last executing test programs: 6m42.821421637s ago: executing program 32 (id=309): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x101100) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x108) r4 = fanotify_init(0xf00, 0x1) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000e9fffffeffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffefff0000000001000601000000004400050000001100000000000000000000000001000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r6 = syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x1ea1e2) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f00000004c0)="e4", 0x1, 0x5, 0x0, 0x2}]) connect$unix(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10060}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r9, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FIBMAP(r0, 0x2283, &(0x7f0000000040)=0x85) 6m29.849022506s ago: executing program 3 (id=352): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0), 0x0, &(0x7f00000008c0)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30, 0x200cc811}}, {{&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000980)="9d83e08aaabadd380ea9d71f03294680437f562afeee620daf6e3504ffe56739319ed8ae678dd7d2eed65ec0d079b933cc62f2c6361f5e9998a328bd8aff1a951015e81705a02a2a50f530ed765b6f2b5af2f9c82582cb9c2f568f713e6bf9c2fe122b658567abdced08b8bed2bab3fd00c906989b7ace865710091a637c7efc8ca6988b2f3f90fcf446cbc72da4f500f76dccc04c483b5adb1f4bc2b8781cc6bc680a67f937286d39edab968c27caeb7ce96e8419ad86d001a5375427a9a45d7c24953a8a26c417fffa3078f46509de3f1acfc5bc44b55645bc51c04f27933bee9d48", 0xe3}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="10000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000000b00000000000000010000000100000001d64042d2a4769a82e8a8e678d84c07d35bde19f62a13f9788dad63da3eb66d0668015c58933b702af36311322173a67d423e56dd36649800a3d31fee5a5f7433ad4d2321bb74", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x40080}}], 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) unshare(0x6020400) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) 6m29.449441321s ago: executing program 3 (id=356): syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_virt_wifi\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x25, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x11a, 0x4, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0), 0x0, &(0x7f00000008c0)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30, 0x200cc811}}, {{&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000980)="9d83e08aaabadd380ea9d71f03294680437f562afeee620daf6e3504ffe56739319ed8ae678dd7d2eed65ec0d079b933cc62f2c6361f5e9998a328bd8aff1a951015e81705a02a2a50f530ed765b6f2b5af2f9c82582cb9c2f568f713e6bf9c2fe122b658567abdced08b8bed2bab3fd00c906989b7ace865710091a637c7efc8ca6988b2f3f90fcf446cbc72da4f500f76dccc04c483b5adb1f4bc2b8781cc6bc680a67f937286d39edab968c27caeb7ce96e8419ad86d001a5375427a9a45d7c24953a8a26c417fffa3078f46509de3f1acfc5bc44b55645bc51c04f27933bee9d48", 0xe3}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="10000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000000b00000000000000010000000100000001d64042d2a4769a82e8a8e678d84c07d35bde19f62a13f9788dad63da3eb66d0668015c58933b702af36311322173a67d423e56dd36649800a3d31fee5a5f7433ad4d2321bb74", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28, 0x40080}}], 0x2, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0x400, 0x10000}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) unshare(0x6020400) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) 6m27.945785843s ago: executing program 3 (id=360): sched_setscheduler(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0x1, @remote}}, 0x1e) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) io_setup(0x7ff, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) syz_clone3(&(0x7f0000000300)={0x4050000, 0x0, &(0x7f0000000100), 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010100, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) 6m27.121428386s ago: executing program 3 (id=364): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_dev$sndctrl(0x0, 0x1, 0x48001) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') umount2(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x8) 6m27.097424309s ago: executing program 3 (id=365): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r1, &(0x7f0000000340)="ca0e808b935b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_clone(0x80063000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r4 = syz_open_dev$ndb(&(0x7f0000004480), 0x0, 0x0) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) getrandom(0x0, 0x0, 0xb00) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) openat$panthor(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x1) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1, r6, 0x3, {0x100000001, 0x8000000000407}}, 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) 6m26.600853946s ago: executing program 3 (id=367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) read$FUSE(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000085c0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000280)="2bbbd39cee80dc2384f355c41b15aa53da80aa", 0x13}, {&(0x7f00000004c0)="b96c0c8a81079afca43c63168504994de8d6c4d19b24cfc7e6c80e970453e3a7ff06d9d5ae42133be090f8d44d5adcfebe2f33f105d4ffe8ca2f13badf217bee60729b297544fa5a584bb786b007349a6b114d9877294c092a4d33dc56d8faf4f58d0c82bdf4e0a0871ac823530d69cbe2d167b623fbcaf9063bc2ba3b744a9afb12f14c6a6500f834c5f382b4621f849c3f9f83ec7545a278152ff6f0ee3675f7be86b6020bffc5cbcec50854897a2a512e2ab2f6d42dd874b4443d5a03783b4cd6f0f87559e2382aecb9e195c18248ff458b4a541b2867425fec242d6eecec4d6d7b0b6ad469cb53a019fcfcc8d4e4db183e0d", 0xf4}, {&(0x7f0000000600)="c303086bf7f312b37ea0af87f4f70f86c923a8086fb127ef81aafdcf3a48e4677db0aa32e4b7c6ef9d3465685660a05e316eb1ea3692f218f8aa0e282912f174e9a3f5397fcca6091ea18729b0a07112aa374dfc339601ea65d76c4fd76503039627ae5420d8f386459fc438cc21e319a22a9b4b0d84182e97733c4093a51387e2d9cfd0f3e4791d23cf14d9de30e09af90d7a76b1614bc5f338eb44c74be22e476ba9883f4eb0d60aea3a51e278a18ee9c7c62e12fd00dcc6e2157e53ecea78f74cb10a7257003c4190e1a9063d7c77011efdeac15f6d52ad3816312a7cd2b6733c", 0xe2}, {0x0}], 0x4, 0x0, 0x0, 0x48084}}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6m26.203896745s ago: executing program 33 (id=367): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) read$FUSE(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000085c0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000280)="2bbbd39cee80dc2384f355c41b15aa53da80aa", 0x13}, {&(0x7f00000004c0)="b96c0c8a81079afca43c63168504994de8d6c4d19b24cfc7e6c80e970453e3a7ff06d9d5ae42133be090f8d44d5adcfebe2f33f105d4ffe8ca2f13badf217bee60729b297544fa5a584bb786b007349a6b114d9877294c092a4d33dc56d8faf4f58d0c82bdf4e0a0871ac823530d69cbe2d167b623fbcaf9063bc2ba3b744a9afb12f14c6a6500f834c5f382b4621f849c3f9f83ec7545a278152ff6f0ee3675f7be86b6020bffc5cbcec50854897a2a512e2ab2f6d42dd874b4443d5a03783b4cd6f0f87559e2382aecb9e195c18248ff458b4a541b2867425fec242d6eecec4d6d7b0b6ad469cb53a019fcfcc8d4e4db183e0d", 0xf4}, {&(0x7f0000000600)="c303086bf7f312b37ea0af87f4f70f86c923a8086fb127ef81aafdcf3a48e4677db0aa32e4b7c6ef9d3465685660a05e316eb1ea3692f218f8aa0e282912f174e9a3f5397fcca6091ea18729b0a07112aa374dfc339601ea65d76c4fd76503039627ae5420d8f386459fc438cc21e319a22a9b4b0d84182e97733c4093a51387e2d9cfd0f3e4791d23cf14d9de30e09af90d7a76b1614bc5f338eb44c74be22e476ba9883f4eb0d60aea3a51e278a18ee9c7c62e12fd00dcc6e2157e53ecea78f74cb10a7257003c4190e1a9063d7c77011efdeac15f6d52ad3816312a7cd2b6733c", 0xe2}, {0x0}], 0x4, 0x0, 0x0, 0x48084}}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5m1.069813004s ago: executing program 6 (id=591): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="00000000000000000043683e4587e070", 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) unshare(0x1e060c80) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, &(0x7f00000001c0)}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) r7 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 4m58.555975314s ago: executing program 6 (id=596): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x310000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={0x0, 0x21d000, 0x1000, 0x1, 0x2}, 0x20) 4m57.942211074s ago: executing program 6 (id=600): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = getuid() setreuid(0xffffffffffffffff, r3) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x40, &(0x7f0000000440)={[{@max={'max', 0x3d, 0x4}}, {@stats}, {@max={'max', 0x3d, 0x7}}, {@max={'max', 0x3d, 0x8}}, {@stats}], [{@subj_role={'subj_role', 0x3d, 'xfrm0\x00'}}, {@dont_hash}, {@subj_role={'subj_role', 0x3d, '\xbdW\x15\xb7\xc4u~\xfc\xd5U\xa5'}}, {@obj_user={'obj_user', 0x3d, '$,$}+%\\!'}}, {@fsname={'fsname', 0x3d, '$,'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_user}, {@fowner_gt={'fowner>', r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x5d, 0x30, 0x32, 0x34, 0x64, 0x39, 0x31], 0x2d, [0x36, 0x36, 0x63, 0x33], 0x2d, [0x34, 0x65, 0x30, 0x63], 0x2d, [0x38, 0x66, 0x62, 0x36], 0x2d, [0x62, 0x61, 0x65, 0x31, 0x64, 0x64, 0x35, 0x39]}}}, {@hash}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex, 0x15, 0x0, 0x60, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="17000045f5499aa385ab95cffa2f40000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=r7], 0x20) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="b6", 0x1, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0xf5, &(0x7f0000000000)=ANY=[], 0x0) 4m54.788951788s ago: executing program 6 (id=612): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 4m53.909073849s ago: executing program 6 (id=613): socket$kcm(0x10, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2, 0x0, 0x0, 0x100100}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0xffffffffffffff8e, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 4m53.451477865s ago: executing program 6 (id=617): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000004c0)) syz_usb_control_io(r2, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m52.097825145s ago: executing program 34 (id=617): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x9b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000004c0)) syz_usb_control_io(r2, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m7.797039814s ago: executing program 0 (id=789): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffc}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x4, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000002ec0)={0x2020, 0x0, 0x0}, 0x2020) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async, rerun: 64) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) (rerun: 64) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (async, rerun: 32) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (rerun: 32) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x27) (async, rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) (rerun: 64) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000540)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa00"/31, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r5], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) (async) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000012c0)={{{@in=@broadcast, @in=@multicast2, 0x4e24, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x20, 0x2e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000002}, {0x0, 0x5, 0x204}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@empty, 0x0, 0x32}, 0xb, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, 0x0, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 4m7.596850586s ago: executing program 0 (id=793): syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x101100) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x108) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000880)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8, r5, &(0x7f00000004c0)="e4", 0x1, 0x5, 0x0, 0x2}]) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10060}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r7, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 4m4.959017489s ago: executing program 0 (id=803): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x3, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r2 = dup3(r1, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x3e03) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="82", 0x1}], 0x1) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x541b, 0x4) 4m3.983261211s ago: executing program 0 (id=807): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) syz_open_dev$sndctrl(0x0, 0x1, 0x48001) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x8) 4m3.871297178s ago: executing program 0 (id=808): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) 4m1.909029624s ago: executing program 0 (id=815): r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 64) read$FUSE(r1, &(0x7f0000006540)={0x2020}, 0xfffffce2) (async) read$msr(r1, &(0x7f0000000380)=""/105, 0x69) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) io_setup(0x81, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r2, 0x0, 0x0, 0xffffffffffffffff}]) (async) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) (async) r4 = shmget$private(0x0, 0x4000, 0x780002c0, &(0x7f0000ffc000/0x4000)=nil) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2800, 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) shmctl$SHM_LOCK(r4, 0xb) syz_usb_connect(0x5, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100025e022d2099115268d56cd02d0301090212000100824007090499030009"], 0x0) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xbf7ed2deeb8938ee) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x400000) ioctl$DRM_IOCTL_DROP_MASTER(r8, 0x641f) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020204090a0000000000000000000000020001000000000000000503000000a003000600ff00000002000000ac1414aa0000000000000000030005000000000002000000000000000000000000000000e52932c8c1005cec5885f19d69c7fe6211db34b12efdd752013663dad56d94ee06f5a2758224b71fc75cb84ef8fdffc677afaf5cf733f5279aadb455d6b827e54ec188f63bcd28199e4b8336af93b88fae781f8d1ba020e21b5b2260"], 0x50}, 0x1, 0x7}, 0x0) 4m1.790288214s ago: executing program 35 (id=815): r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (rerun: 64) read$FUSE(r1, &(0x7f0000006540)={0x2020}, 0xfffffce2) (async) read$msr(r1, &(0x7f0000000380)=""/105, 0x69) (async) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) io_setup(0x81, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r2, 0x0, 0x0, 0xffffffffffffffff}]) (async) setrlimit(0x40000000000008, &(0x7f00000002c0)={0x4, 0x9}) (async) r4 = shmget$private(0x0, 0x4000, 0x780002c0, &(0x7f0000ffc000/0x4000)=nil) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2800, 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) shmctl$SHM_LOCK(r4, 0xb) syz_usb_connect(0x5, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100025e022d2099115268d56cd02d0301090212000100824007090499030009"], 0x0) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xbf7ed2deeb8938ee) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x400000) ioctl$DRM_IOCTL_DROP_MASTER(r8, 0x641f) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020204090a0000000000000000000000020001000000000000000503000000a003000600ff00000002000000ac1414aa0000000000000000030005000000000002000000000000000000000000000000e52932c8c1005cec5885f19d69c7fe6211db34b12efdd752013663dad56d94ee06f5a2758224b71fc75cb84ef8fdffc677afaf5cf733f5279aadb455d6b827e54ec188f63bcd28199e4b8336af93b88fae781f8d1ba020e21b5b2260"], 0x50}, 0x1, 0x7}, 0x0) 2m51.958999746s ago: executing program 4 (id=1046): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0xfffff65f, @remote, 0x20}, {0xa, 0x4e22, 0x800, @mcast2}, 0x0, {[0x7f, 0x8000, 0x5, 0xfffffffc]}}, 0x5c) 2m51.165304295s ago: executing program 4 (id=1048): munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) socket$inet6(0xa, 0x80003, 0xff) r0 = socket$inet6(0xa, 0x0, 0xa) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004280)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000004600)={0x2020}, 0xffffffffffffff34) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x8000, "676617a4eca5d2a958539a8de82f7d6d9b105ff00a8040cada37fdbec1cb2090"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x141c42) writev(r2, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)=@arm64_extra={0x603000000013c03d, &(0x7f0000000080)=0x8}) 2m50.497958915s ago: executing program 4 (id=1051): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) socket$rds(0x15, 0x5, 0x0) epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x448101, 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$getflags(r3, 0x401) read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c10015000a14010028bd7000ffd0df25080001000200000008001563745df24d"], 0x20}}, 0x4000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 2m49.24700288s ago: executing program 4 (id=1054): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) syz_open_dev$sndctrl(0x0, 0x1, 0x48001) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x8) 2m48.645902384s ago: executing program 4 (id=1058): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) socket$kcm(0x23, 0x5, 0x0) ioctl$FE_ENABLE_HIGH_LNB_VOLTAGE(0xffffffffffffffff, 0x6f44, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000100)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(r4, 0x0, 0x4200, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x98, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_EXPRESSIONS={0x74, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x93f}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14, 0x10}}, 0x118}}, 0x0) creat(0x0, 0x175) r7 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, &(0x7f00000000c0)={0x3, 0x5}, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x1) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) 2m48.193403401s ago: executing program 4 (id=1061): openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2d01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x1) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 2m47.837665837s ago: executing program 36 (id=1061): openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2d01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x1) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1m55.215498733s ago: executing program 8 (id=1201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0xf55a1f1d3119de44, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r3, 0x8921, &(0x7f0000000040)="a43a") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 1m54.816482132s ago: executing program 8 (id=1202): open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x141842, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x4) r2 = gettid() ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto(r4, &(0x7f0000000040), 0x0, 0x20000000, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) 1m53.010919894s ago: executing program 8 (id=1208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xe256610c6200136d}, 0x44004094) 1m52.337489952s ago: executing program 8 (id=1212): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x34}}, 0x240008c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400c0}, 0x2004c8c4) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000040)={0x1}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000000500000614000480e7b1040001400000000b050003000600"/42], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4040884) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xfff2, 0xffff}, {0xa}}}, 0x24}}, 0x0) 1m50.541562047s ago: executing program 8 (id=1215): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x24008c04}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027"], 0xb4}}, 0x8044) 1m50.125294077s ago: executing program 8 (id=1218): unshare(0x20060400) r0 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) fallocate(r0, 0x0, 0x0, 0x400001) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc91, 0x0, 0x20002fb}) r2 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x2, {0x1, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0xffffffffffffc2f3, 0x0, {0xfffffffffffffffd, 0xfffffffc}, {0x5}, {0x0, 0x4}, {0x5, 0xfffffffe}, 0x62, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000140), &(0x7f0000000280)=r5}, 0x20) file_setattr(r5, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x80, 0xc, 0x7, 0x9}, 0x18, 0x100) 1m34.928633452s ago: executing program 37 (id=1218): unshare(0x20060400) r0 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) fallocate(r0, 0x0, 0x0, 0x400001) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc91, 0x0, 0x20002fb}) r2 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x2, {0x1, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffffffe, 0x0, 0xffffffffffffc2f3, 0x0, {0xfffffffffffffffd, 0xfffffffc}, {0x5}, {0x0, 0x4}, {0x5, 0xfffffffe}, 0x62, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000140), &(0x7f0000000280)=r5}, 0x20) file_setattr(r5, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x0, 0x80, 0xc, 0x7, 0x9}, 0x18, 0x100) 14.094875007s ago: executing program 7 (id=1490): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, 0x0, 0x0) getpid() 13.40932136s ago: executing program 2 (id=1492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00Ch>', 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) unshare(0x1e060c80) openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, &(0x7f00000001c0)}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) r7 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 12.037032531s ago: executing program 7 (id=1494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x88080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4810}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400a040000008d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2020, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000040)={[0x8080000, 0x100000, 0x80a0000, 0x10000], 0x100000000, 0x11, 0xfffffffffffffffd}) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000800)={0x1000, "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"}) 11.318440645s ago: executing program 2 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000065c0)=[{{&(0x7f0000000300)=@ethernet, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000380)=""/24, 0x18}, {&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000066c0)=""/100, 0x64}, {&(0x7f0000001600)=""/232, 0xe8}, {&(0x7f0000001700)=""/162, 0xa2}], 0x6, &(0x7f0000001840)=""/40, 0x28}, 0x8}, {{&(0x7f0000001880)=@can, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/255, 0xff}], 0x1, &(0x7f0000001a40)=""/120, 0x78}, 0x5}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000001ac0)=""/161, 0xa1}, {&(0x7f0000001dc0)=""/222, 0xde}, {&(0x7f0000000540)=""/10, 0xa}, {&(0x7f0000001f00)=""/231, 0xe7}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)}], 0x6}, 0x9}, {{0x0, 0x0, &(0x7f0000006400)=[{&(0x7f00000030c0)=""/116, 0x74}, {&(0x7f0000003140)=""/217, 0xd9}, {&(0x7f0000003240)=""/4096, 0x1000}, {&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/56, 0x38}, {&(0x7f0000005280)}, {&(0x7f00000052c0)=""/18, 0x12}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/200, 0xc8}], 0x9, &(0x7f00000064c0)=""/195, 0xc3}, 0x4}], 0x4, 0x40000022, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000180)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000007840)=[{&(0x7f0000006740)=""/4096, 0x1000}, {&(0x7f0000007740)=""/86, 0x56}, {&(0x7f0000001580)=""/110, 0x6e}], 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x12a) r5 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000002fc0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) syz_usbip_server_init(0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000240)='./file1\x00', 0x88) io_setup(0x200, &(0x7f0000000140)) 11.253533114s ago: executing program 9 (id=1498): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000040)='hpfs\x00', 0x800, 0x0) 10.85869113s ago: executing program 9 (id=1500): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x1, @vbi={0x10001, 0x6, 0x2, 0x38414261, [0x3, 0x7fff], [0x8001, 0x6], 0x13a}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r3 = io_uring_setup(0x20001b7b, &(0x7f0000000040)={0x0, 0x6889, 0x1f280, 0x3, 0x1e4}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) io_uring_enter(r3, 0x8ae, 0xfbb9, 0x1e, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000001c0)=""/8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) kcmp(r7, 0x0, 0x5, 0xffffffffffffffff, r5) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r8, 0x4008af23, &(0x7f0000000400)={0x0, 0x800}) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_bcm(0x1d, 0x2, 0x2) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r9, &(0x7f0000004900)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 8.532289715s ago: executing program 7 (id=1504): r0 = getpid() socket$nl_rdma(0x10, 0x3, 0x14) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20048880}, 0x400c0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x42054) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}]}}, 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRES32=r0], 0x48) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x52) 8.127659578s ago: executing program 5 (id=1505): r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='timerslack_ns\x00') write$binfmt_format(r1, &(0x7f0000000180)='0\x00', 0x2) 7.997554616s ago: executing program 9 (id=1506): lsm_set_self_attr(0x68, &(0x7f0000000100)=ANY=[], 0x20, 0x0) 7.663100752s ago: executing program 2 (id=1507): lsm_set_self_attr(0x68, &(0x7f0000000100)=ANY=[], 0x20, 0x0) (fail_nth: 1) 7.068657167s ago: executing program 9 (id=1509): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r0, 0x0, 0x7, 0x0, &(0x7f0000000000)=0x31) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001500ffef82acc65a03590100fcffffff0000000010000000d6c5bbf103f6417fedbd654ad21d8dbef1964191fd0919ccfe8050c1cb86e904c8826d1bc2c1bc96e486cdc56e0b9b6cfaf384005b686b3b655a2a8c518d76cdc7a0c943bb89fcda7bb5fd29caa708d773b8122068eec0"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c8bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x4040) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0xffffffffffffffff, 0x7fffffff, 0x6, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0x22}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x2, 0x81}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x84}}, 0xc0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x74, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x40, 0x40000800, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000180)=0x8000) 6.985158701s ago: executing program 5 (id=1510): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x8081) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r2, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000840), 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xb, @empty, 0x3}, {0xa, 0x4e2a, 0x2, @remote, 0x80000001}, 0xffffffffffffffff, 0xfffffe4d}}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3}) 6.90874698s ago: executing program 7 (id=1511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x80000, 0x41}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000280)=[r9], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r11, r10, r11], 0x0, 0x0, 0xffffffffffffffff}) sync_file_range(r3, 0x6, 0x0, 0x7) r12 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x8, 0x210000) syz_usb_control_io(r12, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0021280000000203f70ba38140db2252a3d5"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r14, r13, 0x25, 0x0, @val=@perf_event={0xba6}}, 0x18) 6.907387048s ago: executing program 2 (id=1512): socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2400c110, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xcb8b, 0x9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x80c80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0xbc}}, 0x40) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) 5.570714255s ago: executing program 1 (id=1513): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x7ff}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x10}, 0x200440d1) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 5.340375885s ago: executing program 5 (id=1514): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1a0000000000000000000005000000000000007532cf3a997c11e44349e4be7c7061383f66d5c8d3fce7a312336e786ac2d64d1a23d4675f9efdbe31a067910e82bb4c86790e548475b076d29c9281497aa0ec6a173b0dca3c2b2296804cd49842bae2943e9dd0a2c14af2d226c998649d57b228dd884e5d1070438a0ccffa24ed468a8c56cb0f8948bf7cea0d636da7922569b915544414b07b5c239d5e04f59a3b6a6873a83f44549627829286fc679e77d24847392e9d5b8417bf67b1cd73c6cdf429723bd8318720cbd93ee0ecac088ac8084ca0abd18e6d679effab73853ae4a9066d924f5d87e6d8fb253de10c44fa9dc3045686dd8c6ad0e9cb4ca401311678340f1c45cfa5ed80178be6856d575ab54b4b0d014420de", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 4.856171861s ago: executing program 5 (id=1515): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x1}]}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$kcm(0x11, 0xa, 0x300) syz_emit_ethernet(0x2a, &(0x7f00000026c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffe000000213069078e000000100"/31], 0x0) r4 = mmap$IORING_OFF_CQ_RING(0x0, 0x80000000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_submit(r1, r4, r3, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x9, 0x0, 0x0, 0x0, &(0x7f0000001740)=[{0x8, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x98, &(0x7f0000000580)=0x8ff, 0x82}, {0x3, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x10000, 0x0, 0x82}, {0x4d, 0x0, 0x82}, {0x8000000000000000, 0x0, 0x82}, {0x202, 0x0, 0x2}, {0x218, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x9, 0x0, 0xcef9c93d9ac71a02}, {0x7, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x401, 0x0, 0x82}, {0x3eb8, 0x0, 0x82}, {0x8a, 0x0, 0x82}, {0x5, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0xb, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x10000, 0x0, 0x82}, {0x66, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x81, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x300000000000000, 0x0, 0x82}, {0x4, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x3ff, 0x0, 0x2}, {0xbe, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x21, 0x0, 0x82}, {0x8001, 0x0, 0x2}, {0x80000000, 0x0, 0x2}, {0x80000000, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x3ae, 0x0, 0x82}, {0x10, 0x0, 0x2}, {0xfffffffffffffffa, 0x0, 0x2}], 0x34}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r5 = timerfd_create(0x7ce7536af22cdef7, 0x800) timerfd_gettime(r5, &(0x7f0000000180)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x100000000, 0x0) read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 4.739392659s ago: executing program 1 (id=1516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000400)={{0xa, 0x4e21, 0x8, @loopback, 0x8}, {0xa, 0x4e20, 0xffff8676, @private0, 0xfffffffa}, 0x1, {[0x2, 0x6, 0x3, 0x5, 0xb94d, 0x0, 0x6, 0x5]}}, 0x5c) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000001640)={0x9, 0x2, 0x4}) r5 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0xfdfd, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) r6 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 3.780263609s ago: executing program 1 (id=1517): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) syz_emit_ethernet(0x57, &(0x7f0000000500)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x1, 0x6, "95367b", 0x21, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @empty, {[@hopopts={0x3a, 0x0, '\x00', [@pad1]}], {0x4e21, 0x4e24, 0x11, 0x0, @opaque="f1e4bd9c1a121b2029"}}}}}}, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) (async, rerun: 64) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (rerun: 64) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) socket(0x10, 0x3, 0x0) (async, rerun: 32) write(r0, &(0x7f0000000000), 0x0) (async, rerun: 32) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x8000) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000300)={0x0, 0x8, 0x0, 'queue0\x00', 0x2}) (async) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000140)={0x3}) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0xb00}], 0x1, 0x0, 0x0, 0x0) (async) write$dsp(r2, &(0x7f0000002200)="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", 0x400) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.605344395s ago: executing program 5 (id=1518): r0 = socket$packet(0x11, 0x3, 0x300) mount(&(0x7f0000000080)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='nilfs2\x00', 0x840, &(0x7f0000000180)='\x00') setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x1ff, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [{0x20, '\x0f\x10\t'}]}, 0x8) close(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={[&(0x7f00000003c0)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) 3.023763487s ago: executing program 1 (id=1519): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x2, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @empty}}}}}}, 0x0) 2.62905347s ago: executing program 1 (id=1520): r0 = socket$pppoe(0x18, 0x1, 0x0) accept(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x6, 0x58}, 0x90) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x3, 0x6f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x8, 0x4824b3966aa41fd4, 0xe, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '5'}, {0x5, 0x24, 0x0, 0x85e}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xbc69, 0x5, 0x5}, {0x6, 0x24, 0x1a, 0xffff, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xcc, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0xf3, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0xff, 0x6}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r3, 0x4004550d, 0x0) 2.514563484s ago: executing program 2 (id=1521): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) timerfd_gettime(0xffffffffffffffff, 0x0) r1 = inotify_init() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f00000005c0)={0x0, 0xfffffffc, 0x100, 0x0, 0x81e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x3}}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r9, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x972, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r10 = getpid() prlimit64(r10, 0xb, &(0x7f0000000040)={0x8000000000000001, 0xa3a}, &(0x7f00000000c0)) sched_setaffinity(r10, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r11 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r11, 0x1, 0x0) r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r12, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r13 = accept4(r7, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.007456123s ago: executing program 7 (id=1522): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2092) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x3, 0x4000007, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f0000000480)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(r2, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2) semctl$GETZCNT(r2, 0x3, 0xf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x73, 0x0, 0xfffff038}, {0x28, 0x0, 0x4d, 0xffeff024}, {0x6, 0x2, 0xff}]}, 0x10) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.25519327s ago: executing program 2 (id=1523): unshare(0x6020400) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x356, 0xa0, 0x780, 0x670, 0x3, 0x2, 0x0, 0xfffffffe, {0x8, 0x7, 0xffffffff}, {0x27, 0x0, 0x1}, {0x401, 0x7}, {0xffffffff, 0x4, 0x1}, 0x3, 0x0, 0xe512, 0x7fff, 0x1, 0x6e, 0x10, 0x2, 0x3, 0x1000080, 0x8fac, 0x5, 0x8, 0x100, 0x0, 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x5, &(0x7f0000000340)=0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chroot(&(0x7f0000000040)='./file0\x00') r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$igmp(0x2, 0x3, 0x2) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x4000085}, 0x8052) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f00000193c0)='./file0\x00', &(0x7f0000019400), 0x10, &(0x7f0000019540)=ANY=[@ANYBLOB]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640), 0x0, 0x48040) socket$alg(0x26, 0x5, 0x0) 788.881736ms ago: executing program 9 (id=1524): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000003c0)={0x1, 0x2, 0x1000, 0x5, &(0x7f0000000000)="5c8959f9d2", 0xed, 0x0, &(0x7f00000002c0)="c10a880716c5e4dab968a1afdac32d601a235c8ca71b0128fa66c8a4755541cff7b24fd1c02840679fe261e271b85ead3e0e08d6060a15daa13ff62a945273d8da16a722e728555f0a8dc3961f97c6a8daf6180d2d1e79370b0275c44f0f75e7f3f3c6c06b1f84ce02d5be6afc57700d89dd88972003dc931872191001631109115d92020450dcb91015c5a43951176c2702cc546974748210b5f77c4d3f4b855b7327b6895aa38dcff89bb57ad7421c59e2bf2ece4d9d2ae939d2da808a2b759d07199d83edfaf673aeda777f5e576558c5c6ed097c5e39b2578774484df25bd8c000ff4d614837123766e136"}) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_VMA(0x4f, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1034, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0) 117.230832ms ago: executing program 5 (id=1525): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 116.739415ms ago: executing program 7 (id=1526): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) memfd_secret(0x80000) syz_usb_connect(0x3, 0x24, &(0x7f0000000c40)={{0x12, 0x1, 0x201, 0xb2, 0xc2, 0xad, 0x8, 0x458, 0x7005, 0x7a55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1c, 0x1, 0x90, 0x4, "", [{{0x9, 0x4, 0x1d, 0xfc, 0x0, 0x4f, 0x25, 0xbe, 0x4}}]}}]}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007da000/0x4000)=nil, &(0x7f00009fa000/0x3000)=nil, &(0x7f000033d000/0x1000)=nil, &(0x7f0000151000/0x2000)=nil, &(0x7f0000906000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000ea000/0x9000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xf9) 90.637958ms ago: executing program 9 (id=1527): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000100), 0x4) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000740)={&(0x7f0000000700)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x2}, 0x10}, 0x1, 0x0, 0x0, 0x4008851}, 0x40008d5) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x437, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x44583}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmmsg$sock(r4, &(0x7f0000000380)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x8, r6, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="2f1aacd3f68db51a2bb983e03b10d59b289f2ae4", 0x14}], 0x1}}], 0x1, 0x80) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48000) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r10, 0x80015b12, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) recvmsg(0xffffffffffffffff, 0x0, 0x0) r11 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) 0s ago: executing program 1 (id=1528): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x30}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) kernel console output (not intermixed with test programs): T10] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 431.703213][T10661] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1117'. [ 432.317351][T10628] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 432.393350][T10399] veth0_vlan: entered promiscuous mode [ 432.522024][T10628] usb 8-1: Using ep0 maxpacket: 32 [ 432.954786][ T10] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 432.972136][ T10] ath9k_htc: Failed to initialize the device [ 433.001080][ T10] usb 9-1: ath9k_htc: USB layer deinitialized [ 433.089347][T10628] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 433.099254][T10628] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 433.110479][T10628] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.140654][T10628] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 433.175257][T10628] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 433.205150][T10399] veth1_vlan: entered promiscuous mode [ 433.208719][T10628] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 433.235262][ T30] kauditd_printk_skb: 746 callbacks suppressed [ 433.235276][ T30] audit: type=1400 audit(1783779493.514:12090): avc: denied { read open } for pid=10675 comm="syz.2.1120" path="net:[4026532892]" dev="nsfs" ino=4026532892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 433.279565][T10628] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 433.313289][T10628] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 433.472003][ T30] audit: type=1400 audit(1783779493.514:12091): avc: denied { create } for pid=10675 comm="syz.2.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.501530][T10628] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.523427][T10628] usb 8-1: config 0 descriptor?? [ 433.568958][ T30] audit: type=1400 audit(1783779493.544:12092): avc: denied { create } for pid=10675 comm="syz.2.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.649173][T10399] veth0_macvtap: entered promiscuous mode [ 433.662116][ T30] audit: type=1400 audit(1783779493.554:12093): avc: denied { write } for pid=10675 comm="syz.2.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.674001][T10399] veth1_macvtap: entered promiscuous mode [ 433.725689][ T30] audit: type=1400 audit(1783779493.574:12094): avc: denied { read } for pid=10675 comm="syz.2.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.808455][ T30] audit: type=1400 audit(1783779493.484:12088): avc: denied { map_create } for pid=10641 comm="syz.8.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 433.867781][T10399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.880072][ T30] audit: type=1400 audit(1783779493.574:12095): avc: denied { bpf } for pid=10641 comm="syz.8.1112" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 433.912824][ T30] audit: type=1400 audit(1783779493.574:12096): avc: denied { prog_load } for pid=10641 comm="syz.8.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 433.968228][T10399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.984985][T10627] audit: audit_backlog=65 > audit_backlog_limit=64 [ 434.008496][T10627] audit: audit_lost=182 audit_rate_limit=0 audit_backlog_limit=64 [ 434.020204][ T1109] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.048007][ T1109] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.080213][ T1109] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.109958][ T1109] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.858462][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.881911][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.003548][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.022942][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.012757][ T7000] usb 8-1: USB disconnect, device number 21 [ 436.110601][ T5272] 8021q: adding VLAN 0 to HW filter on device eth19 [ 437.119989][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1125'. [ 437.434022][T10703] SET target dimension over the limit! [ 438.246400][ T30] kauditd_printk_skb: 261 callbacks suppressed [ 438.246456][ T30] audit: type=1400 audit(1783779498.524:12339): avc: denied { read write } for pid=10702 comm="syz.2.1126" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 438.376483][ T30] audit: type=1400 audit(1783779498.564:12340): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.453194][ T30] audit: type=1400 audit(1783779498.564:12341): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.567239][ T30] audit: type=1400 audit(1783779498.564:12342): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.636074][ T30] audit: type=1400 audit(1783779498.564:12343): avc: denied { read } for pid=5272 comm="dhcpcd" name="n52" dev="tmpfs" ino=6194 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.710252][ T30] audit: type=1400 audit(1783779498.564:12344): avc: denied { read open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n52" dev="tmpfs" ino=6194 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.794055][ T30] audit: type=1400 audit(1783779498.564:12345): avc: denied { getattr } for pid=5272 comm="dhcpcd" path="/run/udev/data/n52" dev="tmpfs" ino=6194 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 438.830223][ T30] audit: type=1400 audit(1783779498.594:12346): avc: denied { mount } for pid=10702 comm="syz.2.1126" name="/" dev="hugetlbfs" ino=38766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 438.895684][ T30] audit: type=1400 audit(1783779498.604:12347): avc: denied { read write } for pid=8466 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 438.932909][T10727] 9p: Bad value for 'wfdno' [ 439.001975][ T30] audit: type=1400 audit(1783779498.604:12348): avc: denied { read write open } for pid=8466 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.027696][ T7699] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 439.156952][ T5712] usb 9-1: USB disconnect, device number 12 [ 439.202305][ T7699] usb 8-1: Using ep0 maxpacket: 8 [ 439.233103][ T7699] usb 8-1: unable to get BOS descriptor or descriptor too short [ 439.296715][ T7699] usb 8-1: config 0 has an invalid interface number: 88 but max is 0 [ 439.329050][ T7699] usb 8-1: config 0 has no interface number 0 [ 439.345223][ T7699] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 439.377907][ T7699] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 439.400092][ T7699] usb 8-1: config 0 interface 88 has no altsetting 0 [ 439.514386][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.516487][ T7699] usb 8-1: language id specifier not provided by device, defaulting to English [ 439.521406][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.745584][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 440.200731][ T7699] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 440.220898][ T7699] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 440.233181][ T7699] usb 8-1: Manufacturer: å¥ê•»ï¾¡ä“¬ï‘·Ï™ã…¾ä€³á˜¶ï¹‡ë…šØé³ë˜—⊇ͳ䭔妸ä‘芑ãˆâ¨ê‹íš·í’‹â·¦á˜é‘²ìŒ¯å˜çŽœå¸•âƒ¢æ§´ç…캟è¹î¶¼á“©ï® èœí„·è§™å †Ã¢ [ 440.271818][ T7699] usb 8-1: config 0 descriptor?? [ 440.529369][ T7699] input: å¥ê•»ï¾¡ä“¬ï‘·Ï™ã…¾ä€³á˜¶ï¹‡ë…šØé³ë˜—⊇ͳ䭔妸ä‘芑ãˆâ¨ê‹íš·í’‹â·¦á˜é‘²ìŒ¯å˜çŽœå¸•âƒ¢æ§´ç…캟è¹î¶¼á“©ï® èœí„·è§™å as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.88/input/input24 [ 440.729408][ T7699] usb 8-1: USB disconnect, device number 22 [ 440.953704][T10760] tipc: Started in network mode [ 440.959037][T10760] tipc: Node identity 4, cluster identity 4711 [ 440.965216][T10760] tipc: Node number set to 4 [ 441.724602][T10771] FAULT_INJECTION: forcing a failure. [ 441.724602][T10771] name failslab, interval 1, probability 0, space 0, times 0 [ 441.769180][T10771] CPU: 0 UID: 0 PID: 10771 Comm: syz.7.1140 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.769208][T10771] Tainted: [L]=SOFTLOCKUP [ 441.769214][T10771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 441.769223][T10771] Call Trace: [ 441.769229][T10771] [ 441.769235][T10771] dump_stack_lvl+0x100/0x190 [ 441.769260][T10771] should_fail_ex.cold+0x5/0xa [ 441.769283][T10771] should_failslab+0xc2/0x120 [ 441.769302][T10771] __kmalloc_noprof+0xfc/0x820 [ 441.769318][T10771] ? __pfx_dynamic_dname+0x10/0x10 [ 441.769339][T10771] ? tomoyo_encode2+0xfb/0x3c0 [ 441.769367][T10771] tomoyo_encode2+0xfb/0x3c0 [ 441.769395][T10771] tomoyo_encode+0x29/0x50 [ 441.769418][T10771] tomoyo_realpath_from_path+0x18c/0x690 [ 441.769448][T10771] tomoyo_path_number_perm+0x23c/0x580 [ 441.769468][T10771] ? tomoyo_path_number_perm+0x22e/0x580 [ 441.769494][T10771] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 441.769541][T10771] ? find_held_lock+0x2b/0x80 [ 441.769565][T10771] ? __fget_files+0x215/0x3d0 [ 441.769590][T10771] ? hook_file_ioctl_common+0x140/0x440 [ 441.769605][T10771] ? __fget_files+0x215/0x3d0 [ 441.769632][T10771] ? __fget_files+0x21f/0x3d0 [ 441.769661][T10771] security_file_ioctl+0xd3/0x230 [ 441.769685][T10771] __x64_sys_ioctl+0xb7/0x210 [ 441.769709][T10771] do_syscall_64+0x115/0x870 [ 441.769734][T10771] ? clear_bhb_loop+0x40/0x90 [ 441.769756][T10771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.769780][T10771] RIP: 0033:0x7fd2acb9de59 [ 441.769795][T10771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.769811][T10771] RSP: 002b:00007fd2ad9e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.769829][T10771] RAX: ffffffffffffffda RBX: 00007fd2ace25fa0 RCX: 00007fd2acb9de59 [ 441.769840][T10771] RDX: 0000200000000300 RSI: 0000000000008916 RDI: 0000000000000003 [ 441.769851][T10771] RBP: 00007fd2ad9e1090 R08: 0000000000000000 R09: 0000000000000000 [ 441.769861][T10771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.769871][T10771] R13: 00007fd2ace26038 R14: 00007fd2ace25fa0 R15: 00007ffd86dfd8f8 [ 441.769896][T10771] [ 441.769920][T10771] ERROR: Out of memory at tomoyo_realpath_from_path. [ 443.265581][ T5614] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 443.515242][T10795] netlink: 'syz.2.1146': attribute type 1 has an invalid length. [ 443.680379][ T30] kauditd_printk_skb: 1209 callbacks suppressed [ 443.680395][ T30] audit: type=1400 audit(1783779503.954:13207): avc: denied { search } for pid=10794 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.708236][ T30] audit: type=1400 audit(1783779503.954:13208): avc: denied { read } for pid=10794 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 443.735460][ T30] audit: type=1400 audit(1783779503.954:13209): avc: denied { read open } for pid=10794 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 443.787310][ T30] audit: type=1400 audit(1783779504.064:13210): avc: denied { search } for pid=10794 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.879838][ T30] audit: type=1400 audit(1783779504.064:13211): avc: denied { search } for pid=10794 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.906515][T10795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.060070][T10799] loop5: detected capacity change from 0 to 7 [ 444.066694][T10799] Dev loop5: unable to read RDB block 7 [ 444.072287][T10799] loop5: AHDI p1 [ 444.075909][T10799] loop5: partition table partially beyond EOD, truncated [ 444.118586][T10793] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 444.151089][ T30] audit: type=1400 audit(1783779504.064:13212): avc: denied { search } for pid=10794 comm="cmp" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.414619][ T30] audit: type=1400 audit(1783779504.064:13213): avc: denied { read } for pid=10794 comm="cmp" name="resolv.conf.eth20.link" dev="tmpfs" ino=6393 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 444.441579][ T30] audit: type=1400 audit(1783779504.074:13214): avc: denied { read open } for pid=10794 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth20.link" dev="tmpfs" ino=6393 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 444.470083][ T30] audit: type=1400 audit(1783779504.094:13216): avc: denied { read write } for pid=9375 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.504055][ T30] audit: type=1400 audit(1783779504.094:13217): avc: denied { read write open } for pid=9375 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 444.622145][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.408187][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'. [ 446.129222][ T5272] 8021q: adding VLAN 0 to HW filter on device eth20 [ 446.939374][T10833] netlink: zone id is out of range [ 446.944576][T10833] netlink: zone id is out of range [ 447.149584][T10824] syz.9.1152 (10824): drop_caches: 2 [ 448.685777][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 448.685794][ T30] audit: type=1400 audit(1783779508.964:13385): avc: denied { read } for pid=10842 comm="syz.2.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 448.958322][ T30] audit: type=1400 audit(1783779509.114:13386): avc: denied { write } for pid=10838 comm="syz.8.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.069409][ T30] audit: type=1400 audit(1783779509.114:13387): avc: denied { read } for pid=10838 comm="syz.8.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.112589][ T5726] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 449.152572][ T30] audit: type=1400 audit(1783779509.114:13388): avc: denied { read } for pid=10838 comm="syz.8.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.219086][ T30] audit: type=1400 audit(1783779509.124:13389): avc: denied { write } for pid=10838 comm="syz.8.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 449.289839][ T30] audit: type=1400 audit(1783779509.134:13390): avc: denied { read write } for pid=10838 comm="syz.8.1156" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 449.328986][ T5726] usb 9-1: config 150 has an invalid interface number: 204 but max is 2 [ 449.351213][ T5726] usb 9-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 449.371583][ T5726] usb 9-1: config 150 has no interface number 0 [ 449.391324][ T30] audit: type=1400 audit(1783779509.134:13391): avc: denied { read write open } for pid=10838 comm="syz.8.1156" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 449.416278][ T5726] usb 9-1: config 150 interface 204 has no altsetting 0 [ 449.441521][ T5726] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 449.475535][ T5726] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.493515][ T30] audit: type=1400 audit(1783779509.134:13392): avc: denied { ioctl } for pid=10838 comm="syz.8.1156" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 449.524679][ T5726] usb 9-1: Product: syz [ 449.538673][ T5726] usb 9-1: Manufacturer: syz [ 449.552718][ T5726] usb 9-1: SerialNumber: syz [ 449.603580][ T30] audit: type=1400 audit(1783779509.134:13393): avc: denied { ioctl } for pid=10838 comm="syz.8.1156" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 449.669976][ T30] audit: type=1400 audit(1783779509.134:13394): avc: denied { ioctl } for pid=10838 comm="syz.8.1156" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.320423][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1158'. [ 450.374904][T10864] dlm: non-version read from control device 40 [ 450.418628][T10858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1162'. [ 450.427718][T10858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'. [ 450.475105][T10866] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1162'. [ 450.498097][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 450.553307][ T7000] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 451.207171][ T7000] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 451.218470][ T7000] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 451.228307][ T7000] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 451.261643][ T7000] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 451.283103][ T5726] xr_serial 9-1:150.204: skipping garbage [ 451.301910][ T5726] xr_serial 9-1:150.204: skipping garbage [ 451.310818][ T7000] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 451.347612][ T5726] usb 9-1: USB disconnect, device number 13 [ 451.357923][ T7000] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.409563][ T7000] usb 10-1: config 0 descriptor?? [ 451.771783][T10881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=10881 comm=syz.2.1168 [ 451.794869][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 452.258290][ T7000] hdpvr 10-1:0.0: firmware version 0xd9 dated [ 452.267805][ T7000] hdpvr 10-1:0.0: untested firmware, the driver might not work. [ 452.845862][T10875] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1166'. [ 453.187132][ T7000] hdpvr 10-1:0.0: Could not setup controls [ 453.242424][ T7000] hdpvr 10-1:0.0: registering videodev failed [ 453.342903][ T7000] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -71 [ 453.399000][T10886] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1169'. [ 453.414161][ T7000] usb 10-1: USB disconnect, device number 2 [ 453.697477][ T30] kauditd_printk_skb: 488 callbacks suppressed [ 453.697488][ T30] audit: type=1400 audit(1783779513.974:13884): avc: denied { ioctl } for pid=10885 comm="syz.2.1170" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 454.183765][ T30] audit: type=1400 audit(1783779513.974:13883): avc: denied { search } for pid=10889 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.237722][ T30] audit: type=1400 audit(1783779514.014:13885): avc: denied { search } for pid=10889 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.346361][T10889] audit: audit_backlog=65 > audit_backlog_limit=64 [ 454.353847][T10889] audit: audit_lost=306 audit_rate_limit=0 audit_backlog_limit=64 [ 454.367571][T10889] audit: backlog limit exceeded [ 454.390791][T10901] audit: audit_backlog=65 > audit_backlog_limit=64 [ 454.405353][ T30] audit: type=1400 audit(1783779514.014:13886): avc: denied { search } for pid=10889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.412825][T10889] audit: audit_backlog=65 > audit_backlog_limit=64 [ 454.444093][ T8466] audit: audit_backlog=65 > audit_backlog_limit=64 [ 455.352008][ T24] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 455.382014][ T2172] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 455.535498][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 455.578287][ T24] usb 8-1: config 2 has an invalid interface number: 88 but max is 0 [ 455.587217][ T24] usb 8-1: config 2 has no interface number 0 [ 455.593592][ T2172] usb 9-1: unable to get BOS descriptor or descriptor too short [ 455.601825][ T24] usb 8-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 455.622615][ T2172] usb 9-1: not running at top speed; connect to a high speed hub [ 455.631834][ T24] usb 8-1: config 2 interface 88 has no altsetting 0 [ 455.661674][ T2172] usb 9-1: config 250 has an invalid interface number: 59 but max is 2 [ 455.676758][ T24] usb 8-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 455.700392][ T2172] usb 9-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 455.722436][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 455.742172][ T24] usb 8-1: Product: syz [ 455.748316][ T2172] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 3 [ 455.762282][ T24] usb 8-1: Manufacturer: syz [ 455.780528][ T24] usb 8-1: SerialNumber: syz [ 455.785822][ T2172] usb 9-1: config 250 has no interface number 0 [ 455.817267][ T2172] usb 9-1: config 250 interface 59 altsetting 255 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 455.854360][T10916] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 455.874181][ T2172] usb 9-1: config 250 interface 59 altsetting 255 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 455.907713][ T2172] usb 9-1: config 250 interface 59 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 455.938666][ T2172] usb 9-1: config 250 interface 59 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.997887][ T2172] usb 9-1: config 250 interface 59 has no altsetting 0 [ 456.061520][ T2172] usb 9-1: New USB device found, idVendor=1b80, idProduct=e302, bcdDevice=8c.2b [ 456.080487][ T2172] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.103964][T10916] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 456.131740][ T2172] usb 9-1: Product: syz [ 456.159923][ T2172] usb 9-1: Manufacturer: syz [ 456.182491][ T2172] usb 9-1: SerialNumber: syz [ 456.508906][ T2172] em28xx 9-1:250.59: New device syz syz @ 12 Mbps (1b80:e302, interface 59, class 59) [ 456.536958][ T2172] em28xx 9-1:250.59: Device initialization failed. [ 456.566202][ T2172] em28xx 9-1:250.59: Device must be connected to a high-speed USB 2.0 port. [ 456.612761][ T2172] usb 9-1: USB disconnect, device number 14 [ 457.172331][ T2172] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 457.349782][ T24] asix 8-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 457.390240][ T24] asix 8-1:2.88: probe with driver asix failed with error -71 [ 457.450630][ T24] usb 8-1: USB disconnect, device number 23 [ 457.521999][ T2172] usb 9-1: Using ep0 maxpacket: 32 [ 457.588280][ T2172] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.607286][ T2172] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.633090][ T2172] usb 9-1: Product: syz [ 457.647161][ T2172] usb 9-1: Manufacturer: syz [ 457.657835][ T2172] usb 9-1: SerialNumber: syz [ 457.937417][T10950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.222850][T10936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.276746][T10936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.650046][ T2172] usb 9-1: 1:1 : unsupported sample bitwidth 4 in 9 bytes [ 458.725817][ T30] kauditd_printk_skb: 588 callbacks suppressed [ 458.725832][ T30] audit: type=1400 audit(1783779519.004:14448): avc: denied { create } for pid=10959 comm="syz.7.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 458.726870][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.758648][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.796693][ T30] audit: type=1400 audit(1783779519.054:14449): avc: denied { create } for pid=10959 comm="syz.7.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.513899][ T30] audit: type=1400 audit(1783779519.064:14450): avc: denied { getopt } for pid=10959 comm="syz.7.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.537650][ T30] audit: type=1400 audit(1783779519.064:14451): avc: denied { connect } for pid=10959 comm="syz.7.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.625647][ T30] audit: type=1400 audit(1783779519.064:14452): avc: denied { name_connect } for pid=10959 comm="syz.7.1187" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 459.680703][ T2172] usb 9-1: USB disconnect, device number 15 [ 459.745722][ T30] audit: type=1400 audit(1783779519.064:14453): avc: denied { create } for pid=10962 comm="syz.5.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 459.835275][ T30] audit: type=1400 audit(1783779519.074:14454): avc: denied { create } for pid=10962 comm="syz.5.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 459.915997][ T30] audit: type=1400 audit(1783779519.074:14455): avc: denied { getopt } for pid=10962 comm="syz.5.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 460.045505][ T30] audit: type=1400 audit(1783779519.074:14456): avc: denied { connect } for pid=10962 comm="syz.5.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 460.244959][T10977] tipc: Started in network mode [ 460.249891][T10977] tipc: Node identity 4, cluster identity 4711 [ 460.256113][T10977] tipc: Node number set to 4 [ 460.318791][T10977] audit: audit_backlog=65 > audit_backlog_limit=64 [ 460.776409][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.138690][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=10989 comm=syz.7.1192 [ 461.176203][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1192'. [ 461.421997][ T2172] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 461.750830][ T2172] usb 10-1: device descriptor read/64, error -71 [ 461.991978][ T2172] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 462.071974][ T5614] Bluetooth: hci4: command 0x0405 tx timeout [ 462.093670][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 462.162029][ T2172] usb 10-1: device descriptor read/64, error -71 [ 462.273270][ T2172] usb usb10-port1: attempt power cycle [ 462.281208][T10999] kvm: kvm [10995]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x20000000000 [ 462.316276][T10999] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 462.432134][ T7699] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 462.612063][ T2172] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 462.635093][ T7699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.644491][ T2172] usb 10-1: device descriptor read/8, error -71 [ 462.657902][ T7699] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 462.671492][ T7699] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.704839][ T7699] usb 8-1: config 0 descriptor?? [ 462.907812][ T2172] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 462.951803][ T2172] usb 10-1: device descriptor read/8, error -71 [ 463.035096][ T7699] usbhid 8-1:0.0: can't add hid device: -71 [ 463.061519][ T7699] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 463.086169][ T2172] usb usb10-port1: unable to enumerate USB device [ 463.107347][ T7699] usb 8-1: USB disconnect, device number 24 [ 463.971639][ T30] kauditd_printk_skb: 1032 callbacks suppressed [ 463.971655][ T30] audit: type=1400 audit(1783779524.244:15064): avc: denied { read open } for pid=11008 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.006409][ T30] audit: type=1400 audit(1783779524.254:15065): avc: denied { getattr } for pid=11008 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.064310][ T7699] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 464.102338][ T30] audit: type=1400 audit(1783779524.254:15066): avc: denied { search } for pid=11008 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.152767][T11008] audit: audit_backlog=65 > audit_backlog_limit=64 [ 464.154232][T10998] audit: audit_backlog=65 > audit_backlog_limit=64 [ 464.176902][T10998] audit: audit_lost=459 audit_rate_limit=0 audit_backlog_limit=64 [ 464.211582][T11008] audit: audit_lost=460 audit_rate_limit=0 audit_backlog_limit=64 [ 464.242252][T10998] audit: backlog limit exceeded [ 464.304520][T11019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 464.311138][T11019] audit: audit_lost=461 audit_rate_limit=0 audit_backlog_limit=64 [ 464.366644][ T7699] usb 8-1: Using ep0 maxpacket: 32 [ 464.550171][T11019] loop5: detected capacity change from 0 to 7 [ 464.626396][T11019] Dev loop5: unable to read RDB block 7 [ 464.650624][ T7699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.666528][T11019] loop5: AHDI p1 [ 464.672235][ T7699] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 464.705976][T11019] loop5: partition table partially beyond EOD, truncated [ 464.715615][ T7699] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.777980][ T7699] usb 8-1: config 0 descriptor?? [ 464.825445][ T7699] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 464.905761][ T7699] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 465.114121][T11027] nbd: must specify a device to reconfigure [ 465.169506][ T7719] usb 8-1: USB disconnect, device number 25 [ 465.190767][ T7719] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 465.252454][ T7699] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 465.490627][ T7699] usb 10-1: unable to get BOS descriptor or descriptor too short [ 465.540001][ T7699] usb 10-1: not running at top speed; connect to a high speed hub [ 466.222193][ T7699] usb 10-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 466.291258][ T7699] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.317537][ T7699] usb 10-1: Product: syz [ 466.405290][T11045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11045 comm=syz.8.1212 [ 466.589648][ T7699] usb 10-1: Manufacturer: syz [ 466.607115][T11040] lo speed is unknown, defaulting to 1000 [ 466.618592][ T7699] usb 10-1: SerialNumber: syz [ 466.745263][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1212'. [ 466.960257][ T7699] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 467.024938][T11051] overlayfs: failed to clone upperpath [ 467.572204][T11062] fuse: fd is not a fuse device [ 467.619890][ T7699] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 467.687576][ T7699] usb 10-1: USB disconnect, device number 7 [ 468.133199][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.222319][ T5712] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 468.463004][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 468.555031][ T5712] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 468.603721][ T5712] usb 3-1: config 0 has no interface number 0 [ 468.647290][ T5712] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 468.711007][ T5712] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 468.775981][ T5712] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 468.836237][ T5712] usb 3-1: config 0 interface 196 has no altsetting 0 [ 468.966548][ T5712] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 468.976852][ T30] kauditd_printk_skb: 445 callbacks suppressed [ 468.976865][ T30] audit: type=1400 audit(1783779529.254:15462): avc: denied { ioctl } for pid=11063 comm="syz.2.1217" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.050863][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.083174][ T5712] usb 3-1: Product: syz [ 469.102060][ T5712] usb 3-1: Manufacturer: syz [ 469.129773][ T5712] usb 3-1: SerialNumber: syz [ 469.146535][ T30] audit: type=1400 audit(1783779529.264:15463): avc: denied { read write } for pid=11080 comm="syz.7.1222" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.200208][ T5712] usb 3-1: config 0 descriptor?? [ 469.256753][T11067] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 469.272227][ T30] audit: type=1400 audit(1783779529.264:15464): avc: denied { read write open } for pid=11080 comm="syz.7.1222" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.272263][ T7699] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 469.399155][ T30] audit: type=1400 audit(1783779529.304:15465): avc: denied { ioctl } for pid=11080 comm="syz.7.1222" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.500660][ T30] audit: type=1400 audit(1783779529.304:15466): avc: denied { ioctl } for pid=11080 comm="syz.7.1222" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.697564][ T30] audit: type=1400 audit(1783779529.324:15467): avc: denied { ioctl } for pid=11080 comm="syz.7.1222" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.755992][ T7699] usb 8-1: Using ep0 maxpacket: 16 [ 469.786727][ T7699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.825851][ T30] audit: type=1400 audit(1783779529.324:15468): avc: denied { ioctl } for pid=11080 comm="syz.7.1222" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.857234][ T7699] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.920564][ T7699] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 469.940528][ T30] audit: type=1400 audit(1783779529.424:15469): avc: denied { ioctl } for pid=11080 comm="syz.7.1222" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 470.009324][ T7699] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 470.052054][ T7699] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.058328][ T30] audit: type=1400 audit(1783779529.424:15470): avc: denied { read write } for pid=10399 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.089130][ T7699] usb 8-1: config 0 descriptor?? [ 470.176446][ T30] audit: type=1400 audit(1783779529.424:15471): avc: denied { read write open } for pid=10399 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.489673][T11098] overlayfs: failed to clone lowerpath [ 470.667984][ T7699] microsoft 0003:045E:07DA.000B: unknown global tag 0xc [ 470.695557][ T7699] microsoft 0003:045E:07DA.000B: item 0 2 1 12 parsing failed [ 470.728296][ T7699] microsoft 0003:045E:07DA.000B: parse failed [ 470.759212][ T7699] microsoft 0003:045E:07DA.000B: probe with driver microsoft failed with error -22 [ 470.887988][ T7699] usb 8-1: USB disconnect, device number 26 [ 471.804095][ T5712] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 471.851062][ T5712] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 471.931173][ T5712] usb 3-1: USB disconnect, device number 42 [ 472.587338][T11119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1231'. [ 473.578429][T11132] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1234'. [ 473.693509][T11139] usb usb7: usbfs: process 11139 (syz.2.1236) did not claim interface 0 before use [ 473.735143][T11137] usb usb7: usbfs: process 11137 (syz.2.1236) did not claim interface 0 before use [ 473.911990][ T2172] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 474.039808][ T30] kauditd_printk_skb: 773 callbacks suppressed [ 474.039823][ T30] audit: type=1400 audit(1783779534.314:16245): avc: denied { search } for pid=11142 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.556472][ T30] audit: type=1400 audit(1783779534.314:16247): avc: denied { create } for pid=11140 comm="syz.5.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 474.576224][ T30] audit: type=1400 audit(1783779534.314:16246): avc: denied { search } for pid=11142 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.622754][ T30] audit: type=1400 audit(1783779534.314:16248): avc: denied { search } for pid=11142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.702028][ T2172] usb 10-1: Using ep0 maxpacket: 32 [ 474.720459][ T30] audit: type=1400 audit(1783779534.324:16249): avc: denied { search } for pid=11142 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.732380][ T2172] usb 10-1: unable to get BOS descriptor or descriptor too short [ 474.779627][T11144] audit: audit_backlog=65 > audit_backlog_limit=64 [ 474.786838][T11144] audit: audit_lost=478 audit_rate_limit=0 audit_backlog_limit=64 [ 474.796198][ T30] audit: type=1400 audit(1783779534.324:16250): avc: denied { listen } for pid=11140 comm="syz.5.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 474.816668][T11144] audit: backlog limit exceeded [ 474.823733][T11144] audit: audit_backlog=65 > audit_backlog_limit=64 [ 474.848929][ T2172] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 474.884246][ T2172] usb 10-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 474.917195][ T2172] usb 10-1: config 14 has 1 interface, different from the descriptor's value: 2 [ 475.016210][ T2172] usb 10-1: config 14 has no interface number 0 [ 475.524393][ T2172] usb 10-1: config 14 interface 57 altsetting 216 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 475.542353][ T2172] usb 10-1: config 14 interface 57 altsetting 216 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 475.565884][ T2172] usb 10-1: config 14 interface 57 altsetting 216 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 475.605894][ T2172] usb 10-1: config 14 interface 57 altsetting 216 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.673697][ T2172] usb 10-1: config 14 interface 57 has no altsetting 0 [ 475.749473][ T2172] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 475.808640][ T2172] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.832002][ T2172] usb 10-1: Product: syz [ 475.840599][ T2172] usb 10-1: Manufacturer: syz [ 475.861960][ T2172] usb 10-1: SerialNumber: syz [ 476.610668][ T2172] hub 10-1:14.57: bad descriptor, ignoring hub [ 476.630729][ T2172] hub 10-1:14.57: probe with driver hub failed with error -5 [ 476.649293][ T2172] legousbtower 10-1:14.57: interrupt endpoints not found [ 477.623408][ T2172] usb 10-1: USB disconnect, device number 8 [ 477.982859][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1243'. [ 479.129254][ T30] kauditd_printk_skb: 264 callbacks suppressed [ 479.129265][ T30] audit: type=1400 audit(1783779539.384:16513): avc: denied { create } for pid=11182 comm="syz.9.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 479.227757][ T30] audit: type=1400 audit(1783779539.394:16514): avc: denied { read } for pid=11185 comm="syz.2.1245" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 479.282048][ T30] audit: type=1400 audit(1783779539.394:16515): avc: denied { read open } for pid=11185 comm="syz.2.1245" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 479.346973][ T30] audit: type=1400 audit(1783779539.404:16516): avc: denied { write } for pid=11182 comm="syz.9.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 479.429184][ T30] audit: type=1400 audit(1783779539.404:16517): avc: denied { create } for pid=11185 comm="syz.2.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 479.465092][T11190] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.478165][T11184] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.481248][ T8466] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.493576][T11189] audit: audit_backlog=65 > audit_backlog_limit=64 [ 479.500082][T11189] audit: audit_lost=480 audit_rate_limit=0 audit_backlog_limit=64 [ 480.107510][T11199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=11199 comm=syz.2.1247 [ 480.132710][T11199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1247'. [ 480.632210][ T7719] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 480.838831][ T7719] usb 8-1: config index 0 descriptor too short (expected 148, got 92) [ 480.878115][ T7719] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.906881][ T7719] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 480.917334][ T7719] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.925434][ T7719] usb 8-1: Product: syz [ 480.929590][ T7719] usb 8-1: Manufacturer: syz [ 480.934555][ T7719] usb 8-1: SerialNumber: syz [ 480.974170][ T7719] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 481.061091][ T10] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 482.109818][T11220] netlink: 'syz.5.1251': attribute type 1 has an invalid length. [ 482.153317][ T10] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 482.189272][ T10] ath9k_htc: Failed to initialize the device [ 482.228115][ T10] usb 8-1: ath9k_htc: USB layer deinitialized [ 482.258889][T11224] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 482.609412][ T5712] usb 8-1: USB disconnect, device number 27 [ 483.283768][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 483.305038][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 483.313672][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 483.325926][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 483.336476][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 483.702026][ T10] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 484.174581][ T30] kauditd_printk_skb: 771 callbacks suppressed [ 484.174596][ T30] audit: type=1400 audit(1783779544.454:17174): avc: denied { ioctl } for pid=11235 comm="syz.9.1257" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 484.260199][ T30] audit: type=1400 audit(1783779544.484:17175): avc: denied { accept } for pid=11234 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 484.261640][ T10] usb 10-1: config index 0 descriptor too short (expected 148, got 92) [ 484.282115][ T30] audit: type=1400 audit(1783779544.494:17176): avc: denied { setopt } for pid=11234 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 484.380004][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.436468][ T10] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 484.457085][ T30] audit: type=1400 audit(1783779544.494:17177): avc: denied { create } for pid=11234 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 484.515857][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.538962][ T10] usb 10-1: Product: syz [ 484.558362][ T10] usb 10-1: Manufacturer: syz [ 484.566964][ T30] audit: type=1400 audit(1783779544.524:17178): avc: denied { ioctl } for pid=11235 comm="syz.9.1257" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 484.605667][ T10] usb 10-1: SerialNumber: syz [ 484.679681][ T10] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 484.722997][ T30] audit: type=1400 audit(1783779544.524:17179): avc: denied { write } for pid=11234 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 484.834076][T11237] audit: audit_backlog=65 > audit_backlog_limit=64 [ 484.845798][ T30] audit: type=1400 audit(1783779544.524:17180): avc: denied { ioctl } for pid=11235 comm="syz.9.1257" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 484.884855][T11237] audit: audit_lost=520 audit_rate_limit=0 audit_backlog_limit=64 [ 484.901573][T11237] audit: backlog limit exceeded [ 484.964550][ T7000] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 484.978497][T11253] bond1: entered allmulticast mode [ 485.002557][T11253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 485.422065][ T5611] Bluetooth: hci5: command tx timeout [ 485.637831][T11261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.026819][ T9] usb 10-1: USB disconnect, device number 9 [ 486.062348][ T7000] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 486.083601][ T7000] ath9k_htc: Failed to initialize the device [ 486.105655][ T9] usb 10-1: ath9k_htc: USB layer deinitialized [ 486.363952][ T48] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.517451][ T48] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.572881][ T5742] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 486.647465][ T48] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.056506][ T5742] usb 8-1: config 0 has an invalid descriptor of length 195, skipping remainder of the config [ 487.101485][ T5742] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 487.133684][ T5742] usb 8-1: New USB device found, idVendor=09da, idProduct=062b, bcdDevice= 0.00 [ 487.161580][ T5742] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.207916][ T5742] usb 8-1: config 0 descriptor?? [ 487.220722][ T48] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.501961][ T5611] Bluetooth: hci5: command tx timeout [ 487.652229][ T7000] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 487.826762][ T7000] usb 10-1: Using ep0 maxpacket: 32 [ 487.860382][ T48] bridge_slave_1: left allmulticast mode [ 487.872398][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 487.884902][ T48] bridge_slave_1: left promiscuous mode [ 487.892891][ T7000] usb 10-1: config 2 has an invalid interface number: 88 but max is 0 [ 487.896542][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.928197][ T7000] usb 10-1: config 2 has no interface number 0 [ 487.940765][ T48] bridge_slave_0: left allmulticast mode [ 487.945208][ T7000] usb 10-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 487.963107][ T7000] usb 10-1: config 2 interface 88 has no altsetting 0 [ 487.966685][ T48] bridge_slave_0: left promiscuous mode [ 487.988412][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.988983][ T7000] usb 10-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 488.011425][ T7000] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 488.022950][ T7000] usb 10-1: Product: syz [ 488.029353][ T7000] usb 10-1: Manufacturer: syz [ 488.040349][ T7000] usb 10-1: SerialNumber: syz [ 488.061963][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 488.083430][T11290] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 488.094907][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 488.113215][ T9] usb 3-1: config 0 has no interface number 0 [ 488.145728][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 488.165735][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.177560][ T9] usb 3-1: Product: syz [ 488.184425][ T9] usb 3-1: Manufacturer: syz [ 488.191396][ T9] usb 3-1: SerialNumber: syz [ 488.235821][ T9] usb 3-1: config 0 descriptor?? [ 488.337515][T11287] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 488.396986][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.430727][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.451548][ T48] bond0 (unregistering): Released all slaves [ 488.479588][T11233] lo speed is unknown, defaulting to 1000 [ 488.616854][ T48] tipc: Left network mode [ 488.929687][ T7719] usb 8-1: USB disconnect, device number 28 [ 488.944294][ T48] hsr_slave_0: left promiscuous mode [ 488.951760][ T48] hsr_slave_1: left promiscuous mode [ 488.961350][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.970011][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.980010][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.988782][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.020974][ T48] veth1_macvtap: left promiscuous mode [ 489.026704][ T48] veth0_macvtap: left promiscuous mode [ 489.043397][ T48] veth1_vlan: left promiscuous mode [ 489.048887][ T48] veth0_vlan: left promiscuous mode [ 489.153285][T11305] netlink: 'syz.2.1271': attribute type 2 has an invalid length. [ 489.187718][ T30] kauditd_printk_skb: 345 callbacks suppressed [ 489.187738][ T30] audit: type=1400 audit(1783779549.444:17520): avc: denied { write } for pid=11294 comm="syz.2.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 489.456390][ T30] audit: type=1400 audit(1783779549.544:17521): avc: denied { ioctl } for pid=11294 comm="syz.2.1271" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 489.587976][ T5611] Bluetooth: hci5: command tx timeout [ 489.609730][ T7000] asix 10-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 489.749423][ T30] audit: type=1400 audit(1783779549.544:17522): avc: denied { ioctl } for pid=11294 comm="syz.2.1271" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.005567][ T30] audit: type=1400 audit(1783779549.604:17523): avc: denied { ioctl } for pid=11286 comm="syz.9.1269" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.624963][ T30] audit: type=1400 audit(1783779549.604:17524): avc: denied { read write } for pid=8466 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 490.853774][ T7000] asix 10-1:2.88: probe with driver asix failed with error -71 [ 490.864870][ T7000] usb 10-1: USB disconnect, device number 10 [ 490.920529][ T30] audit: type=1400 audit(1783779549.614:17525): avc: denied { ioctl } for pid=11286 comm="syz.9.1269" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 490.955637][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 490.966375][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 490.987585][ T30] audit: type=1400 audit(1783779549.634:17526): avc: denied { read write open } for pid=8466 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.038094][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 491.114026][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 491.183415][ T30] audit: type=1400 audit(1783779549.634:17527): avc: denied { ioctl } for pid=8466 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 491.220234][ T9] usb 3-1: USB disconnect, device number 43 [ 491.366713][ T30] audit: type=1400 audit(1783779549.774:17528): avc: denied { ioctl } for pid=11294 comm="syz.2.1271" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 491.516243][ T30] audit: type=1400 audit(1783779549.904:17529): avc: denied { ioctl } for pid=11294 comm="syz.2.1271" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 491.662159][ T5611] Bluetooth: hci5: command tx timeout [ 492.675309][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 493.082817][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 493.357176][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.674050][ T7000] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 493.741649][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.846998][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 493.894708][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.908079][ T9] usb 10-1: Product: syz [ 493.915004][ T9] usb 10-1: Manufacturer: syz [ 493.922721][ T9] usb 10-1: SerialNumber: syz [ 493.960304][ T48] team0 (unregistering): Port device team_slave_1 removed [ 493.961301][ T9] usb 10-1: 0:2 : does not exist [ 493.975917][ T7000] usb 8-1: Using ep0 maxpacket: 8 [ 494.003802][ T7000] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 494.014034][ T9] usb 10-1: unit 9 not found! [ 494.019354][ T48] team0 (unregistering): Port device team_slave_0 removed [ 494.027904][ T7000] usb 8-1: config 179 has no interface number 0 [ 494.054624][ T7000] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 494.095001][ T7000] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 494.115263][ T7000] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 494.130678][ T7000] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 494.146221][ T7000] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 494.161961][ T7000] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 494.171388][ T7000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.214250][ T30] kauditd_printk_skb: 555 callbacks suppressed [ 494.214264][ T30] audit: type=1400 audit(1783779554.494:18028): avc: denied { create } for pid=11326 comm="syz.2.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 494.271855][T11321] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 494.333038][ T30] audit: type=1400 audit(1783779554.494:18029): avc: denied { search } for pid=11312 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.461349][ T30] audit: type=1400 audit(1783779554.494:18030): avc: denied { search } for pid=11312 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.586818][ T30] audit: type=1400 audit(1783779554.494:18031): avc: denied { search } for pid=11312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.709303][ T30] audit: type=1400 audit(1783779554.494:18032): avc: denied { search } for pid=11312 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.817808][ T30] audit: type=1400 audit(1783779554.494:18033): avc: denied { search } for pid=11312 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.861039][ T7719] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input26 [ 494.969409][ T30] audit: type=1400 audit(1783779554.494:18034): avc: denied { search } for pid=11312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.058855][ T7000] usb 8-1: USB disconnect, device number 29 [ 495.064871][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 495.064913][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 495.125618][ T30] audit: type=1400 audit(1783779554.494:18035): avc: denied { read } for pid=11312 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.169135][T11339] audit: audit_backlog=65 > audit_backlog_limit=64 [ 495.197002][ T4962] audit: audit_backlog=65 > audit_backlog_limit=64 [ 495.615171][ T5742] usb 10-1: USB disconnect, device number 11 [ 495.716671][T11233] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.761803][T11233] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.796812][T11233] bridge_slave_0: entered allmulticast mode [ 495.830612][T11233] bridge_slave_0: entered promiscuous mode [ 495.870644][T11339] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1280'. [ 495.929129][T11341] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1280'. [ 495.941633][T11233] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.978950][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.027650][T11233] bridge_slave_1: entered allmulticast mode [ 496.076615][T11233] bridge_slave_1: entered promiscuous mode [ 496.235665][T11233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.308773][T11233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.503161][T11233] team0: Port device team_slave_0 added [ 496.551295][T11233] team0: Port device team_slave_1 added [ 496.688665][T11233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.715192][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.771707][T11233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.816910][T11233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.838818][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.917131][T11233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.203419][T11233] hsr_slave_0: entered promiscuous mode [ 497.231403][T11233] hsr_slave_1: entered promiscuous mode [ 497.280764][T11376] netlink: 'syz.2.1285': attribute type 2 has an invalid length. [ 498.477393][T11396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=11396 comm=syz.9.1289 [ 498.501758][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1289'. [ 499.057463][ T5272] 8021q: adding VLAN 0 to HW filter on device eth21 [ 499.259578][ T30] kauditd_printk_skb: 501 callbacks suppressed [ 499.259594][ T30] audit: type=1400 audit(1783779559.534:18503): avc: denied { read write } for pid=8466 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 499.397922][ T30] audit: type=1400 audit(1783779559.544:18504): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.508305][ T30] audit: type=1400 audit(1783779559.544:18505): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.589821][ T30] audit: type=1400 audit(1783779559.544:18506): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.710199][ T30] audit: type=1400 audit(1783779559.554:18507): avc: denied { read } for pid=5272 comm="dhcpcd" name="n55" dev="tmpfs" ino=6726 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 499.770580][ T30] audit: type=1400 audit(1783779559.554:18508): avc: denied { read open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n55" dev="tmpfs" ino=6726 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 499.862162][ T2172] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 499.885485][ T30] audit: type=1400 audit(1783779559.554:18509): avc: denied { getattr } for pid=5272 comm="dhcpcd" path="/run/udev/data/n55" dev="tmpfs" ino=6726 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 499.967931][ T30] audit: type=1400 audit(1783779559.574:18510): avc: denied { read write open } for pid=8466 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 500.038216][ T2172] usb 10-1: Using ep0 maxpacket: 8 [ 500.151370][ T30] audit: type=1400 audit(1783779559.574:18511): avc: denied { ioctl } for pid=8466 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 500.269816][ T30] audit: type=1400 audit(1783779559.654:18512): avc: denied { read } for pid=5272 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 500.453821][T11233] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 500.874566][T11233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.895565][T11233] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 500.938712][T11233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.949889][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.956860][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.006465][T11233] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 501.055050][T11233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.097773][T11233] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.130399][T11233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.860974][T11233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.009088][T11233] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.086170][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.093294][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.160491][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.167608][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.266895][ T2172] usb 10-1: unable to get BOS descriptor or descriptor too short [ 502.276043][ T2172] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 502.298255][ T2172] usb 10-1: can't read configurations, error -71 [ 504.092615][ T2172] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 504.310157][ T30] kauditd_printk_skb: 1060 callbacks suppressed [ 504.310174][ T30] audit: type=1400 audit(1783779564.574:19573): avc: denied { ioctl } for pid=11468 comm="syz.7.1307" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 504.412188][ T2172] usb 8-1: Using ep0 maxpacket: 32 [ 504.469486][ T2172] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 504.500131][ T30] audit: type=1400 audit(1783779564.584:19574): avc: denied { bpf } for pid=11454 comm="syz.5.1304" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 504.504063][ T2172] usb 8-1: config 0 has no interface number 0 [ 504.624179][ T2172] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.653510][ T30] audit: type=1400 audit(1783779564.584:19575): avc: denied { ioctl } for pid=11468 comm="syz.7.1307" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 504.683775][ T2172] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.710805][ T2172] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 504.736719][ T2172] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.748630][ T30] audit: type=1400 audit(1783779564.704:19576): avc: denied { ioctl } for pid=11468 comm="syz.7.1307" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 504.819390][T11476] loop5: detected capacity change from 0 to 7 [ 504.828998][T11476] Dev loop5: unable to read RDB block 7 [ 504.834564][T11476] loop5: AHDI p1 [ 504.838197][T11476] loop5: partition table partially beyond EOD, truncated [ 504.851196][ T2172] usb 8-1: config 0 descriptor?? [ 504.889033][ T30] audit: type=1400 audit(1783779564.714:19577): avc: denied { ioctl } for pid=11468 comm="syz.7.1307" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 505.075999][ T30] audit: type=1400 audit(1783779564.714:19578): avc: denied { sys_module } for pid=11233 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 505.251690][ T30] audit: type=1400 audit(1783779564.724:19579): avc: denied { search } for pid=11415 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.353970][ T2172] ft260 0003:0403:6030.000C: item fetching failed at offset 0/2 [ 505.405569][ T2172] ft260 0003:0403:6030.000C: failed to parse HID [ 505.422780][ T30] audit: type=1400 audit(1783779564.724:19580): avc: denied { search } for pid=11415 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.452744][ T2172] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -22 [ 505.474674][T11483] tc_dump_action: action bad kind [ 505.531133][T11483] netlink: 'syz.9.1309': attribute type 1 has an invalid length. [ 505.557333][ T30] audit: type=1400 audit(1783779564.724:19581): avc: denied { search } for pid=11415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.568102][ T2172] usb 8-1: USB disconnect, device number 30 [ 505.618806][T11481] audit: audit_backlog=65 > audit_backlog_limit=64 [ 506.820989][ T5272] 8021q: adding VLAN 0 to HW filter on device eth22 [ 507.153756][ T7000] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 507.332003][ T7000] usb 3-1: Using ep0 maxpacket: 8 [ 507.407251][ T5611] Bluetooth: unknown link type 15 [ 507.413174][ T5611] Bluetooth: hci1: connection err: -111 [ 508.254934][T11233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.741657][T11233] veth0_vlan: entered promiscuous mode [ 508.899887][T11233] veth1_vlan: entered promiscuous mode [ 509.167567][T11233] veth0_macvtap: entered promiscuous mode [ 509.241600][T11233] veth1_macvtap: entered promiscuous mode [ 509.312564][ T30] kauditd_printk_skb: 716 callbacks suppressed [ 509.312578][ T30] audit: type=1326 audit(1783779569.594:20284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11502 comm="syz.2.1313" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcaa0f5e68e code=0x7ffc0000 [ 509.401431][ T30] audit: type=1326 audit(1783779569.634:20285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11502 comm="syz.2.1313" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcaa0f5e68e code=0x7ffc0000 [ 509.461631][ T30] audit: type=1326 audit(1783779569.634:20286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11502 comm="syz.2.1313" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcaa0f5e68e code=0x7ffc0000 [ 509.516162][T11540] audit: audit_backlog=65 > audit_backlog_limit=64 [ 509.520990][T11550] audit: audit_backlog=65 > audit_backlog_limit=64 [ 509.546342][T11540] audit: audit_lost=559 audit_rate_limit=0 audit_backlog_limit=64 [ 509.555034][T11233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.574943][T11540] audit: backlog limit exceeded [ 509.575114][T11550] audit: audit_lost=560 audit_rate_limit=0 audit_backlog_limit=64 [ 509.601602][T10399] audit: audit_backlog=65 > audit_backlog_limit=64 [ 509.619396][T10399] audit: audit_lost=561 audit_rate_limit=0 audit_backlog_limit=64 [ 509.642485][T11233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.731093][ T97] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.789297][ T97] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.853231][ T97] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.954394][T11307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.034971][ T7000] usb 3-1: unable to get BOS descriptor or descriptor too short [ 510.054157][ T7000] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 510.064203][ T7000] usb 3-1: can't read configurations, error -71 [ 510.515412][ T5877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.563066][ T5877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.849353][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 511.039329][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.058646][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.165292][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 511.218797][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.253106][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.327264][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 511.400265][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.448480][ T9] usb 10-1: Product: syz [ 511.466930][ T9] usb 10-1: Manufacturer: syz [ 511.484561][ T9] usb 10-1: SerialNumber: syz [ 511.534905][ T9] usb 10-1: 0:2 : does not exist [ 511.921981][ T5712] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 512.025941][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1255'. [ 512.090466][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1255'. [ 512.158816][ T5712] usb 8-1: Using ep0 maxpacket: 8 [ 512.178712][T11582] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 2, id = 0 [ 512.204121][T11557] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1325'. [ 512.278911][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1325'. [ 512.377608][T11557] hsr_slave_1 (unregistering): left promiscuous mode [ 512.581072][ T7719] usb 10-1: USB disconnect, device number 14 [ 513.274282][T11592] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 514.322513][T11602] audit_log_start: 841 callbacks suppressed [ 514.322538][T11602] audit: audit_backlog=65 > audit_backlog_limit=64 [ 514.334938][T11602] audit: audit_lost=600 audit_rate_limit=0 audit_backlog_limit=64 [ 514.342758][T11602] audit: backlog limit exceeded [ 514.348422][T11602] audit: audit_backlog=65 > audit_backlog_limit=64 [ 514.354978][T11602] audit: audit_lost=601 audit_rate_limit=0 audit_backlog_limit=64 [ 514.362770][T11602] audit: backlog limit exceeded [ 514.368394][T11602] audit: audit_backlog=65 > audit_backlog_limit=64 [ 514.374901][T11602] audit: audit_lost=602 audit_rate_limit=0 audit_backlog_limit=64 [ 514.383629][T11602] audit: backlog limit exceeded [ 514.389250][T11602] audit: audit_backlog=65 > audit_backlog_limit=64 [ 515.515124][ T5272] 8021q: adding VLAN 0 to HW filter on device eth23 [ 515.842118][ T9] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 515.967386][ T5712] usb 8-1: unable to get BOS descriptor or descriptor too short [ 515.976840][ T5712] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 515.986781][ T5712] usb 8-1: can't read configurations, error -71 [ 516.049512][ T9] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x7 has an invalid bInterval 0, changing to 4 [ 516.097089][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 516.204775][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 516.242953][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 516.289599][ T9] usb 2-1: Product: syz [ 516.318839][ T9] usb 2-1: Manufacturer: syz [ 516.348777][ T9] usb 2-1: SerialNumber: syz [ 516.406038][ T9] usb 2-1: config 0 descriptor?? [ 516.469328][ T9] usb 2-1: selecting invalid altsetting 0 [ 518.029075][ T5712] usb 2-1: USB disconnect, device number 23 [ 518.186333][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.628588][T11645] netlink: 'syz.2.1344': attribute type 4 has an invalid length. [ 519.424709][ T30] kauditd_printk_skb: 2941 callbacks suppressed [ 519.424732][ T30] audit: type=1400 audit(1783779579.624:21407): avc: denied { execmem } for pid=11641 comm="syz.7.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 519.733543][ T30] audit: type=1400 audit(1783779579.744:21408): avc: denied { search } for pid=11639 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.820064][T11639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 519.838929][T11639] audit: audit_lost=1452 audit_rate_limit=0 audit_backlog_limit=64 [ 519.846510][ T30] audit: type=1400 audit(1783779579.744:21409): avc: denied { search } for pid=11639 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.852848][T11653] audit: audit_backlog=65 > audit_backlog_limit=64 [ 519.895067][T11639] audit: backlog limit exceeded [ 519.919871][T11639] audit: audit_backlog=65 > audit_backlog_limit=64 [ 519.942976][T11639] audit: audit_lost=1453 audit_rate_limit=0 audit_backlog_limit=64 [ 519.948299][ T30] audit: type=1400 audit(1783779579.744:21410): avc: denied { search } for pid=11639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.322251][ T7000] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 520.701754][ T7000] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.738694][ T7000] usb 2-1: config 0 has no interfaces? [ 520.761158][ T7000] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 520.793984][ T7000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.846149][ T7000] usb 2-1: config 0 descriptor?? [ 520.871143][T11660] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1349'. [ 521.242417][T10628] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 521.423413][ T7000] usb 2-1: USB disconnect, device number 24 [ 521.831999][T10628] usb 10-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 521.913360][T10628] usb 10-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.961975][T10628] usb 10-1: config 0 interface 0 has no altsetting 0 [ 522.001468][T10628] usb 10-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.00 [ 522.040551][T10628] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.101025][T10628] usb 10-1: config 0 descriptor?? [ 522.140535][T11666] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 522.150213][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1354'. [ 522.245468][T11681] fuse: fd is not a fuse device [ 522.736199][T11686] nbd: must specify a device to reconfigure [ 522.853670][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.886939][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.020779][T10628] ntrig 0003:1B96:0014.000D: ignoring exceeding usage max [ 523.080048][T10628] ntrig 0003:1B96:0014.000D: hidraw0: USB HID v0.c1 Device [HID 1b96:0014] on usb-dummy_hcd.9-1/input0 [ 523.248813][T10628] usb 10-1: USB disconnect, device number 15 [ 523.756511][T11698] fido_id[11698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 524.449210][ T30] kauditd_printk_skb: 627 callbacks suppressed [ 524.449224][ T30] audit: type=1400 audit(1783779584.724:21969): avc: denied { read write } for pid=10399 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 524.576393][ T30] audit: type=1400 audit(1783779584.724:21970): avc: denied { read write open } for pid=10399 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 524.716414][ T30] audit: type=1400 audit(1783779584.734:21971): avc: denied { ioctl } for pid=10399 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 524.827286][ T30] audit: type=1400 audit(1783779584.764:21972): avc: denied { module_request } for pid=11699 comm="syz.7.1358" kmod="tcp_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 524.919450][ T30] audit: type=1400 audit(1783779584.774:21973): avc: denied { module_request } for pid=11699 comm="syz.7.1358" kmod="net-pf-16-proto-19" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 525.058994][ T30] audit: type=1400 audit(1783779585.054:21974): avc: denied { search } for pid=11714 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.157125][ T30] audit: type=1400 audit(1783779585.054:21975): avc: denied { read } for pid=11714 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 525.211206][ T30] audit: type=1400 audit(1783779585.054:21976): avc: denied { read open } for pid=11714 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 525.319615][ T30] audit: type=1400 audit(1783779585.054:21977): avc: denied { search } for pid=11714 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.533907][ T30] audit: type=1400 audit(1783779585.064:21978): avc: denied { search } for pid=11714 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.795856][ T5272] 8021q: adding VLAN 0 to HW filter on device eth24 [ 525.823838][T11734] vxcan1: tx drop: invalid da for name 0xffffffffffffffff [ 526.963376][T11734] cgroup: Unknown subsys name 'cpuset' [ 527.967391][T11750] loop5: detected capacity change from 0 to 7 [ 527.974480][T11750] Dev loop5: unable to read RDB block 7 [ 527.980022][T11750] loop5: AHDI p1 [ 527.983907][T11750] loop5: partition table partially beyond EOD, truncated [ 529.374855][T11774] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 529.424895][T11774] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 529.475153][ T30] kauditd_printk_skb: 804 callbacks suppressed [ 529.475191][ T30] audit: type=1400 audit(1783779589.744:22783): avc: denied { read write open } for pid=10399 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 529.600740][ T30] audit: type=1400 audit(1783779589.814:22784): avc: denied { ioctl } for pid=10399 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 529.790480][ T30] audit: type=1400 audit(1783779590.064:22785): avc: denied { read write } for pid=8466 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 529.911659][ T30] audit: type=1400 audit(1783779590.094:22786): avc: denied { read write open } for pid=8466 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.035748][ T30] audit: type=1400 audit(1783779590.094:22787): avc: denied { ioctl } for pid=8466 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.191211][ T30] audit: type=1400 audit(1783779590.134:22788): avc: denied { prog_load } for pid=11781 comm="syz.9.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 530.283984][ T30] audit: type=1400 audit(1783779590.144:22789): avc: denied { bpf } for pid=11781 comm="syz.9.1377" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 530.673521][ T30] audit: type=1400 audit(1783779590.144:22790): avc: denied { create } for pid=11781 comm="syz.9.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.697196][ T30] audit: type=1400 audit(1783779590.164:22791): avc: denied { write } for pid=11781 comm="syz.9.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.816016][ T30] audit: type=1400 audit(1783779590.164:22792): avc: denied { write } for pid=11781 comm="syz.9.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 531.313987][T11800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=11800 comm=syz.5.1381 [ 531.792666][T11812] comedi comedi2: pcl726: I/O base address or length out of range [ 532.690563][ T9] IPVS: starting estimator thread 0... [ 532.887583][T11827] IPVS: using max 43 ests per chain, 103200 per kthread [ 533.055319][T11824] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 533.489776][T11830] kvm: kvm [11826]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 533.574833][T11841] tipc: Started in network mode [ 533.579716][T11841] tipc: Node identity 4, cluster identity 4711 [ 533.587298][T11841] tipc: Node number set to 4 [ 533.826915][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 534.503937][ T30] kauditd_printk_skb: 834 callbacks suppressed [ 534.503959][ T30] audit: type=1400 audit(1783779594.754:23177): avc: denied { create } for pid=11850 comm="syz.7.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 534.734343][ T30] audit: type=1400 audit(1783779594.774:23178): avc: denied { read write } for pid=11850 comm="syz.7.1395" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 535.088675][ T30] audit: type=1400 audit(1783779594.784:23179): avc: denied { read write open } for pid=11850 comm="syz.7.1395" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 535.482250][ T30] audit: type=1400 audit(1783779594.814:23180): avc: denied { map } for pid=11850 comm="syz.7.1395" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 535.512405][ T30] audit: type=1400 audit(1783779594.824:23181): avc: denied { read } for pid=11850 comm="syz.7.1395" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 535.623650][ T30] audit: type=1400 audit(1783779594.944:23182): avc: denied { read write } for pid=11850 comm="syz.7.1395" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 535.738325][ T30] audit: type=1400 audit(1783779594.954:23183): avc: denied { read write open } for pid=11850 comm="syz.7.1395" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 535.843818][ T30] audit: type=1400 audit(1783779595.004:23184): avc: denied { execute } for pid=11848 comm="syz.9.1394" path="/45/file1" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 535.873203][T11859] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.982523][ T30] audit: type=1400 audit(1783779595.074:23185): avc: denied { watch watch_reads } for pid=11848 comm="syz.9.1394" path="/45/file1" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 536.088579][ T30] audit: type=1400 audit(1783779595.104:23186): avc: denied { read write } for pid=11848 comm="syz.9.1394" name="video36" dev="devtmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 537.722156][T10628] usb 8-1: new low-speed USB device number 33 using dummy_hcd [ 537.972324][T10628] usb 8-1: Invalid ep0 maxpacket: 16 [ 538.804712][T10628] usb 8-1: new low-speed USB device number 34 using dummy_hcd [ 539.162199][T10628] usb 8-1: Invalid ep0 maxpacket: 16 [ 539.221550][T10628] usb usb8-port1: attempt power cycle [ 539.522272][ T30] kauditd_printk_skb: 725 callbacks suppressed [ 539.522289][ T30] audit: type=1400 audit(1783779599.674:23801): avc: denied { perfmon } for pid=11902 comm="syz.9.1411" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 539.602321][ T30] audit: type=1400 audit(1783779599.684:23802): avc: denied { bpf } for pid=11902 comm="syz.9.1411" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 539.716726][ T30] audit: type=1400 audit(1783779599.724:23803): avc: denied { create } for pid=11902 comm="syz.9.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 539.810618][ T30] audit: type=1400 audit(1783779599.734:23804): avc: denied { write } for pid=11902 comm="syz.9.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 539.832061][T10628] usb 8-1: new low-speed USB device number 35 using dummy_hcd [ 539.875356][T10628] usb 8-1: Invalid ep0 maxpacket: 16 [ 539.905344][T11910] /dev/nullb0: Can't lookup blockdev [ 539.912268][ T30] audit: type=1400 audit(1783779599.734:23805): avc: denied { read } for pid=11902 comm="syz.9.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 539.947368][T11910] /dev/nullb0: Can't lookup blockdev [ 539.987197][ T30] audit: type=1400 audit(1783779599.744:23806): avc: denied { read } for pid=11902 comm="syz.9.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 540.022309][T10628] usb 8-1: new low-speed USB device number 36 using dummy_hcd [ 540.054347][T10628] usb 8-1: Invalid ep0 maxpacket: 16 [ 540.059692][ T30] audit: type=1400 audit(1783779599.784:23807): avc: denied { ioctl } for pid=11880 comm="syz.7.1404" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 540.088060][T10628] usb usb8-port1: unable to enumerate USB device [ 540.124473][ T30] audit: type=1400 audit(1783779599.784:23808): avc: denied { ioctl } for pid=11880 comm="syz.7.1404" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 540.232875][ T30] audit: type=1400 audit(1783779599.784:23809): avc: denied { unmount } for pid=11233 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 540.305448][ T30] audit: type=1400 audit(1783779599.854:23810): avc: denied { ioctl } for pid=11880 comm="syz.7.1404" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 540.512766][T11922] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1418'. [ 540.546247][T11926] »»»»»»: renamed from vlan0 (while UP) [ 540.688232][T11926] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 540.734482][T11926] block device autoloading is deprecated and will be removed. [ 540.830510][T11935] macsec1: entered promiscuous mode [ 540.860606][T11935] macsec1: entered allmulticast mode [ 541.456144][ T24] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 541.934780][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 542.276511][ T24] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 542.318514][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 542.325353][ T24] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 542.335134][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.360312][ T24] usb 10-1: config 0 descriptor?? [ 542.379627][T11948] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1423'. [ 542.525690][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1425'. [ 542.590982][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1425'. [ 544.121957][ T7719] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 544.144470][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 544.150530][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 544.192604][ T24] usb 10-1: USB disconnect, device number 16 [ 544.251578][T11966] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1427'. [ 544.334755][ T7719] usb 3-1: Using ep0 maxpacket: 32 [ 544.463643][ T7719] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 544.503848][ T7719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.534916][ T30] kauditd_printk_skb: 531 callbacks suppressed [ 544.534929][ T30] audit: type=1400 audit(1783779604.814:24342): avc: denied { search } for pid=11970 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.569205][ T7719] usb 3-1: Product: syz [ 544.603478][ T7719] usb 3-1: Manufacturer: syz [ 544.619550][ T7719] usb 3-1: SerialNumber: syz [ 544.672953][ T30] audit: type=1400 audit(1783779604.824:24343): avc: denied { read write } for pid=11233 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 544.690380][T11970] audit: audit_backlog=65 > audit_backlog_limit=64 [ 544.740013][T11979] audit: audit_backlog=65 > audit_backlog_limit=64 [ 544.741413][T11977] audit: audit_backlog=65 > audit_backlog_limit=64 [ 544.756927][T11979] audit: audit_lost=1664 audit_rate_limit=0 audit_backlog_limit=64 [ 544.773965][T11970] audit: audit_lost=1665 audit_rate_limit=0 audit_backlog_limit=64 [ 544.782271][ T30] audit: type=1400 audit(1783779604.834:24344): avc: denied { read write open } for pid=11233 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 544.811748][T11970] audit: backlog limit exceeded [ 544.812691][T11977] audit: audit_lost=1666 audit_rate_limit=0 audit_backlog_limit=64 [ 544.865603][ T7719] usb 3-1: 1:1 : unsupported sample bitwidth 4 in 9 bytes [ 544.881985][ T24] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 545.042519][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 545.067354][ T7719] usb 3-1: USB disconnect, device number 46 [ 545.099745][ T24] usb 10-1: config 0 has no interfaces? [ 545.125504][ T24] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 545.141985][ T7000] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 545.167722][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.212759][ T24] usb 10-1: config 0 descriptor?? [ 545.308854][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.374160][ T7000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.446013][ T7000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.505994][ T7000] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 545.560665][ T7000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.616698][ T7000] usb 2-1: config 0 descriptor?? [ 546.466637][ T7000] usbhid 2-1:0.0: can't add hid device: -32 [ 546.476463][ T7000] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 546.734919][T10628] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 547.101209][ T7000] IPVS: starting estimator thread 0... [ 547.177495][T10628] usb 8-1: not running at top speed; connect to a high speed hub [ 547.252106][T12013] IPVS: using max 42 ests per chain, 100800 per kthread [ 547.767419][T12018] lo speed is unknown, defaulting to 1000 [ 548.164421][T12019] lo speed is unknown, defaulting to 1000 [ 549.237732][ T7000] usb 10-1: USB disconnect, device number 17 [ 549.287905][ T5712] usb 2-1: USB disconnect, device number 26 [ 549.374845][T10628] usb 8-1: unable to read config index 0 descriptor/all [ 549.419646][T10628] usb 8-1: can't read configurations, error -71 [ 549.549935][ T30] kauditd_printk_skb: 546 callbacks suppressed [ 549.549950][ T30] audit: type=1400 audit(1783779609.824:24856): avc: denied { search } for pid=11957 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.641003][T12028] atomic_op ffff88802a07f198 conn xmit_atomic 0000000000000000 [ 549.660323][ T30] audit: type=1400 audit(1783779609.824:24857): avc: denied { search } for pid=11957 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.763735][ T30] audit: type=1400 audit(1783779609.824:24858): avc: denied { search } for pid=11957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.812754][ T30] audit: type=1400 audit(1783779609.824:24859): avc: denied { getattr } for pid=11957 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.841877][ T30] audit: type=1400 audit(1783779609.824:24860): avc: denied { search } for pid=11957 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 549.866021][ T30] audit: type=1400 audit(1783779609.824:24861): avc: denied { search } for pid=11957 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.019586][ T30] audit: type=1400 audit(1783779609.834:24862): avc: denied { search } for pid=11957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.032872][ T7000] hid-generic 0005:10CF:0009.000E: unknown main item tag 0x0 [ 550.045307][ T30] audit: type=1400 audit(1783779609.834:24863): avc: denied { write search } for pid=11957 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.292407][ T30] audit: type=1400 audit(1783779609.834:24864): avc: denied { add_name search } for pid=11957 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.423944][ T30] audit: type=1400 audit(1783779609.834:24865): avc: denied { create } for pid=11957 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 550.433858][ T7000] hid-generic 0005:10CF:0009.000E: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 550.978707][T12044] lo speed is unknown, defaulting to 1000 [ 551.057757][T12040] fido_id[12040]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 551.199484][T12048] netlink: 'syz.2.1450': attribute type 1 has an invalid length. [ 551.668973][T12048] 8021q: adding VLAN 0 to HW filter on device bond3 [ 551.915309][T12057] bond3: (slave veth3): Enslaving as an active interface with a down link [ 552.101749][T12066] dummy0: entered allmulticast mode [ 552.113482][T12066] dummy0: left allmulticast mode [ 552.792809][T12062] [U]  [ 552.966413][T12065] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 553.535314][T12075] cgroup: Unknown subsys name 'cpuset' [ 554.249276][T12084] random: crng reseeded on system resumption [ 554.267669][T12082] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 554.553065][ T30] kauditd_printk_skb: 584 callbacks suppressed [ 554.553080][ T30] audit: type=1400 audit(1783779614.834:25438): avc: denied { search } for pid=12078 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.700906][ T30] audit: type=1400 audit(1783779614.834:25439): avc: denied { search } for pid=12078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.752752][T10628] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 554.768989][T12078] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.781797][T12093] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.805837][T12078] audit: audit_lost=1682 audit_rate_limit=0 audit_backlog_limit=64 [ 554.814544][T12094] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.828872][T12089] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.832208][T12093] audit: audit_lost=1683 audit_rate_limit=0 audit_backlog_limit=64 [ 554.837846][T12091] audit: audit_backlog=65 > audit_backlog_limit=64 [ 554.850382][T12089] audit: audit_lost=1684 audit_rate_limit=0 audit_backlog_limit=64 [ 555.023486][T10628] usb 3-1: Using ep0 maxpacket: 16 [ 555.066615][T10628] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 555.117639][T10628] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.196508][T10628] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 555.250706][T10628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.309436][T10628] usb 3-1: config 0 descriptor?? [ 555.324050][T12103] binder: 12101:12103 ioctl 89ea 200000000140 returned -22 [ 555.358169][T12102] binder: 12101:12102 ioctl c0306201 0 returned -14 [ 555.819889][T12109] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1467'. [ 556.196578][T10628] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 556.232429][T10628] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 556.268261][T10628] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 556.356159][T10628] hid-picolcd 0003:04D8:C002.000F: bogus close delimiter [ 556.464842][T10628] hid-picolcd 0003:04D8:C002.000F: item 0 2 2 10 parsing failed [ 556.475984][T10628] hid-picolcd 0003:04D8:C002.000F: device report parse failed [ 556.484237][T10628] hid-picolcd 0003:04D8:C002.000F: probe with driver hid-picolcd failed with error -22 [ 556.615019][T10628] usb 3-1: USB disconnect, device number 47 [ 557.100597][T12121] hpfs: Bad magic ... probably not HPFS [ 557.989858][T12130] syzkaller0: entered promiscuous mode [ 558.009702][T12130] syzkaller0: entered allmulticast mode [ 558.545940][T12132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.688991][T12132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.901121][T12132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.591991][ T30] kauditd_printk_skb: 563 callbacks suppressed [ 559.592006][ T30] audit: type=1400 audit(1783779619.804:25996): avc: denied { read } for pid=12147 comm="syz.2.1477" dev="nsfs" ino=4026532892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 560.165658][ T30] audit: type=1400 audit(1783779619.804:25997): avc: denied { read } for pid=12147 comm="syz.2.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 560.189074][ T30] audit: type=1400 audit(1783779619.804:25998): avc: denied { read open } for pid=12147 comm="syz.2.1477" path="net:[4026532892]" dev="nsfs" ino=4026532892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 560.213613][ T30] audit: type=1400 audit(1783779619.804:25999): avc: denied { create } for pid=12147 comm="syz.2.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 560.560788][T12163] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1480'. [ 560.604317][ T30] audit: type=1400 audit(1783779619.814:26000): avc: denied { read } for pid=12147 comm="syz.2.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 560.729420][ T30] audit: type=1400 audit(1783779619.854:26001): avc: denied { read write } for pid=11233 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 560.790249][T12159] fuse: fd is not a fuse device [ 561.264085][ T30] audit: type=1400 audit(1783779619.854:26002): avc: denied { read write open } for pid=11233 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.290356][ T30] audit: type=1400 audit(1783779619.854:26003): avc: denied { ioctl } for pid=11233 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 561.340924][T12158] audit: audit_backlog=65 > audit_backlog_limit=64 [ 561.348693][T12158] audit: audit_lost=1687 audit_rate_limit=0 audit_backlog_limit=64 [ 561.818463][T12172] hpfs: Bad magic ... probably not HPFS [ 562.391584][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.405623][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.342985][T12184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1488'. [ 564.778579][ T30] kauditd_printk_skb: 662 callbacks suppressed [ 564.778594][ T30] audit: type=1400 audit(1783779625.054:26632): avc: denied { search } for pid=12197 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.870194][ T30] audit: type=1400 audit(1783779625.094:26633): avc: denied { search } for pid=12197 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.082226][ T30] audit: type=1400 audit(1783779625.094:26634): avc: denied { search } for pid=12197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.278752][ T30] audit: type=1400 audit(1783779625.094:26635): avc: denied { search } for pid=12197 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 565.549824][ T30] audit: type=1400 audit(1783779625.144:26636): avc: denied { create } for pid=12198 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 565.746779][ T30] audit: type=1400 audit(1783779625.144:26637): avc: denied { bind } for pid=12198 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 565.801954][ T30] audit: type=1400 audit(1783779625.174:26638): avc: denied { setopt } for pid=12198 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 565.983375][ T30] audit: type=1400 audit(1783779625.184:26639): avc: denied { create } for pid=12198 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 566.101712][ T30] audit: type=1400 audit(1783779625.254:26640): avc: denied { create } for pid=12198 comm="syz.2.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 566.226946][ T30] audit: type=1400 audit(1783779625.284:26641): avc: denied { read write } for pid=12198 comm="syz.2.1492" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 566.473028][ T7699] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 566.628887][T12220] hpfs: Bad magic ... probably not HPFS [ 566.644959][ T7699] usb 8-1: Using ep0 maxpacket: 32 [ 566.684931][ T7699] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 566.711962][ T7699] usb 8-1: config 0 has no interface number 0 [ 566.746195][ T7699] usb 8-1: config 0 interface 184 has no altsetting 0 [ 566.808239][ T7699] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 566.856253][ T7699] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.890422][ T7699] usb 8-1: Product: syz [ 566.919274][ T7699] usb 8-1: Manufacturer: syz [ 566.945187][ T7699] usb 8-1: SerialNumber: syz [ 566.977474][ T7699] usb 8-1: config 0 descriptor?? [ 567.102152][ T5712] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 567.168132][T12232] overlayfs: failed to clone upperpath [ 567.422396][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 567.447400][ T5712] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 567.477142][ T5712] usb 3-1: config 179 has no interface number 0 [ 567.495808][ T5712] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 567.536190][ T5712] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 567.553229][ T5808] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 567.580431][ T5712] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 567.610561][ T5712] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 567.644258][ T5712] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 567.676936][ T5712] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 567.701174][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.721955][ T5808] usb 2-1: Using ep0 maxpacket: 32 [ 567.744653][ T5808] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 567.759917][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.790958][T12224] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 567.811709][ T5808] usb 2-1: config 0 descriptor?? [ 567.916049][ T7699] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 567.962810][ T7699] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 568.014843][ T5712] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input27 [ 568.033282][ T7699] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 568.100252][ T7699] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 568.149847][ T7699] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 568.210803][ T7699] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 568.242083][T12224] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 568.248615][T12224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 568.256532][T12224] vhci_hcd vhci_hcd.0: Device attached [ 568.267909][ T7699] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 568.268248][T12224] overlayfs: failed to resolve './file0': -2 [ 568.350795][ T7699] usb 8-1: USB disconnect, device number 40 [ 568.483958][ T5808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 568.546227][ T5712] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 568.556209][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 568.608455][ T5808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 568.662867][ T5808] usb 2-1: media controller created [ 568.769886][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.550263][ T5808] az6027: usb out operation failed. (-71) [ 569.585038][ T5808] stb0899_attach: Driver disabled by Kconfig [ 569.623527][ T5808] az6027: no front-end attached [ 569.623527][ T5808] [ 569.665171][ T5808] az6027: usb out operation failed. (-71) [ 569.725911][ T5808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 569.807959][T12251] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1504'. [ 569.873990][ T30] kauditd_printk_skb: 317 callbacks suppressed [ 569.874029][ T30] audit: type=1400 audit(1783779630.064:26959): avc: denied { setopt } for pid=12249 comm="syz.7.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 569.905745][ T7699] usb 3-1: USB disconnect, device number 48 [ 569.905754][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 569.920263][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 569.940825][T12242] vhci_hcd: connection reset by peer [ 570.031019][ T57] vhci_hcd vhci_hcd.2: stop threads [ 570.145807][ T30] audit: type=1400 audit(1783779630.074:26960): avc: denied { setopt } for pid=12249 comm="syz.7.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 570.165027][ T57] vhci_hcd vhci_hcd.2: release socket [ 570.200772][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 570.229956][ T57] vhci_hcd vhci_hcd.2: disconnect device [ 570.290737][ T30] audit: type=1400 audit(1783779630.074:26961): avc: denied { create } for pid=12249 comm="syz.7.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 570.335364][ T5808] dvb-usb: schedule remote query interval to 400 msecs. [ 570.367889][ T5808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 570.380224][T12252] audit: audit_backlog=65 > audit_backlog_limit=64 [ 570.387755][ T4962] audit: audit_backlog=65 > audit_backlog_limit=64 [ 570.411388][T12252] audit: audit_lost=1699 audit_rate_limit=0 audit_backlog_limit=64 [ 570.428545][ T5808] usb 2-1: USB disconnect, device number 27 [ 570.440880][T12250] audit: audit_backlog=65 > audit_backlog_limit=64 [ 570.447411][T12250] audit: audit_lost=1700 audit_rate_limit=0 audit_backlog_limit=64 [ 570.455543][T12250] audit: backlog limit exceeded [ 570.465770][ T4962] audit: audit_lost=1701 audit_rate_limit=0 audit_backlog_limit=64 [ 570.681343][ T5808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 572.192243][ T2172] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 572.399353][ T2172] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.499575][ T2172] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 572.549511][ T2172] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.589856][ T2172] usb 10-1: Product: syz [ 572.607982][ T2172] usb 10-1: Manufacturer: syz [ 572.651961][ T24] usb 8-1: new low-speed USB device number 41 using dummy_hcd [ 572.659486][ T2172] usb 10-1: SerialNumber: syz [ 572.707517][ T2172] usb 10-1: config 0 descriptor?? [ 572.759492][ T2172] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 572.802327][ T24] usb 8-1: device descriptor read/64, error -71 [ 573.065969][ T24] usb 8-1: new low-speed USB device number 42 using dummy_hcd [ 573.262349][ T24] usb 8-1: device descriptor read/64, error -71 [ 573.374448][T12287] netlink: 'syz.5.1515': attribute type 21 has an invalid length. [ 573.415236][ T24] usb usb8-port1: attempt power cycle [ 573.443540][T12287] netlink: 'syz.5.1515': attribute type 6 has an invalid length. [ 573.507700][T12287] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1515'. [ 573.646956][ T2172] input: gspca_pac7302 as /devices/platform/dummy_hcd.9/usb10/10-1/input/input29 [ 573.661608][ T5712] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 573.782572][ T24] usb 8-1: new low-speed USB device number 43 using dummy_hcd [ 573.844709][ T24] usb 8-1: device descriptor read/8, error -71 [ 574.131989][ T24] usb 8-1: new low-speed USB device number 44 using dummy_hcd [ 574.213233][ T24] usb 8-1: device descriptor read/8, error -71 [ 574.352777][ T24] usb usb8-port1: unable to enumerate USB device [ 575.079807][ T30] kauditd_printk_skb: 666 callbacks suppressed [ 575.079823][ T30] audit: type=1400 audit(1783779635.354:27626): avc: denied { read write } for pid=11233 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 575.186504][ T30] audit: type=1400 audit(1783779635.354:27627): avc: denied { read write open } for pid=11233 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 575.299886][ T30] audit: type=1400 audit(1783779635.354:27628): avc: denied { ioctl } for pid=11233 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 575.410899][ T30] audit: type=1400 audit(1783779635.394:27629): avc: denied { unmount } for pid=5617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 575.480873][ T30] audit: type=1400 audit(1783779635.574:27630): avc: denied { create } for pid=12309 comm="syz.1.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 575.549818][ T30] audit: type=1400 audit(1783779635.574:27631): avc: denied { search } for pid=12308 comm="sed" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 575.619153][ T30] audit: type=1400 audit(1783779635.574:27632): avc: denied { read } for pid=12308 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1810 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 575.630136][T12246] audit: audit_backlog=65 > audit_backlog_limit=64 [ 575.674254][T12313] audit: audit_backlog=65 > audit_backlog_limit=64 [ 575.680761][T12313] audit: audit_lost=1702 audit_rate_limit=0 audit_backlog_limit=64 [ 576.062307][ T5712] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 576.385840][ T5712] usb 2-1: unable to get BOS descriptor or descriptor too short [ 576.418904][ T5712] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 576.458036][ T5712] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.477051][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.501399][ T5712] usb 2-1: Product: syz [ 576.506521][ T7699] usb 10-1: USB disconnect, device number 18 [ 576.521385][ T5712] usb 2-1: Manufacturer: syz [ 576.536822][ T5712] usb 2-1: SerialNumber: syz [ 576.585750][T12323] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 576.585750][T12323] The task syz.7.1522 (12323) triggered the difference, watch for misbehavior. [ 576.930625][ T5712] cdc_ncm 2-1:1.0: bind() failure [ 577.212925][ T5712] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 577.233379][ T5712] cdc_ncm 2-1:1.1: bind() failure [ 577.264225][ T5712] usb 2-1: USB disconnect, device number 28 [ 578.192247][ T5712] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 613.737164][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 613.737180][ T30] audit: type=1400 audit(1783779673.984:27833): avc: denied { search } for pid=12246 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.262803][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 718.741837][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 718.748792][ C1] rcu: 0-...!: (1 GPs behind) idle=7164/1/0x4000000000000000 softirq=91093/91096 fqs=3 [ 718.759684][ C1] rcu: (detected by 1, t=10502 jiffies, g=79569, q=788 ncpus=2) [ 718.767395][ C1] Sending NMI from CPU 1 to CPUs 0: [ 718.767419][ C0] NMI backtrace for cpu 0 [ 718.767434][ C0] CPU: 0 UID: 0 PID: 5272 Comm: dhcpcd Tainted: G L syzkaller #0 PREEMPT(full) [ 718.767453][ C0] Tainted: [L]=SOFTLOCKUP [ 718.767458][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 718.767465][ C0] RIP: 0010:__lock_acquire+0x392/0x1a40 [ 718.767486][ C0] Code: 00 31 f6 eb aa 45 31 c0 e9 f2 fc ff ff 90 e8 65 7d 34 03 85 c0 74 10 44 8b 0d 6a 19 3d 0f 45 85 c9 0f 84 f6 0f 00 00 90 31 c0 <48> 8b 54 24 60 65 48 2b 15 f9 05 7e 12 0f 85 37 13 00 00 48 83 c4 [ 718.767498][ C0] RSP: 0018:ffffc90000007c98 EFLAGS: 00000006 [ 718.767510][ C0] RAX: 0000000000000001 RBX: ffff88802a603158 RCX: 584ffc3ed684fa6b [ 718.767520][ C0] RDX: 584ffc3ed684fa6b RSI: 00000000690e82f1 RDI: 000000008f288b98 [ 718.767528][ C0] RBP: ffff88802a602540 R08: 00000000ffffffff R09: 0000000000000d4d [ 718.767537][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 584ffc3ed684fa6b [ 718.767545][ C0] R13: ffffffff97b4ecf0 R14: 000000000001a9ca R15: 0000000000000001 [ 718.767554][ C0] FS: 00007f5eda591780(0000) GS:ffff888123deb000(0000) knlGS:0000000000000000 [ 718.767569][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 718.767577][ C0] CR2: 00007ffc47bb1180 CR3: 0000000075db5000 CR4: 00000000003526f0 [ 718.767586][ C0] Call Trace: [ 718.767590][ C0] [ 718.767597][ C0] ? do_raw_spin_lock+0x128/0x260 [ 718.767614][ C0] ? do_raw_spin_lock+0x128/0x260 [ 718.767630][ C0] lock_acquire+0x1b9/0x370 [ 718.767644][ C0] ? advance_sched+0xe5/0xd20 [ 718.767657][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 718.767674][ C0] ? __pfx_advance_sched+0x10/0x10 [ 718.767686][ C0] _raw_spin_lock+0x2e/0x40 [ 718.767701][ C0] ? advance_sched+0xe5/0xd20 [ 718.767713][ C0] advance_sched+0xe5/0xd20 [ 718.767725][ C0] ? find_held_lock+0x2b/0x80 [ 718.767743][ C0] ? __hrtimer_run_queues+0x37b/0x9c0 [ 718.767761][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 718.767776][ C0] ? __pfx_advance_sched+0x10/0x10 [ 718.767789][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 718.767807][ C0] ? rcu_is_watching+0x12/0xc0 [ 718.767826][ C0] hrtimer_interrupt+0x3e5/0x940 [ 718.767848][ C0] __sysvec_apic_timer_interrupt+0x109/0x470 [ 718.767868][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 718.767885][ C0] [ 718.767889][ C0] [ 718.767894][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 718.767908][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 718.767925][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 5f 29 f6 48 89 df e8 9e ae 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 bf 18 f6 65 8b 05 ee 48 a7 08 85 c0 74 16 5b [ 718.767937][ C0] RSP: 0018:ffffc900036e7500 EFLAGS: 00000246 [ 718.767946][ C0] RAX: 0000000000000006 RBX: ffffffff9b8b85a8 RCX: 0000000000000040 [ 718.767954][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a3122 RDI: ffffffff8c400c80 [ 718.767963][ C0] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000 [ 718.767971][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 718.767978][ C0] R13: 0000000000000200 R14: 0000000000000282 R15: 000000000000019e [ 718.767991][ C0] avc_alloc_node+0x3f5/0x670 [ 718.768011][ C0] ? avc_alloc_node+0xe0/0x670 [ 718.768029][ C0] avc_update_node.isra.0+0x48/0xb90 [ 718.768050][ C0] avc_denied+0x141/0x190 [ 718.768070][ C0] avc_perm_nonode+0x164/0x180 [ 718.768090][ C0] ? __pfx_avc_perm_nonode+0x10/0x10 [ 718.768110][ C0] ? find_held_lock+0x2b/0x80 [ 718.768126][ C0] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 718.768143][ C0] ? avc_has_perm_noaudit+0x2b3/0x3b0 [ 718.768157][ C0] avc_has_perm_noaudit+0x2d4/0x3b0 [ 718.768171][ C0] selinux_vm_enough_memory+0x129/0x190 [ 718.768189][ C0] ? __pfx_selinux_vm_enough_memory+0x10/0x10 [ 718.768207][ C0] ? rcu_is_watching+0x12/0xc0 [ 718.768223][ C0] ? cap_capable+0x107/0x430 [ 718.768238][ C0] security_vm_enough_memory_mm+0x96/0x110 [ 718.768253][ C0] dup_mmap+0x6d6/0x21b0 [ 718.768272][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 718.768288][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 718.768305][ C0] ? __lock_acquire+0x49f/0x1a40 [ 718.768319][ C0] ? find_held_lock+0x2b/0x80 [ 718.768336][ C0] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 718.768357][ C0] copy_process+0x4588/0x8030 [ 718.768372][ C0] ? __lock_acquire+0x49f/0x1a40 [ 718.768391][ C0] ? __pfx_copy_process+0x10/0x10 [ 718.768406][ C0] ? sk_setsockopt+0x46b/0x5d80 [ 718.768421][ C0] ? sk_setsockopt+0x46b/0x5d80 [ 718.768433][ C0] ? sk_setsockopt+0x46b/0x5d80 [ 718.768447][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 718.768463][ C0] kernel_clone+0x176/0x9d0 [ 718.768478][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 718.768496][ C0] ? find_held_lock+0x2b/0x80 [ 718.768513][ C0] ? __might_fault+0xc5/0x140 [ 718.768532][ C0] __do_sys_clone+0xd9/0x120 [ 718.768548][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 718.768567][ C0] ? __sys_setsockopt+0x1b5/0x220 [ 718.768589][ C0] do_syscall_64+0x115/0x870 [ 718.768606][ C0] ? clear_bhb_loop+0x40/0x90 [ 718.768620][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.768634][ C0] RIP: 0033:0x7f5eda665636 [ 718.768645][ C0] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 718.768657][ C0] RSP: 002b:00007ffc47b90890 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 718.768669][ C0] RAX: ffffffffffffffda RBX: 00007ffc47b90898 RCX: 00007f5eda665636 [ 718.768678][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 718.768685][ C0] RBP: 00007ffc47bb0de0 R08: 0000000000000000 R09: 0000000000000001 [ 718.768693][ C0] R10: 00007f5eda591a50 R11: 0000000000000246 R12: 00007ffc47b909d0 [ 718.768701][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 000055cb09484ac0 [ 718.768713][ C0] [ 718.769415][ C1] rcu: rcu_preempt kthread starved for 10493 jiffies! g79569 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 719.352111][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 719.362062][ C1] rcu: RCU grace-period kthread stack dump: [ 719.367933][ C1] task:rcu_preempt state:R running task stack:28984 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 719.381412][ C1] Call Trace: [ 719.384679][ C1] [ 719.387601][ C1] __schedule+0x125c/0x6730 [ 719.392119][ C1] ? __pfx___schedule+0x10/0x10 [ 719.396960][ C1] ? find_held_lock+0x2b/0x80 [ 719.401636][ C1] ? schedule+0x225/0x2c0 [ 719.405961][ C1] schedule+0xdd/0x2c0 [ 719.410023][ C1] schedule_timeout+0x127/0x280 [ 719.414863][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 719.420228][ C1] ? __pfx_process_timeout+0x10/0x10 [ 719.425514][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 719.431311][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 719.436761][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 719.441518][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 719.446796][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 719.451727][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 719.456914][ C1] ? rcu_is_watching+0x12/0xc0 [ 719.461670][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 719.467469][ C1] rcu_gp_kthread+0x179/0x230 [ 719.472134][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 719.477321][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 719.483123][ C1] ? __kthread_parkme+0x18c/0x230 [ 719.488148][ C1] ? kthread+0x13a/0x450 [ 719.492384][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 719.497571][ C1] kthread+0x370/0x450 [ 719.501637][ C1] ? __pfx_kthread+0x10/0x10 [ 719.506228][ C1] ret_from_fork+0x72b/0xd50 [ 719.510811][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 719.515916][ C1] ? __switch_to+0x800/0x10f0 [ 719.520588][ C1] ? __pfx_kthread+0x10/0x10 [ 719.525177][ C1] ret_from_fork_asm+0x1a/0x30 [ 719.529947][ C1] [ 719.532951][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 719.539260][ C1] CPU: 1 UID: 0 PID: 1054 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.550267][ C1] Tainted: [L]=SOFTLOCKUP [ 719.554573][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 719.564615][ C1] Workqueue: events_unbound toggle_allocation_gate [ 719.571112][ C1] RIP: 0010:write_comp_data+0x40/0x90 [ 719.576474][ C1] Code: 59 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 e9 40 88 b2 09 8b 87 24 17 00 00 85 c0 74 f1 8b 87 f8 16 00 00 <83> f8 03 75 e6 48 8b 87 00 17 00 00 8b bf fc 16 00 00 48 8b 30 48 [ 719.596066][ C1] RSP: 0000:ffffc90004f5f870 EFLAGS: 00000246 [ 719.602120][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fd3abd [ 719.610077][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff8880288f4a80 [ 719.618032][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 719.625990][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 719.633948][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 719.641905][ C1] FS: 0000000000000000(0000) GS:ffff888123eeb000(0000) knlGS:0000000000000000 [ 719.650822][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 719.657393][ C1] CR2: 00007f5eda6f4bc0 CR3: 000000000e992000 CR4: 00000000003526f0 [ 719.665352][ C1] Call Trace: [ 719.668625][ C1] [ 719.671545][ C1] smp_call_function_many_cond+0x5ad/0x16c0 [ 719.677431][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 719.682458][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 719.688775][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 719.694145][ C1] ? __pfx___text_poke+0x10/0x10 [ 719.699079][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 719.704098][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 719.709201][ C1] smp_text_poke_batch_finish+0x919/0xc60 [ 719.714910][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 719.720792][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 719.727022][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 719.733261][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 719.739229][ C1] jump_label_update+0x37a/0x550 [ 719.744157][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 719.750040][ C1] static_key_enable+0x1a/0x20 [ 719.754792][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 719.760067][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 719.765954][ C1] ? rcu_is_watching+0x12/0xc0 [ 719.770717][ C1] process_one_work+0xa23/0x1940 [ 719.775657][ C1] ? __pfx_process_one_work+0x10/0x10 [ 719.781031][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 719.786917][ C1] worker_thread+0x5ef/0xe50 [ 719.791504][ C1] ? kthread+0x13a/0x450 [ 719.795745][ C1] ? __pfx_worker_thread+0x10/0x10 [ 719.800841][ C1] kthread+0x370/0x450 [ 719.804906][ C1] ? __pfx_kthread+0x10/0x10 [ 719.809577][ C1] ret_from_fork+0x72b/0xd50 [ 719.814160][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 719.819264][ C1] ? __switch_to+0x800/0x10f0 [ 719.823936][ C1] ? __pfx_kthread+0x10/0x10 [ 719.828526][ C1] ret_from_fork_asm+0x1a/0x30 [ 719.833302][ C1]