last executing test programs: 15m42.582431796s ago: executing program 2 (id=475): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000080)={0x8, 0x1ff, 0xd5, 0x9, 0x0, "23f555d9adb42d1808020e90d1beaa82dc1ecf", 0x100}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mremap(&(0x7f000021a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 15m41.179949946s ago: executing program 2 (id=477): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000110301082dbd7000fbdbdf0a0a00000200000000000000329105000000ea0c9ebe510b411ef36ef187c888a55729915d74"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f0000000180)=0xda) unshare(0x400) syz_open_procfs(0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) ioctl$FIONREAD(r5, 0x541b, &(0x7f00000000c0)) add_key(&(0x7f0000000040)='big_key\x00', 0x0, 0x0, 0x0, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x4804, 0x0) fchmodat(r7, &(0x7f00000000c0)='./file0\x00', 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="c6100600c00000002000128008000100767469001400028008000500ac14141d080001", @ANYRES32=r6, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 15m33.680802481s ago: executing program 2 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x4, 0xfffffffe) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000010280)=0x6, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0000000406010400000000000000000a000009090002006a797a30000000000500010007000000050001000700000005000100070000000900020073797a31000000000900020073797a31000000000900020073797a300000000005"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20008040) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x501802, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='\"lgo=z\"', 0x7) syz_clone(0x840c0200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x1000) getpid() ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0xa0e, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0xd}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x42, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x80, 0xa, 0x9, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7829, 0x8047, 0xfffffffe, 0x9b69}}) bind$packet(r7, &(0x7f0000000440)={0x11, 0x10, r8, 0x1, 0x9, 0x6, @random="c36765a70e33"}, 0x14) 15m31.806734119s ago: executing program 2 (id=491): r0 = gettid() migrate_pages(r0, 0x3, &(0x7f0000000100)=0x1, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) shmget(0x0, 0x3000, 0x4, &(0x7f0000001000/0x3000)=nil) open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) 15m21.899015048s ago: executing program 2 (id=501): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000004, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x240880c0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x5607, 0x2d) r4 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000400)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000480)={'vlan0\x00', @remote}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f00000004c0)={0x6a09, 0x800, 0x4, 0x7, 0x2}) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000540)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x101042, 0x0) r7 = mmap$IORING_OFF_CQ_RING(0x7fffffffc000, 0x2dc1, 0x300000f, 0x12, r6, 0x8000000) munmap$IORING_OFF_SQ_RING(r7, 0x1) munmap$IORING_OFF_CQ_RING(r7, 0x2f51) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000005c0)={'bond0\x00', 0x2000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000001) syz_emit_ethernet(0x17a, &(0x7f0000000280)={@local, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x8, 0x6, "8de996", 0x140, 0x11, 0x1, @remote, @local, {[@srh={0x6, 0x6, 0x4, 0x3, 0x1, 0x40, 0x5, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @hopopts={0x2f, 0x19, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @generic={0xfb, 0x53, "0c19316bfd6e54c8bfd79a5f09878d22ce4853ebab140c7f462cb050c1a116f4c41caf27a3e91708a6123d9866cbe9ae66ee555bd931c58c121150b58c5e54a1b64b55ef544506821994670178f3d55deb5cb2"}, @generic={0x7, 0x4d, "42f81707c9ea0341d3aec7a85c6d81eb14975caef61a4f9a6f41ceef2513c739233ccc286f6297199a38505cfa7b6309e662077fcec05b2afb2c0a42d7c1fadfbcb2906c812afe3c736692d3e3"}]}, @srh={0x87, 0x0, 0x4, 0x0, 0xe1, 0x28, 0x175}], {0x4e24, 0x4e20, 0x28, 0x0, @gue={{0x1, 0x1, 0x2, 0x3, 0x0, @void}, "8e525b941fb0fc2489eb7eb236d0beef2fbd69f136124ce49e7c8daf"}}}}}}}, 0x0) 15m18.692655821s ago: executing program 2 (id=506): r0 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x111) getdents64(r0, &(0x7f0000000380)=""/4113, 0x1011) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000047c0), 0x1c0002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004800)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004840)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000004880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000048c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000004900)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000004980), 0x651, 0x0) recvmmsg(r3, &(0x7f00000049c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800010400000000000000000200000000fff609000000000600150002000000140016801000"], 0x38}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', 0x40042, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = epoll_create1(0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000140)={0xe000001a}) read$FUSE(r8, &(0x7f0000001480)={0x2020}, 0x2020) r9 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f00000034c0)={0x60000018}) epoll_pwait(r7, &(0x7f0000003500)=[{}], 0x1, 0xff4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0xc2000, 0x0) sendmsg$nl_generic(r6, 0x0, 0x4008094) 15m3.4888742s ago: executing program 32 (id=506): r0 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x111) getdents64(r0, &(0x7f0000000380)=""/4113, 0x1011) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000047c0), 0x1c0002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000004800)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004840)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000004880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000048c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000004900)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000004980), 0x651, 0x0) recvmmsg(r3, &(0x7f00000049c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800010400000000000000000200000000fff609000000000600150002000000140016801000"], 0x38}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', 0x40042, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = epoll_create1(0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000140)={0xe000001a}) read$FUSE(r8, &(0x7f0000001480)={0x2020}, 0x2020) r9 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f00000034c0)={0x60000018}) epoll_pwait(r7, &(0x7f0000003500)=[{}], 0x1, 0xff4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0xc2000, 0x0) sendmsg$nl_generic(r6, 0x0, 0x4008094) 11m36.50468591s ago: executing program 1 (id=736): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x8000, 0x8a) r1 = syz_io_uring_setup(0x110, &(0x7f0000000280)={0x0, 0x6d8b, 0x8, 0x0, 0x29}, &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) openat$procfs(0xffffffffffffff9c, &(0x7f0000004280)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) accept(r6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}, @ib={0x1b, 0x80, 0x7, {"a5c217c7f55e233d74ec62f7f7a2b878"}, 0x105, 0x0, 0x3}}}, 0x118) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1) ioctl$MEMGETBADBLOCK(r0, 0x40084d0b, 0x0) 11m35.291978239s ago: executing program 1 (id=737): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8080, 0x7, 0xbb, 0xffffd45d, {{0xa, 0x4, 0x3, 0x0, 0x28, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x5, [{@local, 0x4}, {@multicast2, 0x3}]}]}}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, r3}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r3, 0xffff, '\x00', r2, r0}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000001c0)=@unspec={0x2d}, 0xc) write$6lowpan_control(r7, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 11m31.769288115s ago: executing program 1 (id=738): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r4, 0x0, 0x0, 0x1000f4) sendfile(r4, r4, 0x0, 0x40000000800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r5, 0x100000000000011, 0x2000, 0x2f93) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) 11m29.672955849s ago: executing program 1 (id=741): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000080)={0x8, 0x1ff, 0xd5, 0x9, 0x0, "23f555d9adb42d1808020e90d1beaa82dc1ecf", 0x100}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mremap(&(0x7f000021a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) 11m26.458024007s ago: executing program 1 (id=743): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000000540)=""/102392, 0x18ff8) r2 = syz_open_dev$dvb_demux(&(0x7f0000019540), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000019580)={0xfff, 0x1, 0x3, 0xa, 0x4}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000195c0)={0x20004}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x114, 0xfffffffffffffffe) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000019600)={0x0, 0x0, &(0x7f0000019640)={&(0x7f0000019680)=@deltaction={0x14, 0x30, 0x101}, 0x14}}, 0x0) 11m21.854704388s ago: executing program 1 (id=747): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYRES64], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00') ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x2000000000000004) 11m6.390048114s ago: executing program 33 (id=747): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff00090000000905", @ANYRES64], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00') ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x2000000000000004) 6m18.710372637s ago: executing program 5 (id=1066): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x110008, &(0x7f0000000540)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0x5}}, {@sq={'sq', 0x3d, 0x9}}, {@timeout={'timeout', 0x3d, 0xfffffffffffffff9}}, {@rq={'rq', 0x3d, 0x2}}, {@timeout={'timeout', 0x3d, 0x2}}], [{@uid_gt}, {@euid_lt={'euid<', r4}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{'}}, {@uid_eq={'uid', 0x3d, r5}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@uid_eq={'uid', 0x3d, r6}}]}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) ioctl$TIOCSSOFTCAR(r9, 0x5412, &(0x7f0000000080)=0x105) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x28, r11, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r16, @ANYBLOB="4400028040"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0xff, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0216ef050a0000002dbd7000ffdbdf250800120002000100b86b6e"], 0x50}}, 0x840) 6m16.535765488s ago: executing program 5 (id=1069): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000013c0)=0x15) prlimit64(0x0, 0xe, &(0x7f0000001400)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001440)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001480)=0x7) mmap(&(0x7f00007a4000/0x3000)=nil, 0x3000, 0xb635773f06ebbee2, 0x8031, r1, 0xf093c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001500)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001580), 0x651, 0x0) recvmmsg(r3, &(0x7f00000015c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001600)=0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001640), 0x2) r6 = memfd_create(&(0x7f0000001680)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000001780)={r6, 0x0, 0x0, 0x8000}) setpriority(0x2, 0x0, 0xffffffffffffffcd) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000017c0)={0x1, &(0x7f0000001800)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m16.021505816s ago: executing program 5 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000011c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x0, @local}], 0x30) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x2b, 0x0, &(0x7f0000002000)) socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x64000600) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d0426c600000000000309022400010000200609040000010300000009210300030122180009058103ff03000003"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) vmsplice(r7, &(0x7f00000005c0)=[{&(0x7f0000000280)="766abf", 0x3}], 0x1, 0x3) write$char_usb(r6, &(0x7f0000000280)='L', 0x1) 6m12.571187736s ago: executing program 5 (id=1074): sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0xc114) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1401, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x22000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='10000', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB, @ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20006800) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000040)=@v3={0x3000000, [{0x967, 0xfffffff7}, {0x10, 0x5}]}, 0x18, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r4) 6m9.007209617s ago: executing program 5 (id=1081): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x13, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20008820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x4e24, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xae26}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x2, 0x2002, 0x64737664, 0x0, 0x0, 0x1, 0x6, 0xfeedcaff, 0x3, 0x0, 0x1, 0x5}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0x4e23, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@loopback, @in=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) 6m6.891011389s ago: executing program 5 (id=1084): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1b, {[@global=@item_012={0x2, 0x1, 0x0, "8ea7"}, @global=@item_012={0x1, 0x1, 0x5, "83"}, @global=@item_4={0x3, 0x1, 0x4, "c3c87d38"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @local=@item_012={0x2, 0x2, 0x8, '.<'}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x2, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r3, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c000533000111000001f500010244132403b1fd606412c3258e3d67aa5b00010000000000330000001d2bffc1264d04000280040003"], 0x64}}, 0x0) getsockopt$packet_int(r1, 0x107, 0xa, 0x0, &(0x7f00000005c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x3, 0x4, 0x4, 0xfffffff8}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0xc8, 0x6, 0x0, @remote, @local, {[@dstopts={0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}, @srh={0x3a, 0xe, 0x4, 0x7, 0x9, 0x10, 0x8, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, @mcast1, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x87, 0x2, '\x00', [@pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x5, 0x6, [0xd22]}}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xeac9, 0x1}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "09c415", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_channels={0x3d, 0x0, 0xd4d5, 0x2, 0x4, 0x1}}) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x17c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf6, 0xa8, @random="7374478feb6b6e8faffcb9c8c33a23a47d519a8d0d25b41f193458b15b13f14d489b0bd187de2bf4bff7bec93b21469baac12117c3c8870a2f1e702bac203142825a1c3f6bb2b7061e00f6cfd1c05fcb18207488cc9bf7b5b89185ccc93cb64492516f78655f4cc831c7551d5ed3c87d692e39885bdc1d1ca6ca68d21343cedbd0e86ac63381ec6f586f23de44f0778ec2356708a407a12829e88fca0f3d7fd816e87d7094b13659610705ea54bdd509845eb608b76816d58dc4029e021581c4bc3cadc5db88eb3196b6cde14f0979ea4ab6491b5cdd7492254707c58fc72db58ac8b4a4b06865f53bd7cd424cdbac4281fb"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x1) 5m49.836918808s ago: executing program 34 (id=1084): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1b, {[@global=@item_012={0x2, 0x1, 0x0, "8ea7"}, @global=@item_012={0x1, 0x1, 0x5, "83"}, @global=@item_4={0x3, 0x1, 0x4, "c3c87d38"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @local=@item_012={0x2, 0x2, 0x8, '.<'}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x1, 0x1, 0x2, "01"}, @local=@item_012={0x1, 0x2, 0x2, '0'}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r3, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="640000004200010025bd700000000000030100000f0000004400010000112233445566778899aabb86dd2c00001c000533000111000001f500010244132403b1fd606412c3258e3d67aa5b00010000000000330000001d2bffc1264d04000280040003"], 0x64}}, 0x0) getsockopt$packet_int(r1, 0x107, 0xa, 0x0, &(0x7f00000005c0)) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x3, 0x4, 0x4, 0xfffffff8}, 0x48) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0xc8, 0x6, 0x0, @remote, @local, {[@dstopts={0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}, @srh={0x3a, 0xe, 0x4, 0x7, 0x9, 0x10, 0x8, [@empty, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, @mcast1, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x87, 0x2, '\x00', [@pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x5, 0x6, [0xd22]}}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xeac9, 0x1}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "09c415", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40}}}}}}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_channels={0x3d, 0x0, 0xd4d5, 0x2, 0x4, 0x1}}) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x17c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf6, 0xa8, @random="7374478feb6b6e8faffcb9c8c33a23a47d519a8d0d25b41f193458b15b13f14d489b0bd187de2bf4bff7bec93b21469baac12117c3c8870a2f1e702bac203142825a1c3f6bb2b7061e00f6cfd1c05fcb18207488cc9bf7b5b89185ccc93cb64492516f78655f4cc831c7551d5ed3c87d692e39885bdc1d1ca6ca68d21343cedbd0e86ac63381ec6f586f23de44f0778ec2356708a407a12829e88fca0f3d7fd816e87d7094b13659610705ea54bdd509845eb608b76816d58dc4029e021581c4bc3cadc5db88eb3196b6cde14f0979ea4ab6491b5cdd7492254707c58fc72db58ac8b4a4b06865f53bd7cd424cdbac4281fb"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x1) 39.479793369s ago: executing program 0 (id=1450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r1, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x4a102) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r3 = socket(0x10, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000580), 0x8) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000bc0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x800) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f00000005c0)={0x1f, @none}, 0x14) listen(r4, 0x3ff) listen(r5, 0xc) write(r3, &(0x7f0000000600)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000000640), 0x400000000000ec0, 0x2, &(0x7f0000000680)={0x77359400}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f00000006c0)={&(0x7f0000000700)={{@hyper, 0x7}, {@any, 0x1}, 0x400, "e4b417c5c06db8c40994625370d49ecdd7274777b4000568dc2e2ac0d5c349a06adf427fd4e0fc36134403e58fe6ce46a17ee746bb1ec403de00e31b742879cd5626b3e62903e05b70fb1d77d6fb1155998ee5963d0b87928e6feca915384b3759eb8925a49674c898d6723da0e6b82f1bebebdff76e6f410cd650ea04aebbf5efb91b77f5663e934ffe9fdbc8902508fc7aff4409572f0314e53e242a5ed44b8e872b11862ce0044d8faed7e12b917a06de1916cf127864b634f74a02dda059deed7c626e269ce1e9a05ee992693537c0b0d6bccd16ccf75b668143c0efeab4a5b39d478e36a3ae0df7f62c760e1f02230f2b030690dd9b46ae066a7c15854207c4b9c288842257d2a72b7d58b7dd2b9d1efed9e46b536d9d3d00a43ee669b9b5107b004d30bddeb28cfa4fc41a715e218f47c5ab9949f7ede815e7976804ea85ada0d0e01a772e01465adec34bf22033e22d3506e477c6e9d19936fe20d46c11c43f2205ab1a9358f445b62d86c61c25e4b15c905c72f39e21334ec1a75dce1b835d630d9ce1ac160b8a177249b0a7dbaf874d5382bcfd564d0cb7452635b33424a244476b4607398c9190bf8babbbfe77e879d360cf11b6a1f7e4573b9642b6b0cbcc80c5dbf3ae971dec1ccd83576907e5f0d14cf7bd23cfa02c83abc8a2abf22aff5262a7d441fadf7aea718323527d1b5a6fe7e2d165dac064b47e42ade34ab2d94b8543f2084471bbd3ad476413a65593c8697fff4512dc3f537a657a736802b4ae4bc045ee537e1e75beaca0155f3e3d00f06a42d58c165089f176b81a7eeed3d3ce468493caf596d59886cec3f61a040161df8c765320cf6ff46bd7d54ba7eda3bea8815a4c25090b9ceeac93593bf3220b14f7c283b51b7a772630fc6864853c8c928538a107c23590edff4d03c91982d29fbfadfa26fe3feb1607ce8f95b05033de2cf874c4e3b2567bcf4219badf50cffdd4772535a7c80ac304a6879c8d0f482868e729de98cb0f6ab22ea18fc33aef07e8c9fe81219ad8c37310847edb560fdf46bcc2aa69bca9b3c41daa3734578166bcb9801e09d9bfbc11ab7e8ea28650eb2f6013b1a28f46f9498bfd6081ebc4eafa27ff8e7499740626519009c4b9644a68a0a3fb6ea888b2262a4925d0cb7a421bab70973f0e60735254b2a7cc73a49f7839cbb88d5ea9f499c84582f464b0698c33993472ab5bda8e937cb9a28923b8b233a2d178864c1f09f5d4258c59f62c45be5bf163f07456a4bd0f598823dfe9c683bdd27936ebd547bf442e0f1f8583806e4d889e2a397a73aceed4a934f901a10607d9e949320b4ae9fcc49c95c8fac8fe92abc20387c38d93813bc08b6a6356c9bddb632d8f27e8e957e32dea813cc7891b779f3f29de86368b059d5f1c9b1df35315f46a4b809e2298d1d25d120d3694c879ef8ff15de8"}, 0x418, 0x7}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9e5204fc8ace641a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223180905810340000a00000905020340"], 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x4, 0x10000, 0x32315659, 0x3, 0xb, [{0x0, 0x30b6c13d}, {0x0, 0xa}, {0x7, 0xfffff800}, {0x1ff, 0x6}, {0x801, 0x40}, {0xe, 0x5}, {0x9, 0x40062}, {0x8, 0x9}], 0x9, 0x36, 0x3, 0xbff44b807c3e115d, 0x1}}) 31.983297212s ago: executing program 0 (id=1456): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x8000, 0x8a) syz_io_uring_setup(0x110, &(0x7f0000000280)={0x0, 0x6d8b, 0x8, 0x0, 0x29}, &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004280)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) r6 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) accept(r6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}, @ib={0x1b, 0x80, 0x7, {"a5c217c7f55e233d74ec62f7f7a2b878"}, 0x105, 0x0, 0x3}}}, 0x118) ioctl$MEMGETBADBLOCK(r0, 0x40084d0b, 0x0) 30.699243296s ago: executing program 0 (id=1459): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r4 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000540), 0x12) sched_setscheduler(r4, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000600)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000006c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f0000000740)) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000780)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"}) r6 = syz_open_pts(r2, 0x80) dup3(r6, r2, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) 29.036038359s ago: executing program 6 (id=1460): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x1}, 0xe) fcntl$setstatus(r0, 0x4, 0x800) openat(0xffffffffffffffff, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x143102) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000440)={0x0, 0xf5, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./myconfig\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r3, &(0x7f00000007c0)='44100,48000,88200,96000,176400,192000,352', 0x29) symlinkat(&(0x7f0000000800)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x208000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) 26.851510497s ago: executing program 4 (id=1462): clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4248, 0xfffffffffffffffc, 0x6, 0x9, 0x5, 0x79e52ffc, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x4, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newqdisc={0x148, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x80, 0xa, 0xe, 0x8, 0x4}}, @TCA_RED_STAB={0x104}]}}]}, 0x148}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000001900000129bd7000fcdbdf251c20400a0002fd02000000008400130000000000000007000000000000000000000002000000000000000300000001000000000000000000000000000000000000000100000001000000000000000000000000000000004a0000000000000f00000000000000000000000000000000000000000000000000000000000000000000090200000000000000000000000000256ee0e488db518d3ca229bdc9a1f65c80d67eb3c773c5ec5dc5ccf58724b8042e7018253076"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f00000a0000)={0x0, 0x0, &(0x7f00000a0040)={&(0x7f00000a0080)=@newqdisc={0x38, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x100}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x800) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r6, &(0x7f0000002240)={0x2020}, 0x2020) writev(r6, &(0x7f0000002140)=[{&(0x7f0000000040)='T01\n', 0x4}], 0x1) write$vga_arbiter(r6, &(0x7f00000000c0)=@unlock_all, 0xb) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0x3}, {}, {0x6, 0x3fe130aec09d711b}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010100000000000800002b000000080003", @ANYRES32=r9, @ANYBLOB="050034006e00000008002600b815"], 0x2c}}, 0x2400c800) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="000128bd7000fbdbdf25420000000a0006002fab9fe78df800000a00060032099a0db3a800000a00060008021100000100000a00060050505050505000000a00060050505050505000000a0006006848cd3890c600000a000600501e8ce7a0b600000a0006005050505050500000"], 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x10) r10 = syz_open_dev$mouse(&(0x7f00000001c0), 0xbfb, 0x8100) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 26.78008915s ago: executing program 6 (id=1464): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r4 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000540), 0x12) sched_setscheduler(r4, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000600)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000680), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000006c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f0000000740)) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000780)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"}) r7 = syz_open_pts(r2, 0x80) dup3(r7, r2, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) 22.922077226s ago: executing program 6 (id=1465): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/dev0/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='rd_pages=1024\n\x00', 0xf) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f00000001c0)='1\n\x00', 0x3) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='naa.6001405123456', 0x11) close(r2) symlinkat(&(0x7f00000004c0)='./config/target/core/rd_mcp_0/dev0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\n\x00', 0x3) close(r3) write(0xffffffffffffffff, &(0x7f0000000600)='dummy_udc.0\n\x00', 0xd) nanosleep(&(0x7f0000000640)={0x1}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000680), 0x1, 0x2) syz_open_dev$sg(&(0x7f0000000680), 0x2, 0x2) write(0xffffffffffffffff, &(0x7f0000001000), 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000800)={0x0, 0xfffffffe, 0x0, 0x20, @buffer={0x0, 0x18, &(0x7f0000001000)=""/24}, &(0x7f0000002000), &(0x7f0000003000)=""/32, 0x1388, 0x0, 0x0, 0x0}) 21.880524895s ago: executing program 3 (id=1466): unshare(0x24020400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2d, 0x22, 0x0, 0x1, 0x8, 0xa9, 0x5, 0x2, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write(r2, &(0x7f0000000000)='6', 0x32) fsopen(&(0x7f00000000c0)='adfs\x00', 0x0) r3 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) r4 = fcntl$dupfd(r3, 0x406, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x40) flock(r6, 0x1) flock(r5, 0x5) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(r8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = io_uring_setup(0x14ee, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r9, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) read$FUSE(r7, &(0x7f0000002540)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', 0x0}) 21.869963988s ago: executing program 4 (id=1467): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socket$key(0xf, 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) unshare(0x2c060000) unshare(0x2a060400) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x10) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) rmdir(&(0x7f0000000040)='./config/nvmet/subsystems/testnqn\x00') r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, r5, 0x100000) setsockopt$sock_int(r6, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) 20.379990693s ago: executing program 0 (id=1469): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r3, 0x0, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x438, 0x110, 0x2c8, 0xfeffffff, 0x2c8, 0x2c8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7, 0x1}}, @common=@inet=@multiport={{0x50}, {0x1, 0x7, [0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4f24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e1f], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x0, 0x0, 0x0, 0x3]}}}, @common=@ttl={{0x28}, {0x3, 0xb}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @gre_key=0x9}}}}, {{@ip={@local, @remote, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, &(0x7f0000002140)=ANY=[]) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) 20.156991585s ago: executing program 3 (id=1471): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], &(0x7f00000001c0)=[0x4], 0x0, 0x1, 0x1}}, 0x40) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000002480)=0x3) getsockopt$inet_tcp_int(r5, 0x11e, 0x17, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000001700)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000340)={0x20, r7, 0x0, 0x0, 0x0}) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) r10 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r10, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000001f00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x4008000) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r9, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001640)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000016c0)={&(0x7f0000000400)="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", &(0x7f0000001440)=""/103, &(0x7f00000014c0)="973937bfe5574d71f1c97df0e9b715562d437af625d17d136363e67fb431937b4bd973f99010df11583e4b39d14335418adabf3fbd47c3f9386e63af597109c49039e673813819c2140db8425a811f6b4ffa4ef1abe4720d4bd8849844496a3e9ca7515b6f721ae1161671150e35e32e576a30f29ca6edfd8823021cd9aeeea919142ee32c8ec15688ab8cf5900adae909f29c0034e4e54cb676dc96b43e2d527d97d368286a61abe969b1304003534a287c3e40", &(0x7f0000001580)="95370146a671238b4c5e545409aa558024e7b646aa67cb3560ccd87000a32d005999f5fa2b9bc78095d1f80044530bb4bcc933fd01ee3d571dec5321269f84e267a54dcdf035d8ee7b3a03eed05ded61cee6bae15d995e2dd75d93ac60a0389ade5c2c1617af523cf9ae01ea1c88e71ac4faffcb02973264d17ae26f504cf414440aa7b751373743a904e34d48579823", 0x0, r11}, 0x38) close_range(r3, r3, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r12 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r12, 0x0, 0x0) 20.102432818s ago: executing program 6 (id=1472): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000003c0)={'nicvf0\x00', {0x2, 0x0, @multicast1}}) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000004000, 0x6, 0x1000, 0x3, 0x1000, 0x1000008, 0xb, 0xfffffffffffff7fc, 0x100fff}) recvfrom$unix(r1, 0x0, 0x0, 0x40000142, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x219) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[], [], 0x2c}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000390000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x60040000) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 18.793717516s ago: executing program 4 (id=1473): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') r2 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') execveat$binfmt(r1, r2, &(0x7f0000000740), 0x0, 0x1000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x7f) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000840)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) read$proc_mixer(r5, &(0x7f0000000300)=""/253, 0xfd) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f3, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x27a, 0x7fff, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x1, 0x10, 0xfffffff1, 0x8, 0x6324, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x2, 0x1, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000700), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f0000001140)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x5}, 0x0, 0x0) openat$ppp(0xffffff9c, &(0x7f0000000180), 0x620602, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000000)={'trans=unix,', {[], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x31, 0x32, 0x61, 0x37, 0x64, 0x37, 0x37], 0x2d, [0x35, 0x66, 0x38, 0x39], 0x2d, [0x0, 0x61, 0x66, 0x36], 0x2d, [0x39, 0x63, 0x36, 0x65], 0x2d, [0x62, 0xc, 0x66, 0xc, 0x31, 0x34, 0x0, 0x37]}}}]}}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0x2000) 16.007943816s ago: executing program 7 (id=1475): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r4 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000540), 0x12) sched_setscheduler(r4, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000600)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000680), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000006c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, 0x0, &(0x7f0000000740)) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000780)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"}) r7 = syz_open_pts(r2, 0x80) dup3(r7, r2, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) 15.263234094s ago: executing program 3 (id=1476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x59d5}}}, 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(r3, &(0x7f0000002400)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x1, 0x0, 0x40000005, 0xc01, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2d, 0x107, 0x0, 0x25dfdbff, {0x8, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc009}, 0xc810) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xc}, 0x10}, 0x94) 14.200804766s ago: executing program 4 (id=1477): setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x3400c014}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027400000000000000c7f14000000110001"], 0xb4}}, 0x8044) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a038018013f800c00018006000100003f01000800034000000002"], 0x1a50}}, 0x8000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYBLOB='&'], 0x10) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x20, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x8, 0xc3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x3d1, {0x9, 0x21, 0xfffe}}}, &(0x7f0000000040)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x0, 0x0) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r9 = dup3(r2, r1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r9) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0x16c, r10, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc800) 13.858947351s ago: executing program 7 (id=1478): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x8000, 0x8a) r1 = syz_io_uring_setup(0x110, &(0x7f0000000280)={0x0, 0x6d8b, 0x8, 0x0, 0x29}, &(0x7f0000000080), &(0x7f0000000340), &(0x7f0000000000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004280)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) r5 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x4048170}], 0x1, 0x20008004) accept(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfff, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}, @ib={0x1b, 0x80, 0x7, {"a5c217c7f55e233d74ec62f7f7a2b878"}, 0x105, 0x0, 0x3}}}, 0x118) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1) ioctl$MEMGETBADBLOCK(r0, 0x40084d0b, 0x0) 13.494564195s ago: executing program 7 (id=1479): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000080)={0x8, 0x1ff, 0xd5, 0x9, 0x0, "23f555d9adb42d1808020e90d1beaa82dc1ecf", 0x100}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mremap(&(0x7f000021a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) 11.554247047s ago: executing program 7 (id=1480): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000540), 0x12) sched_setscheduler(r3, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000600)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000006c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, &(0x7f0000000740)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000780)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"}) r5 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r5, 0xffffffffffffffff, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) 10.392940834s ago: executing program 0 (id=1481): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x141102) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000380)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48) socket$packet(0x11, 0x3, 0x300) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), 0xfff, r3, 0x0, 0x300}, 0x38) syz_emit_vhci(0x0, 0x14) r4 = socket(0x2, 0x80002, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002b80), 0xc) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000580)={0x84, @private=0xa010100, 0x4e22, 0x3, 'sh\x00', 0x8, 0x3, 0x6f}, 0x2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f00000000c0)) socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x102, 0x0) 10.210631993s ago: executing program 3 (id=1482): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x10800, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getitimer(0x1, &(0x7f0000000040)) r3 = syz_open_dev$video(&(0x7f0000000240), 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000020000000400000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) 9.240952329s ago: executing program 7 (id=1483): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd"}, @nested={0x4, 0x8002}, @nested={0xc, 0x8003, 0x0, 0x1, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0xb4}]}]}]}, 0x38}}, 0x4000000) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xefa9, 0x800, 0x43, 0x161}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) read$FUSE(r2, &(0x7f0000002f40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffd24) unshare(0x60600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000000)={0x7, 0x24, 0x9, 0x0, 0x7fff}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3002, 0x6, &(0x7f00000000c0)=0xa636, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ffd000/0x2000)=nil, 0x3) splice(r4, 0xffffffffffffffff, r4, 0x0, 0x6, 0xa) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280), 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x3, 0x5004) epoll_create1(0x80000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280), 0x0, 0x40000}) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x50, &(0x7f0000000100), 0x48) 8.056657681s ago: executing program 6 (id=1484): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x400, 0x0) dup(r2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000540), 0x12) sched_setscheduler(r3, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000600)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000680), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000006c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, &(0x7f0000000740)) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000780)={0x0, 0x4, 0x0, 0x0, 0x1b, "0098ba7d82070071ec25f2f792f6b4ffff6304"}) r6 = syz_open_pts(r2, 0x80) dup3(r6, r2, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) 8.007834354s ago: executing program 4 (id=1485): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) syz_open_dev$sndctrl(0x0, 0x458, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000005c0), 0x2, 0x141102) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000640)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, 0x0, 0x0) sendmsg$nl_netfilter(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='sys_mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r4, &(0x7f0000000840)='lzo', 0x3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=""/51, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000740)=0x8101) 4.782974536s ago: executing program 4 (id=1486): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='debugfs\x00', 0x1410c0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f0000000540), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000001780)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @loopback, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="10000000000000000e01000080d71b0010000000000000001001005723000000"], 0x20}}], 0x1, 0x0) fchmodat(r0, &(0x7f0000000080)='./file1\x00', 0xc2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000100)=0x5, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='ext4\x00', 0x800000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='addr=127.0.0.1,soft,timeo=1,retrans=1,sec=krb5,\x00h']) socket$nl_generic(0x10, 0x3, 0x10) 3.378932492s ago: executing program 6 (id=1487): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000002c0)=0x405, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x4000) shutdown(0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f00000005c0)=""/28, 0xfffffffffffffdee) write$tun(r4, 0x0, 0xffe) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r6, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000004740)={0x12, 0x6, 0xfa00, {0x0, r6, r5}}, 0x18) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB="2373797a313a73797a311b11fb4484385d510222"], &(0x7f0000000100)='./mnt/trace_pipe\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="666c6f6352aab3ab854b9b7f6175746f63656c6c2c666c6f636b3d64796e2c666c6f636b3d810000006c2c6613b9f057be333719c43a9d6c6f756b3d737472696319e307c8d5b393dc0e8b742c666c6f636b3d776f743d072e2c647374656d5f"]) read(r1, &(0x7f0000000740)=""/16384, 0x4000) write$binfmt_script(r0, 0x0, 0x0) 3.242935816s ago: executing program 0 (id=1488): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x60b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8, 0xc4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="7db49fdb07ac1af786f979a7c4c98f4a30507687a32c16c61e034cb67357e38da3fbe77aa31c827b802222469f1809decbb3a12e1757d1ac4ca0cfbbc289bc69b43b1b7d2e896183837a7224005c40412d2937969050f4a048a1af3723b7dc", 0x5f}, {&(0x7f0000000600)="a55b2c8f73dfa037f58774af75d97ac0c02173e2c7efc30f342a5e29dfdc47280776b0deecfb7e4911e4dd33096e8823fb8ba706e431aa", 0x37}], 0x2, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x86}], 0x18, 0xc840}], 0x1, 0x84) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/35, 0x23}, {0x0}], 0x2}, 0x62) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x2) 3.239389071s ago: executing program 3 (id=1489): r0 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc', 0x9) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000080)={0x8, 0x1ff, 0xd5, 0x9, 0x0, "23f555d9adb42d1808020e90d1beaa82dc1ecf", 0x100}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000000000000080", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mremap(&(0x7f000021a000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000440)=""/223, 0xdf}], 0x3, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) 1.391329018s ago: executing program 3 (id=1490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000240)={0x7, 0xffffffffffffff81, 0x5, 0x2, 0x2}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='./file0', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r6, &(0x7f00000004c0)='1', 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0xc05c5340, &(0x7f00000005c0)={0x0, 0x6, 0x3, {0x22c6, 0x80002}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000, 0x3}) r8 = openat$binderfs_log(0xffffff9c, &(0x7f0000000140)='./binderfs/binder_logs/state\x00', 0x0, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x20000) ioctl$LOOP_GET_STATUS64(r9, 0x4c05, &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001780)={r8, 0x0, 0xa0, 0x1000, &(0x7f0000000180)="d13edaf4b75ed704fa47129bac620825f3572c85f9bc5275d4332e37800b88bab5feaa38eb383648bd513495eaf905d45b39faa5eb1271d3f2eb995948a7243797b13d666d57a74ee82bee02a9203d7166f02a94de93f0e1212d5a63fbc8677616fa7f0d4d2e16bc2d69ba54532289d71be28b14d5c998175467c026b8f02c0b39175e13f48c2e4b51f1375e9f3d5a0f02d156f3582f8f0d9d4e3d25fb078122", &(0x7f0000000640)=""/4096, 0x6, 0x0, 0xe9, 0x27, &(0x7f0000001640)="f053171799b05aea3a9d1af6744b9c4e29914481a25519d5e60c645f2a7d702f7974f08af26064a8d650de07b077dfcbd1b26499ae0c9d5f82898cca68cc04f4887e0f4dbd5d8a09ebb798247f16db4a961d18dc701a302ec9fdc471594e6232cb65925df2c89643b8e1b0ebb8faeb017b315033cc34b1c7eb2940d4bf8b7a74d9a8568ff7760b41c9bbca8fc57333e5ff6d16ec84fbab8d468d8c7b7404eaa38a0a4322c6b54aed34437a976751135219405cbb5fbbf580cf95da3ec857e055f35d00154ff0b18f64340a9059f313372a028533fd3354faa32df26d97d6795915d17297ea73549c95", &(0x7f0000001740)="986c74540593bb8ef664346f481acfb96f1d2600078ef9861a4b76d088f21102c139f733b8feda", 0x4, 0x0, 0xffffff04}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000000c0)={0x3, 0x0, [{0x40000001, 0x5, 0x3, 0x0, 0xfffffc67, 0x6, 0x2}, {0x40000001, 0x5, 0x3, 0x6, 0x6cd1, 0x4, 0xdb9}, {0x80000019, 0x10, 0x0, 0x7, 0x6, 0x1}]}) 0s ago: executing program 7 (id=1491): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r3, 0x0, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x438, 0x110, 0x2c8, 0xfeffffff, 0x2c8, 0x2c8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7, 0x1}}, @common=@inet=@multiport={{0x50}, {0x1, 0x7, [0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4f24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e1f], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x0, 0x0, 0x0, 0x3]}}}, @common=@ttl={{0x28}, {0x3, 0xb}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @gre_key=0x9}}}}, {{@ip={@local, @remote, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10000, &(0x7f0000002140)=ANY=[]) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) kernel console output (not intermixed with test programs): for pid=12061 comm="dhcpcd-run-hook" name="resolv.conf.eth10.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1041.571350][ T31] audit: type=1400 audit(1791996327.604:1769): avc: denied { write } for pid=12061 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth10.ipv4ll" dev="tmpfs" ino=3171 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1041.571381][ T31] audit: type=1400 audit(1791996327.604:1770): avc: denied { append } for pid=12061 comm="dhcpcd-run-hook" name="resolv.conf.eth10.ipv4ll" dev="tmpfs" ino=3171 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1041.786954][ T31] audit: type=1400 audit(1791996327.797:1771): avc: denied { create } for pid=12108 comm="syz.6.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1041.844382][ T31] audit: type=1400 audit(1791996327.862:1772): avc: denied { create } for pid=12108 comm="syz.6.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1041.894424][ T31] audit: type=1400 audit(1791996327.899:1773): avc: denied { listen } for pid=12108 comm="syz.6.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1041.894883][ T31] audit: type=1400 audit(1791996327.899:1774): avc: denied { accept } for pid=12108 comm="syz.6.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1044.972104][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 1044.974383][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 1044.974649][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 1044.974891][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 1044.974980][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1204'. [ 1046.102771][ T5600] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1046.946831][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 1046.946852][ T31] audit: type=1400 audit(1791996332.558:1786): avc: denied { create } for pid=12130 comm="syz.3.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1047.041505][ T31] audit: type=1400 audit(1791996332.651:1787): avc: denied { create } for pid=12130 comm="syz.3.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1047.042569][ T31] audit: type=1400 audit(1791996332.651:1788): avc: denied { create } for pid=12133 comm="syz.7.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1047.094585][ T31] audit: type=1400 audit(1791996332.697:1789): avc: denied { listen } for pid=12130 comm="syz.3.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1047.094835][ T31] audit: type=1400 audit(1791996332.697:1790): avc: denied { bind } for pid=12133 comm="syz.7.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1047.161748][T12132] netlink: 'syz.3.1205': attribute type 2 has an invalid length. [ 1047.332323][ T31] audit: type=1400 audit(1791996332.918:1791): avc: denied { connect } for pid=12130 comm="syz.3.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1047.544579][ T31] audit: type=1400 audit(1791996333.112:1792): avc: denied { accept } for pid=12133 comm="syz.7.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1047.544628][ T31] audit: type=1400 audit(1791996333.112:1793): avc: denied { setopt } for pid=12133 comm="syz.7.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1047.544658][ T31] audit: type=1400 audit(1791996333.112:1794): avc: denied { write } for pid=12133 comm="syz.7.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1047.617688][ T31] audit: type=1400 audit(1791996333.186:1795): avc: denied { write } for pid=12130 comm="syz.3.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1048.145354][T12134] netlink: 'syz.4.1206': attribute type 21 has an invalid length. [ 1048.146659][T12134] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1206'. [ 1048.146745][T12134] netlink: 'syz.4.1206': attribute type 5 has an invalid length. [ 1048.146764][T12134] netlink: 'syz.4.1206': attribute type 6 has an invalid length. [ 1048.146771][T12134] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1206'. [ 1048.483732][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1208'. [ 1048.483759][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1208'. [ 1048.483774][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1208'. [ 1048.584015][T12154] netlink: 'syz.7.1208': attribute type 7 has an invalid length. [ 1048.643200][ T9703] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.643257][ T9703] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.643287][ T9703] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1048.643306][ T9703] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.133344][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 1055.133368][ T31] audit: type=1400 audit(1791996340.125:1821): avc: denied { write } for pid=12170 comm="syz.4.1212" name="vbi6" dev="devtmpfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1055.180541][T12173] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1055.489259][ T5726] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1055.530844][ T31] audit: type=1400 audit(1791996340.484:1822): avc: denied { read write } for pid=12186 comm="syz.6.1215" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1055.531143][ T31] audit: type=1400 audit(1791996340.484:1823): avc: denied { open } for pid=12186 comm="syz.6.1215" path="/dev/uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1055.620133][ T31] audit: type=1400 audit(1791996340.567:1824): avc: denied { ioctl } for pid=12186 comm="syz.6.1215" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1055.673305][ T5726] usb 5-1: Using ep0 maxpacket: 32 [ 1055.674025][ T5726] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1055.676024][ T5726] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1055.676040][ T5726] usb 5-1: config 0 has no interface number 0 [ 1055.676070][ T5726] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1055.681073][ T5726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.681089][ T5726] usb 5-1: Product: syz [ 1055.681108][ T5726] usb 5-1: Manufacturer: syz [ 1055.681118][ T5726] usb 5-1: SerialNumber: syz [ 1055.766364][ T5726] usb 5-1: config 0 descriptor?? [ 1055.767024][T12173] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1055.815671][ T31] audit: type=1400 audit(1791996340.752:1825): avc: denied { setopt } for pid=12189 comm="syz.7.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1057.765517][T12193] input: syz1 as /devices/virtual/input/input19 [ 1057.765549][T12193] input: failed to attach handler leds to device input19, error: -6 [ 1057.768723][ T31] audit: type=1400 audit(1791996342.551:1826): avc: denied { read } for pid=4955 comm="acpid" name="event3" dev="devtmpfs" ino=3048 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1057.768779][ T31] audit: type=1400 audit(1791996342.551:1827): avc: denied { open } for pid=4955 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3048 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1057.768810][ T31] audit: type=1400 audit(1791996342.551:1828): avc: denied { ioctl } for pid=4955 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3048 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1057.847376][ T5726] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1057.923562][ T5726] usb 5-1: USB disconnect, device number 16 [ 1058.021920][ T31] audit: type=1400 audit(1791996342.782:1829): avc: denied { read write } for pid=12186 comm="syz.6.1215" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1058.021965][ T31] audit: type=1400 audit(1791996342.782:1830): avc: denied { open } for pid=12186 comm="syz.6.1215" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1060.045828][T12205] syz.0.1218: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1060.045890][T12205] CPU: 0 UID: 0 PID: 12205 Comm: syz.0.1218 Tainted: G L syzkaller #0 PREEMPT(full) [ 1060.045906][T12205] Tainted: [L]=SOFTLOCKUP [ 1060.045910][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1060.045917][T12205] Call Trace: [ 1060.045922][T12205] [ 1060.045927][T12205] dump_stack_lvl+0x100/0x190 [ 1060.045948][T12205] warn_alloc.cold+0x9e/0xb2 [ 1060.045961][T12205] ? __pfx_warn_alloc+0x10/0x10 [ 1060.045979][T12205] ? avc_has_extended_perms+0x33a/0x1080 [ 1060.045992][T12205] ? avc_has_extended_perms+0x33a/0x1080 [ 1060.046010][T12205] __vmalloc_node_range_noprof+0x123b/0x1420 [ 1060.046027][T12205] ? rcu_is_watching+0x13/0xc0 [ 1060.046045][T12205] ? trace_contention_end+0x126/0x160 [ 1060.046061][T12205] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1060.046077][T12205] ? kasan_quarantine_put+0x104/0x240 [ 1060.046092][T12205] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1060.046111][T12205] ? __pfx___mutex_lock+0x10/0x10 [ 1060.046132][T12205] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1060.046152][T12205] ? tomoyo_path_number_perm+0x188/0x580 [ 1060.046169][T12205] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1060.046184][T12205] __vmalloc_node_noprof+0xad/0xf0 [ 1060.046201][T12205] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1060.046220][T12205] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1060.046238][T12205] ? do_vfs_ioctl+0x226/0x13e0 [ 1060.046255][T12205] dvb_usercopy+0x167/0x340 [ 1060.046269][T12205] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1060.046286][T12205] ? __pfx_dvb_usercopy+0x10/0x10 [ 1060.046299][T12205] ? __fget_files+0x34/0x3d0 [ 1060.046322][T12205] ? selinux_file_ioctl+0x13b/0x290 [ 1060.046337][T12205] ? selinux_file_ioctl+0xb6/0x290 [ 1060.046354][T12205] dvb_demux_ioctl+0x29/0x40 [ 1060.046367][T12205] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1060.046382][T12205] __x64_sys_ioctl+0x18e/0x210 [ 1060.046397][T12205] do_syscall_64+0x123/0x790 [ 1060.046414][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.046426][T12205] RIP: 0033:0x7f70c879e2d9 [ 1060.046435][T12205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.046446][T12205] RSP: 002b:00007f70c968a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1060.046456][T12205] RAX: ffffffffffffffda RBX: 00007f70c8a26090 RCX: 00007f70c879e2d9 [ 1060.046463][T12205] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000007 [ 1060.046469][T12205] RBP: 00007f70c8835888 R08: 0000000000000000 R09: 0000000000000000 [ 1060.046475][T12205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1060.046482][T12205] R13: 00007f70c8a26128 R14: 00007f70c8a26090 R15: 00007fff69580528 [ 1060.046497][T12205] [ 1060.046536][T12205] Mem-Info: [ 1060.046551][T12205] active_anon:22722 inactive_anon:0 isolated_anon:0 [ 1060.046551][T12205] active_file:7866 inactive_file:59320 isolated_file:0 [ 1060.046551][T12205] unevictable:0 dirty:648 writeback:0 [ 1060.046551][T12205] slab_reclaimable:12737 slab_unreclaimable:108779 [ 1060.046551][T12205] mapped:30738 shmem:13661 pagetables:1635 [ 1060.046551][T12205] sec_pagetables:0 bounce:0 [ 1060.046551][T12205] kernel_misc_reclaimable:0 [ 1060.046551][T12205] free:1218803 free_pcp:13088 free_cma:0 [ 1060.046588][T12205] Node 0 active_anon:90888kB inactive_anon:0kB active_file:31464kB inactive_file:237076kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122952kB dirty:2592kB writeback:0kB shmem:54644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12960kB pagetables:6412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1060.046628][T12205] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1060.046666][T12205] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1060.046727][T12205] lowmem_reserve[]: 0 2452 2452 2452 2452 [ 1060.046768][T12205] Node 0 DMA32 free:970700kB boost:0kB min:33836kB low:42292kB high:50748kB reserved_highatomic:0kB free_highatomic:0kB active_anon:90888kB inactive_anon:0kB active_file:31464kB inactive_file:237076kB unevictable:0kB writepending:2592kB zspages:1032kB present:3129332kB managed:2510920kB mlocked:0kB bounce:0kB free_pcp:42112kB local_pcp:42112kB free_cma:0kB [ 1060.046806][T12205] lowmem_reserve[]: 0 0 0 0 0 [ 1060.046844][T12205] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:60kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1060.046881][T12205] lowmem_reserve[]: 0 0 0 0 0 [ 1060.046911][T12205] Node 1 Normal free:3889152kB boost:0kB min:56064kB low:70080kB high:84096kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:10240kB local_pcp:10240kB free_cma:0kB [ 1060.046952][T12205] lowmem_reserve[]: 0 0 0 0 0 [ 1060.046993][T12205] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1060.047088][T12205] Node 0 DMA32: 2023*4kB (UME) 1152*8kB (UME) 611*16kB (UME) 422*32kB (UME) 631*64kB (UME) 415*128kB (UME) 164*256kB (UME) 62*512kB (ME) 23*1024kB (UM) 13*2048kB (UME) 174*4096kB (UM) = 970700kB [ 1060.047231][T12205] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1060.047315][T12205] Node 1 Normal: 8*4kB (UM) 8*8kB (UM) 6*16kB (UM) 4*32kB (UM) 7*64kB (UM) 6*128kB (UM) 4*256kB (UM) 5*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 947*4096kB (M) = 3889152kB [ 1060.047451][T12205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1060.047459][T12205] Node 0 hugepages_total=25 hugepages_free=25 hugepages_surp=0 hugepages_size=2048kB [ 1060.047477][T12205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1060.047485][T12205] Node 1 hugepages_total=22 hugepages_free=22 hugepages_surp=0 hugepages_size=2048kB [ 1060.047493][T12205] 80840 total pagecache pages [ 1060.047497][T12205] 2 pages in swap cache [ 1060.047510][T12205] Free swap = 120488kB [ 1060.047514][T12205] Total swap = 124996kB [ 1060.047518][T12205] 2097051 pages RAM [ 1060.047521][T12205] 0 pages HighMem/MovableOnly [ 1060.047525][T12205] 437690 pages reserved [ 1060.047528][T12205] 0 pages cma reserved [ 1060.827586][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 1060.827599][ T31] audit: type=1400 audit(1791996345.375:1874): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1060.930043][ T31] audit: type=1400 audit(1791996345.467:1875): avc: denied { write } for pid=12201 comm="syz.0.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1060.970614][ T31] audit: type=1400 audit(1791996345.504:1876): avc: denied { allowed } for pid=12209 comm="syz.6.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1060.994271][ T31] audit: type=1400 audit(1791996345.513:1877): avc: denied { ioctl } for pid=12201 comm="syz.0.1218" path="socket:[39607]" dev="sockfs" ino=39607 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1061.026888][ T31] audit: type=1400 audit(1791996345.559:1878): avc: denied { getattr } for pid=12183 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.027498][ T31] audit: type=1400 audit(1791996345.559:1879): avc: denied { create } for pid=12209 comm="syz.6.1219" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1061.059436][ T31] audit: type=1400 audit(1791996345.587:1880): avc: denied { write } for pid=12183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.085093][ T31] audit: type=1400 audit(1791996345.615:1881): avc: denied { add_name } for pid=12183 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.085137][ T31] audit: type=1400 audit(1791996345.615:1882): avc: denied { create } for pid=12183 comm="dhcpcd-run-hook" name="resolv.conf.eth9.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1061.136730][ T31] audit: type=1400 audit(1791996345.615:1883): avc: denied { write } for pid=12183 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth9.ipv4ll" dev="tmpfs" ino=3199 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1062.616836][T12220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.798564][T12241] bridge0: port 4(netdevsim0) entered blocking state [ 1065.798629][T12241] bridge0: port 4(netdevsim0) entered disabled state [ 1065.798770][T12241] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1065.805949][T12241] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1065.808705][T12241] bridge0: port 4(netdevsim0) entered blocking state [ 1065.808757][T12241] bridge0: port 4(netdevsim0) entered forwarding state [ 1067.602141][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 1067.602154][ T31] audit: type=1400 audit(1791996351.621:1917): avc: denied { read write } for pid=12255 comm="syz.4.1231" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1067.602191][ T31] audit: type=1400 audit(1791996351.621:1918): avc: denied { open } for pid=12255 comm="syz.4.1231" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1067.692319][ T31] audit: type=1400 audit(1791996351.714:1919): avc: denied { mount } for pid=12247 comm="syz.7.1229" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1067.727302][ T31] audit: type=1807 audit(1791996351.714:1920): action=measure res=1 [ 1067.745349][ T31] audit: type=1400 audit(1791996351.751:1921): avc: denied { mount } for pid=12247 comm="syz.7.1229" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1067.773105][ T31] audit: type=1400 audit(1791996351.778:1922): avc: denied { ioctl } for pid=12255 comm="syz.4.1231" path="socket:[39737]" dev="sockfs" ino=39737 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1067.841909][ T31] audit: type=1400 audit(1791996351.843:1923): avc: denied { ioctl } for pid=12255 comm="syz.4.1231" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1067.893657][T12247] ima: policy update completed [ 1067.893789][ T31] audit: type=1802 audit(1791996351.889:1924): pid=12247 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.7.1229" res=1 errno=0 [ 1068.026322][ T31] audit: type=1800 audit(1791996352.009:1925): pid=12258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31345 res=0 errno=0 [ 1068.088121][ T31] audit: type=1800 audit(1791996352.074:1926): pid=12260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31368 res=0 errno=0 [ 1068.201245][ T5726] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1068.365920][ T5726] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1068.368886][ T5726] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1068.368920][ T5726] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1068.368933][ T5726] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1068.368956][ T5726] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1068.368977][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.727444][ T5726] gud 5-1:1.0: Unexpected status OK for failed transfer [ 1070.727492][ T5726] gud 5-1:1.0: Failed to add properties (error=-32) [ 1070.727508][ T5726] gud 5-1:1.0: probe with driver gud failed with error -32 [ 1070.888202][T12272] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1071.139459][ T5726] usb 5-1: USB disconnect, device number 17 [ 1073.086162][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 1073.086183][ T31] audit: type=1400 audit(1791996356.678:1962): avc: denied { read write } for pid=12291 comm="syz.4.1240" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1073.086218][ T31] audit: type=1400 audit(1791996356.678:1963): avc: denied { open } for pid=12291 comm="syz.4.1240" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1073.147941][ T5726] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1073.164304][ T31] audit: type=1400 audit(1791996356.752:1964): avc: denied { mounton } for pid=12291 comm="syz.4.1240" path="/263/file0" dev="tmpfs" ino=1505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1073.192077][ T31] audit: type=1800 audit(1791996356.779:1965): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199440 res=0 errno=0 [ 1073.225386][ T31] audit: type=1400 audit(1791996356.807:1966): avc: denied { create } for pid=12291 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1073.392977][ T5726] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1074.012169][ T31] audit: type=1400 audit(1791996357.545:1967): avc: denied { mount } for pid=12291 comm="syz.4.1240" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1074.121456][ T5726] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1074.121491][ T5726] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1074.121533][ T5726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.669366][ T31] audit: type=1800 audit(1791996358.145:1968): pid=12258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=199459 res=0 errno=0 [ 1074.836777][ T31] audit: type=1800 audit(1791996358.302:1969): pid=12258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=199488 res=0 errno=0 [ 1074.841497][ T31] audit: type=1800 audit(1791996358.302:1970): pid=12258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=199466 res=0 errno=0 [ 1074.894378][ T31] audit: type=1800 audit(1791996358.357:1971): pid=12258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=199467 res=0 errno=0 [ 1074.982895][ T5726] usb 4-1: can't set config #27, error -71 [ 1075.022666][ T5726] usb 4-1: USB disconnect, device number 23 [ 1078.662922][T12308] 9p: Bad value for 'rfdno' [ 1078.730512][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1078.730532][ T31] audit: type=1400 audit(1791996361.706:1977): avc: denied { read } for pid=12307 comm="syz.7.1244" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1078.730579][ T31] audit: type=1400 audit(1791996361.706:1978): avc: denied { open } for pid=12307 comm="syz.7.1244" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1078.822879][ T31] audit: type=1800 audit(1791996361.983:1979): pid=12302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1242" name="new_device" dev="sysfs" ino=24521 res=0 errno=0 [ 1080.300325][ T31] audit: type=1400 audit(1791996363.340:1980): avc: denied { create } for pid=12313 comm="syz.4.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1081.137518][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1081.137570][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1082.252222][ T31] audit: type=1400 audit(1791996365.139:1981): avc: denied { setopt } for pid=12315 comm="syz.0.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1083.625068][ T5600] Bluetooth: hci3: command 0x0406 tx timeout [ 1084.336453][ T31] audit: type=1400 audit(1791996367.058:1982): avc: denied { create } for pid=12331 comm="syz.0.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1086.131980][ T31] audit: type=1400 audit(1791996368.719:1983): avc: denied { write } for pid=12331 comm="syz.0.1251" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1086.132025][ T31] audit: type=1400 audit(1791996368.719:1984): avc: denied { open } for pid=12331 comm="syz.0.1251" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1086.167686][ T31] audit: type=1400 audit(1791996368.719:1985): avc: denied { ioctl } for pid=12331 comm="syz.0.1251" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1086.571391][ T31] audit: type=1400 audit(1791996369.125:1986): avc: denied { ioctl } for pid=12327 comm="syz.3.1250" path="socket:[40115]" dev="sockfs" ino=40115 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1086.574029][ T31] audit: type=1400 audit(1791996369.134:1987): avc: denied { bind } for pid=12327 comm="syz.3.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1087.639842][ T31] audit: type=1400 audit(1791996369.679:1988): avc: denied { setopt } for pid=12341 comm="syz.6.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1087.996019][ T31] audit: type=1400 audit(1791996370.389:1989): avc: denied { map } for pid=12341 comm="syz.6.1253" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1087.996063][ T31] audit: type=1400 audit(1791996370.389:1990): avc: denied { read write } for pid=12341 comm="syz.6.1253" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1088.059271][ T31] audit: type=1400 audit(1791996370.472:1991): avc: denied { setopt } for pid=12341 comm="syz.6.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1089.808209][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1089.808231][ T31] audit: type=1400 audit(1791996372.115:1994): avc: denied { write } for pid=12346 comm="syz.0.1254" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1089.809379][ T31] audit: type=1400 audit(1791996372.115:1995): avc: denied { write } for pid=12346 comm="syz.0.1254" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1091.195631][T12355] netlink: 'syz.6.1255': attribute type 4 has an invalid length. [ 1091.195648][T12355] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1255'. [ 1091.635159][ T31] audit: type=1400 audit(1791996373.794:1996): avc: denied { write } for pid=12359 comm="syz.3.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1091.635212][ T31] audit: type=1400 audit(1791996373.794:1997): avc: denied { connect } for pid=12359 comm="syz.3.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1091.635241][ T31] audit: type=1400 audit(1791996373.794:1998): avc: denied { name_connect } for pid=12359 comm="syz.3.1256" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1091.726035][ T31] audit: type=1400 audit(1791996373.877:1999): avc: denied { shutdown } for pid=12359 comm="syz.3.1256" lport=45985 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1091.781086][ T31] audit: type=1400 audit(1791996373.932:2000): avc: denied { create } for pid=12361 comm="syz.0.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1091.812390][ T31] audit: type=1400 audit(1791996373.960:2001): avc: denied { bind } for pid=12361 comm="syz.0.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1091.846441][ T31] audit: type=1400 audit(1791996373.988:2002): avc: denied { setopt } for pid=12361 comm="syz.0.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1091.875018][ T31] audit: type=1400 audit(1791996373.997:2003): avc: denied { listen } for pid=12361 comm="syz.0.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1092.029189][T12363] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1092.029234][T12363] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1093.442526][T12363] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1095.375372][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 1095.375385][ T31] audit: type=1400 audit(1791996377.254:2009): avc: denied { mount } for pid=12378 comm="syz.3.1262" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1095.445201][T12379] overlay: Unknown parameter '/file0' [ 1095.709531][ T31] audit: type=1400 audit(1791996377.558:2010): avc: denied { ioctl } for pid=12380 comm="syz.4.1263" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=40389 ioctlcmd=0x583c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1097.399404][T12388] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1097.842456][T12388] Can't find ip_set type hash [ 1099.222218][ T31] audit: type=1400 audit(1791996380.779:2011): avc: denied { setopt } for pid=12391 comm="syz.7.1265" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1099.250410][ T9703] IPVS: starting estimator thread 0... [ 1099.392259][T12397] IPVS: using max 80 ests per chain, 192000 per kthread [ 1100.852553][T12396] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1258'. [ 1101.641732][ T31] audit: type=1400 audit(1791996383.012:2012): avc: denied { mount } for pid=12402 comm="syz.0.1268" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1101.641784][ T31] audit: type=1400 audit(1791996383.012:2013): avc: denied { write } for pid=12402 comm="syz.0.1268" name="set_event" dev="tracefs" ino=3410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1101.641825][ T31] audit: type=1400 audit(1791996383.021:2014): avc: denied { write } for pid=12402 comm="syz.0.1268" name="igmp" dev="proc" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1101.909654][ T31] audit: type=1800 audit(1791996383.270:2015): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1269" name="scan" dev="sysfs" ino=21632 res=0 errno=0 [ 1102.051406][ T31] audit: type=1400 audit(1791996383.408:2016): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1102.127234][ T31] audit: type=1400 audit(1791996383.482:2017): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1102.287525][ T31] audit: type=1400 audit(1791996383.621:2018): avc: denied { write } for pid=12406 comm="syz.6.1270" name="functions" dev="configfs" ino=11855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1102.396363][ T31] audit: type=1400 audit(1791996383.731:2019): avc: denied { mount } for pid=12413 comm="syz.0.1271" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1102.435146][ T31] audit: type=1400 audit(1791996383.759:2020): avc: denied { write } for pid=12406 comm="syz.6.1270" name="header" dev="configfs" ino=40523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1102.466261][ T31] audit: type=1400 audit(1791996383.796:2021): avc: denied { write } for pid=12406 comm="syz.6.1270" name="h" dev="configfs" ino=40537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1106.209473][T12419] block device autoloading is deprecated and will be removed. [ 1106.709081][T12439] overlay: Unknown parameter '/file0' [ 1108.423742][T12419] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 1108.423770][T12419] device-mapper: ioctl: error adding target to table [ 1108.532652][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 1108.532665][ T31] audit: type=1400 audit(1791996389.387:2046): avc: denied { write } for pid=12441 comm="syz.7.1267" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1108.536456][ T31] audit: type=1400 audit(1791996389.387:2047): avc: denied { write } for pid=12441 comm="syz.7.1267" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1109.015124][ T31] audit: type=1400 audit(1791996389.821:2048): avc: denied { mounton } for pid=12448 comm="syz.3.1279" path="/268/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1109.015167][ T31] audit: type=1400 audit(1791996389.821:2049): avc: denied { mount } for pid=12448 comm="syz.3.1279" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1109.112437][ T31] audit: type=1400 audit(1791996389.923:2050): avc: denied { create } for pid=12451 comm="syz.7.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1110.496597][ T31] audit: type=1400 audit(1791996391.205:2051): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1110.937855][ T31] audit: type=1400 audit(1791996391.611:2052): avc: denied { create } for pid=12451 comm="syz.7.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1110.979025][ T31] audit: type=1400 audit(1791996391.639:2053): avc: denied { connect } for pid=12451 comm="syz.7.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1111.028352][ T31] audit: type=1400 audit(1791996391.694:2054): avc: denied { write } for pid=12451 comm="syz.7.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1111.121575][ T31] audit: type=1400 audit(1791996391.777:2055): avc: denied { write } for pid=12460 comm="syz.6.1283" path="/dev/vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1114.474198][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1114.474220][ T31] audit: type=1400 audit(1791996394.868:2059): avc: denied { write } for pid=12468 comm="syz.4.1282" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1114.624767][ T5600] Bluetooth: hci3: command 0x0406 tx timeout [ 1114.655063][ T31] audit: type=1400 audit(1791996395.044:2060): avc: denied { write } for pid=12468 comm="syz.4.1282" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1116.100809][T12482] overlay: Unknown parameter '/file0' [ 1117.728079][ T31] audit: type=1400 audit(1791996397.867:2061): avc: denied { write } for pid=12486 comm="syz.7.1290" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1117.729735][ T31] audit: type=1400 audit(1791996397.867:2062): avc: denied { write } for pid=12486 comm="syz.7.1290" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1117.804122][T12485] FAULT_INJECTION: forcing a failure. [ 1117.804122][T12485] name failslab, interval 1, probability 5, space 0, times 9991 [ 1117.804161][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.4.1289 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.804179][T12485] Tainted: [L]=SOFTLOCKUP [ 1117.804184][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1117.804192][T12485] Call Trace: [ 1117.804196][T12485] [ 1117.804201][T12485] dump_stack_lvl+0x100/0x190 [ 1117.804225][T12485] should_fail_ex.cold+0x5/0xa [ 1117.804242][T12485] should_failslab+0xc2/0x120 [ 1117.804261][T12485] kmem_cache_alloc_noprof+0x92/0x6a0 [ 1117.804278][T12485] ? alloc_empty_file+0x5b/0x1c0 [ 1117.804292][T12485] alloc_empty_file+0x5b/0x1c0 [ 1117.804304][T12485] path_openat+0xdb/0x2440 [ 1117.804322][T12485] ? __pfx_path_openat+0x10/0x10 [ 1117.804342][T12485] do_file_open+0x20e/0x430 [ 1117.804359][T12485] ? __pfx_do_file_open+0x10/0x10 [ 1117.804385][T12485] ? _raw_spin_unlock+0x28/0x50 [ 1117.804398][T12485] ? alloc_fd+0x471/0x7a0 [ 1117.804419][T12485] do_sys_openat2+0x10f/0x1e0 [ 1117.804430][T12485] ? __pfx_do_sys_openat2+0x10/0x10 [ 1117.804445][T12485] __x64_sys_openat+0x12d/0x210 [ 1117.804456][T12485] ? __pfx___x64_sys_openat+0x10/0x10 [ 1117.804473][T12485] do_syscall_64+0x123/0x790 [ 1117.804490][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.804503][T12485] RIP: 0033:0x7f9af259e2d9 [ 1117.804515][T12485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.804526][T12485] RSP: 002b:00007f9af33b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1117.804538][T12485] RAX: ffffffffffffffda RBX: 00007f9af2825fa0 RCX: 00007f9af259e2d9 [ 1117.804545][T12485] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1117.804552][T12485] RBP: 00007f9af2635888 R08: 0000000000000000 R09: 0000000000000000 [ 1117.804559][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.804565][T12485] R13: 00007f9af2826038 R14: 00007f9af2825fa0 R15: 00007ffe71608aa8 [ 1117.804580][T12485] [ 1118.154228][ T31] audit: type=1400 audit(1791996398.273:2063): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1118.349890][T12497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=12497 comm=syz.4.1291 [ 1119.955177][ T31] audit: type=1400 audit(1791996399.934:2064): avc: denied { name_connect } for pid=12498 comm="syz.7.1292" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1119.990544][ T31] audit: type=1400 audit(1791996399.962:2065): avc: denied { egress } for pid=17 comm="rcu_preempt" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1119.990583][ T31] audit: type=1400 audit(1791996399.962:2066): avc: denied { sendto } for pid=17 comm="rcu_preempt" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1121.531897][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1286'. [ 1121.552034][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1286'. [ 1121.552361][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1286'. [ 1121.552690][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1286'. [ 1121.804172][ T31] audit: type=1400 audit(1791996401.632:2067): avc: denied { setopt } for pid=12498 comm="syz.7.1292" lport=39914 faddr=fc02:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1121.938214][ T31] audit: type=1400 audit(1791996401.761:2068): avc: denied { nlmsg_write } for pid=12509 comm="syz.6.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1121.942949][T12510] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1293'. [ 1122.019510][ T31] audit: type=1400 audit(1791996401.835:2069): avc: denied { ioctl } for pid=12509 comm="syz.6.1293" path="socket:[41210]" dev="sockfs" ino=41210 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1122.055348][ T31] audit: type=1400 audit(1791996401.872:2070): avc: denied { setopt } for pid=12509 comm="syz.6.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1122.259984][ T31] audit: type=1400 audit(1791996402.056:2071): avc: denied { create } for pid=12512 comm="syz.3.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1123.175291][ T31] audit: type=1400 audit(1791996402.905:2072): avc: denied { ioctl } for pid=12512 comm="syz.3.1294" path="socket:[41223]" dev="sockfs" ino=41223 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1123.845575][ T31] audit: type=1400 audit(1791996403.523:2073): avc: denied { mount } for pid=12509 comm="syz.6.1293" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1123.892286][T12514] macvtap1: entered allmulticast mode [ 1123.892749][T12514] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1124.979236][T12514] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1124.980727][T12514] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1125.526524][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1125.526545][ T31] audit: type=1400 audit(1791996405.073:2076): avc: denied { read } for pid=12512 comm="syz.3.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1126.819866][T12514] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1128.679884][ T31] audit: type=1400 audit(1791996407.980:2077): avc: denied { write } for pid=12530 comm="syz.4.1299" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1128.769208][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1293'. [ 1128.771155][T10103] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1128.832601][ T31] audit: type=1400 audit(1791996408.118:2078): avc: denied { watch } for pid=12537 comm="syz.7.1301" path="pipe:[41355]" dev="pipefs" ino=41355 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1129.028635][T12539] sctp: [Deprecated]: syz.7.1301 (pid 12539) Use of int in max_burst socket option. [ 1129.028635][T12539] Use struct sctp_assoc_value instead [ 1129.264524][ T31] audit: type=1800 audit(1791996408.524:2079): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202875 res=0 errno=0 [ 1129.301471][ T31] audit: type=1400 audit(1791996408.552:2080): avc: denied { ioctl } for pid=12537 comm="syz.7.1301" path="socket:[41358]" dev="sockfs" ino=41358 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1129.336325][ T31] audit: type=1400 audit(1791996408.589:2081): avc: denied { remount } for pid=12535 comm="syz.0.1300" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1129.383915][ T31] audit: type=1400 audit(1791996408.635:2082): avc: denied { read append } for pid=12537 comm="syz.7.1301" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1129.413152][ T31] audit: type=1400 audit(1791996408.663:2083): avc: denied { open } for pid=12537 comm="syz.7.1301" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1129.538633][ T31] audit: type=1400 audit(1791996408.773:2084): avc: denied { bind } for pid=12544 comm="syz.6.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1131.108522][ T31] audit: type=1400 audit(1791996410.222:2085): avc: denied { write } for pid=12543 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1131.149239][T12549] : renamed from bond_slave_0 (while UP) [ 1131.206237][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 1131.207720][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 1131.208042][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 1131.208252][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 1131.208406][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 1131.210200][T12550] netlink: 'syz.6.1303': attribute type 1 has an invalid length. [ 1131.210211][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1303'. [ 1131.940283][T12554] lo speed is unknown, defaulting to 1000 [ 1131.940345][T12554] lo speed is unknown, defaulting to 1000 [ 1131.943540][T12554] lo speed is unknown, defaulting to 1000 [ 1131.944677][T12554] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1131.944713][T12554] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1131.944747][T12554] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1131.947951][T12554] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1131.961144][T12554] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1132.484821][ T5600] Bluetooth: hci1: command 0x0406 tx timeout [ 1132.694525][T12554] lo speed is unknown, defaulting to 1000 [ 1132.697020][T12554] lo speed is unknown, defaulting to 1000 [ 1132.698961][T12554] lo speed is unknown, defaulting to 1000 [ 1132.700149][T12554] lo speed is unknown, defaulting to 1000 [ 1132.701243][T12554] lo speed is unknown, defaulting to 1000 [ 1133.005780][T12542] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1133.009004][T12542] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1133.009062][T12542] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1133.115335][ T31] audit: type=1800 audit(1791996412.049:2086): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202930 res=0 errno=0 [ 1133.254658][ T31] audit: type=1800 audit(1791996412.197:2087): pid=12560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202945 res=0 errno=0 [ 1133.307031][ T31] audit: type=1800 audit(1791996412.252:2088): pid=12561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=202896 res=0 errno=0 [ 1134.858380][ T31] audit: type=1400 audit(1791996413.682:2089): avc: denied { write } for pid=12558 comm="syz.0.1305" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1135.985282][T12556] Bluetooth: hci3: command 0x0406 tx timeout [ 1136.772103][T12570] netlink: 'syz.3.1306': attribute type 21 has an invalid length. [ 1136.928592][T12570] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1306'. [ 1136.955939][T12570] netlink: 'syz.3.1306': attribute type 5 has an invalid length. [ 1136.955952][T12570] netlink: 'syz.3.1306': attribute type 6 has an invalid length. [ 1136.955959][T12570] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1306'. [ 1137.307317][ T31] audit: type=1400 audit(1791996415.943:2090): avc: denied { read write } for pid=12567 comm="syz.3.1306" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1137.307551][ T31] audit: type=1400 audit(1791996415.943:2091): avc: denied { open } for pid=12567 comm="syz.3.1306" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1137.652911][T12583] FAULT_INJECTION: forcing a failure. [ 1137.652911][T12583] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1137.652945][T12583] CPU: 0 UID: 0 PID: 12583 Comm: syz.4.1310 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.652962][T12583] Tainted: [L]=SOFTLOCKUP [ 1137.652967][T12583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1137.652974][T12583] Call Trace: [ 1137.652979][T12583] [ 1137.652983][T12583] dump_stack_lvl+0x100/0x190 [ 1137.653004][T12583] should_fail_ex.cold+0x5/0xa [ 1137.653021][T12583] get_futex_key+0x293/0x14f0 [ 1137.653038][T12583] ? __pfx_get_futex_key+0x10/0x10 [ 1137.653054][T12583] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1137.653075][T12583] futex_wake+0xf4/0x5e0 [ 1137.653088][T12583] ? __pfx_futex_wake+0x10/0x10 [ 1137.653102][T12583] ? lock_acquire+0x1d1/0x380 [ 1137.653114][T12583] ? detach_task_ctx_data+0x83/0x490 [ 1137.653128][T12583] do_futex+0x2b2/0x440 [ 1137.653145][T12583] ? __pfx_do_futex+0x10/0x10 [ 1137.653160][T12583] ? __might_fault+0xc5/0x140 [ 1137.653175][T12583] mm_exit_exec_release+0x256/0x2f0 [ 1137.653189][T12583] do_exit+0x707/0x2a50 [ 1137.653202][T12583] ? lock_acquire+0x1d1/0x380 [ 1137.653214][T12583] ? cgroup1_freezing+0x27/0x3b0 [ 1137.653226][T12583] ? find_held_lock+0x2b/0x80 [ 1137.653243][T12583] ? __pfx_do_exit+0x10/0x10 [ 1137.653258][T12583] ? find_held_lock+0x2b/0x80 [ 1137.653274][T12583] ? get_signal+0x7e0/0x21e0 [ 1137.653288][T12583] do_group_exit+0xd5/0x2a0 [ 1137.653303][T12583] get_signal+0x1ec7/0x21e0 [ 1137.653324][T12583] ? __pfx_get_signal+0x10/0x10 [ 1137.653339][T12583] ? do_futex+0x190/0x440 [ 1137.653357][T12583] arch_do_signal_or_restart+0x91/0x7e0 [ 1137.653375][T12583] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1137.653400][T12583] exit_to_user_mode_loop+0x139/0x700 [ 1137.653417][T12583] ? rcu_is_watching+0x13/0xc0 [ 1137.653435][T12583] do_syscall_64+0x661/0x790 [ 1137.653455][T12583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.653466][T12583] RIP: 0033:0x7f9af259e2d9 [ 1137.653475][T12583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.653486][T12583] RSP: 002b:00007f9af33910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1137.653497][T12583] RAX: fffffffffffffe00 RBX: 00007f9af2826098 RCX: 00007f9af259e2d9 [ 1137.653503][T12583] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9af2826098 [ 1137.653510][T12583] RBP: 00007f9af2826090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.653516][T12583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.653522][T12583] R13: 00007f9af2826128 R14: 00007ffe716089c0 R15: 00007ffe71608aa8 [ 1137.653537][T12583] [ 1138.180690][T12556] Bluetooth: hci3: command 0x0406 tx timeout [ 1139.335480][ T31] audit: type=1326 audit(1791996417.807:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12576 comm="syz.0.1309" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70c879e2d9 code=0x0 [ 1139.507428][ T31] audit: type=1400 audit(1791996417.973:2093): avc: denied { write } for pid=12576 comm="syz.0.1309" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1139.507469][ T31] audit: type=1400 audit(1791996417.973:2094): avc: denied { open } for pid=12576 comm="syz.0.1309" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1139.587866][ T31] audit: type=1400 audit(1791996418.037:2095): avc: denied { ioctl } for pid=12576 comm="syz.0.1309" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1141.048112][T12596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.048434][T12596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.537471][ T31] audit: type=1800 audit(1791996419.837:2096): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203524 res=0 errno=0 [ 1142.072261][ T31] audit: type=1800 audit(1791996420.344:2097): pid=12605 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1316" name="del_device" dev="sysfs" ino=24522 res=0 errno=0 [ 1143.185653][ T31] audit: type=1800 audit(1791996421.359:2098): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31445 res=0 errno=0 [ 1143.249081][ T31] audit: type=1800 audit(1791996421.424:2099): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31468 res=0 errno=0 [ 1143.373343][T12605] netlink: 'syz.4.1316': attribute type 21 has an invalid length. [ 1143.376370][T12605] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1316'. [ 1143.376437][T12605] netlink: 'syz.4.1316': attribute type 5 has an invalid length. [ 1143.376455][T12605] netlink: 'syz.4.1316': attribute type 6 has an invalid length. [ 1143.376462][T12605] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1316'. [ 1143.438037][ T5726] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1144.748706][ T5726] usb 7-1: Using ep0 maxpacket: 8 [ 1144.751220][ T5726] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1144.752926][ T5726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.786344][ T31] audit: type=1800 audit(1791996422.845:2100): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203551 res=0 errno=0 [ 1145.054984][ T31] audit: type=1400 audit(1791996423.085:2101): avc: denied { ioctl } for pid=12617 comm="syz.0.1321" path="socket:[41702]" dev="sockfs" ino=41702 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1145.055033][ T31] audit: type=1400 audit(1791996423.085:2102): avc: denied { write } for pid=12617 comm="syz.0.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1145.143898][ T5726] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1145.143909][ T5726] pvrusb2: ********** [ 1145.143922][ T5726] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1145.143929][ T5726] pvrusb2: Important functionality might not be entirely working. [ 1145.143934][ T5726] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1145.143940][ T5726] pvrusb2: ********** [ 1145.147513][ T31] audit: type=1800 audit(1791996423.168:2103): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=203580 res=0 errno=0 [ 1145.340317][ T31] audit: type=1800 audit(1791996423.352:2104): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=203558 res=0 errno=0 [ 1145.340366][ T31] audit: type=1800 audit(1791996423.352:2105): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=203559 res=0 errno=0 [ 1145.404791][ T31] audit: type=1800 audit(1791996423.407:2106): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=203560 res=0 errno=0 [ 1145.455848][ T2355] pvrusb2: Invalid write control endpoint [ 1145.516696][ T31] audit: type=1800 audit(1791996423.509:2107): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203600 res=0 errno=0 [ 1147.724622][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1147.724673][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1148.561110][ T2355] pvrusb2: Invalid write control endpoint [ 1148.561122][ T2355] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1148.561127][ T2355] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1148.561140][ T2355] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1148.561145][ T2355] pvrusb2: Device being rendered inoperable [ 1148.642964][ T2355] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1148.643006][ T2355] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1148.721221][T10103] usb 7-1: USB disconnect, device number 9 [ 1148.839221][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1148.839234][ T31] audit: type=1400 audit(1791996426.582:2117): avc: denied { bind } for pid=12629 comm="syz.3.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1148.840849][ T31] audit: type=1400 audit(1791996426.582:2118): avc: denied { connect } for pid=12629 comm="syz.3.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1148.902592][ T2355] pvrusb2: Attached sub-driver cx25840 [ 1148.902617][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1148.902622][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1149.404040][ T31] audit: type=1400 audit(1791996427.098:2119): avc: denied { create } for pid=12633 comm="syz.7.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1149.454110][ T31] audit: type=1400 audit(1791996427.154:2120): avc: denied { read } for pid=12633 comm="syz.7.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1149.511204][ T31] audit: type=1400 audit(1791996427.200:2121): avc: denied { write } for pid=12633 comm="syz.7.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1149.514169][T12639] ieee802154 phy0 wpan0: encryption failed: -126 [ 1149.745621][ T31] audit: type=1400 audit(1791996427.412:2122): avc: denied { read append } for pid=12636 comm="syz.0.1326" name="event0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1149.802554][T12645] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1150.787865][T12654] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1329'. [ 1151.025058][T12654] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1151.026873][ T31] audit: type=1400 audit(1791996428.602:2123): avc: denied { read append } for pid=12653 comm="syz.0.1329" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1151.026914][ T31] audit: type=1400 audit(1791996428.602:2124): avc: denied { open } for pid=12653 comm="syz.0.1329" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1151.026945][ T31] audit: type=1400 audit(1791996428.602:2125): avc: denied { ioctl } for pid=12653 comm="syz.0.1329" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1151.026987][ T31] audit: type=1400 audit(1791996428.602:2126): avc: denied { read } for pid=12653 comm="syz.0.1329" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1154.921601][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1154.921613][ T31] audit: type=1400 audit(1791996432.192:2129): avc: denied { mount } for pid=12662 comm="syz.7.1333" name="/" dev="rpc_pipefs" ino=41970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1155.176147][ T5726] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1155.227946][ T31] audit: type=1400 audit(1791996432.468:2130): avc: denied { unmount } for pid=11482 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1155.351218][ T5726] usb 7-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1155.354379][ T5726] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.354414][ T5726] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 1155.354429][ T5726] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1155.354453][ T5726] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1155.354469][ T5726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.443395][ T5726] usb 7-1: config 0 descriptor?? [ 1155.444063][T12671] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1155.476422][ T31] audit: type=1800 audit(1791996432.699:2131): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203847 res=0 errno=0 [ 1155.508578][ T31] audit: type=1800 audit(1791996432.727:2132): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=203876 res=0 errno=0 [ 1155.508636][ T31] audit: type=1800 audit(1791996432.727:2133): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=203854 res=0 errno=0 [ 1155.538611][ T31] audit: type=1800 audit(1791996432.764:2134): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=203855 res=0 errno=0 [ 1155.594650][ T31] audit: type=1800 audit(1791996432.764:2135): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=203856 res=0 errno=0 [ 1155.656329][ T31] audit: type=1800 audit(1791996432.874:2136): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203896 res=0 errno=0 [ 1160.123279][ T31] audit: type=1400 audit(1791996436.990:2137): avc: denied { watch watch_reads } for pid=12685 comm="syz.4.1337" path="/290" dev="tmpfs" ino=1654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1161.062979][ T5726] usbhid 7-1:0.0: can't add hid device: -32 [ 1161.063060][ T5726] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1161.090975][ T5726] usb 7-1: USB disconnect, device number 10 [ 1164.211355][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1342'. [ 1164.621959][ T5726] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1165.014943][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 1165.051939][ T5726] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1165.166657][ T5726] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1165.166686][ T5726] usb 4-1: config 0 has no interface number 0 [ 1165.196869][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.196895][ T5726] usb 4-1: Product: syz [ 1165.196904][ T5726] usb 4-1: Manufacturer: syz [ 1165.196912][ T5726] usb 4-1: SerialNumber: syz [ 1165.230855][ T31] audit: type=1800 audit(1791996441.705:2138): pid=12701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203956 res=0 errno=0 [ 1165.260422][ T5726] usb 4-1: config 0 descriptor?? [ 1165.262993][ T5726] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1165.343829][ T31] audit: type=1800 audit(1791996441.806:2139): pid=12701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=203988 res=0 errno=0 [ 1165.871441][ T31] audit: type=1800 audit(1791996442.304:2140): pid=12701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=203963 res=0 errno=0 [ 1166.034133][ T31] audit: type=1800 audit(1791996442.452:2141): pid=12701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=203964 res=0 errno=0 [ 1166.445523][T12556] Bluetooth: hci3: command 0x0406 tx timeout [ 1167.495183][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1343'. [ 1167.495753][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1343'. [ 1167.496019][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1343'. [ 1167.496928][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1343'. [ 1169.093854][ T5726] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1169.094052][ T5726] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 1169.120802][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 1169.135069][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 1169.135370][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 1169.138635][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 1169.138985][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 1169.152580][T12722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.152907][T12722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.221251][ T5726] usb 4-1: USB disconnect, device number 24 [ 1169.315771][ T31] audit: type=1800 audit(1791996445.469:2142): pid=12701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=203985 res=0 errno=0 [ 1169.633073][T12730] xt_hashlimit: size too large, truncated to 1048576 [ 1169.642903][ T31] audit: type=1400 audit(1791996445.783:2143): avc: denied { mount } for pid=12729 comm="syz.4.1349" name="/" dev="ramfs" ino=42248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1169.882541][T12734] xt_hashlimit: size too large, truncated to 1048576 [ 1169.886871][ T31] audit: type=1800 audit(1791996446.004:2144): pid=12732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1346" name="del_device" dev="sysfs" ino=24522 res=0 errno=0 [ 1171.579164][ T31] audit: type=1800 audit(1791996447.564:2145): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204066 res=0 errno=0 [ 1171.626860][ T31] audit: type=1800 audit(1791996447.610:2146): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204078 res=0 errno=0 [ 1171.673892][ T31] audit: type=1400 audit(1791996447.647:2147): avc: denied { listen } for pid=12727 comm="syz.6.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1171.756152][T12734] netlink: 'syz.6.1348': attribute type 2 has an invalid length. [ 1171.789142][ T31] audit: type=1800 audit(1791996447.758:2148): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204090 res=0 errno=0 [ 1171.794647][ T31] audit: type=1400 audit(1791996447.758:2149): avc: denied { connect } for pid=12727 comm="syz.6.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1171.883042][ T31] audit: type=1400 audit(1791996447.841:2150): avc: denied { accept } for pid=12727 comm="syz.6.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1172.014766][T12732] netlink: 'syz.3.1346': attribute type 21 has an invalid length. [ 1172.014816][T12732] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1346'. [ 1172.014858][T12732] netlink: 'syz.3.1346': attribute type 5 has an invalid length. [ 1172.014866][T12732] netlink: 'syz.3.1346': attribute type 6 has an invalid length. [ 1172.014872][T12732] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1346'. [ 1172.121217][T12749] team0: entered promiscuous mode [ 1172.121252][T12749] team_slave_0: entered promiscuous mode [ 1172.121394][T12749] team_slave_1: entered promiscuous mode [ 1172.121499][T12749] team0: entered allmulticast mode [ 1172.121507][T12749] team_slave_0: entered allmulticast mode [ 1172.121535][T12749] team_slave_1: entered allmulticast mode [ 1172.179054][ T31] audit: type=1400 audit(1791996448.117:2151): avc: denied { append } for pid=12745 comm="syz.0.1351" name="ubi_ctrl" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1173.123267][ T31] audit: type=1800 audit(1791996448.966:2152): pid=12751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1352" name="status" dev="sysfs" ino=2299 res=0 errno=0 [ 1173.195997][T12747] net_ratelimit: 3 callbacks suppressed [ 1173.196025][T12747] netlink: Conntrack attr has 8 unknown bytes [ 1173.196037][T12747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1173.409612][T12747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.439753][T12747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1174.818634][T12747] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1174.840432][T12747] bond0 (unregistering): Released all slaves [ 1175.173742][T12762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1175.177107][ T31] audit: type=1800 audit(1791996450.876:2153): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204182 res=0 errno=0 [ 1176.537058][ T3214] libceph: connect (1)127.0.0.1:6789 error -101 [ 1176.537207][ T3214] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1176.538127][ T31] audit: type=1800 audit(1791996452.140:2154): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204201 res=0 errno=0 [ 1176.633385][T12764] ceph: No mds server is up or the cluster is laggy [ 1177.413629][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1177.413651][ T31] audit: type=1400 audit(1791996452.943:2157): avc: denied { connect } for pid=12774 comm="syz.4.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1177.547895][ T31] audit: type=1400 audit(1791996453.072:2158): avc: denied { ioctl } for pid=12774 comm="syz.4.1353" path="socket:[42447]" dev="sockfs" ino=42447 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1179.040689][ T31] audit: type=1800 audit(1791996454.447:2159): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31495 res=0 errno=0 [ 1179.048021][ T31] audit: type=1800 audit(1791996454.447:2160): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31518 res=0 errno=0 [ 1181.151667][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 1181.165178][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 1181.167491][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 1181.167696][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 1181.167839][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1359'. [ 1182.952512][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1365'. [ 1184.709784][T12804] ip_tables: iptables: counters copy to user failed while replacing table [ 1186.671401][T12804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1363'. [ 1186.889780][ T31] audit: type=1800 audit(1791996461.690:2161): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1370" name="new_array" dev="sysfs" ino=61819 res=0 errno=0 [ 1186.929528][T12812] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1186.981337][ T31] audit: type=1800 audit(1791996461.764:2162): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1370" name="level" dev="sysfs" ino=123435 res=0 errno=0 [ 1187.014120][ T31] audit: type=1400 audit(1791996461.801:2163): avc: denied { mounton } for pid=12811 comm="syz.7.1370" path="/34/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1187.093959][ T31] audit: type=1800 audit(1791996461.884:2164): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1370" name="raid_disks" dev="sysfs" ino=123439 res=0 errno=0 [ 1187.170183][ T31] audit: type=1800 audit(1791996461.949:2165): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1370" name="new_dev" dev="sysfs" ino=123445 res=0 errno=0 [ 1187.246484][ T31] audit: type=1800 audit(1791996462.022:2166): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1370" name="new_dev" dev="sysfs" ino=123445 res=0 errno=0 [ 1187.304440][T12817] md: could not open device unknown-block(1,1). [ 1189.113626][ T31] audit: type=1400 audit(1791996463.739:2167): avc: denied { write } for pid=12818 comm="syz.7.1373" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1189.114793][ T31] audit: type=1400 audit(1791996463.739:2168): avc: denied { write } for pid=12818 comm="syz.7.1373" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1190.563243][ T31] audit: type=1400 audit(1791996464.910:2169): avc: denied { create } for pid=12822 comm="syz.6.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1190.563310][ T31] audit: type=1400 audit(1791996465.067:2170): avc: denied { setopt } for pid=12822 comm="syz.6.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1192.632728][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1375'. [ 1192.635561][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1375'. [ 1192.635841][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1375'. [ 1192.637160][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1375'. [ 1197.099628][T12847] kAFS: No cell specified [ 1197.142227][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1197.142250][ T31] audit: type=1400 audit(1791996471.148:2174): avc: denied { write } for pid=12856 comm="syz.6.1380" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1197.185858][T12857] deleting an unspecified loop device is not supported. [ 1198.569680][T12847] kvm: kvm [12844]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40 [ 1199.575056][ T31] audit: type=1400 audit(1791996473.390:2175): avc: denied { mounton } for pid=12870 comm="syz.0.1384" path="/314/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1199.634856][T12862] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 1200.158263][T12857] kvm: requested 92190 ns i8254 timer period limited to 200000 ns [ 1200.369185][T12873] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1385'. [ 1200.457199][ T31] audit: type=1400 audit(1791996474.211:2176): avc: denied { write } for pid=12872 comm="syz.3.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1202.190984][T12890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.191309][T12890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.260851][T12890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.261157][T12890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.349913][T12890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.350203][T12890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.472758][ T31] audit: type=1800 audit(1791996476.075:2177): pid=12885 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1386" name="multicast_router" dev="sysfs" ino=98713 res=0 errno=0 [ 1203.801442][ T31] audit: type=1400 audit(1791996477.293:2178): avc: denied { write } for pid=12891 comm="syz.6.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1204.603005][ T31] audit: type=1400 audit(1791996478.031:2179): avc: denied { getopt } for pid=12891 comm="syz.6.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1204.714419][ T31] audit: type=1400 audit(1791996478.142:2180): avc: denied { create } for pid=12898 comm="syz.3.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1204.814043][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1399'. [ 1205.060970][ T31] audit: type=1800 audit(1791996478.465:2181): pid=12911 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1390" name="unbind" dev="sysfs" ino=5730 res=0 errno=0 [ 1205.068150][ T31] audit: type=1800 audit(1791996478.465:2182): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=1339 res=0 errno=0 [ 1205.246861][ T31] audit: type=1800 audit(1791996478.631:2183): pid=12850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204350 res=0 errno=0 [ 1205.313788][ T31] audit: type=1800 audit(1791996478.696:2184): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204361 res=0 errno=0 [ 1206.963276][T12923] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1392'. [ 1207.012800][ T31] audit: type=1400 audit(1791996480.264:2185): avc: denied { setopt } for pid=12913 comm="syz.0.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1207.014060][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1391'. [ 1207.184756][T12920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.473307][T12920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.509062][T12920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.553356][ T5734] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1207.717145][ T5734] usb 4-1: Using ep0 maxpacket: 32 [ 1207.721413][ T5734] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1207.721449][ T5734] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1207.722409][ T5734] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1207.722444][ T5734] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1207.722465][ T5734] usb 4-1: config 14 has no interface number 0 [ 1207.722475][ T5734] usb 4-1: config 14 has no interface number 1 [ 1207.722512][ T5734] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1207.722537][ T5734] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1207.722553][ T5734] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1207.722587][ T5734] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1207.722612][ T5734] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.722626][ T5734] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1207.722646][ T5734] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1207.874538][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.874557][ T5734] usb 4-1: Product: syz [ 1207.874575][ T5734] usb 4-1: Manufacturer: syz [ 1207.874584][ T5734] usb 4-1: SerialNumber: syz [ 1207.906405][ T31] audit: type=1800 audit(1791996481.085:2186): pid=12850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204396 res=0 errno=0 [ 1207.947100][ T31] audit: type=1800 audit(1791996481.122:2187): pid=12850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=204428 res=0 errno=0 [ 1208.138414][ T9706] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.139017][ T9706] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.139060][ T9706] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.139090][ T9706] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.196595][T12918] team_slave_0 (unregistering): left promiscuous mode [ 1208.196655][T12918] team_slave_0 (unregistering): left allmulticast mode [ 1208.199180][T12918] team0: Port device team_slave_0 removed [ 1208.478681][ T5734] legousbtower 4-1:14.57: interrupt endpoints not found [ 1209.674433][T11096] Bluetooth: hci5: command 0x1003 tx timeout [ 1209.674548][T12556] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1209.722391][ T5734] legousbtower 4-1:14.228: interrupt endpoints not found [ 1210.117657][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1210.117671][ T31] audit: type=1400 audit(1791996483.125:2190): avc: denied { create } for pid=12932 comm="syz.7.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1210.117706][ T31] audit: type=1400 audit(1791996483.125:2191): avc: denied { setopt } for pid=12932 comm="syz.7.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1210.117735][ T31] audit: type=1400 audit(1791996483.125:2192): avc: denied { bind } for pid=12932 comm="syz.7.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1210.217995][ T31] audit: type=1800 audit(1791996483.208:2193): pid=12850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=204425 res=0 errno=0 [ 1210.353254][ T31] audit: type=1800 audit(1791996483.337:2194): pid=12850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=204426 res=0 errno=0 [ 1210.443173][ T31] audit: type=1800 audit(1791996483.420:2195): pid=12850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=204405 res=0 errno=0 [ 1210.443215][ T31] audit: type=1800 audit(1791996483.420:2196): pid=12850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=204427 res=0 errno=0 [ 1210.557926][ T31] audit: type=1800 audit(1791996483.531:2197): pid=12850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204448 res=0 errno=0 [ 1210.564920][ T31] audit: type=1800 audit(1791996483.531:2198): pid=12849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=204466 res=0 errno=0 [ 1210.680024][ T1217] usb 4-1: USB disconnect, device number 25 [ 1210.714488][ T31] audit: type=1400 audit(1791996483.669:2199): avc: denied { mount } for pid=12931 comm="syz.6.1393" name="/" dev="gadgetfs" ino=7510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1212.889951][T12952] netlink: 14984 bytes leftover after parsing attributes in process `syz.3.1400'. [ 1215.085175][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1215.085227][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1218.246871][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1218.246895][ T31] audit: type=1400 audit(1791996490.589:2203): avc: denied { listen } for pid=12986 comm="syz.4.1408" lport=37880 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1218.612591][ T31] audit: type=1400 audit(1791996490.774:2204): avc: denied { accept } for pid=12986 comm="syz.4.1408" lport=37880 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1218.612634][ T31] audit: type=1400 audit(1791996490.931:2205): avc: denied { write } for pid=12986 comm="syz.4.1408" path="socket:[43537]" dev="sockfs" ino=43537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1218.612671][ T31] audit: type=1400 audit(1791996490.958:2206): avc: denied { setopt } for pid=12986 comm="syz.4.1408" lport=37880 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1218.978456][T12993] overlay: Unknown parameter '/file0' [ 1219.077223][ T31] audit: type=1800 audit(1791996491.392:2207): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1409" name="ipv4_address" dev="configfs" ino=43573 res=0 errno=0 [ 1219.278379][T12993] lo speed is unknown, defaulting to 1000 [ 1219.488419][ T31] audit: type=1800 audit(1791996491.770:2208): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1409" name="num" dev="configfs" ino=43663 res=0 errno=0 [ 1220.537603][ T31] audit: type=1800 audit(1791996492.739:2209): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1409" name="local" dev="configfs" ino=43664 res=0 errno=0 [ 1221.953662][T13010] loop9: detected capacity change from 0 to 2640 [ 1221.954423][T13010] Buffer I/O error on dev loop9, logical block 0, async page read [ 1221.954462][T13010] Buffer I/O error on dev loop9, logical block 0, async page read [ 1221.954487][T13010] Buffer I/O error on dev loop9, logical block 0, async page read [ 1221.954514][T13010] Buffer I/O error on dev loop9, logical block 0, async page read [ 1221.954529][T13010] Buffer I/O error on dev loop9, logical block 0, async page read [ 1221.954582][T13010] Buffer I/O error on dev loop9, logical block 0, async page read [ 1221.954604][T13010] Buffer I/O error on dev loop9, logical block 0, async page read [ 1221.954629][T13010] Buffer I/O error on dev loop9, logical block 0, async page read [ 1221.954637][T13010] ldm_validate_partition_table(): Disk read failed. [ 1221.954661][T13010] Buffer I/O error on dev loop9, logical block 0, async page read [ 1221.954677][T13010] Buffer I/O error on dev loop9, logical block 0, async page read [ 1221.954730][T13010] Dev loop9: unable to read RDB block 0 [ 1221.955276][T13010] loop9: unable to read partition table [ 1221.955452][T13010] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1222.079507][ T31] audit: type=1400 audit(1791996494.040:2210): avc: denied { connect } for pid=13007 comm="syz.7.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1222.079557][ T31] audit: type=1400 audit(1791996494.040:2211): avc: denied { read write } for pid=13007 comm="syz.7.1414" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1222.079577][ T31] audit: type=1400 audit(1791996494.040:2212): avc: denied { open } for pid=13007 comm="syz.7.1414" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1223.681271][T13004] IPv6: Can't replace route, no match found [ 1224.097379][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1224.097395][ T31] audit: type=1400 audit(1791996496.015:2216): avc: denied { write } for pid=13015 comm="syz.4.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1224.116202][ T31] audit: type=1400 audit(1791996496.033:2217): avc: denied { setopt } for pid=13015 comm="syz.4.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1224.229138][ T31] audit: type=1400 audit(1791996496.144:2218): avc: denied { read } for pid=13015 comm="syz.4.1416" path="socket:[43718]" dev="sockfs" ino=43718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1224.290046][ T31] audit: type=1400 audit(1791996496.199:2219): avc: denied { block_suspend } for pid=13003 comm="syz.0.1412" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1224.375855][ T31] audit: type=1400 audit(1791996496.282:2220): avc: denied { ioctl } for pid=13003 comm="syz.0.1412" path="socket:[43726]" dev="sockfs" ino=43726 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1224.769478][ T31] audit: type=1800 audit(1791996496.642:2221): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=205356 res=0 errno=0 [ 1224.799803][ T31] audit: type=1800 audit(1791996496.670:2222): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=205371 res=0 errno=0 [ 1226.910537][ T31] audit: type=1400 audit(1791996498.617:2223): avc: denied { setopt } for pid=13024 comm="syz.4.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1228.494054][ T31] audit: type=1400 audit(1791996500.084:2224): avc: denied { write } for pid=13032 comm="syz.7.1415" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1228.495703][ T31] audit: type=1400 audit(1791996500.084:2225): avc: denied { write } for pid=13032 comm="syz.7.1415" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1229.381425][T13048] lo speed is unknown, defaulting to 1000 [ 1230.565597][ T31] audit: type=1400 audit(1791996501.994:2226): avc: denied { read write } for pid=13038 comm="syz.0.1420" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1230.572260][ T31] audit: type=1400 audit(1791996501.994:2227): avc: denied { open } for pid=13038 comm="syz.0.1420" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1231.912360][T12556] Bluetooth: hci1: command 0x0406 tx timeout [ 1231.974428][T13045] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1231.978875][T13051] ceph: No mds server is up or the cluster is laggy [ 1232.185029][ T31] audit: type=1800 audit(1791996503.479:2228): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=205796 res=0 errno=0 [ 1232.185601][T13045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1232.188863][ T1217] libceph: connect (1)[c::]:6789 error -101 [ 1232.189010][ T1217] libceph: mon0 (1)[c::]:6789 connect error [ 1232.257226][T12556] Bluetooth: hci3: unexpected event for opcode 0x200a [ 1232.271129][T13053] overlayfs: failed to resolve './bus': -2 [ 1232.624944][T13064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'. [ 1235.044825][ T31] audit: type=1400 audit(1791996506.118:2229): avc: denied { bind } for pid=13073 comm="syz.7.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1235.081729][T13074] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1428'. [ 1236.148027][T13074] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1428'. [ 1236.441481][ T31] audit: type=1400 audit(1791996507.410:2230): avc: denied { map } for pid=13066 comm="syz.0.1426" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1236.441523][ T31] audit: type=1400 audit(1791996507.410:2231): avc: denied { execute } for pid=13066 comm="syz.0.1426" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1236.444650][ T31] audit: type=1326 audit(1791996507.410:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13079 comm="syz.3.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8026b9e2d9 code=0x7ffc0000 [ 1236.444698][ T31] audit: type=1326 audit(1791996507.410:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13079 comm="syz.3.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8026b9e2d9 code=0x7ffc0000 [ 1236.445606][ T31] audit: type=1326 audit(1791996507.410:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13079 comm="syz.3.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8026b9e2d9 code=0x7ffc0000 [ 1236.471939][ T31] audit: type=1326 audit(1791996507.438:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13079 comm="syz.3.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8026b9e2d9 code=0x7ffc0000 [ 1236.498877][ T31] audit: type=1326 audit(1791996507.465:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13079 comm="syz.3.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8026b9e2d9 code=0x7ffc0000 [ 1236.535058][ T31] audit: type=1326 audit(1791996507.502:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13079 comm="syz.3.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8026b9e2d9 code=0x7ffc0000 [ 1236.535104][ T31] audit: type=1326 audit(1791996507.502:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13079 comm="syz.3.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8026b9e2d9 code=0x7ffc0000 [ 1236.735573][ T31] audit: type=1326 audit(1791996507.678:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13079 comm="syz.3.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8026b9e2d9 code=0x7ffc0000 [ 1238.556615][T13089] overlay: Unknown parameter '/file0' [ 1239.004226][ T1217] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1239.938414][ T1217] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 1240.224652][ T1217] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.227370][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.227386][ T1217] usb 4-1: Product: syz [ 1240.227404][ T1217] usb 4-1: Manufacturer: syz [ 1240.227413][ T1217] usb 4-1: SerialNumber: syz [ 1240.380027][T13089] lo speed is unknown, defaulting to 1000 [ 1240.750247][T13106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=13106 comm=syz.7.1434 [ 1241.499524][ T1217] hackrf 4-1:1.0: usb_control_msg() failed -110 request 0e [ 1241.499545][ T1217] hackrf 4-1:1.0: Could not detect board [ 1241.499581][ T1217] hackrf 4-1:1.0: probe with driver hackrf failed with error -110 [ 1241.875362][ T31] kauditd_printk_skb: 67 callbacks suppressed [ 1241.875384][ T31] audit: type=1800 audit(1791996512.420:2307): pid=13094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=206387 res=0 errno=0 [ 1241.896511][ T31] audit: type=1400 audit(1791996512.439:2308): avc: denied { listen } for pid=13105 comm="syz.7.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1242.089722][T12556] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1242.290093][ T31] audit: type=1800 audit(1791996512.799:2309): pid=13094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=206366 res=0 errno=0 [ 1242.490628][ T31] audit: type=1400 audit(1791996512.983:2310): avc: denied { accept } for pid=13105 comm="syz.7.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1242.672351][ T31] audit: type=1800 audit(1791996513.158:2311): pid=13094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=206388 res=0 errno=0 [ 1242.792193][ T31] audit: type=1800 audit(1791996513.269:2312): pid=13094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=206443 res=0 errno=0 [ 1242.851232][ T31] audit: type=1400 audit(1791996513.325:2313): avc: denied { ioctl } for pid=13105 comm="syz.7.1434" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1242.851283][ T31] audit: type=1400 audit(1791996513.325:2314): avc: denied { set_context_mgr } for pid=13105 comm="syz.7.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1242.939999][ T31] audit: type=1400 audit(1791996513.408:2315): avc: denied { map } for pid=13105 comm="syz.7.1434" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1243.096689][ T31] audit: type=1400 audit(1791996513.537:2316): avc: denied { call } for pid=13105 comm="syz.7.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1245.190139][ T3214] usb 4-1: USB disconnect, device number 26 [ 1245.407580][T13113] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1246.461762][T13124] overlay: Unknown parameter '/file0' [ 1246.620611][T13124] lo speed is unknown, defaulting to 1000 [ 1246.769009][T13127] syz_tun: entered allmulticast mode [ 1248.262973][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1248.262997][ T31] audit: type=1326 audit(1791996518.316:2318): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13129 comm="syz.4.1441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9af259e2d9 code=0x0 [ 1248.669367][T13136] netlink: 'syz.4.1442': attribute type 12 has an invalid length. [ 1249.557040][ T31] audit: type=1400 audit(1791996519.507:2319): avc: denied { read } for pid=13135 comm="syz.4.1442" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1249.557084][ T31] audit: type=1400 audit(1791996519.507:2320): avc: denied { open } for pid=13135 comm="syz.4.1442" path="/dev/usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1250.995820][T13140] bridge_slave_1: left allmulticast mode [ 1250.995839][T13140] bridge_slave_1: left promiscuous mode [ 1250.996136][T13140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.312221][ T31] audit: type=1800 audit(1791996521.131:2321): pid=13144 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1443" name="profiling" dev="sysfs" ino=13 res=0 errno=0 [ 1254.228541][T13140] team0: Port device team_slave_0 removed [ 1254.252242][T13140] team0: Port device team_slave_1 removed [ 1254.290199][T13140] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1258.464652][ T31] audit: type=1400 audit(1791996527.728:2322): avc: denied { write } for pid=13173 comm="syz.3.1451" name="nullb" dev="configfs" ino=1840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1258.498713][ T31] audit: type=1800 audit(1791996527.765:2323): pid=13174 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1451" name="memory_backed" dev="configfs" ino=44610 res=0 errno=0 [ 1258.557919][ T31] audit: type=1800 audit(1791996527.820:2324): pid=13174 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1451" name="zoned" dev="configfs" ino=44613 res=0 errno=0 [ 1258.687012][ T31] audit: type=1400 audit(1791996527.940:2325): avc: denied { connect } for pid=13173 comm="syz.3.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1258.837333][T10103] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1259.423459][T10103] usb 5-1: Using ep0 maxpacket: 16 [ 1259.863318][ T31] audit: type=1400 audit(1791996529.020:2326): avc: denied { recv } for pid=13170 comm="syz.0.1450" saddr=10.128.0.169 src=42884 daddr=10.128.10.4 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1260.681358][T10103] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1261.499019][T10103] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1261.499060][T10103] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1261.499083][T10103] usb 5-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1261.543593][T13174] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1451'. [ 1261.559606][T10103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.559623][T10103] usb 5-1: Product: syz [ 1261.559647][T10103] usb 5-1: Manufacturer: syz [ 1261.559655][T10103] usb 5-1: SerialNumber: syz [ 1261.607017][ T31] audit: type=1800 audit(1791996530.634:2327): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=208024 res=0 errno=0 [ 1261.661390][ T31] audit: type=1800 audit(1791996530.671:2328): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=208056 res=0 errno=0 [ 1261.691361][ T31] audit: type=1800 audit(1791996530.708:2329): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=208031 res=0 errno=0 [ 1261.691401][ T31] audit: type=1800 audit(1791996530.708:2330): pid=13171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=208032 res=0 errno=0 [ 1261.807170][ T31] audit: type=1800 audit(1791996530.819:2331): pid=13174 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1451" name="power" dev="configfs" ino=44623 res=0 errno=0 [ 1261.872447][T13174] null_blk: my_zoned_dev: using native zone append [ 1261.931860][T10103] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1261.931896][T10103] usb 5-1: MIDIStreaming interface descriptor not found [ 1262.053263][T13175] ima: policy update completed [ 1262.221635][T13191] overlay: Unknown parameter '/file0' [ 1262.324649][T13174] null_blk: disk my_zoned_dev created [ 1262.342070][T10103] usb 5-1: USB disconnect, device number 18 [ 1262.384009][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1454'. [ 1262.445118][T13195] netlink: 'syz.7.1454': attribute type 16 has an invalid length. [ 1262.445155][T13195] netlink: 'syz.7.1454': attribute type 17 has an invalid length. [ 1262.992989][T13195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.076825][T13195] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1263.213746][T13191] lo speed is unknown, defaulting to 1000 [ 1263.257337][T13204] udevd[13204]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1266.814725][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1266.814747][ T31] audit: type=1400 audit(1791996535.442:2341): avc: denied { write } for pid=13212 comm="syz.6.1460" name="functions" dev="configfs" ino=11855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1266.816290][ T31] audit: type=1800 audit(1791996535.442:2342): pid=13213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1460" name="p_srate" dev="configfs" ino=44826 res=0 errno=0 [ 1266.821409][ T31] audit: type=1400 audit(1791996535.442:2343): avc: denied { write } for pid=13212 comm="syz.6.1460" name="c.1" dev="configfs" ino=11860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1266.821447][ T31] audit: type=1400 audit(1791996535.442:2344): avc: denied { write } for pid=13212 comm="syz.6.1460" name="c.1" dev="configfs" ino=11860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1266.822227][T13213] /dev/nullb0: Can't open blockdev [ 1266.822388][ T31] audit: type=1400 audit(1791996535.442:2345): avc: denied { mounton } for pid=13212 comm="syz.6.1460" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1267.296401][T13219] futex_wake_op: syz.7.1461 tries to shift op by 144; fix this program [ 1267.331142][ T31] audit: type=1400 audit(1791996535.912:2346): avc: denied { create } for pid=13220 comm="syz.3.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1268.512749][ T31] audit: type=1400 audit(1792520824.997:2347): avc: denied { map } for pid=13225 comm="syz.4.1462" path="socket:[44868]" dev="sockfs" ino=44868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1268.512806][ T31] audit: type=1400 audit(1792520824.997:2348): avc: denied { read } for pid=13225 comm="syz.4.1462" path="socket:[44868]" dev="sockfs" ino=44868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1268.515478][ C0] Adjusting tsc more than 11% (4776717 vs 6650972) [ 1269.219775][ T31] audit: type=1800 audit(1792520825.486:2349): pid=13231 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1463" name="protocol" dev="sysfs" ino=44407 res=0 errno=0 [ 1269.526793][T13231] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input20 [ 1271.767099][ T31] audit: type=1800 audit(1792520827.687:2350): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=208941 res=0 errno=0 [ 1272.601892][T13248] FAULT_INJECTION: forcing a failure. [ 1272.601892][T13248] name failslab, interval 1, probability 5, space 0, times 9989 [ 1272.601927][T13248] CPU: 0 UID: 0 PID: 13248 Comm: syz.3.1466 Tainted: G L syzkaller #0 PREEMPT(full) [ 1272.601945][T13248] Tainted: [L]=SOFTLOCKUP [ 1272.601949][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1272.601956][T13248] Call Trace: [ 1272.601960][T13248] [ 1272.601968][T13248] dump_stack_lvl+0x100/0x190 [ 1272.601989][T13248] should_fail_ex.cold+0x5/0xa [ 1272.602004][T13248] should_failslab+0xc2/0x120 [ 1272.602023][T13248] __kmalloc_cache_noprof+0x91/0x6d0 [ 1272.602036][T13248] ? adfs_init_fs_context+0x45/0x420 [ 1272.602056][T13248] adfs_init_fs_context+0x45/0x420 [ 1272.602073][T13248] alloc_fs_context+0x60c/0xf40 [ 1272.602089][T13248] __x64_sys_fsopen+0xed/0x220 [ 1272.602104][T13248] do_syscall_64+0x123/0x790 [ 1272.602123][T13248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.602134][T13248] RIP: 0033:0x7f8026b9e2d9 [ 1272.602143][T13248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.602172][T13248] RSP: 002b:00007f8027ab6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1272.602185][T13248] RAX: ffffffffffffffda RBX: 00007f8026e25fa0 RCX: 00007f8026b9e2d9 [ 1272.602193][T13248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 1272.602200][T13248] RBP: 00007f8026c35888 R08: 0000000000000000 R09: 0000000000000000 [ 1272.602208][T13248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.602215][T13248] R13: 00007f8026e26038 R14: 00007f8026e25fa0 R15: 00007ffe3ccac798 [ 1272.602231][T13248] [ 1273.581263][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1273.581276][ T31] audit: type=1400 audit(1792520829.294:2369): avc: denied { write } for pid=13243 comm="syz.4.1467" name="subsystems" dev="configfs" ino=1849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1273.680773][ T31] audit: type=1400 audit(1792520829.374:2370): avc: denied { map } for pid=13243 comm="syz.4.1467" path="socket:[44944]" dev="sockfs" ino=44944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1275.223521][T13267] overlay: Unknown parameter '/file0' [ 1275.252346][ T1217] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1275.793467][ T1217] usb 4-1: Using ep0 maxpacket: 32 [ 1275.794293][ T1217] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1275.798109][ T1217] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.798132][ T1217] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1275.798159][ T1217] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1275.798184][ T1217] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1275.800970][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.800984][ T1217] usb 4-1: Product: syz [ 1275.801009][ T1217] usb 4-1: Manufacturer: syz [ 1275.801018][ T1217] usb 4-1: SerialNumber: syz [ 1275.923339][ T31] audit: type=1800 audit(1792520831.388:2371): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=209010 res=0 errno=0 [ 1276.020478][ T31] audit: type=1800 audit(1792520831.478:2372): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=209042 res=0 errno=0 [ 1276.051427][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1276.065848][ T31] audit: type=1800 audit(1792520831.514:2373): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=209017 res=0 errno=0 [ 1276.065892][ T31] audit: type=1800 audit(1792520831.514:2374): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=209018 res=0 errno=0 [ 1276.303184][ T31] audit: type=1400 audit(1792520831.741:2375): avc: denied { read write } for pid=13275 comm="syz.4.1473" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1276.303235][ T31] audit: type=1400 audit(1792520831.741:2376): avc: denied { open } for pid=13275 comm="syz.4.1473" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1276.550307][T13279] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1276.721719][ T31] audit: type=1800 audit(1792520832.122:2377): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1473" name="debug_layer" dev="sysfs" ino=56565 res=0 errno=0 [ 1276.723295][ T1217] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input21 [ 1276.782938][ T31] audit: type=1400 audit(1792520832.168:2378): avc: denied { getopt } for pid=13262 comm="syz.3.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1276.834923][T13267] lo speed is unknown, defaulting to 1000 [ 1276.838018][T13281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1278.571834][T13278] 9pnet_fd: p9_fd_create_unix (13278): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1280.594251][ T1217] imon:send_packet: packet tx failed (-71) [ 1280.735017][ T1217] imon 4-1:155.0: panel buttons/knobs setup failed [ 1280.735032][ T1217] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1280.735039][ T1217] (id 0x00) [ 1281.866013][ T1217] rc_core: IR keymap rc-imon-pad not found [ 1281.866037][ T1217] Registered IR keymap rc-empty [ 1281.866113][ T1217] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1281.866134][ T1217] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1281.867901][ T1217] imon:send_packet: packet tx failed (-71) [ 1281.885247][ T1217] imon 4-1:155.0: remote input dev register failed [ 1281.885365][ T1217] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 1281.905274][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1281.905359][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1283.863994][ T5726] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1284.350654][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1284.350677][ T31] audit: type=1400 audit(1792520839.110:2381): avc: denied { write } for pid=13294 comm="syz.4.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1284.999395][ T1217] imon 4-1:155.0: unable to initialize intf0, err 0 [ 1284.999433][ T1217] imon:imon_probe: failed to initialize context! [ 1284.999440][ T1217] imon 4-1:155.0: unable to register, err -19 [ 1285.619742][ T31] audit: type=1800 audit(1792520840.280:2382): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=209039 res=0 errno=0 [ 1285.619799][ T31] audit: type=1800 audit(1792520840.280:2383): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=209040 res=0 errno=0 [ 1285.619829][ T31] audit: type=1800 audit(1792520840.280:2384): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=209019 res=0 errno=0 [ 1285.706800][ T31] audit: type=1800 audit(1792520840.363:2385): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=209041 res=0 errno=0 [ 1285.739154][ T1217] usb 4-1: USB disconnect, device number 27 [ 1285.795637][ T31] audit: type=1800 audit(1792520840.437:2386): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26664 res=0 errno=0 [ 1285.926998][T13313] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1483'. [ 1286.096916][T13312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.099606][T13312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.836193][ T31] audit: type=1400 audit(1792520845.091:2387): avc: denied { append } for pid=13326 comm="syz.4.1486" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1294.090235][T13337] /dev/sg0: Can't lookup blockdev [ 1294.092514][ T31] audit: type=1400 audit(1792520848.088:2388): avc: denied { write } for pid=13326 comm="syz.4.1486" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1294.172587][T13338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.172911][T13338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.231395][ T31] audit: type=1400 audit(1792520848.217:2389): avc: denied { mounton } for pid=13327 comm="syz.6.1487" path="/138/mnt/trace_pipe" dev="tracefs" ino=3421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1294.325764][ T31] audit: type=1800 audit(1792520848.309:2390): pid=13339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1490" name="buffered_io" dev="configfs" ino=45369 res=0 errno=0 [ 1294.424352][ T31] audit: type=1800 audit(1792520848.401:2391): pid=13339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1490" name="device_path" dev="configfs" ino=45376 res=0 errno=0 [ 1294.460241][ T31] audit: type=1800 audit(1792520848.429:2392): pid=13339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1490" name="enable" dev="configfs" ino=45377 res=0 errno=0 [ 1294.514899][T13329] kAFS: unable to lookup cell 'syz1' [ 1294.545954][T13339] [ 1294.548286][T13339] ====================================================== [ 1294.555281][T13339] WARNING: possible circular locking dependency detected [ 1294.562291][T13339] syzkaller #0 Tainted: G L [ 1294.568247][T13339] ------------------------------------------------------ [ 1294.575249][T13339] syz.3.1490/13339 is trying to acquire lock: [ 1294.581294][T13339] ffff88807bd4e460 (sb_writers#6){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 1294.589985][T13339] [ 1294.589985][T13339] but task is already holding lock: [ 1294.597331][T13339] ffff88804eaa2868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x660 [ 1294.606279][T13339] [ 1294.606279][T13339] which lock already depends on the new lock. [ 1294.606279][T13339] [ 1294.616654][T13339] [ 1294.616654][T13339] the existing dependency chain (in reverse order) is: [ 1294.625643][T13339] [ 1294.625643][T13339] -> #3 (&subsys->lock){+.+.}-{4:4}: [ 1294.633099][T13339] lock_acquire+0x1d1/0x380 [ 1294.638107][T13339] __mutex_lock+0x1a4/0x1bd0 [ 1294.643198][T13339] nvmet_ns_buffered_io_store+0xc0/0x1e0 [ 1294.649342][T13339] configfs_write_iter+0x302/0x4e0 [ 1294.654971][T13339] vfs_write+0x6af/0x1050 [ 1294.659802][T13339] ksys_write+0x12a/0x250 [ 1294.664623][T13339] do_syscall_64+0x123/0x790 [ 1294.669711][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.676134][T13339] [ 1294.676134][T13339] -> #2 (&p->frag_sem){++++}-{4:4}: [ 1294.683492][T13339] lock_acquire+0x1d1/0x380 [ 1294.688494][T13339] down_read+0x99/0x4c0 [ 1294.693141][T13339] __configfs_open_file+0xe8/0x9c0 [ 1294.698744][T13339] do_dentry_open+0x6ab/0x14d0 [ 1294.704002][T13339] vfs_open+0x82/0x3f0 [ 1294.708568][T13339] dentry_open+0x71/0xd0 [ 1294.713311][T13339] ima_calc_file_hash+0xe1/0x380 [ 1294.718758][T13339] ima_collect_measurement+0x94f/0xb30 [ 1294.724734][T13339] process_measurement+0xdfe/0x2350 [ 1294.730442][T13339] ima_file_check+0xc3/0x110 [ 1294.735541][T13339] security_file_post_open+0xc4/0x210 [ 1294.741415][T13339] path_openat+0x5cd/0x2440 [ 1294.746427][T13339] do_file_open+0x20e/0x430 [ 1294.751429][T13339] do_sys_openat2+0x10f/0x1e0 [ 1294.756603][T13339] __x64_sys_openat+0x12d/0x210 [ 1294.761948][T13339] do_syscall_64+0x123/0x790 [ 1294.767037][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.773419][T13339] [ 1294.773419][T13339] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1294.781985][T13339] lock_acquire+0x1d1/0x380 [ 1294.786994][T13339] __mutex_lock+0x1a4/0x1bd0 [ 1294.792110][T13339] ima_path_truncate+0x10d/0x1c0 [ 1294.797564][T13339] security_path_truncate+0x17c/0x280 [ 1294.803438][T13339] vfs_truncate+0x4ab/0x720 [ 1294.808449][T13339] ksys_truncate+0xee/0x190 [ 1294.813488][T13339] __x64_sys_truncate+0x54/0x80 [ 1294.818870][T13339] do_syscall_64+0x123/0x790 [ 1294.823975][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.830365][T13339] [ 1294.830365][T13339] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 1294.837742][T13339] check_prev_add+0xeb/0xe60 [ 1294.842843][T13339] __lock_acquire+0x1528/0x1f40 [ 1294.848202][T13339] lock_acquire+0x1d1/0x380 [ 1294.853221][T13339] mnt_want_write+0x6f/0x420 [ 1294.858313][T13339] lookup_open+0x150/0x1990 [ 1294.863421][T13339] path_openat+0xa2c/0x2440 [ 1294.868437][T13339] do_file_open+0x20e/0x430 [ 1294.873448][T13339] file_open_name+0x1c3/0x3e0 [ 1294.878628][T13339] filp_open+0x2e/0x50 [ 1294.883188][T13339] nvmet_file_ns_enable+0x95/0x420 [ 1294.888888][T13339] nvmet_ns_enable+0x44e/0x660 [ 1294.894147][T13339] nvmet_ns_enable_store+0x11e/0x160 [ 1294.899931][T13339] configfs_write_iter+0x302/0x4e0 [ 1294.905532][T13339] vfs_write+0x6af/0x1050 [ 1294.910354][T13339] ksys_write+0x12a/0x250 [ 1294.915177][T13339] do_syscall_64+0x123/0x790 [ 1294.920266][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.926649][T13339] [ 1294.926649][T13339] other info that might help us debug this: [ 1294.926649][T13339] [ 1294.936846][T13339] Chain exists of: [ 1294.936846][T13339] sb_writers#6 --> &p->frag_sem --> &subsys->lock [ 1294.936846][T13339] [ 1294.949150][T13339] Possible unsafe locking scenario: [ 1294.949150][T13339] [ 1294.956575][T13339] CPU0 CPU1 [ 1294.961910][T13339] ---- ---- [ 1294.967244][T13339] lock(&subsys->lock); [ 1294.971466][T13339] lock(&p->frag_sem); [ 1294.978108][T13339] lock(&subsys->lock); [ 1294.984844][T13339] rlock(sb_writers#6); [ 1294.989061][T13339] [ 1294.989061][T13339] *** DEADLOCK *** [ 1294.989061][T13339] [ 1294.997174][T13339] locks held by syz.3.1490/13339: 6, last CPU#0: [ 1295.003469][T13339] #0: ffff88807a594b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1295.012478][T13339] #1: ffff88801d7b4460 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1295.021491][T13339] #2: ffff88802dd1f480 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 1295.031283][T13339] #3: ffff888033398a70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1295.040990][T13339] #4: ffffffff90f5cd68 (nvmet_config_sem){++++}-{4:4}, at: nvmet_ns_enable_store+0xa5/0x160 [ 1295.051130][T13339] #5: ffff88804eaa2868 (&subsys->lock){+.+.}-{4:4}, at: nvmet_ns_enable+0x4f/0x660 [ 1295.060502][T13339] [ 1295.060502][T13339] stack backtrace: [ 1295.066362][T13339] CPU: 0 UID: 0 PID: 13339 Comm: syz.3.1490 Tainted: G L syzkaller #0 PREEMPT(full) [ 1295.077267][T13339] Tainted: [L]=SOFTLOCKUP [ 1295.081563][T13339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1295.091589][T13339] Call Trace: [ 1295.094840][T13339] [ 1295.097748][T13339] dump_stack_lvl+0x100/0x190 [ 1295.102409][T13339] print_circular_bug.cold+0x178/0x1be [ 1295.107851][T13339] check_noncircular+0x146/0x160 [ 1295.112761][T13339] check_prev_add+0xeb/0xe60 [ 1295.117322][T13339] __lock_acquire+0x1528/0x1f40 [ 1295.122152][T13339] lock_acquire+0x1d1/0x380 [ 1295.126628][T13339] ? lookup_open+0x150/0x1990 [ 1295.131283][T13339] ? __pfx___might_resched+0x10/0x10 [ 1295.136537][T13339] ? find_held_lock+0x2b/0x80 [ 1295.141197][T13339] mnt_want_write+0x6f/0x420 [ 1295.145763][T13339] ? lookup_open+0x150/0x1990 [ 1295.150425][T13339] lookup_open+0x150/0x1990 [ 1295.154903][T13339] path_openat+0xa2c/0x2440 [ 1295.159380][T13339] ? __pfx_path_openat+0x10/0x10 [ 1295.164301][T13339] ? kasan_save_stack+0x3f/0x50 [ 1295.169131][T13339] ? kasan_save_stack+0x30/0x50 [ 1295.173952][T13339] ? kasan_save_track+0x14/0x30 [ 1295.178787][T13339] ? __kasan_slab_alloc+0x89/0x90 [ 1295.183793][T13339] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 1295.189396][T13339] ? do_getname_kernel+0x5d/0x250 [ 1295.194387][T13339] ? filp_open+0x1d/0x50 [ 1295.198597][T13339] ? nvmet_file_ns_enable+0x95/0x420 [ 1295.203853][T13339] do_file_open+0x20e/0x430 [ 1295.208338][T13339] ? __pfx_do_file_open+0x10/0x10 [ 1295.213343][T13339] ? rcu_is_watching+0x13/0xc0 [ 1295.218082][T13339] file_open_name+0x1c3/0x3e0 [ 1295.222730][T13339] ? __pfx_file_open_name+0x10/0x10 [ 1295.227894][T13339] ? do_getname_kernel+0x5d/0x250 [ 1295.232900][T13339] ? __asan_memcpy+0x3c/0x60 [ 1295.237464][T13339] ? do_getname_kernel+0x1be/0x250 [ 1295.242549][T13339] filp_open+0x2e/0x50 [ 1295.246584][T13339] nvmet_file_ns_enable+0x95/0x420 [ 1295.251665][T13339] nvmet_ns_enable+0x44e/0x660 [ 1295.256406][T13339] nvmet_ns_enable_store+0x11e/0x160 [ 1295.261663][T13339] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 1295.267440][T13339] ? configfs_write_iter+0x388/0x4e0 [ 1295.272704][T13339] configfs_write_iter+0x302/0x4e0 [ 1295.277787][T13339] vfs_write+0x6af/0x1050 [ 1295.282089][T13339] ? __pfx_configfs_write_iter+0x10/0x10 [ 1295.287689][T13339] ? __fget_files+0x34/0x3d0 [ 1295.292253][T13339] ? __pfx_vfs_write+0x10/0x10 [ 1295.297001][T13339] ? find_held_lock+0x2b/0x80 [ 1295.301656][T13339] ksys_write+0x12a/0x250 [ 1295.305974][T13339] ? __pfx_ksys_write+0x10/0x10 [ 1295.310797][T13339] do_syscall_64+0x123/0x790 [ 1295.315361][T13339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.321224][T13339] RIP: 0033:0x7f8026b9e2d9 [ 1295.325609][T13339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.345192][T13339] RSP: 002b:00007f8027ab6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1295.353572][T13339] RAX: ffffffffffffffda RBX: 00007f8026e25fa0 RCX: 00007f8026b9e2d9 [ 1295.361514][T13339] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000009 [ 1295.369456][T13339] RBP: 00007f8026c35888 R08: 0000000000000000 R09: 0000000000000000 [ 1295.377397][T13339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.385337][T13339] R13: 00007f8026e26038 R14: 00007f8026e25fa0 R15: 00007ffe3ccac798 [ 1295.393284][T13339] [ 1295.527063][T13348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1295.568741][ T31] audit: type=1800 audit(1792520849.443:2393): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=210031 res=0 errno=0 [ 1295.630722][ T31] audit: type=1400 audit(1792520849.508:2394): avc: denied { read } for pid=13336 comm="syz.3.1490" name="state" dev="binder" ino=1048628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1295.630761][ T31] audit: type=1400 audit(1792520849.508:2395): avc: denied { open } for pid=13336 comm="syz.3.1490" path="/dev/binderfs/binder_logs/state" dev="binder" ino=1048628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1295.751830][T13339] nvmet: failed to open file ./file0: (-2)