 755.831546][T21138] appleir 0003:05AC:8243.005A: unknown main item tag 0x0 [ 755.889240][T21138] appleir 0003:05AC:8243.005A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 756.277496][ T30] audit: type=1400 audit(1785437099.168:1371): avc: denied { remount } for pid=25968 comm="syz.4.7457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 756.398959][ T5833] usb 7-1: USB disconnect, device number 59 [ 756.672518][T21138] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 756.853753][T21138] usb 5-1: config 0 has no interfaces? [ 756.869498][T21138] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 756.915812][T21138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.969899][T21138] usb 5-1: config 0 descriptor?? [ 757.250004][T25998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7466'. [ 757.399291][T21138] usb 5-1: USB disconnect, device number 90 [ 759.935391][T26039] sd 0:0:1:0: PR command failed: 1026 [ 759.970176][T26039] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 759.979914][ T30] audit: type=1400 audit(1785437102.858:1372): avc: denied { remount } for pid=26040 comm="syz.4.7482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 760.008229][T26043] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 760.029015][T26039] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 760.412444][T21138] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 760.436462][T26061] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 760.603644][T21138] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.646282][ T30] audit: type=1400 audit(1785437103.538:1373): avc: denied { unmount } for pid=12177 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 760.669844][T21138] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.732414][T21138] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 760.767257][T21138] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.807793][ T30] audit: type=1800 audit(1785437103.698:1374): pid=26035 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7479" name="bus" dev="ramfs" ino=110196 res=0 errno=0 [ 760.848835][T21138] usb 9-1: config 0 descriptor?? [ 761.278872][T21138] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 761.330326][T21138] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 761.382029][T21138] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 761.429788][T21138] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 761.475769][T21138] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 761.514219][T21138] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 761.548969][T21138] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 761.584071][T21138] cp2112 0003:10C4:EA90.005B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 761.702945][T21138] cp2112 0003:10C4:EA90.005B: Part Number: 0x00 Device Version: 0x00 [ 762.228975][T21138] cp2112 0003:10C4:EA90.005B: error reading lock byte: -71 [ 762.285821][T21138] usb 9-1: USB disconnect, device number 23 [ 763.724642][ T30] audit: type=1400 audit(1785437106.618:1375): avc: denied { shutdown } for pid=26132 comm="syz.6.7514" lport=59808 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 764.350226][T26150] input: syz1 as /devices/virtual/input/input97 [ 764.678372][T26160] overlayfs: failed to clone upperpath [ 765.024169][T26173] fuse: fd is not a fuse device [ 765.421163][T26091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 765.698535][T26187] tipc: Started in network mode [ 765.780077][T26187] tipc: Node identity 1001001, cluster identity 4711 [ 765.869502][T26199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26199 comm=syz.8.7538 [ 765.883957][ T5833] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 765.893663][T26187] tipc: Node number set to 16781313 [ 765.951137][T26187] tipc: Cannot configure node identity twice [ 765.999226][T26200] tipc: Enabling of bearer rejected, failed to enable media [ 766.073875][ T5833] usb 7-1: Using ep0 maxpacket: 8 [ 766.094104][T26210] overlayfs: failed to clone upperpath [ 766.113114][ T5833] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 766.146766][ T5833] usb 7-1: config 179 has no interface number 0 [ 766.156368][ T30] audit: type=1400 audit(1785437109.038:1376): avc: denied { remount } for pid=26209 comm="syz.2.7540" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 766.206013][ T5833] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 766.266979][ T5833] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 766.324223][ T5833] usb 7-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 766.386877][ T5833] usb 7-1: config 179 interface 65 has no altsetting 0 [ 766.531421][ T5833] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 766.581634][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.859342][T26186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.902784][T26186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.961338][ T5833] usb 7-1: USB disconnect, device number 60 [ 767.076563][T26238] fuse: fd is not a fuse device [ 767.350194][T26249] fuse: fd is not a fuse device [ 768.455763][T26267] bridge0: port 1(netdevsim0) entered blocking state [ 768.507234][T26267] bridge0: port 1(netdevsim0) entered disabled state [ 768.556381][T26267] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 768.657818][T26267] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 769.533347][ T30] audit: type=1400 audit(1785437112.428:1377): avc: denied { read } for pid=26309 comm="syz.8.7576" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 769.629444][ T30] audit: type=1400 audit(1785437112.458:1378): avc: denied { open } for pid=26309 comm="syz.8.7576" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 769.718077][ T30] audit: type=1400 audit(1785437112.458:1379): avc: denied { ioctl } for pid=26309 comm="syz.8.7576" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 771.613680][T26341] netlink: 'syz.4.7588': attribute type 1 has an invalid length. [ 771.692803][ T5833] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 771.704864][T26341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 771.857121][T26349] bond1: (slave geneve2): making interface the new active one [ 771.874684][ T5833] usb 7-1: unable to get BOS descriptor or descriptor too short [ 771.913183][ T5833] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.928166][T26349] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 771.945790][ T5833] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 771.994315][ T5833] usb 7-1: string descriptor 0 read error: -22 [ 772.020052][ T5833] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 772.055700][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.072904][ T5733] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 772.129039][ T5833] usb 7-1: selecting invalid altsetting 1 [ 772.154684][ T5833] usb 7-1: unit 3 not found! [ 772.283680][ T5733] usb 9-1: config 1 interface 0 has no altsetting 2 [ 772.308379][ T5733] usb 9-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 772.330406][ T5833] usb 7-1: cannot request logical cluster ID: 0 (err: -5) [ 772.348334][ T5733] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.363546][ T5833] usb 7-1: invalid MIXER UNIT descriptor 6 [ 772.548664][ T5833] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 772.609663][ T5833] usb 7-1: USB disconnect, device number 61 [ 772.796826][ T5733] dvbdev: DVB: registering new adapter (DEC2000-t) [ 772.858118][ T5733] usb 9-1: DVB: registering adapter 2 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 773.633991][T21138] IPVS: starting estimator thread 0... [ 773.752544][T26383] IPVS: using max 77 ests per chain, 184800 per kthread [ 773.973554][ T5733] ttusb_dec_send_command: command bulk message failed: error -110 [ 774.036468][T21138] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 774.048996][ T5733] usb 9-1: USB disconnect, device number 24 [ 774.078264][T26392] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 774.135535][T26392] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 774.232505][T21138] usb 5-1: Using ep0 maxpacket: 16 [ 774.252123][T21138] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 774.288372][T21138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.351612][T21138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.383565][T26396] overlayfs: failed to clone upperpath [ 774.409873][T21138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.427403][T26396] overlayfs: failed to clone lowerpath [ 774.454131][T21138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.500270][T21138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.549921][T21138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.611768][T21138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.670477][T21138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.694760][ T30] audit: type=1800 audit(1785437117.578:1380): pid=26405 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.7613" name="file0" dev="overlay" ino=1615 res=0 errno=0 [ 774.758444][T21138] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 774.807601][T21138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 774.851887][T21138] usb 5-1: SerialNumber: syz [ 774.864057][T26415] fuse: fd is not a fuse device [ 774.887247][T21138] usb 5-1: config 0 descriptor?? [ 774.936391][T21138] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input98 [ 775.165834][T26385] input: syz1 as /devices/virtual/input/input99 [ 775.635563][T26432] overlayfs: failed to clone upperpath [ 775.666340][T26432] overlayfs: failed to clone upperpath [ 775.824608][ T4964] bcm5974 5-1:0.0: could not read from device [ 775.855769][ T4964] bcm5974 5-1:0.0: could not read from device [ 775.871900][T21138] usb 5-1: USB disconnect, device number 91 [ 775.972184][ T4964] bcm5974 5-1:0.0: could not read from device [ 776.046566][T26444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.065357][T25802] bcm5974 5-1:0.0: could not read from device [ 777.464177][ T5733] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 777.658154][ T5733] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.701574][ T5733] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.762884][ T5733] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 777.801870][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 777.835080][ T5733] usb 5-1: SerialNumber: syz [ 778.070678][ T5733] usb 5-1: 0:2 : does not exist [ 778.160112][ T30] audit: type=1326 audit(1785437121.048:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.2.7650" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f3479e019 code=0x0 [ 778.221452][T26505] fuse: fd is not a fuse device [ 778.264140][ T5733] usb 5-1: USB disconnect, device number 92 [ 778.319376][ T30] audit: type=1326 audit(1785437121.178:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.2.7650" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3479e019 code=0x7ffc0000 [ 778.417218][T26512] netlink: 'syz.7.7654': attribute type 1 has an invalid length. [ 778.434528][T24440] udevd[24440]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.510558][ T30] audit: type=1326 audit(1785437121.178:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.2.7650" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3479e019 code=0x7ffc0000 [ 778.575322][T26512] 8021q: adding VLAN 0 to HW filter on device bond5 [ 778.652270][T26521] bond5: (slave geneve2): making interface the new active one [ 778.670859][ T30] audit: type=1326 audit(1785437121.178:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.2.7650" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3479e019 code=0x7ffc0000 [ 778.741381][T26521] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 778.800004][ T9949] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.834271][ T30] audit: type=1326 audit(1785437121.188:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.2.7650" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3479e019 code=0x7ffc0000 [ 778.865367][ T9949] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.905548][ T9949] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.944607][ T9949] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.984230][ T30] audit: type=1326 audit(1785437121.188:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.2.7650" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2f3479e019 code=0x7ffc0000 [ 779.044087][ T5733] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 779.114622][ T30] audit: type=1326 audit(1785437121.208:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.2.7650" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3479e019 code=0x7ffc0000 [ 779.242820][ T5733] usb 7-1: Using ep0 maxpacket: 32 [ 779.261221][ T30] audit: type=1326 audit(1785437121.258:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.2.7650" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3479e019 code=0x7ffc0000 [ 779.313091][ T5733] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.397965][ T5733] usb 7-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 779.444292][ T5733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.496679][ T5733] usb 7-1: Product: syz [ 779.500892][ T30] audit: type=1326 audit(1785437121.258:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26498 comm="syz.2.7650" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f3479e019 code=0x7ffc0000 [ 779.555308][ T5733] usb 7-1: Manufacturer: syz [ 779.591839][ T5733] usb 7-1: SerialNumber: syz [ 779.617614][ T5733] usb 7-1: config 0 descriptor?? [ 779.931586][ T5833] usb 7-1: USB disconnect, device number 62 [ 780.310352][T26555] fuse: fd is not a fuse device [ 780.512542][ T5833] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 780.601401][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 780.601415][ T30] audit: type=1400 audit(1785437123.488:1453): avc: denied { create } for pid=26572 comm="syz.6.7677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 780.715910][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 780.727601][ T5833] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 780.748612][ T30] audit: type=1400 audit(1785437123.528:1454): avc: denied { write } for pid=26572 comm="syz.6.7677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 780.782068][ T5833] usb 5-1: can't read configurations, error -61 [ 780.952918][ T5833] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 781.112409][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 781.122552][ T5833] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 781.130850][ T5833] usb 5-1: can't read configurations, error -61 [ 781.143846][ T5833] usb usb5-port1: attempt power cycle [ 781.479490][T26601] netlink: 264 bytes leftover after parsing attributes in process `syz.7.7686'. [ 781.489299][T26601] netlink: 264 bytes leftover after parsing attributes in process `syz.7.7686'. [ 781.498491][ T5833] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 781.523062][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 781.530953][ T5833] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 781.542844][ T5833] usb 5-1: can't read configurations, error -61 [ 781.654831][T26582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 781.690427][ T5833] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 781.764541][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 781.783983][ T5833] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 781.809959][ T5833] usb 5-1: can't read configurations, error -61 [ 781.816743][ T5833] usb usb5-port1: unable to enumerate USB device [ 782.065591][T26615] netlink: 'syz.6.7692': attribute type 1 has an invalid length. [ 782.098034][T26615] 8021q: adding VLAN 0 to HW filter on device bond7 [ 782.144058][T26615] bond7: (slave veth11): Enslaving as an active interface with a down link [ 782.186886][T26615] bond7: (slave dummy0): making interface the new active one [ 782.209293][T26615] dummy0: entered promiscuous mode [ 782.227804][T26615] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 782.284047][T26620] bond7 (unregistering): (slave veth11): Releasing active interface [ 782.331429][T26620] bond7 (unregistering): (slave dummy0): Releasing active interface [ 782.358001][T26620] bond7 (unregistering): Released all slaves [ 782.647634][T26640] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7701'. [ 782.678172][T26640] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7701'. [ 782.706608][T26640] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7701'. [ 782.924014][T26653] overlayfs: failed to clone lowerpath [ 782.943336][T26653] overlayfs: failed to clone lowerpath [ 783.026383][T26656] overlayfs: failed to clone upperpath [ 783.530933][T26669] overlayfs: upper fs does not support file handles, falling back to index=off. [ 784.665214][T26708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7727'. [ 784.725302][T26708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7727'. [ 784.735059][T26709] tipc: Enabled bearer , priority 0 [ 784.818317][T26709] syzkaller0: entered promiscuous mode [ 784.840593][T26709] syzkaller0: entered allmulticast mode [ 784.859720][T26709] tipc: Resetting bearer [ 784.980039][T26713] ffs_data_put(): freeing [ 785.088225][T26718] netlink: 'syz.7.7730': attribute type 1 has an invalid length. [ 785.186581][T24663] tipc: Resetting bearer [ 785.208821][T26706] tipc: Resetting bearer [ 785.385080][T26721] Process accounting resumed [ 786.219317][T26737] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7737'. [ 786.501583][T26748] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7741'. [ 788.280022][T26706] tipc: Disabling bearer [ 788.289401][T26718] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 788.422715][T26746] lo speed is unknown, defaulting to 1000 [ 788.532987][T26746] lo speed is unknown, defaulting to 1000 [ 788.567712][T26746] lo speed is unknown, defaulting to 1000 [ 788.613586][T26746] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 788.680511][T26746] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 788.764809][T26746] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 788.839388][T26746] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 789.128063][T26746] lo speed is unknown, defaulting to 1000 [ 789.155324][T26746] lo speed is unknown, defaulting to 1000 [ 789.320341][T26746] lo speed is unknown, defaulting to 1000 [ 789.365697][T26746] lo speed is unknown, defaulting to 1000 [ 789.444719][T26746] lo speed is unknown, defaulting to 1000 [ 789.470009][T26746] lo speed is unknown, defaulting to 1000 [ 789.519690][T26746] lo speed is unknown, defaulting to 1000 [ 791.364343][T26824] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7766'. [ 791.579921][T26825] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7766'. [ 792.267839][T26845] overlayfs: conflicting options: nfs_export=on,index=off [ 792.379939][T26852] fuse: fd is not a fuse device [ 792.421672][T26850] fuse-io-uring is disabled [ 792.429931][ T30] audit: type=1400 audit(1785437135.308:1455): avc: denied { cmd } for pid=26848 comm="syz.6.7776" path="/dev/cuse" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=io_uring permissive=1 [ 792.573100][T26859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7779'. [ 793.013791][T26875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7785'. [ 793.219496][T26871] lo speed is unknown, defaulting to 1000 [ 793.952267][T26902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.056894][T26909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7796'. [ 794.069852][T26902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.285116][ T30] audit: type=1400 audit(1785437137.178:1456): avc: denied { unmount } for pid=26912 comm="syz.6.7798" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 794.380747][ T30] audit: type=1400 audit(1785437137.258:1457): avc: denied { connect } for pid=26917 comm="syz.8.7800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 794.469979][T26922] 9pnet_fd: p9_fd_create_tcp (26922): problem connecting socket to 127.0.0.1 [ 795.592518][T26943] team0 (unregistering): Port device team_slave_0 removed [ 795.626030][T26943] team0 (unregistering): Port device team_slave_1 removed [ 795.658639][T26945] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 795.721476][ T30] audit: type=1400 audit(1785437138.608:1458): avc: denied { lock } for pid=26944 comm="syz.6.7812" path="socket:[113860]" dev="sockfs" ino=113860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 795.770528][T26948] netlink: 'syz.7.7813': attribute type 1 has an invalid length. [ 795.876383][T26948] 8021q: adding VLAN 0 to HW filter on device bond6 [ 795.927815][T26955] netlink: 'syz.7.7813': attribute type 10 has an invalid length. [ 795.961755][T26950] bond6: (slave dummy0): making interface the new active one [ 795.977528][T26955] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7813'. [ 795.989447][T26950] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 796.375900][T26955] dummy0: entered promiscuous mode [ 796.381940][T26955] bond6: (slave dummy0): Releasing active interface [ 796.831074][ T30] audit: type=1400 audit(1785437139.718:1459): avc: denied { shutdown } for pid=26969 comm="syz.6.7822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 797.050385][ T9949] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.096988][T26978] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 797.118945][T26978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 797.136464][T26978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 797.148674][T26978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 797.157912][T26978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 797.261033][ T9949] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.299184][T26982] xt_hashlimit: size too large, truncated to 1048576 [ 797.701289][ T9949] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 797.740469][T26978] Bluetooth: hci0: command 0x0406 tx timeout [ 797.768498][ T9949] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.060993][ T30] audit: type=1326 audit(1785437140.948:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27004 comm="syz.8.7831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00f9e019 code=0x7ffc0000 [ 798.212312][ T9949] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.242301][ T30] audit: type=1326 audit(1785437140.988:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27004 comm="syz.8.7831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00f9e019 code=0x7ffc0000 [ 798.288839][ T9949] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.336552][T27012] tipc: Started in network mode [ 798.341559][T27012] tipc: Node identity 1000001, cluster identity 4711 [ 798.361370][ T30] audit: type=1326 audit(1785437140.988:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27004 comm="syz.8.7831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd00f9e019 code=0x7ffc0000 [ 798.394161][T27012] tipc: Node number set to 16777217 [ 798.413710][T27015] tipc: Enabling of bearer rejected, failed to enable media [ 798.559572][ T30] audit: type=1326 audit(1785437140.988:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27004 comm="syz.8.7831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbd00f9e019 code=0x7ffc0000 [ 798.644920][ T9949] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.700171][ T9949] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.728336][ T30] audit: type=1326 audit(1785437141.048:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27004 comm="syz.8.7831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd00f5e84e code=0x7ffc0000 [ 798.866566][T26977] lo speed is unknown, defaulting to 1000 [ 798.883610][ T30] audit: type=1326 audit(1785437141.048:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27004 comm="syz.8.7831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd00f5e84e code=0x7ffc0000 [ 799.004486][T27031] netlink: 'syz.8.7836': attribute type 1 has an invalid length. [ 799.044697][ T30] audit: type=1326 audit(1785437141.058:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27004 comm="syz.8.7831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd00f5e84e code=0x7ffc0000 [ 799.123858][T27038] netlink: 'syz.8.7836': attribute type 21 has an invalid length. [ 799.149814][T27038] IPv6: NLM_F_CREATE should be specified when creating new route [ 799.175656][ T30] audit: type=1326 audit(1785437141.068:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27004 comm="syz.8.7831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd00f5e84e code=0x7ffc0000 [ 799.252939][T26978] Bluetooth: hci1: command tx timeout [ 799.309389][ T30] audit: type=1326 audit(1785437141.068:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27004 comm="syz.8.7831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd00f5e84e code=0x7ffc0000 [ 799.369128][T27041] bond2: (slave geneve2): making interface the new active one [ 799.389885][T27041] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 799.407434][ T30] audit: type=1326 audit(1785437141.068:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27004 comm="syz.8.7831" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbd00f5e84e code=0x7ffc0000 [ 799.448701][T24676] netdevsim netdevsim4 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 799.487524][T24676] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 799.572830][T24676] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 799.708448][T24676] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 799.762761][T24676] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 799.809941][T27056] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7839'. [ 799.987992][T24676] netdevsim netdevsim4 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.060807][T24676] netdevsim netdevsim4 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.237455][T25011] netdevsim netdevsim4 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 800.559203][T27090] netlink: 'syz.7.7849': attribute type 1 has an invalid length. [ 800.800690][T27078] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 800.833837][T27078] block device autoloading is deprecated and will be removed. [ 800.849860][T27073] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 800.877473][T27073] block device autoloading is deprecated and will be removed. [ 801.335269][T26978] Bluetooth: hci1: command tx timeout [ 801.688596][T27105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.705808][ T9949] bond1 (unregistering): (slave geneve2): Releasing active interface [ 801.837312][ T9949] bond0 (unregistering): Released all slaves [ 801.882069][ T9949] bond1 (unregistering): Released all slaves [ 802.013761][T27090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 802.058732][T27092] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 802.138677][T27094] macvlan1: entered promiscuous mode [ 802.157668][T27094] macvlan1: entered allmulticast mode [ 802.194214][T27094] bond7: entered promiscuous mode [ 802.214090][T27094] veth0_to_bond: entered promiscuous mode [ 802.233070][T27094] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 802.259106][T27094] bond7: left promiscuous mode [ 802.275289][T27094] veth0_to_bond: left promiscuous mode [ 802.316771][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 802.350368][ T9949] tipc: Left network mode [ 802.494039][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 802.566433][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 802.641623][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 802.708105][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 802.767993][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 802.791588][T27120] uprobe: syz.8.7856:27120 failed to unregister, leaking uprobe [ 802.827247][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 802.896370][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 802.970740][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 803.032820][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 803.069532][ T9949] hsr_slave_0: left promiscuous mode [ 803.090801][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 803.104752][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.114437][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.144605][ T9949] hsr_slave_1: left promiscuous mode [ 803.166633][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 803.187008][ T9949] veth1_macvtap: left promiscuous mode [ 803.234677][ T9949] veth0_macvtap: left promiscuous mode [ 803.241619][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 803.265660][ T9949] veth1_vlan: left promiscuous mode [ 803.302312][ T9949] veth0_vlan: left promiscuous mode [ 803.317596][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 803.407717][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 803.407727][ T30] audit: type=1400 audit(1785437146.298:1522): avc: denied { write } for pid=27118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.438445][T26978] Bluetooth: hci1: command tx timeout [ 803.485194][T27109] 9pnet_fd: p9_fd_create_tcp (27109): problem connecting socket to 127.0.0.1 [ 803.625690][ T30] audit: type=1326 audit(1785437146.338:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27136 comm="syz.7.7860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7759e019 code=0x7ffc0000 [ 803.840856][ T30] audit: type=1326 audit(1785437146.338:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27136 comm="syz.7.7860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7759e019 code=0x7ffc0000 [ 804.049241][ T30] audit: type=1326 audit(1785437146.338:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27136 comm="syz.7.7860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7759e019 code=0x7ffc0000 [ 804.193579][ T30] audit: type=1326 audit(1785437146.338:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27136 comm="syz.7.7860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea7759e019 code=0x7ffc0000 [ 804.321703][ T30] audit: type=1326 audit(1785437146.338:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27136 comm="syz.7.7860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fea7759e019 code=0x7ffc0000 [ 804.468112][ T30] audit: type=1326 audit(1785437146.398:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27136 comm="syz.7.7860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea7755e84e code=0x7ffc0000 [ 804.536559][T27168] fuse: fd is not a fuse device [ 804.562153][T27168] overlayfs: failed to clone upperpath [ 804.615684][T27170] Bluetooth: Short BCSP packet [ 804.658954][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14 [ 804.674360][ T30] audit: type=1326 audit(1785437146.398:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27136 comm="syz.7.7860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea7755e84e code=0x7ffc0000 [ 804.729803][T26977] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.753994][T26977] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.786563][T26977] bridge_slave_0: entered allmulticast mode [ 804.809748][ T30] audit: type=1326 audit(1785437146.408:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27136 comm="syz.7.7860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea7755e84e code=0x7ffc0000 [ 804.836824][T26977] bridge_slave_0: entered promiscuous mode [ 804.868216][T26977] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.900485][T26977] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.937915][T26977] bridge_slave_1: entered allmulticast mode [ 804.952992][ T30] audit: type=1326 audit(1785437146.408:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27136 comm="syz.7.7860" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fea7755e84e code=0x7ffc0000 [ 804.996390][T26977] bridge_slave_1: entered promiscuous mode [ 805.004683][T27181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.100135][T26977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.122729][T27175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.179541][T26977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.245929][T27175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.297159][T26977] team0: Port device team_slave_0 added [ 805.342814][T26977] team0: Port device team_slave_1 added [ 805.362178][ T9949] IPVS: stop unused estimator thread 0... [ 805.427318][T26977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.463989][T26977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.495960][T19335] Bluetooth: hci1: command tx timeout [ 805.568632][T26977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.611084][T26977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.637294][T26977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.725515][T26977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.820816][T26977] hsr_slave_0: entered promiscuous mode [ 805.864179][T26977] hsr_slave_1: entered promiscuous mode [ 805.897651][T26977] debugfs: 'hsr0' already exists in 'hsr' [ 805.917892][T26977] Cannot create hsr debugfs directory [ 805.935336][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15 [ 805.946341][T27202] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7876'. [ 806.515632][T27203] lo speed is unknown, defaulting to 1000 [ 806.612460][T19335] Bluetooth: hci4: command 0x1003 tx timeout [ 806.623410][T26978] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 806.687884][T27221] fuse: fd is not a fuse device [ 807.101953][T27237] xt_CT: You must specify a L4 protocol and not use inversions on it [ 807.937170][ T5274] 8021q: adding VLAN 0 to HW filter on device eth16 [ 808.184442][T27271] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7890'. [ 808.242742][T27264] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7890'. [ 808.299026][T26977] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 808.373103][T26977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 808.406882][T27266] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7890'. [ 808.435741][T26977] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 808.477122][T26977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 808.517314][T26977] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 808.559779][T26977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 808.595255][T26977] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 808.666965][T26977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 808.692047][T27290] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7899'. [ 809.026936][T26977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.070725][T26977] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.108360][T25011] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.115498][T25011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.148652][T25011] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.155803][T25011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.040717][T27339] fuse: fd is not a fuse device [ 810.381741][T26977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.954683][T27377] uprobe: syz.2.7917:27377 failed to unregister, leaking uprobe [ 811.023354][T27377] uprobe: syz.2.7917:27377 failed to unregister, leaking uprobe [ 811.075790][T26977] veth0_vlan: entered promiscuous mode [ 811.129627][T26977] veth1_vlan: entered promiscuous mode [ 811.219254][T26977] veth0_macvtap: entered promiscuous mode [ 811.257339][T26977] veth1_macvtap: entered promiscuous mode [ 811.348362][T26977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 811.405997][T26977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 811.484396][T25011] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.617357][T25011] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.945010][T25011] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.997195][T25011] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.259759][ T9949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.382850][ T9949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.591806][T25011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.645759][T25011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.128129][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 813.128142][ T30] audit: type=1400 audit(1785437412.022:1552): avc: denied { mount } for pid=26977 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 814.077608][T27459] input: syz1 as /devices/virtual/input/input100 [ 814.467628][T27469] binder: 27467:27469 ioctl c0306201 200000000080 returned -14 [ 814.510374][T27469] binder: 27467:27469 ioctl c0306201 2000000003c0 returned -14 [ 814.550372][ T30] audit: type=1400 audit(1785437413.442:1553): avc: denied { call } for pid=27467 comm="syz.9.7949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 814.859237][T26978] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 814.873912][T26978] CPU: 0 UID: 0 PID: 26978 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 814.873933][T26978] Tainted: [L]=SOFTLOCKUP [ 814.873938][T26978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 814.873947][T26978] Workqueue: hci0 hci_rx_work [ 814.873966][T26978] Call Trace: [ 814.873971][T26978] [ 814.873976][T26978] dump_stack_lvl+0x100/0x190 [ 814.873998][T26978] sysfs_warn_dup.cold+0x1c/0x28 [ 814.874020][T26978] sysfs_create_dir_ns+0x24b/0x2b0 [ 814.874041][T26978] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 814.874060][T26978] ? find_held_lock+0x2b/0x80 [ 814.874079][T26978] ? kobject_add_internal+0x25f/0x930 [ 814.874095][T26978] ? kobject_add_internal+0x25f/0x930 [ 814.874112][T26978] ? do_raw_spin_unlock+0x145/0x1e0 [ 814.874129][T26978] kobject_add_internal+0x2c8/0x930 [ 814.874148][T26978] kobject_add+0x16a/0x1e0 [ 814.874164][T26978] ? __pfx_kobject_add+0x10/0x10 [ 814.874179][T26978] ? class_to_subsys+0x10f/0x150 [ 814.874198][T26978] ? kobject_put+0xb9/0x640 [ 814.874212][T26978] ? _raw_spin_unlock+0x28/0x50 [ 814.874233][T26978] device_add+0x294/0x1970 [ 814.874250][T26978] ? __pfx_dev_set_name+0x10/0x10 [ 814.874268][T26978] ? __pfx_device_add+0x10/0x10 [ 814.874284][T26978] ? mgmt_send_event_skb+0x2fb/0x460 [ 814.874301][T26978] hci_conn_add_sysfs+0x1a3/0x260 [ 814.874316][T26978] le_conn_complete_evt+0x11eb/0x1f60 [ 814.874333][T26978] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 814.874344][T26978] ? hci_event_packet+0x186/0xcd0 [ 814.874360][T26978] hci_le_conn_complete_evt+0x23c/0x3a0 [ 814.874372][T26978] ? skb_pull_data+0x15f/0x1e0 [ 814.874391][T26978] hci_le_meta_evt+0x34a/0x5f0 [ 814.874405][T26978] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 814.874419][T26978] hci_event_packet+0x51c/0xcd0 [ 814.874431][T26978] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 814.874445][T26978] ? __pfx_hci_event_packet+0x10/0x10 [ 814.874458][T26978] ? kcov_remote_start+0x384/0x670 [ 814.874473][T26978] ? lockdep_hardirqs_on+0x78/0x100 [ 814.874489][T26978] hci_rx_work+0x451/0xfc0 [ 814.874504][T26978] process_one_work+0xa23/0x1940 [ 814.874524][T26978] ? __pfx_process_one_work+0x10/0x10 [ 814.874541][T26978] ? __pfx_hci_rx_work+0x10/0x10 [ 814.874554][T26978] worker_thread+0x5ef/0xe50 [ 814.874571][T26978] ? __pfx_worker_thread+0x10/0x10 [ 814.874584][T26978] ? kthread+0x13a/0x450 [ 814.874594][T26978] ? __pfx_worker_thread+0x10/0x10 [ 814.874606][T26978] kthread+0x370/0x450 [ 814.874616][T26978] ? __pfx_kthread+0x10/0x10 [ 814.874628][T26978] ret_from_fork+0x72b/0xd50 [ 814.874645][T26978] ? __pfx_ret_from_fork+0x10/0x10 [ 814.874662][T26978] ? __switch_to+0x800/0x10f0 [ 814.874674][T26978] ? __pfx_kthread+0x10/0x10 [ 814.874686][T26978] ret_from_fork_asm+0x1a/0x30 [ 814.874711][T26978] [ 814.875902][T26978] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 815.180348][T26978] Bluetooth: hci0: failed to register connection device [ 815.223386][ T188] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 815.235164][T27482] fuse: fd is not a fuse device [ 815.332273][T27489] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7956'. [ 815.349074][T27490] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7955'. [ 815.395168][ T188] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 815.423153][ T188] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.447232][T27489] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7956'. [ 815.476523][ T188] usb 10-1: Product: syz [ 815.491413][ T188] usb 10-1: Manufacturer: syz [ 815.521181][ T188] usb 10-1: SerialNumber: syz [ 816.310872][T27511] netlink: 'syz.2.7961': attribute type 1 has an invalid length. [ 816.363650][ T188] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 816.413852][ T188] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 816.435300][T27511] 8021q: adding VLAN 0 to HW filter on device bond10 [ 816.459853][ T188] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 816.516222][ T188] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 816.606328][ T188] usb 10-1: USB disconnect, device number 2 [ 816.743313][T27513] bond10: (slave veth1): Enslaving as an active interface with a down link [ 816.808509][T27514] veth0_virt_wifi: entered promiscuous mode [ 816.920670][T27514] bond10: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 816.947362][T27523] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7964'. [ 817.034014][T27511] bond10: (slave veth0_virt_wifi): Releasing active interface [ 817.343128][ T188] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 817.433116][T27540] netlink: 'syz.6.7970': attribute type 83 has an invalid length. [ 817.531746][T27543] [ 817.534094][T27543] ====================================================== [ 817.541083][T27543] WARNING: possible circular locking dependency detected [ 817.548090][T27543] syzkaller #0 Tainted: G L [ 817.554048][T27543] ------------------------------------------------------ [ 817.561045][T27543] syz.6.7970/27543 is trying to acquire lock: [ 817.567083][T27543] ffffffff90b4e628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 817.574808][T27543] [ 817.574808][T27543] but task is already holding lock: [ 817.582150][T27543] ffff88804ddc4860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 817.590390][T27543] [ 817.590390][T27543] which lock already depends on the new lock. [ 817.590390][T27543] [ 817.600857][T27543] [ 817.600857][T27543] the existing dependency chain (in reverse order) is: [ 817.609838][T27543] [ 817.609838][T27543] -> #6 (&pipe->mutex){+.+.}-{4:4}: [ 817.617200][T27543] lock_acquire+0x1b9/0x370 [ 817.622203][T27543] __mutex_lock+0x1a4/0x1bd0 [ 817.627297][T27543] pipe_lock+0x69/0x80 [ 817.631858][T27543] iter_file_splice_write+0x1fd/0x10b0 [ 817.637816][T27543] do_splice+0x109c/0x1f90 [ 817.642725][T27543] __do_splice+0x237/0x370 [ 817.647634][T27543] __x64_sys_splice+0x187/0x250 [ 817.652982][T27543] do_syscall_64+0x115/0x870 [ 817.658067][T27543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.664451][T27543] [ 817.664451][T27543] -> #5 (sb_writers#6){.+.+}-{0:0}: [ 817.671816][T27543] lock_acquire+0x1b9/0x370 [ 817.676818][T27543] mnt_want_write+0x6f/0x410 [ 817.681899][T27543] path_openat+0xad9/0x4280 [ 817.686909][T27543] do_file_open+0x20e/0x430 [ 817.691903][T27543] file_open_name+0x1c3/0x3e0 [ 817.697074][T27543] filp_open+0x2e/0x50 [ 817.701637][T27543] fsg_lun_open+0x6b/0x7b0 [ 817.706545][T27543] fsg_store_file+0x1e7/0x450 [ 817.711725][T27543] configfs_write_iter+0x302/0x4e0 [ 817.717339][T27543] vfs_write+0x6ac/0x1050 [ 817.722179][T27543] ksys_write+0x12a/0x250 [ 817.727026][T27543] do_syscall_64+0x115/0x870 [ 817.732127][T27543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.738523][T27543] [ 817.738523][T27543] -> #4 (&common->filesem){+.+.}-{4:4}: [ 817.746233][T27543] lock_acquire+0x1b9/0x370 [ 817.751230][T27543] down_write+0x8b/0x1f0 [ 817.755966][T27543] fsg_store_file+0x193/0x450 [ 817.761138][T27543] configfs_write_iter+0x302/0x4e0 [ 817.766740][T27543] vfs_write+0x6ac/0x1050 [ 817.771566][T27543] ksys_write+0x12a/0x250 [ 817.776401][T27543] do_syscall_64+0x115/0x870 [ 817.781483][T27543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.787876][T27543] [ 817.787876][T27543] -> #3 (&p->frag_sem){++++}-{4:4}: [ 817.795223][T27543] lock_acquire+0x1b9/0x370 [ 817.800219][T27543] down_read+0x99/0x4c0 [ 817.804878][T27543] configfs_write_iter+0x218/0x4e0 [ 817.810498][T27543] vfs_write+0x6ac/0x1050 [ 817.815329][T27543] ksys_write+0x12a/0x250 [ 817.820154][T27543] do_syscall_64+0x115/0x870 [ 817.825234][T27543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.831629][T27543] [ 817.831629][T27543] -> #2 (&buffer->mutex#2){+.+.}-{4:4}: [ 817.839338][T27543] lock_acquire+0x1b9/0x370 [ 817.844353][T27543] __mutex_lock+0x1a4/0x1bd0 [ 817.849447][T27543] configfs_read_iter+0x79/0x6f0 [ 817.854895][T27543] __kernel_read+0x397/0xad0 [ 817.859998][T27543] integrity_kernel_read+0x7e/0xb0 [ 817.865619][T27543] ima_calc_file_hash_tfm+0x25e/0x350 [ 817.871507][T27543] ima_calc_file_hash+0x1e3/0x380 [ 817.877040][T27543] ima_collect_measurement+0x94f/0xb30 [ 817.883006][T27543] process_measurement+0xdfe/0x2350 [ 817.888696][T27543] ima_file_check+0xc3/0x110 [ 817.893788][T27543] security_file_post_open+0xc4/0x210 [ 817.899655][T27543] path_openat+0x985/0x4280 [ 817.904663][T27543] do_file_open+0x20e/0x430 [ 817.909656][T27543] do_sys_openat2+0x10f/0x1e0 [ 817.914827][T27543] __x64_sys_openat+0x12d/0x210 [ 817.920173][T27543] do_syscall_64+0x115/0x870 [ 817.925264][T27543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.931657][T27543] [ 817.931657][T27543] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 817.940220][T27543] lock_acquire+0x1b9/0x370 [ 817.945216][T27543] __mutex_lock+0x1a4/0x1bd0 [ 817.950297][T27543] process_measurement+0x5ab/0x2350 [ 817.955996][T27543] ima_file_check+0xc3/0x110 [ 817.961085][T27543] security_file_post_open+0xc4/0x210 [ 817.966962][T27543] path_openat+0x985/0x4280 [ 817.971965][T27543] do_file_open_root+0x2f6/0x5a0 [ 817.977402][T27543] file_open_root+0x1c6/0x3f0 [ 817.982567][T27543] kernel_read_file_from_path_initns+0x189/0x260 [ 817.989391][T27543] _request_firmware+0x733/0x13c0 [ 817.994909][T27543] request_firmware+0x35/0x50 [ 818.000078][T27543] reg_reload_regdb+0x85/0x460 [ 818.005349][T27543] genl_family_rcv_msg_doit+0x214/0x300 [ 818.011397][T27543] genl_rcv_msg+0x560/0x800 [ 818.016404][T27543] netlink_rcv_skb+0x159/0x420 [ 818.021656][T27543] genl_rcv+0x28/0x40 [ 818.026137][T27543] netlink_unicast+0x585/0x850 [ 818.031400][T27543] netlink_sendmsg+0x8b0/0xda0 [ 818.036653][T27543] ____sys_sendmsg+0xa4d/0xbe0 [ 818.041914][T27543] ___sys_sendmsg+0x190/0x1e0 [ 818.047096][T27543] __sys_sendmsg+0x160/0x210 [ 818.052187][T27543] do_syscall_64+0x115/0x870 [ 818.057278][T27543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.063673][T27543] [ 818.063673][T27543] -> #0 (cb_lock){++++}-{4:4}: [ 818.070596][T27543] check_prev_add+0xeb/0xe60 [ 818.075678][T27543] __lock_acquire+0x136c/0x1a40 [ 818.081033][T27543] lock_acquire+0x1b9/0x370 [ 818.086043][T27543] down_read+0x99/0x4c0 [ 818.090705][T27543] genl_rcv+0x19/0x40 [ 818.095196][T27543] netlink_unicast+0x585/0x850 [ 818.100464][T27543] netlink_sendmsg+0x8b0/0xda0 [ 818.105722][T27543] sock_sendmsg+0x394/0x410 [ 818.110725][T27543] splice_to_socket+0xb3c/0x11a0 [ 818.116155][T27543] do_splice+0x109c/0x1f90 [ 818.121064][T27543] __do_splice+0x33b/0x370 [ 818.125972][T27543] __x64_sys_splice+0x187/0x250 [ 818.131315][T27543] do_syscall_64+0x115/0x870 [ 818.136408][T27543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.142792][T27543] [ 818.142792][T27543] other info that might help us debug this: [ 818.142792][T27543] [ 818.152989][T27543] Chain exists of: [ 818.152989][T27543] cb_lock --> sb_writers#6 --> &pipe->mutex [ 818.152989][T27543] [ 818.164774][T27543] Possible unsafe locking scenario: [ 818.164774][T27543] [ 818.172190][T27543] CPU0 CPU1 [ 818.177534][T27543] ---- ---- [ 818.182873][T27543] lock(&pipe->mutex); [ 818.186998][T27543] lock(sb_writers#6); [ 818.193644][T27543] lock(&pipe->mutex); [ 818.200287][T27543] rlock(cb_lock); [ 818.204066][T27543] [ 818.204066][T27543] *** DEADLOCK *** [ 818.204066][T27543] [ 818.212187][T27543] 1 lock held by syz.6.7970/27543: [ 818.217262][T27543] #0: ffff88804ddc4860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 818.225925][T27543] [ 818.225925][T27543] stack backtrace: [ 818.231785][T27543] CPU: 0 UID: 0 PID: 27543 Comm: syz.6.7970 Tainted: G L syzkaller #0 PREEMPT(full) [ 818.231801][T27543] Tainted: [L]=SOFTLOCKUP [ 818.231805][T27543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 818.231812][T27543] Call Trace: [ 818.231818][T27543] [ 818.231823][T27543] dump_stack_lvl+0x100/0x190 [ 818.231838][T27543] print_circular_bug.cold+0x178/0x1c7 [ 818.231856][T27543] check_noncircular+0x146/0x160 [ 818.231873][T27543] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 818.231888][T27543] check_prev_add+0xeb/0xe60 [ 818.231900][T27543] ? __lock_acquire+0x49f/0x1a40 [ 818.231914][T27543] __lock_acquire+0x136c/0x1a40 [ 818.231930][T27543] lock_acquire+0x1b9/0x370 [ 818.231943][T27543] ? genl_rcv+0x19/0x40 [ 818.231955][T27543] ? __pfx___might_resched+0x10/0x10 [ 818.231969][T27543] down_read+0x99/0x4c0 [ 818.231983][T27543] ? genl_rcv+0x19/0x40 [ 818.231994][T27543] ? __pfx_down_read+0x10/0x10 [ 818.232008][T27543] ? netlink_deliver_tap+0x1ae/0xcc0 [ 818.232027][T27543] genl_rcv+0x19/0x40 [ 818.232037][T27543] netlink_unicast+0x585/0x850 [ 818.232049][T27543] ? __pfx_netlink_unicast+0x10/0x10 [ 818.232059][T27543] ? __build_skb_around+0x278/0x390 [ 818.232072][T27543] netlink_sendmsg+0x8b0/0xda0 [ 818.232084][T27543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.232095][T27543] ? selinux_socket_sendmsg+0x198/0x2f0 [ 818.232113][T27543] sock_sendmsg+0x394/0x410 [ 818.232130][T27543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.232141][T27543] ? __pfx_sock_sendmsg+0x10/0x10 [ 818.232162][T27543] splice_to_socket+0xb3c/0x11a0 [ 818.232178][T27543] ? __pfx_splice_to_socket+0x10/0x10 [ 818.232193][T27543] ? inode_has_perm+0x16d/0x1d0 [ 818.232212][T27543] ? bpf_lsm_file_permission+0x9/0x10 [ 818.232230][T27543] ? security_file_permission+0x76/0x210 [ 818.232242][T27543] ? rw_verify_area+0xce/0x6d0 [ 818.232257][T27543] ? __pfx_splice_to_socket+0x10/0x10 [ 818.232271][T27543] do_splice+0x109c/0x1f90 [ 818.232284][T27543] ? __lock_acquire+0x49f/0x1a40 [ 818.232297][T27543] ? __lock_acquire+0x49f/0x1a40 [ 818.232311][T27543] ? __pfx_do_splice+0x10/0x10 [ 818.232323][T27543] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 818.232335][T27543] ? find_held_lock+0x2b/0x80 [ 818.232354][T27543] __do_splice+0x33b/0x370 [ 818.232367][T27543] ? __pfx___do_splice+0x10/0x10 [ 818.232381][T27543] __x64_sys_splice+0x187/0x250 [ 818.232395][T27543] do_syscall_64+0x115/0x870 [ 818.232407][T27543] ? clear_bhb_loop+0x40/0x90 [ 818.232419][T27543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.232431][T27543] RIP: 0033:0x7f404d79e019 [ 818.232442][T27543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.232453][T27543] RSP: 002b:00007f404b9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 818.232464][T27543] RAX: ffffffffffffffda RBX: 00007f404da26090 RCX: 00007f404d79e019 [ 818.232471][T27543] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 818.232477][T27543] RBP: 00007f404d83500c R08: 000000000004ffe6 R09: 0000000000000000 [ 818.232484][T27543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.232490][T27543] R13: 00007f404da26128 R14: 00007f404da26090 R15: 00007ffc0b2beb48 [ 818.232501][T27543] [ 818.871381][ T188] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 818.886865][ T188] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.895386][ T188] usb 10-1: Product: syz [ 818.899661][ T188] usb 10-1: Manufacturer: syz [ 818.904350][ T188] usb 10-1: SerialNumber: syz [ 818.912574][T27543] netlink: 'syz.6.7970': attribute type 83 has an invalid length. [ 819.135263][ T188] rtl8150 10-1:1.0: couldn't reset the device [ 819.141544][ T188] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 819.155654][ T188] usb 10-1: USB disconnect, device number 3 [ 819.347546][ T30] audit: type=1400 audit(1785437418.242:1554): avc: denied { write } for pid=27544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.401171][ T30] audit: type=1400 audit(1785437418.292:1555): avc: denied { write } for pid=27555 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.529745][ T30] audit: type=1400 audit(1785437418.422:1556): avc: denied { write } for pid=27558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.581086][ T30] audit: type=1400 audit(1785437418.472:1557): avc: denied { write } for pid=27569 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.937277][ T30] audit: type=1400 audit(1785437419.832:1558): avc: denied { write } for pid=27572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.988029][ T30] audit: type=1400 audit(1785437419.882:1559): avc: denied { write } for pid=27583 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.120488][ T30] audit: type=1400 audit(1785437420.012:1560): avc: denied { write } for pid=27586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.174069][ T30] audit: type=1400 audit(1785437420.072:1561): avc: denied { write } for pid=27597 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1